Skip to content

Bump nx and lerna - #352

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-04a5b74d54
Open

Bump nx and lerna#352
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-04a5b74d54

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Bumps nx to 23.1.1 and updates ancestor dependency lerna. These dependencies need to be updated together.

Updates nx from 20.8.2 to 23.1.1

Release notes

Sourced from nx's releases.

23.1.1 (2026-07-30)

🚀 Features

  • core: derive stable repo key from normalized remote and relative path (#36439)
  • repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

  • angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)
  • bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)
  • bundling: acknowledge @​swc/core build scripts when configuring rollup (#36412)
  • core: speed up npm lockfile parsing (#36216)
  • core: speed up lockfile parsing and catalog resolution (#36223)
  • core: show performance report recommendations only when actionable (#36344)
  • core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)
  • core: prevent shell injection in nx import (#36348)
  • core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)
  • core: support npm 12 and pnpm in the package provenance check (#36354, #36338)
  • core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)
  • core: support pnpm 11 patched dependency hashes (#36360)
  • core: resolve name refs copied into pattern-matched target arrays (#36359)
  • core: resolve source-loaded plugin transitive workspace imports (#36296)
  • core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)
  • core: include continuous and default-config dependencies in show target (#36374)
  • core: make unit tests pass locally regardless of invoking package manager (#35994)
  • core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)
  • core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)
  • core: run selected projects with --exclude-task-dependencies (#35562)
  • core: stop passing git revisions through a shell in affected commands (#36379)
  • core: collect trickling watcher bursts fully on daemon force-flush (#36391)
  • core: report tasks running in another Nx process in the inline TUI (#36341)
  • core: stop ratatui cursor queries from racing the TUI event stream (#36318)
  • core: render critical-path tasks as a nested list in the job summary (#36394)
  • core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)
  • core: support multiple brace groups in workspace glob matching (#36395)
  • core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)
  • core: correct glob pattern expansion for ZeroOrOne groups (#31857)
  • core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)
  • core: sample project graph perf span telemetry per session at 10% (#36420)
  • core: strip terminal query sequences when replaying task output (#36432)
  • core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)
  • core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)
  • core: merge default plugins through the source-map-aware merge path (#36257)
  • core: keep nx migrate on the requested version when release-age gates interfere (#36444)
  • core: avoid bogus duplicate project name errors when generating nested apps (#36458)
  • core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)
  • core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)
  • core: parse pnpm lockfiles that omit the packages block (#36512)
  • core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits
  • 8841f1c fix(core): keep real dependencies when omitting peers from npm temp installs ...
  • 86dbded fix(core): parse pnpm lockfiles that omit the packages block (#36512)
  • cff77e2 fix(core): bump pinned axios and brace-expansion past vulnerable versions (#3...
  • a2e6ac4 chore(repo): stop eslint linting json files with no applicable rules (#36454)
  • dd97e9c fix(core): avoid bogus duplicate project name errors when generating nested a...
  • 50f61ef feat(core): derive stable repo key from normalized remote and relative path (...
  • 9d51f0a fix(core): keep nx migrate on the requested version when release-age gates in...
  • 36208e9 fix(core): merge default plugins through the source-map-aware merge path (#36...
  • 49a9afe fix(misc): prevent crash when opening browser in Podman+WSL container (#34639)
  • a92116d fix(core): handle colons in target name when resolving inputs to generate gra...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nx since your current version.

Install script changes

This version modifies postinstall script that runs during installation. Review the package contents before updating.


Updates lerna from 8.2.3 to 10.0.0

Release notes

Sourced from lerna's releases.

v10.0.0

10.0.0 (2026-07-29)

  • feat!: throw error in case of stale remote for CI mode (#4369) (3e81682), closes #4369
  • feat!: support node ^22.13.0 || ^24.0.0 || ^26.0.0, ship lerna as ESM-only (#4390) (a148ba2), closes #4390
  • fix(core)!: replace deprecated conventional-changelog dependencies (#4332) (b1ff72f), closes #4332

Bug Fixes

  • core: remove p-map-series, p-pipe, p-reduce, and p-waterfall (#4321) (fe066cb)
  • core: remove upath dependency (#4317) (aa65470)
  • core: support changelog presets that only expose the ESM import condition (#4385) (294e33a)
  • core: support OIDC trusted publishing on CircleCI (#4383) (a0963b9)
  • publish: show output from publish and postpublish lifecycle scripts (#4330) (9e87a34)

Features

  • core: add bun as supported package manager (#4264) (4ca7d2c)

BREAKING CHANGES

  • In CI, EBEHIND will now be thrown during versioning and publishing if the checkout is behind the latest on the remote. This previously only occurred outside of CI environments.

    If you wish to opt into the old behavior, you can do so by setting --ci-behind-behavior (error | skip, default error) or command.version.ciBehindBehavior in lerna.json.

  • Lerna is now shipped as ESM-only and the lowest supported node version has changed to 22.13.0, because on this version CommonJS consumers can still require in its entry points without any additional flags or warnings.

  • Lerna now uses the current conventional-changelog APIs instead of the deprecated conventional-changelog-core stack.

    Generated CHANGELOG.md output may differ, including normalized whitespace and URL-encoded tag names. Projects using custom changelog presets should verify their output; Lerna retains compatibility for legacy parser/writer option names and Handlebars string templates.

    CLI options and version-bump behavior remain unchanged.

v9.0.7

9.0.7 (2026-03-13)

Bug Fixes

  • core: normalize ./ prefix in workspace globs for package detection (#4308) (bd39779)
  • core: remove multimatch dependency and legacy-core internals (#4314) (ec01462)
  • version: skip config resolution in prettier getFileInfo check (#4306) (ae53efe)
  • version: support ESM and new v8+ conventional-changelog preset API (#4302) (575b248)

v9.0.6

9.0.6 (2026-03-11)

Bug Fixes

... (truncated)

Changelog

Sourced from lerna's changelog.

10.0.0 (2026-07-29)

  • feat!: throw error in case of stale remote for CI mode (#4369) (3e81682), closes #4369
  • feat!: support node ^22.13.0 || ^24.0.0 || ^26.0.0, ship lerna as ESM-only (#4390) (a148ba2), closes #4390
  • fix(core)!: replace deprecated conventional-changelog dependencies (#4332) (b1ff72f), closes #4332

Bug Fixes

  • core: remove p-map-series, p-pipe, p-reduce, and p-waterfall (#4321) (fe066cb)
  • core: remove upath dependency (#4317) (aa65470)

Features

  • core: add bun as supported package manager (#4264) (4ca7d2c)

BREAKING CHANGES

  • In CI, EBEHIND will now be thrown during versioning and publishing if the checkout is behind the latest on the remote. This previously only occurred outside of CI environments.

    If you wish to opt into the old behavior, you can do so by setting --ci-behind-behavior (error | skip, default error) or command.version.ciBehindBehavior in lerna.json.

  • Lerna is now shipped as ESM-only and the lowest supported node version has changed to 22.13.0, because on this version CommonJS consumers can still require in its entry points without any additional flags or warnings.

  • Lerna now uses the current conventional-changelog APIs instead of the deprecated conventional-changelog-core stack.

    Generated CHANGELOG.md output may differ, including normalized whitespace and URL-encoded tag names. Projects using custom changelog presets should verify their output; Lerna retains compatibility for legacy parser/writer option names and Handlebars string templates.

    CLI options and version-bump behavior remain unchanged.

9.0.7 (2026-03-13)

Bug Fixes

  • core: remove multimatch dependency and legacy-core internals (#4314) (ec01462)

9.0.6 (2026-03-11)

Bug Fixes

9.0.5 (2026-02-28)

Bug Fixes

9.0.4 (2026-02-10)

... (truncated)

Commits
  • 5f43163 chore(misc): publish 10.0.0
  • 138260c chore: nx 23.1 floor instead of 23.0 (#4403)
  • 14bb535 chore(deps): bump js-yaml to 4.3.0 and tar to 7.5.20 (#4397)
  • 3e81682 feat!: throw error in case of stale remote for CI mode (#4369)
  • a148ba2 feat!: support node ^22.13.0 || ^24.0.0 || ^26.0.0, ship lerna as ESM-only (#...
  • b1ff72f fix(core)!: replace deprecated conventional-changelog dependencies (#4332)
  • 1f7e109 chore(repo): migrate from jest to vitest (#4389)
  • 4ca7d2c feat(core): add bun as supported package manager (#4264)
  • 474e774 feat!: require node ^22.12.0 || ^24.0.0 || ^26.0.0, nx ^23.0.0 (#4387)
  • 8334afa chore: consolidate dependency updates (#4379)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for lerna since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) to 23.1.1 and updates ancestor dependency [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna). These dependencies need to be updated together.


Updates `nx` from 20.8.2 to 23.1.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/nx)

Updates `lerna` from 8.2.3 to 10.0.0
- [Release notes](https://github.com/lerna/lerna/releases)
- [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md)
- [Commits](https://github.com/lerna/lerna/commits/v10.0.0/packages/lerna)

---
updated-dependencies:
- dependency-name: nx
  dependency-version: 23.1.1
  dependency-type: indirect
- dependency-name: lerna
  dependency-version: 10.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants