chore(deps-dev): bump nx, @nx/devkit, @nx/eslint, @nx/eslint-plugin, @nx/jest, @nx/js, @nx/plugin and @nx/workspace by dependabot[bot] · Pull Request #3336 · bigcommerce/checkout-sdk-js

dependabot · 2026-07-31T22:29:59Z

Bumps nx, @nx/devkit, @nx/eslint, @nx/eslint-plugin, @nx/jest, @nx/js, @nx/plugin and @nx/workspace. These dependencies needed to be updated together.
Updates nx from 19.8.9 to 23.1.1

Release notes

Sourced from nx's releases.

23.1.1 (2026-07-30)

🚀 Features

core: derive stable repo key from normalized remote and relative path (#36439)

repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)

bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)

bundling: acknowledge @swc/core build scripts when configuring rollup (#36412)

core: speed up npm lockfile parsing (#36216)

core: speed up lockfile parsing and catalog resolution (#36223)

core: show performance report recommendations only when actionable (#36344)

core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)

core: prevent shell injection in nx import (#36348)

core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)

core: support npm 12 and pnpm in the package provenance check (#36354, #36338)

core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)

core: support pnpm 11 patched dependency hashes (#36360)

core: resolve name refs copied into pattern-matched target arrays (#36359)

core: resolve source-loaded plugin transitive workspace imports (#36296)

core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)

core: include continuous and default-config dependencies in show target (#36374)

core: make unit tests pass locally regardless of invoking package manager (#35994)

core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)

core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)

core: run selected projects with --exclude-task-dependencies (#35562)

core: stop passing git revisions through a shell in affected commands (#36379)

core: collect trickling watcher bursts fully on daemon force-flush (#36391)

core: report tasks running in another Nx process in the inline TUI (#36341)

core: stop ratatui cursor queries from racing the TUI event stream (#36318)

core: render critical-path tasks as a nested list in the job summary (#36394)

core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)

core: support multiple brace groups in workspace glob matching (#36395)

core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)

core: correct glob pattern expansion for ZeroOrOne groups (#31857)

core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)

core: sample project graph perf span telemetry per session at 10% (#36420)

core: strip terminal query sequences when replaying task output (#36432)

core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)

core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)

core: merge default plugins through the source-map-aware merge path (#36257)

core: keep nx migrate on the requested version when release-age gates interfere (#36444)

core: avoid bogus duplicate project name errors when generating nested apps (#36458)

core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)

core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)

core: parse pnpm lockfiles that omit the packages block (#36512)

core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits

8841f1c fix(core): keep real dependencies when omitting peers from npm temp installs ...
86dbded fix(core): parse pnpm lockfiles that omit the packages block (#36512)
cff77e2 fix(core): bump pinned axios and brace-expansion past vulnerable versions (#3...
a2e6ac4 chore(repo): stop eslint linting json files with no applicable rules (#36454)
dd97e9c fix(core): avoid bogus duplicate project name errors when generating nested a...
50f61ef feat(core): derive stable repo key from normalized remote and relative path (...
9d51f0a fix(core): keep nx migrate on the requested version when release-age gates in...
36208e9 fix(core): merge default plugins through the source-map-aware merge path (#36...
49a9afe fix(misc): prevent crash when opening browser in Podman+WSL container (#34639)
a92116d fix(core): handle colons in target name when resolving inputs to generate gra...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nx since your current version.

Install script changes

This version modifies postinstall script that runs during installation. Review the package contents before updating.

Updates @nx/devkit from 19.8.9 to 23.1.1

Release notes

Sourced from @nx/devkit's releases.

23.1.1 (2026-07-30)

🚀 Features

core: derive stable repo key from normalized remote and relative path (#36439)

repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)

bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)

bundling: acknowledge @swc/core build scripts when configuring rollup (#36412)

core: speed up npm lockfile parsing (#36216)

core: speed up lockfile parsing and catalog resolution (#36223)

core: show performance report recommendations only when actionable (#36344)

core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)

core: prevent shell injection in nx import (#36348)

core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)

core: support npm 12 and pnpm in the package provenance check (#36354, #36338)

core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)

core: support pnpm 11 patched dependency hashes (#36360)

core: resolve name refs copied into pattern-matched target arrays (#36359)

core: resolve source-loaded plugin transitive workspace imports (#36296)

core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)

core: include continuous and default-config dependencies in show target (#36374)

core: make unit tests pass locally regardless of invoking package manager (#35994)

core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)

core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)

core: run selected projects with --exclude-task-dependencies (#35562)

core: stop passing git revisions through a shell in affected commands (#36379)

core: collect trickling watcher bursts fully on daemon force-flush (#36391)

core: report tasks running in another Nx process in the inline TUI (#36341)

core: stop ratatui cursor queries from racing the TUI event stream (#36318)

core: render critical-path tasks as a nested list in the job summary (#36394)

core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)

core: support multiple brace groups in workspace glob matching (#36395)

core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)

core: correct glob pattern expansion for ZeroOrOne groups (#31857)

core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)

core: sample project graph perf span telemetry per session at 10% (#36420)

core: strip terminal query sequences when replaying task output (#36432)

core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)

core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)

core: merge default plugins through the source-map-aware merge path (#36257)

core: keep nx migrate on the requested version when release-age gates interfere (#36444)

core: avoid bogus duplicate project name errors when generating nested apps (#36458)

core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)

core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)

core: parse pnpm lockfiles that omit the packages block (#36512)

core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits

1210aac fix(devkit): resolve ensurePackage against the workspace (#36496)
dd97e9c fix(core): avoid bogus duplicate project name errors when generating nested a...
5b6abe1 fix(core): unbreak pnpm 11 installs by acknowledging build-script deps from g...
1ec8682 cleanup(devkit): remove catalog utils copy and reuse nx implementation (#36350)
268394a fix(core): speed up lockfile parsing and catalog resolution (#36223)
a88e494 chore(repo): migrate to nx 23.1.0-rc.2 (#36269)
3a3f9de chore(core): fix typo on readTargetOptions jsdoc (#34292)
638934c fix(core): preserve comments in catalog YAML updates (#35733)
6486e86 fix(devkit): restore prettier v2 support in formatFiles (#36193)
df5157b feat(core): support filtered targetDefaults via the nested-array shape (#36049)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @nx/devkit since your current version.

Updates @nx/eslint from 19.8.9 to 23.1.1

Release notes

Sourced from @nx/eslint's releases.

23.1.1 (2026-07-30)

🚀 Features

core: derive stable repo key from normalized remote and relative path (#36439)

repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)

bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)

bundling: acknowledge @swc/core build scripts when configuring rollup (#36412)

core: speed up npm lockfile parsing (#36216)

core: speed up lockfile parsing and catalog resolution (#36223)

core: show performance report recommendations only when actionable (#36344)

core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)

core: prevent shell injection in nx import (#36348)

core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)

core: support npm 12 and pnpm in the package provenance check (#36354, #36338)

core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)

core: support pnpm 11 patched dependency hashes (#36360)

core: resolve name refs copied into pattern-matched target arrays (#36359)

core: resolve source-loaded plugin transitive workspace imports (#36296)

core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)

core: include continuous and default-config dependencies in show target (#36374)

core: make unit tests pass locally regardless of invoking package manager (#35994)

core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)

core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)

core: run selected projects with --exclude-task-dependencies (#35562)

core: stop passing git revisions through a shell in affected commands (#36379)

core: collect trickling watcher bursts fully on daemon force-flush (#36391)

core: report tasks running in another Nx process in the inline TUI (#36341)

core: stop ratatui cursor queries from racing the TUI event stream (#36318)

core: render critical-path tasks as a nested list in the job summary (#36394)

core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)

core: support multiple brace groups in workspace glob matching (#36395)

core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)

