fix(deps): update dependency nx to v23.1.3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
nx (source)	23.1.1 → 23.1.3

---

Release Notes

nrwl/nx (nx)

v23.1.3

Compare Source

23.1.3 (2026-08-31)

🩹 Fixes

• angular: import optional ng-packagr lazily (#​36632)
• core: compare daemon workspace roots case-insensitively on Windows (#​36835, #​36722)
• devkit: reload TS config files fresh instead of serving stale cached modules (#​36656)
• nextjs: expose compiler and inSourceTests options in the library generator (#​36780)
• nextjs: make built next.config load without @​nx/next installed (#​36655, #​36511)
• nx-dev: let six legacy backlink paths reach their redirects (#​36819)
• nx-dev: show repository path in light mode (#​36818)

❤️ Thank You

• Benjamin Brienen
• BenjaminBrienen-CanonPP
• Jack Hsu @​jaysoo
• Jelle Bruisten @​JelleBruisten
• Juri Strumpflohner @​juristr
• Leosvel Pérez Espinosa @​leosvelperez

v23.1.2

Compare Source

23.1.2 (2026-08-26)

🩹 Fixes

• angular: make webpack-related packages optional peer dependencies (#​36310)
• angular: keep buildable libraries private (#​36545)
• angular-rspack: stop builds crashing on non-array styleUrls (#​36550)
• angular-rspack: rebuild components when their templates or styles change on Windows (#​36641, #​36619)
• core: normalize resolved module paths (#​36556, #​36549)
• core: stop pruneProjectGraph from mutating the source project graph (#​36517, #​36470)
• core: make preset empty work without github.com and improve template download errors (#​36508)
• core: drain to stdout before exiting nx affected (#​36569, #​36568)
• core: update brace-expansion to 5.0.9 for CVE-2026-14257 (#​36577)
• core: restrict daemon and plugin worker socket access to the owning user (#​36370)
• core: drain stdout before exiting nx run-many and nx run (#​36607, #​36606)
• core: resolve main worktree root without a Windows verbatim prefix (#​36649, #​35637)
• core: accept bun.lock lockfileVersion 2 and 3 (#​36666)
• core: maintain cacheability when an executor target default applies (#​36477)
• core: don't leave an unkillable nx process when a terminal closes (#​36683, #​36682)
• core: honor the package manager's registry config in nx migrate (#​35954, #​35843)
• core: resolve telemetry DNS in-process to avoid a getenv segfault (#​36673)
• core: skip target group members without a target (#​36711, #​36712)
• core: port quoteShellArg helper for no-shell spawn fixes (a9e493bf5f)
• core: stop resending accumulated task hash results to the daemon when hashing tasks (#​36716)
• core: apply package.json updates unblocked by later package groups (#​36636)
• core: adapt held-updates spec to enquirer prompt shape (8fe6dab9d2)
• core: create external nodes for out-of-workspace link dependencies (#​36745)
• core: point duplicate project names from worktrees at the fix (#​36734)
• core: exclude volatile shell and editor env vars from the daemon (#​36642, #​36610)
• core: stop the daemon before nx add installs a package (#​36767)
• devkit: honour cascading ignore files in tree walks and generator formatting (#​36575)
• devkit: correct version floor validation for ranges and prereleases (#​36724)
• docker: skip unchanged version action projects (#​36542)
• expo: keep the expo dev server alive under jest (#​36635)
• expo: derive metro projectRoot and node_modules from the app being bundled (#​36650, #​36531)
• gradle: emit valid Groovy when applying the plugin to an existing allprojects block (#​36697)
• gradle: surface project graph timeout errors when the process ignores the kill signal (#​36713)
• js: avoid duplicate node start without watch (#​36695, #​36694)
• js: resolve override selectors in affected detection (#​36699, #​36698)
• maven: stop running maven and gradle graph analysis through a shell (#​36626)
• misc: move plugin internal imports to devkit/internal (#​36430)
• misc: use workspaceRoot in workspaceModule path (#​35142)
• misc: bump css-loader so npm can resolve rspack core 2 (#​36643)
• misc: make generated code lint-clean under oxlint defaults (#​36749)
• misc: de-flake the nx watch e2e suite (#​36758)
• nextjs: stop installing unused Next.js ESLint packages from the library generator (#​36779)
• nextjs: describe the library generator and export its server entry (#​36776)
• nx-dev: keep the kb index working for uncommitted articles (#​36588)
• nx-dev: update docs pricing link (#​36625)
• react: make module federation packages optional peer dependencies (#​36492)
• release: ignore deleted projects in historical affectedness (#​36538)
• release: support custom conventional commit types (#​36539)
• release: skip changelog resolution for unversioned projects (#​36544)
• release: preserve package.json formatting (#​36540)
• release: Don't attribute commits with no author email to @find (#​36526)
• release: resolve out-of-set local dependency versions (#​36334)
• repo: tell review-pr agents to compare base and HEAD with git (#​36644)
• testing: reserve dev-server ports in the react-router e2e suite (#​36585)
• testing: install typescript in npm e2e workspaces to keep tsquery off TypeScript 7 (#​36478)

❤️ Thank You

• Aaron Thomas @​ATKasem
• AgentEnder @​AgentEnder
• AI-JamesHenry @​AI-JamesHenry
• Aleksandr Lihih @​sanshan
• ATKasem @​ATKasem
• Austin Turner @​paustint
• Caleb Ukle
• Craigory Coppola @​AgentEnder
• David Johnson @​djohnson-aperture
• driessamyn-sparta
• FrozenPandaz @​FrozenPandaz
• Harsh Mathur @​harshmathurx
• Jack Hsu @​jaysoo
• Jamie Trip
• Jarred Sumner @​Jarred-Sumner
• Jason Jean @​FrozenPandaz
• Kevin @​kevindcode
• Leosvel Pérez Espinosa @​leosvelperez
• Miroslav Jonaš @​meeroslav
• Nicole Oliver
• Optischa @​Optischa
• Tyler Kindy

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • "after 10:00 before 19:00 every weekday except after 13:00 before 14:00"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Thank you for following the naming conventions! 🙏

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

[14:33:30.199] INFO (775): Installing tool node@22.23.2...
[14:33:43.584] ERROR (775): download failed
    run: 3
    err: {
      "type": "HTTPError",
      "message": "Request failed with status code 504 (Gateway Time-out): GET https://github.com/containerbase/node-prebuild/releases/download/22.23.2/node-22.23.2-x86_64.tar.xz",
      "stack":
          HTTPError: Request failed with status code 504 (Gateway Time-out): GET https://github.com/containerbase/node-prebuild/releases/download/22.23.2/node-22.23.2-x86_64.tar.xz
              at Request._onResponseBase (file:///snapshot/dist/app/main-QTZu955-.js:35189:22)
              at Request._onResponse (file:///snapshot/dist/app/main-QTZu955-.js:35250:15)
              at ClientRequest.<anonymous> (file:///snapshot/dist/app/main-QTZu955-.js:35276:9)
              at ClientRequest.wrapper (node:events:639:12)
              at ClientRequest.emit (node:events:526:24)
              at ClientRequest.emit (node:domain:489:12)
              at HTTPParser.parserOnIncomingClient (node:_http_client:971:27)
              at HTTPParser.parserOnHeadersComplete (node:_http_common:125:17)
              at TLSSocket.socketOnData (node:_http_client:806:22)
              at TLSSocket.emit (node:events:514:28)
      "name": "HTTPError",
      "code": "ERR_NON_2XX_3XX_RESPONSE",
      "timings": {
        "start": 1788791623580,
        "socket": 1788791623580,
        "lookup": 1788791623580,
        "connect": 1788791623580,
        "secureConnect": 1788791623580,
        "upload": 1788791623581,
        "response": 1788791623583,
        "end": 1788791623583,
        "phases": {
          "wait": 0,
          "dns": 1,
          "tcp": 4,
          "tls": 5,
          "request": 1,
          "firstByte": 2,
          "download": 0,
          "total": 3
        }
      },
      "options": {
        "agent": {},
        "decompress": true,
        "timeout": {},
        "prefixUrl": "",
        "ignoreInvalidCookies": false,
        "context": {},
        "hooks": {
          "init": [],
          "beforeRequest": [],
          "beforeError": [],
          "beforeRedirect": [],
          "beforeRetry": [],
          "beforeCache": [],
          "afterResponse": []
        },
        "followRedirect": true,
        "maxRedirects": 10,
        "throwHttpErrors": true,
        "username": "",
        "password": "",
        "http2": false,
        "allowGetBody": false,
        "allowAbsoluteUrls": true,
        "copyPipedHeaders": false,
        "headers": {
          "user-agent": "containerbase/14.14.4 node/24.20.0 (https://github.com/containerbase)",
          "accept-encoding": "gzip, deflate, br, zstd"
        },
        "methodRewriting": false,
        "retry": {
          "limit": 2,
          "methods": [
            "GET",
            "PUT",
            "HEAD",
            "DELETE",
            "OPTIONS",
            "TRACE"
          ],
          "statusCodes": [
            408,
            413,
            429,
            500,
            502,
            503,
            504,
            521,
            522,
            524
          ],
          "errorCodes": [
            "ETIMEDOUT",
            "ECONNRESET",
            "EADDRINUSE",
            "ECONNREFUSED",
            "EPIPE",
            "ENOTFOUND",
            "ENETUNREACH",
            "EAI_AGAIN"
          ],
          "backoffLimit": null,
          "noise": 100,
          "enforceRetryRules": true
        },
        "method": "GET",
        "cacheOptions": {},
        "https": {},
        "resolveBodyOnly": false,
        "isStream": true,
        "responseType": "text",
        "url": "https://github.com/containerbase/node-prebuild/releases/download/22.23.2/node-22.23.2-x86_64.tar.xz",
        "pagination": {
          "countLimit": null,
          "backoff": 0,
          "requestLimit": 10000,
          "stackAllItems": false
        },
        "setHost": true,
        "enableUnixSockets": false,
        "strictContentLength": true
      }
    }
[14:33:43.625] ERROR (775): download failed
[14:33:43.625] FATAL (775): Install tool node failed in 13.4s.

[prisis]

Superseded by the combined dependency batch (chore/merge-renovate). Changes already landed on main.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (23.1.3). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.