Skip to content

chore(monorepo): update auto-merge non-major dependencies - #6

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/auto-merge-non-major-dependencies
Open

chore(monorepo): update auto-merge non-major dependencies#6
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/auto-merge-non-major-dependencies

Conversation

@renovate

@renovate renovate Bot commented Jan 3, 2026 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@nx/devkit (source) 23.0.0 → 23.1.1 age confidence pnpm.catalog.default minor
@nx/eslint-plugin (source) 23.0.0 → 23.1.1 age confidence pnpm.catalog.default minor
@nx/jest (source) 23.0.0 → 23.1.1 age confidence pnpm.catalog.default minor
@nx/js (source) 23.0.0 → 23.1.1 age confidence pnpm.catalog.default minor
@nx/plugin (source) 23.0.0 → 23.1.1 age confidence pnpm.catalog.default minor
@nx/workspace (source) 23.0.0 → 23.1.1 age confidence pnpm.catalog.default minor
@swc-node/register 1.11.1 → 1.12.1 age confidence pnpm.catalog.default minor
@swc/core (source) 1.15.8 → 1.15.47 age confidence pnpm.catalog.default patch
@swc/helpers (source) 0.5.19 → 0.5.23 age confidence pnpm.catalog.default patch
@types/web ^0.0.302 → ^0.0.354 age confidence pnpm.catalog.default patch
github/codeql-action v3.37.4 → v3.37.6 age confidence action patch
markdown-it >=14.1.0 → >=14.3.0 age confidence pnpm-workspace.overrides minor
node (source) 24.11.1 → 24.19.0 age confidence minor
node (source) >=24.11.1 → >=24.19.0 age confidence engines minor
pnpm (source) 10.26.0 → 10.34.5 age confidence packageManager minor
pnpm (source) >=10.24.0 → >=10.34.5 age confidence engines minor
ts-jest (source) 29.4.6 → 29.4.12 age confidence pnpm.catalog.default patch
verdaccio (source) 6.6.2 → 6.9.2 age confidence pnpm.catalog.default minor

Release Notes

nrwl/nx (@​nx/devkit)

v23.1.1

Compare Source

23.1.1 (2026-07-30)

🚀 Features
  • core: derive stable repo key from normalized remote and relative path (#​36439)
  • repo: add react + vite + vitest + playwright example (#​35921)
🩹 Fixes
  • angular-rspack: speed up builds and align behavior with the esbuild application builder (#​36268, #​34936)
  • bundling: support TypeScript esbuildConfig files in the esbuild executor (#​36352, #​36349)
  • bundling: acknowledge @​swc/core build scripts when configuring rollup (#​36412)
  • core: speed up npm lockfile parsing (#​36216)
  • core: speed up lockfile parsing and catalog resolution (#​36223)
  • core: show performance report recommendations only when actionable (#​36344)
  • core: close daemon log descriptors after spawn to avoid Node 26 crash (#​36280)
  • core: prevent shell injection in nx import (#​36348)
  • core: correct the 22.6.0 gitignore and analytics migration wiring (#​36356)
  • core: support npm 12 and pnpm in the package provenance check (#​36354, #​36338)
  • core: honor pnpm minimumReleaseAge config on pnpm 11 (#​36335, #​36330)
  • core: support pnpm 11 patched dependency hashes (#​36360)
  • core: resolve name refs copied into pattern-matched target arrays (#​36359)
  • core: resolve source-loaded plugin transitive workspace imports (#​36296)
  • core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#​36302)
  • core: include continuous and default-config dependencies in show target (#​36374)
  • core: make unit tests pass locally regardless of invoking package manager (#​35994)
  • core: respect --aiAgents none to skip AI agent file generation (#​34944, #​34692)
  • core: use --config.frozen-lockfile=false for pnpm add during migrate (#​36337)
  • core: run selected projects with --exclude-task-dependencies (#​35562)
  • core: stop passing git revisions through a shell in affected commands (#​36379)
  • core: collect trickling watcher bursts fully on daemon force-flush (#​36391)
  • core: report tasks running in another Nx process in the inline TUI (#​36341)
  • core: stop ratatui cursor queries from racing the TUI event stream (#​36318)
  • core: render critical-path tasks as a nested list in the job summary (#​36394)
  • core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#​36411)
  • core: support multiple brace groups in workspace glob matching (#​36395)
  • core: handle CRLF line endings in pnpm multi-document lockfiles (#​36419, #​35828, #​35840)
  • core: correct glob pattern expansion for ZeroOrOne groups (#​31857)
  • core: stop re-querying confirmed cache misses in task orchestrator (#​36301, #​35632)
  • core: sample project graph perf span telemetry per session at 10% (#​36420)
  • core: strip terminal query sequences when replaying task output (#​36432)
  • core: preserve FORCE_COLOR=0 intent for forked child tasks (#​35293)
  • core: handle colons in target name when resolving inputs to generate graph (#​36429, #​33710)
  • core: merge default plugins through the source-map-aware merge path (#​36257)
  • core: keep nx migrate on the requested version when release-age gates interfere (#​36444)
  • core: avoid bogus duplicate project name errors when generating nested apps (#​36458)
  • core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#​36497)
  • core: bump pinned axios and brace-expansion past vulnerable versions (#​36507, #​36474)
  • core: parse pnpm lockfiles that omit the packages block (#​36512)
  • core: keep real dependencies when omitting peers from npm temp installs (#​36518)
  • devkit: resolve ensurePackage against the workspace (#​36496)
  • docker: run release pipeline docker commands without a shell (#​36505)
  • js: support private methods and static blocks in babel preset (#​36218, #​36205)
  • js: parse pnpm/npm publish JSON containing braces in file paths (#​36241, #​36236)
  • js: resolve the verdaccio bin through its package.json (#​36479)
  • js: resolve package and extension-less tsconfig extends read from the tree (#​36271)
  • linter: keep override parser when convert-to-flat-config uses FlatCompat (#​36363)
  • linter: use projectService for typed linting in flat configs (#​35727)
  • misc: resolve CSS url() assets on Windows in postcss-cli-resources (#​36353, #​36336)
  • misc: suppress outdated disclaimer for unsupported AI agents with AGENTS.md (#​36324, #​36264)
  • misc: bump ci-workflow generator to node 24 and current action majors (#​36364)
  • misc: preserve package alias keys in generated package.json (#​35207)
  • misc: prevent crash when opening browser in Podman+WSL container (#​34639)
  • module-federation: do not cache static remote assets in the dev-server plugin (#​36279, #​36278)
  • module-federation: strip version suffix from npm dependency names for bun compatibility (#​34960)
  • react-native: include migration docs in the built package (#​36378)
  • release: only extract body issue references linked via closing keywords (#​36326, #​123)
  • release: align VersionDataEntry dependency types with VersionActions to allow null values (#​35932, #​35913)
  • repo: bump decompress to safe version (#​36333)
  • repo: drop stale e2e dependsOn overrides that omit the local registry (#​36482)
  • repo: serialize cypress installs and skip the binary when unused (#​36493)
  • rspack: lazy-load @​rspack/core in create-compiler to avoid eager ESM resolution (#​36476)
  • storybook: update configuration generator nx.json (#​34880, #​34879)
  • testing: add @​swc/core when configuring jest with the swc compiler (#​36409)
  • vite: prevent watch false leaking into dev server config (#​36080, #​36078)
  • vitest: honor watch config and keep --ui open in the test executor (#​36237, #​30263)
  • vitest: generate root vitest.config.ts instead of deprecated vitest.workspace (#​36316, #​36311)
  • vitest: prevent out-of-memory crash during atomized test graph creation (#​36339, #​36315)
  • webpack: disable extractComments on the swc terser minimizer (#​36238, #​36233)
  • webpack: bundle non-buildable library subpaths with fallback-array exports (#​36313, #​36309)
  • webpack: propagate watch option from executor to webpack config (#​34927, #​22945)
❤️ Thank You