core: correct glob pattern expansion for ZeroOrOne groups (#31857)

core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)

core: sample project graph perf span telemetry per session at 10% (#36420)

core: strip terminal query sequences when replaying task output (#36432)

core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)

core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)

core: merge default plugins through the source-map-aware merge path (#36257)

core: keep nx migrate on the requested version when release-age gates interfere (#36444)

core: avoid bogus duplicate project name errors when generating nested apps (#36458)

core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)

core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)

core: parse pnpm lockfiles that omit the packages block (#36512)

core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits

df40b73 fix(linter): use projectService for typed linting in flat configs (#35727)
bdd63f1 fix(linter): keep override parser when convert-to-flat-config uses FlatCompat...
a88e494 chore(repo): migrate to nx 23.1.0-rc.2 (#36269)
9deccb6 fix(linter): reconcile angular-eslint v22 breaking changes in flat config (#3...
edca1e0 fix(linter): harden the ESLint v9 flat-config migration (#36204)
4aba335 fix(linter): run typescript-eslint v8 rule migrations for scoped-only workspa...
d5821e2 fix(linter): install angular-eslint when converting Angular configs to flat c...
df5157b feat(core): support filtered targetDefaults via the nested-array shape (#36049)
6348b24 feat(linter): add migration to drop typescript-eslint v8-removed rules from f...
f22e75c feat(repo): enable the tsgo compiler workspace-wide (#35926)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @nx/eslint since your current version.

Updates @nx/eslint-plugin from 19.8.9 to 23.1.1

Release notes

Sourced from @nx/eslint-plugin's releases.

23.1.1 (2026-07-30)

🚀 Features

core: derive stable repo key from normalized remote and relative path (#36439)

repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)

bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)

bundling: acknowledge @swc/core build scripts when configuring rollup (#36412)

core: speed up npm lockfile parsing (#36216)

core: speed up lockfile parsing and catalog resolution (#36223)

core: show performance report recommendations only when actionable (#36344)

core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)

core: prevent shell injection in nx import (#36348)

core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)

core: support npm 12 and pnpm in the package provenance check (#36354, #36338)

core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)

core: support pnpm 11 patched dependency hashes (#36360)

core: resolve name refs copied into pattern-matched target arrays (#36359)

core: resolve source-loaded plugin transitive workspace imports (#36296)

core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)

core: include continuous and default-config dependencies in show target (#36374)

core: make unit tests pass locally regardless of invoking package manager (#35994)

core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)

core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)

core: run selected projects with --exclude-task-dependencies (#35562)

core: stop passing git revisions through a shell in affected commands (#36379)

core: collect trickling watcher bursts fully on daemon force-flush (#36391)

core: report tasks running in another Nx process in the inline TUI (#36341)

core: stop ratatui cursor queries from racing the TUI event stream (#36318)

core: render critical-path tasks as a nested list in the job summary (#36394)

core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)

core: support multiple brace groups in workspace glob matching (#36395)

core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)

core: correct glob pattern expansion for ZeroOrOne groups (#31857)

core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)

core: sample project graph perf span telemetry per session at 10% (#36420)

core: strip terminal query sequences when replaying task output (#36432)

core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)

core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)

core: merge default plugins through the source-map-aware merge path (#36257)

core: keep nx migrate on the requested version when release-age gates interfere (#36444)

core: avoid bogus duplicate project name errors when generating nested apps (#36458)

core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)

core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)

core: parse pnpm lockfiles that omit the packages block (#36512)

core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits

13582c3 chore(repo): harden first-party migration validators (#36436)
03c8439 cleanup(core): use picocolors in eslint-plugin (#34376)
a88e494 chore(repo): migrate to nx 23.1.0-rc.2 (#36269)
08e8622 fix(linter): update terminal cli regex for local-dist build (#36201)
df5157b feat(core): support filtered targetDefaults via the nested-array shape (#36049)
f22e75c feat(repo): enable the tsgo compiler workspace-wide (#35926)
71bbc70 feat(core): revert array-shape targetDefaults support pending redesign and re...
6598a0b chore(core): rename supportsOptionalUpdates to supportsOptionalMigrations (#3...
27f9ae0 chore(repo): finish migrating builds off the workspace-root dist (#35915)
38ca20b feat(core): extend nx migrate --include to any package that supports option...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @nx/eslint-plugin since your current version.

