Skip to content

build(deps): bump nx from 22.7.6 to 22.7.8 - #1379

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nx-22.7.8
Open

build(deps): bump nx from 22.7.6 to 22.7.8#1379
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nx-22.7.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 8, 2026

Copy link
Copy Markdown
Contributor

Bumps nx from 22.7.6 to 22.7.8.

Release notes

Sourced from nx's releases.

22.7.8 (2026-07-30)

🩹 Fixes

  • angular-rspack: dispose stylesheet bundler so one-shot builds exit (#35869)
  • core: use workspace package manager when fetching migrations via install (#35866)
  • core: omit peer dependencies when installing packages to a temp dir (#36295)
  • core: prevent shell injection in nx import (#36348)
  • core: stop passing git revisions through a shell in affected commands (#36379)
  • core: allow nx build scripts in generated pnpm-workspace.yaml (#35564)
  • core: acknowledge @​swc/core build script in generated pnpm-workspace.yaml (#35608)
  • core: keep real dependencies when omitting peers from npm temp installs (#36518, #36295)
  • core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)
  • detox: resolve jest versions locally instead of importing @​nx/jest internals (3ce3f6ab6e)
  • docker: run release pipeline docker commands without a shell (#36505)
  • js: exclude typescript 7 from supported versions on 22.7.x (dc804964e9)
  • js: resolve the verdaccio bin through its package.json (#36479)
  • misc: use default import for chalk in @​nx/workspace output.ts (#35523, #35521, #34111, #21201, #26667)
  • repo: use default inputs instead of the '...' token in nx-dev on 22.7.x (#35530)
  • repo: trust wix/brew tap so macOS detox CI can install applesimutils (#36146)
  • testing: seed typescript before plugins in e2e workspaces to avoid TS7 stub (7f5ffbfcbc)

❤️ Thank You

22.7.7 (2026-07-10)

🩹 Fixes

  • core: prevent path traversal / zip-slip in self-hosted remote cache (#36116)
  • core: warn when the self-hosted remote cache disables TLS verification (NXC-4593) (#36132, #36116)
  • dotnet: declare obj as a publish output to fix sandbox violation (#35858)
  • dotnet: declare directory build props input for analyzer dotnet tasks (df7540195a)
  • dotnet: declare directory build props on the separate release build target (6545ee2222)
  • dotnet: declare directory build props on the analyzer tests dotnet targets (e72ee0dd79)

❤️ Thank You

Commits
  • f7afd77 fix(core): bump pinned axios and brace-expansion past vulnerable versions (#3...
  • 983413b fix(core): keep real dependencies when omitting peers from npm temp installs ...
  • 4159295 fix(core): stop passing git revisions through a shell in affected commands (#...
  • cf99649 fix(core): prevent shell injection in nx import (#36348)
  • 74311e7 fix(core): omit peer dependencies when installing packages to a temp dir (#36...
  • 84beebc fix(core): use workspace package manager when fetching migrations via install...
  • a328bf1 fix(core): warn when the self-hosted remote cache disables TLS verification (...
  • a828076 fix(core): prevent path traversal / zip-slip in self-hosted remote cache (#36...
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 8, 2026
Bumps [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) from 22.7.6 to 22.7.8.
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.8/packages/nx)

---
updated-dependencies:
- dependency-name: nx
  dependency-version: 22.7.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/nx-22.7.8 branch from 7cdc07d to b787d1b Compare August 13, 2026 02:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants