CI/CD

Use this reference before changing GitHub Actions or release automation.

Prefer the documented Vite+ setup:

- uses: voidzero-dev/setup-vp@<full-sha> # v1.x.y
  with:
    node-version-file: ".node-version"
    cache: true
- run: vp env current
- run: vp check
- run: vp test
- run: vp build

Action Inputs

voidzero-dev/setup-vp exposes:

Defaults

• Prefer voidzero-dev/setup-vp over hand-rolled Node/Corepack bootstrapping unless the repo has a proven exception. In repos that pin Actions, use a full commit SHA with a same-line exact version comment and a github-actions Dependabot entry so updates stay reviewable.
• Prefer setup-vp's built-in Node and package-manager bootstrap over adding separate CI-time vp env setup steps unless the repo has a specific environment need the action does not cover.
• Prefer setup-vp's default install step over a separate vp install when Vite+ is the tool owner. Set run-install: false only when the workflow needs to pass custom install arguments or control install as a separate step.
• Prefer vp config when the repo wants stock hooks or agent integration instead of hand-rolled hook setup.
• Prefer one repo-local verify entrypoint if CI needs extra repo-specific commands.
• Keep release orchestration in GitHub Actions when the repo has npm, GitHub Release, binary, or Homebrew automation that goes beyond stock Vite+.
• Vite+ can run repo scripts, but it does not make runtime-installed release plugins reproducible by itself. For semantic-release jobs, keep CI/CD-only plugins in the workflow's extra_plugins input with exact versions instead of adding release-only packages to repo devDependencies.
• The cache: true setup shown here is for verify jobs. In secret-bearing release, publish, signing, or deploy jobs, disable or omit dependency caches and run a fresh vp install.
• When CI behavior must stay aligned with a repo's chosen Vite+ release, pin the setup-vp action's version input explicitly. Treat the local vite-plus dependency version in package.json as separate from the action's runtime version.
• For private registries, prefer the action's NODE_AUTH_TOKEN handling with repo .npmrc registry declarations. Use registry-url / scope when bypassing repo-level registry detection is intentional.

Guardrails

• Prefer vp run <script> (or vpr <script>) when CI needs a repo-specific script that Vite+ does not replace.
• Preserve release-only steps while making the surrounding workflow more stock.
• Keep packaging and publish steps that Vite+ does not own.