Updates @nx/jest from 19.8.9 to 23.1.1

Release notes

Sourced from @nx/jest's releases.

23.1.1 (2026-07-30)

🚀 Features

core: derive stable repo key from normalized remote and relative path (#36439)

repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)

bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)

bundling: acknowledge @swc/core build scripts when configuring rollup (#36412)

core: speed up npm lockfile parsing (#36216)

core: speed up lockfile parsing and catalog resolution (#36223)

core: show performance report recommendations only when actionable (#36344)

core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)

core: prevent shell injection in nx import (#36348)

core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)

core: support npm 12 and pnpm in the package provenance check (#36354, #36338)

core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)

core: support pnpm 11 patched dependency hashes (#36360)

core: resolve name refs copied into pattern-matched target arrays (#36359)

core: resolve source-loaded plugin transitive workspace imports (#36296)

core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)

core: include continuous and default-config dependencies in show target (#36374)

core: make unit tests pass locally regardless of invoking package manager (#35994)

core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)

core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)

core: run selected projects with --exclude-task-dependencies (#35562)

core: stop passing git revisions through a shell in affected commands (#36379)

core: collect trickling watcher bursts fully on daemon force-flush (#36391)

core: report tasks running in another Nx process in the inline TUI (#36341)

core: stop ratatui cursor queries from racing the TUI event stream (#36318)

core: render critical-path tasks as a nested list in the job summary (#36394)

core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)

core: support multiple brace groups in workspace glob matching (#36395)

core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)

core: correct glob pattern expansion for ZeroOrOne groups (#31857)

core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)

core: sample project graph perf span telemetry per session at 10% (#36420)

core: strip terminal query sequences when replaying task output (#36432)

core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)

core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)

core: merge default plugins through the source-map-aware merge path (#36257)

core: keep nx migrate on the requested version when release-age gates interfere (#36444)

core: avoid bogus duplicate project name errors when generating nested apps (#36458)

core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)

core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)

core: parse pnpm lockfiles that omit the packages block (#36512)

core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits

59dff9f docs(nx-dev): render migration docs from the documentation key (#36377)
2fcaf71 fix(testing): add @swc/core when configuring jest with the swc compiler (#36409)
5b6abe1 fix(core): unbreak pnpm 11 installs by acknowledging build-script deps from g...
a88e494 chore(repo): migrate to nx 23.1.0-rc.2 (#36269)
df5157b feat(core): support filtered targetDefaults via the nested-array shape (#36049)
a5acaf7 feat(testing): add migration to verify typecheck after the 23.1 migration (#3...
bdc6236 fix(testing): keep ts-jest resolving exports-only libs on typescript < 6 (#36...
f22e75c feat(repo): enable the tsgo compiler workspace-wide (#35926)
192f668 feat(angular): support angular v22 (#35851)
71bbc70 feat(core): revert array-shape targetDefaults support pending redesign and re...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @nx/jest since your current version.

Updates @nx/js from 19.8.9 to 23.1.1

Release notes

Sourced from @nx/js's releases.

