feat(deps): migrate to Vite DevTools v0.5.0 and Devframe v0.9.2

[antfubot]

Summary

Migrates Nuxt DevTools v4 to Vite DevTools v0.5.0 and Devframe v0.9.2. The 0.5 line moves the embedded overlay client to @devframes/hub-ui and replaces the standalone mount helper with the hub context's own install method, so the module's integration surface is updated to match.

Changes

• Bump refs in pnpm-workspace.yaml: devframe ^0.8.0 → ^0.9.2, vite-devtools ^0.4.11 → ^0.5.0, and register the four new devframe sub-packages 0.9.x introduces (@devframes/hub-ui, json-render-ui, service-open, vite) in minimumReleaseAgeExclude so the supply-chain age gate installs them.
• mountDevframe removed from @vitejs/devtools-kit/node: the data-inspector and code-server integrations now mount via the hub context's kit.install(definition, { dock }).
• Embedded client relocation: @vitejs/devtools/client/inject no longer exists; the client ships as @devframes/hub-ui, served by the hub at /__devtools/embedded.js. The Nuxt client plugin now loads it via a runtime-created module <script> (mirroring upstream's DevToolsInjection), and the dead optimizeDeps entry is dropped.
• Single vite type-variant: vite@8.2.0 declares its @vitejs/devtools optional peer as ^0.4.0, so in subtrees where devtools isn't otherwise pinned pnpm would keep a stale 0.4.x copy and mint a second, structurally-unrelated vite type-variant (breaking vue-tsc). Added @vitejs/devtools / @vitejs/devtools-kit overrides pinning the family to the single vite-devtools ref.

Verification

pnpm build, pnpm typecheck, pnpm lint, and pnpm test:unit (67 tests) all pass. A playground dev server boots cleanly and serves the new /__devtools/embedded.js client.

This PR was created with the help of an agent.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​vitejs/​devtools@​0.5.0
	@​devframes/​plugin-code-server@​0.9.2
	@​devframes/​plugin-data-inspector@​0.9.2

View full report

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: baabdb84-467f-4623-8bd5-1040539e822f

📥 Commits

Reviewing files that changed from the base of the PR and between 190ff43 and 72a7a0c.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (6)

• packages/devtools/src/integrations/code-server.ts
• packages/devtools/src/integrations/data-inspector.ts
• packages/devtools/src/module-main.ts
• packages/devtools/src/runtime/plugins/vite-devtools.client.ts
• packages/devtools/test/code-server.test.ts
• pnpm-workspace.yaml

Included review availability: Your plan provides up to 8 included reviews per hour; 7 remain after this review.

---

📝 Walkthrough

Walkthrough

DevTools integrations now use kit.install instead of mountDevframe. Tests update mocks and assertions for the new API. The Nuxt client loads the hub-served embedded.js module through a runtime-created script. Dependency optimization removes the former injection module. Workspace references and overrides align the DevTools package versions.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Merge Risk: 🟡 Moderate · up to 72a7a

The dependency manifest has been updated, but the committed lockfile still resolves older DevTools and Vite versions, which can produce an inconsistent install or duplicate type definitions. Regenerate and verify the lockfile before merging.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 50.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the migration to Vite DevTools v0.5.0 and Devframe v0.9.2.
Description check	✅ Passed	The description directly explains the dependency upgrades, integration changes, embedded client relocation, and verification results.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}