chore(deps-dev): bump nx from 23.1.0 to 23.1.1

[dependabot]

Bumps nx from 23.1.0 to 23.1.1.

Release notes

Sourced from nx's releases.

23.1.1 (2026-07-30)

🚀 Features

• core: derive stable repo key from normalized remote and relative path (#36439)
• repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

• angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)
• bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)
• bundling: acknowledge @​swc/core build scripts when configuring rollup (#36412)
• core: speed up npm lockfile parsing (#36216)
• core: speed up lockfile parsing and catalog resolution (#36223)
• core: show performance report recommendations only when actionable (#36344)
• core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)
• core: prevent shell injection in nx import (#36348)
• core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)
• core: support npm 12 and pnpm in the package provenance check (#36354, #36338)
• core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)
• core: support pnpm 11 patched dependency hashes (#36360)
• core: resolve name refs copied into pattern-matched target arrays (#36359)
• core: resolve source-loaded plugin transitive workspace imports (#36296)
• core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)
• core: include continuous and default-config dependencies in show target (#36374)
• core: make unit tests pass locally regardless of invoking package manager (#35994)
• core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)
• core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)
• core: run selected projects with --exclude-task-dependencies (#35562)
• core: stop passing git revisions through a shell in affected commands (#36379)
• core: collect trickling watcher bursts fully on daemon force-flush (#36391)
• core: report tasks running in another Nx process in the inline TUI (#36341)
• core: stop ratatui cursor queries from racing the TUI event stream (#36318)
• core: render critical-path tasks as a nested list in the job summary (#36394)
• core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)
• core: support multiple brace groups in workspace glob matching (#36395)
• core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)
• core: correct glob pattern expansion for ZeroOrOne groups (#31857)
• core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)
• core: sample project graph perf span telemetry per session at 10% (#36420)
• core: strip terminal query sequences when replaying task output (#36432)
• core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)
• core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)
• core: merge default plugins through the source-map-aware merge path (#36257)
• core: keep nx migrate on the requested version when release-age gates interfere (#36444)
• core: avoid bogus duplicate project name errors when generating nested apps (#36458)
• core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)
• core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)
• core: parse pnpm lockfiles that omit the packages block (#36512)
• core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits

• 8841f1c fix(core): keep real dependencies when omitting peers from npm temp installs ...
• 86dbded fix(core): parse pnpm lockfiles that omit the packages block (#36512)
• cff77e2 fix(core): bump pinned axios and brace-expansion past vulnerable versions (#3...
• a2e6ac4 chore(repo): stop eslint linting json files with no applicable rules (#36454)
• dd97e9c fix(core): avoid bogus duplicate project name errors when generating nested a...
• 50f61ef feat(core): derive stable repo key from normalized remote and relative path (...
• 9d51f0a fix(core): keep nx migrate on the requested version when release-age gates in...
• 36208e9 fix(core): merge default plugins through the source-map-aware merge path (#36...
• 49a9afe fix(misc): prevent crash when opening browser in Podman+WSL container (#34639)
• a92116d fix(core): handle colons in target name when resolving inputs to generate gra...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates the monorepo tooling dependency to the latest patch version.

Changes:

• Bump nx from ^23.1.0 to ^23.1.1 in package.json

Files not reviewed (1)

• pnpm-lock.yaml: Generated file

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[gre-ledger]

Superseded by #37, which batches all open Dependabot updates into a single PR.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.