23.1.1 (2026-07-30)

🚀 Features

core: derive stable repo key from normalized remote and relative path (#36439)

repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)

bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)

bundling: acknowledge @swc/core build scripts when configuring rollup (#36412)

core: speed up npm lockfile parsing (#36216)

core: speed up lockfile parsing and catalog resolution (#36223)

core: show performance report recommendations only when actionable (#36344)

core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)

core: prevent shell injection in nx import (#36348)

core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)

core: support npm 12 and pnpm in the package provenance check (#36354, #36338)

core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)

core: support pnpm 11 patched dependency hashes (#36360)

core: resolve name refs copied into pattern-matched target arrays (#36359)

core: resolve source-loaded plugin transitive workspace imports (#36296)

core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)

core: include continuous and default-config dependencies in show target (#36374)

core: make unit tests pass locally regardless of invoking package manager (#35994)

core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)

core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)

core: run selected projects with --exclude-task-dependencies (#35562)

core: stop passing git revisions through a shell in affected commands (#36379)

core: collect trickling watcher bursts fully on daemon force-flush (#36391)

core: report tasks running in another Nx process in the inline TUI (#36341)

core: stop ratatui cursor queries from racing the TUI event stream (#36318)

core: render critical-path tasks as a nested list in the job summary (#36394)

core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)

core: support multiple brace groups in workspace glob matching (#36395)

core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)

core: correct glob pattern expansion for ZeroOrOne groups (#31857)

core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)

core: sample project graph perf span telemetry per session at 10% (#36420)

core: strip terminal query sequences when replaying task output (#36432)

core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)

core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)

core: merge default plugins through the source-map-aware merge path (#36257)

core: keep nx migrate on the requested version when release-age gates interfere (#36444)

core: avoid bogus duplicate project name errors when generating nested apps (#36458)

core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)

core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)

core: parse pnpm lockfiles that omit the packages block (#36512)

core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits

82f3693 fix(js): resolve package and extension-less tsconfig extends read from the tr...
d86441d fix(js): resolve the verdaccio bin through its package.json (#36479)
df40b73 fix(linter): use projectService for typed linting in flat configs (#35727)
5b6abe1 fix(core): unbreak pnpm 11 installs by acknowledging build-script deps from g...
b045079 fix(js): parse pnpm/npm publish JSON containing braces in file paths (#36241)
57e661b fix(js): support private methods and static blocks in babel preset (#36218)
a88e494 chore(repo): migrate to nx 23.1.0-rc.2 (#36269)
ba1d651 fix(js): b...
Description has been truncated

[!NOTE]
Medium Risk
Major Nx upgrade (19→23) affects all build/lint/test orchestration and install-time postinstall scripts, though runtime checkout code is unchanged.

Overview
Bumps Nx and the aligned @nx/devkit, @nx/eslint, @nx/eslint-plugin, @nx/jest, @nx/js, @nx/plugin, and @nx/workspace devDependencies from 19.8.9 to 23.1.1, with the corresponding package-lock.json refresh.

This is a dependency-only change: no workspace config, scripts, or application source edits in the diff. Installed Nx tooling moves to the 23.x line (including updated native binaries and transitive dev deps such as axios, ejs, and minimatch). The lockfile also drops the legacy @nrwl/* wrapper packages that previously re-exported @nx/*.

Reviewers should treat this as validating monorepo task runners (npx nx run …, lint/test matrices) and npm install (Nx postinstall behavior changed between versions). Note the repo still pins ESLint 8 and Jest 29 at the root while Nx 23’s @nx/eslint / @nx/jest packages declare newer peer ranges in the lockfile—worth watching if lint or Nx-driven Jest integration starts warning or behaving differently.

^{Reviewed by Cursor Bugbot for commit a630633. Bugbot is set up for automated code reviews on this repo. Configure here.}

