feat(deps): upgrade upstream dependencies

- vite: 6e585dc -> v8.0.9 (ce729f5)
- oxfmt: 0.45.0 -> 0.46.0
- oxlint: 1.60.0 -> 1.61.0
- @oxc-project/runtime: 0.126.0 -> 0.127.0
- @oxc-project/types: 0.126.0 -> 0.127.0
- oxc-minify: 0.126.0 -> 0.127.0
- oxc-parser: 0.126.0 -> 0.127.0
- oxc-transform: 0.126.0 -> 0.127.0

Code changes:
- Bump bundled vite to 8.0.9 (packages/core/package.json)
- Update vite upstream hash (packages/tools/.upstream-versions.json)
- Re-point patched dependency dotenv-expand@12.0.3 -> 13.0.0 to track vite (pnpm-workspace.yaml)
- Refresh oxfmt wrapper snapshot for new --disable-nested-config flag (packages/cli/snap-tests/bin-oxfmt-wrapper/snap.txt)
- Refresh helper snapshot for new --disable-nested-config flag and vite minify default change to oxc (packages/cli/snap-tests/command-helper/snap.txt)
- Refresh bun list snapshot for new slow-filesystem warning (packages/cli/snap-tests-global/command-list-bun/snap.txt)

Author: github-actions[bot]

packages/cli/snap-tests-global/command-list-bun/snap.txt

@@ -2,6 +2,7 @@
 VITE+ - The Unified Toolchain for the Web
 
 bun install v<semver> (af24e281)
+warn: Slow filesystem detected. If <homedir>/.bun/install/cache is a network drive, consider setting $BUN_INSTALL_CACHE_DIR to a local folder.
 
 + test-vite-plus-package@<semver>
 + test-vite-plus-package-optional@<semver>

packages/cli/snap-tests/bin-oxfmt-wrapper/snap.txt

@@ -24,6 +24,7 @@ Output Options:
 Config Options
     -c, --config=PATH        Path to the configuration file (.json, .jsonc, .ts, .mts, .cts, .js,
                              .mjs, .cjs)
+        --disable-nested-config  Do not search for configuration files in subdirectories
 
 Ignore Options
         --ignore-path=PATH   Path to ignore file(s). Can be specified multiple times. If not

packages/cli/snap-tests/command-helper/snap.txt

@@ -95,6 +95,7 @@ Output Options:
 Config Options
     -c, --config=PATH        Path to the configuration file (.json, .jsonc, .ts, .mts, .cts, .js,
                              .mjs, .cjs)
+        --disable-nested-config  Do not search for configuration files in subdirectories
 
 Ignore Options
         --ignore-path=PATH   Path to ignore file(s). Can be specified multiple times. If not
@@ -234,7 +235,7 @@ Options:
   --assetsInlineLimit <number>  [number] static asset base64 inline threshold in bytes (default: 4096) 
   --ssr [entry]                 [string] build specified entry for server-side rendering 
   --sourcemap [output]          [boolean | "inline" | "hidden"] output source maps for build (default: false) 
-  --minify [minifier]           [boolean | "terser" | "esbuild"] enable/disable minification, or specify minifier to use (default: esbuild) 
+  --minify [minifier]           [boolean | "oxc" | "terser" | "esbuild"] enable/disable minification, or specify minifier to use (default: oxc) 
   --manifest [name]             [boolean | string] emit build manifest json 
   --ssrManifest [name]          [boolean | string] emit ssr manifest json 
   --emptyOutDir                 [boolean] force empty outDir when it's outside of root 

packages/core/package.json

@@ -217,7 +217,7 @@
     "node": "^20.19.0 || >=22.12.0"
   },
   "bundledVersions": {
-    "vite": "8.0.8",
+    "vite": "8.0.9",
     "rolldown": "1.0.0-rc.16",
     "tsdown": "0.21.9"
   }

packages/tools/.upstream-versions.json

@@ -7,6 +7,6 @@
   "vite": {
     "repo": "https://github.com/vitejs/vite.git",
     "branch": "main",
-    "hash": "6e585dcb05a3b159fba7ae57f7faf0b1eca7a390"
+    "hash": "ce729f5fa1a5adca373b2adcb0e1b18099164a14"
   }
 }