…@nx/jest, @nx/js, @nx/plugin and @nx/workspace Bumps [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx), [@nx/devkit](https://github.com/nrwl/nx/tree/HEAD/packages/devkit), [@nx/eslint](https://github.com/nrwl/nx/tree/HEAD/packages/eslint), [@nx/eslint-plugin](https://github.com/nrwl/nx/tree/HEAD/packages/eslint-plugin), [@nx/jest](https://github.com/nrwl/nx/tree/HEAD/packages/jest), [@nx/js](https://github.com/nrwl/nx/tree/HEAD/packages/js), [@nx/plugin](https://github.com/nrwl/nx/tree/HEAD/packages/plugin) and [@nx/workspace](https://github.com/nrwl/nx/tree/HEAD/packages/workspace). These dependencies needed to be updated together. Updates `nx` from 19.8.9 to 23.1.1 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/nx) Updates `@nx/devkit` from 19.8.9 to 23.1.1 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/devkit) Updates `@nx/eslint` from 19.8.9 to 23.1.1 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/eslint) Updates `@nx/eslint-plugin` from 19.8.9 to 23.1.1 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/eslint-plugin) Updates `@nx/jest` from 19.8.9 to 23.1.1 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/jest) Updates `@nx/js` from 19.8.9 to 23.1.1 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/js) Updates `@nx/plugin` from 19.8.9 to 23.1.1 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/plugin) Updates `@nx/workspace` from 19.8.9 to 23.1.1 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/workspace) --- updated-dependencies: - dependency-name: nx dependency-version: 23.1.1 dependency-type: direct:development - dependency-name: "@nx/devkit" dependency-version: 23.1.1 dependency-type: direct:development - dependency-name: "@nx/eslint" dependency-version: 23.1.1 dependency-type: direct:development - dependency-name: "@nx/eslint-plugin" dependency-version: 23.1.1 dependency-type: direct:development - dependency-name: "@nx/jest" dependency-version: 23.1.1 dependency-type: direct:development - dependency-name: "@nx/js" dependency-version: 23.1.1 dependency-type: direct:development - dependency-name: "@nx/plugin" dependency-version: 23.1.1 dependency-type: direct:development - dependency-name: "@nx/workspace" dependency-version: 23.1.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit a630633. Configure here.}

cursor · 2026-07-31T22:32:12Z

+    "@nx/jest": "23.1.1",
+    "@nx/js": "23.1.1",
+    "@nx/plugin": "23.1.1",
+    "@nx/workspace": "23.1.1",


Nx 23 incompatible with ESLint 8

High Severity

@nx/eslint is bumped to 23.1.1, which peers on eslint ^9 || ^10 and drops ESLint 8 support, but eslint remains at ^8.16.0. Lint targets use @nx/eslint:lint across packages, so npm run lint is likely to fail or behave incorrectly after this bump. A proper nx migrate (including ESLint 9+) is needed rather than a version-only bump.

Additional Locations (1)

package-lock.json#L3395-L3412

^{Reviewed by Cursor Bugbot for commit a630633. Configure here.}

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 31, 2026

dependabot Bot requested a review from a team as a code owner July 31, 2026 22:30

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 31, 2026

cursor Bot reviewed Jul 31, 2026

View reviewed changes

Navigation Menu

Uh oh!

chore(deps-dev): bump nx, @nx/devkit, @nx/eslint, @nx/eslint-plugin, @nx/jest, @nx/js, @nx/plugin and @nx/workspace - #3336

chore(deps-dev): bump nx, @nx/devkit, @nx/eslint, @nx/eslint-plugin, @nx/jest, @nx/js, @nx/plugin and @nx/workspace#3336
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-d7e69f780e

dependabot Bot commented on behalf of github Jul 31, 2026 •

edited by cursor Bot

Loading

Uh oh!

cursor Bot left a comment

Uh oh!

cursor Bot Jul 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 31, 2026 • edited by cursor Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

23.1.1 (2026-07-30)

🚀 Features

🩹 Fixes

23.1.1 (2026-07-30)

🚀 Features

🩹 Fixes

23.1.1 (2026-07-30)

🚀 Features

🩹 Fixes

23.1.1 (2026-07-30)

🚀 Features

🩹 Fixes

23.1.1 (2026-07-30)

🚀 Features

🩹 Fixes

23.1.1 (2026-07-30)

🚀 Features

🩹 Fixes

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Jul 31, 2026

Choose a reason for hiding this comment

Nx 23 incompatible with ESLint 8

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 31, 2026 •

edited by cursor Bot

Loading