v23.1.0

Compare Source

23.1.0 (2026-07-13)
🚀 Features
🩹 Fixes
  • angular: resolve esbuild option paths relative to the workspace root (#​36017, #​35936)
  • angular: bump prescribed angular version to 22.0.4 (#​36130)
  • angular: make nx migrate to Angular 22 leave a buildable workspace (#​36183)
  • angular-rspack: surface compilation failures as build errors and release resources on teardown (#​36018)
  • bundling: restore preprocessor extensions in postcss normalizeOp… (#​36057, #​35854)
  • bundling: prevent TS6059 when an app imports a workspace lib from source (#​36217, #​35017)
  • core: avoid tsconfig path false positives for sibling project roots (#​35796, #​35795, #​35786)
  • core: do not write minimumReleaseAgeExclude during nx migrate (#​36045)
  • core: do not crash nx migrate on non-semver dependency specifiers (#​36051)
  • core: format AI-edited files after agentic migrations (#​36064)
  • core: prefer module.registerHooks to avoid DEP0205 deprecation warning (#​36081)
  • core: prevent nx migrate crash when include=optional filters out the target package (#​36087)
  • core: make nx migrate honor preapproved packages and emit a valid temp workspace (#​36086)
  • core: skip daemon project-graph recompute on no-op file rewrites (#​36082)
  • core: prevent the TUI from auto-selecting a completed task when a batch finishes (#​35833)
  • core: deregister pseudo-terminal exit handlers when tasks finish (#​36115)
  • core: prevent path traversal / zip-slip in self-hosted remote cache (#​36116)
  • core: respect explicit --nxCloud=skip for AI agents in create-nx-workspace (#​36131)
  • core: warn when the self-hosted remote cache disables TLS verification (NXC-4593) (#​36132, #​36116)
  • core: throw actionable error when pnpm .modules.yaml is missing (#​35666, #​35635)
  • core: support ${configDir} in tsconfig path alias resolution (#​36037, #​35804)
  • core: prevent non-npm devEngines pin from breaking npm registry lookups (#​36020, #​35815)
  • core: clarify nx sync remediation messaging and surface spinner output in non-tty (#​35747)
  • core: exclude direct-dependency overrides from generated package.json (#​36040, #​35675)
  • core: apply target defaults when project.json overrides an inferred run-commands target with different commands (#​36142, #​36067)
  • core: run the nx.bat wrapper for dot-nx setup on windows (#​36048)
  • core: refine the end-of-run performance report recommendations (#​36127, #​36077)
  • core: speed up bun lockfile parsing (#​36198)
  • core: set NX_CLI_SET in batch worker processes (#​36214, #​36210)
  • core: use standard utm params on performance-report links (#​36226)
  • core: preserve comments in catalog YAML updates (#​35733)
  • core: box JsonFileSet payload to keep HashInstruction small (#​36247, #​35248, #​36244, #​36152)
  • core: share workspace fileset hash results instead of deep-cloning per task (#​36244, #​34971, #​34942)
  • core: replace per-input visited clones with undo-log scoping in hash planner (#​36248, #​35071, #​36152, #​34971, #​36244, #​35248, #​36247)
  • core: intern hash instructions in a pool and plan with id lists (#​36249, #​35071, #​36152, #​36248)
  • core: add trailing space after performance report popup title (#​36259)
  • core: prevent TUI hint popup from permanently stealing focus (#​36256)
  • core: detect Codex sandbox on Linux to disable daemon and plugin isolation (#​36273)
  • core: skip projects-filtered targetDefaults when resolved without a project (#​36281, #​36049)
  • core: size TUI bottom bar reservations to the actual help text (#​36261)
  • core: defer unresolved spread tokens when merging intermediate target configurations (#​36283, #​36235)
  • core: omit peer dependencies when installing packages to a temp dir (#​36295)
  • core: include root package.json dependencies for '.'-rooted projects (#​36291, #​33791, #​36290)
  • core: reduce task hashing memory usage on large workspaces (#​36267, #​36152)
  • devkit: restore prettier v2 support in formatFiles (#​36193)
  • gradle: track copy/sync and AGP merge task outputs in dependent task inputs (#​36099)
  • gradle: correct change-plugin-version-0-1-23 migration to nx 23.1.0-beta.4 (#​36103, #​36100)
  • gradle: make project graph reports machine-portable (#​36210, #​35388)
  • gradle: derive dependent-task input extensions from the task model instead of scanning disk (#​36211)
  • graph: prevent project details web view top from being clipped (#​36154)
  • js: prevent doubled output paths in buildable library path mappings (#​36138, #​36079)
  • js: scope incremental type-check .tsbuildinfo per project (#​36137, #​36113)
  • js: preserve npm allowScripts allowlist in pruned package.json (#​36016, #​35931)
  • js: resolve catalog references in pruned package.json output (#​35805, #​35419)
  • js: restore the pre-TypeScript 6 default of loading all @​types (#​36163)
  • js: avoid import locator unicode position panic (#​36133, #​36128)
  • js: prevent Windows TS6059 rootDir errors in tsc builds (#​36184, #​35696)
  • js: preserve esModuleInterop default when migrating to TypeScript 6 (#​36225)
  • js: keep tsconfigs compiling and config files loading under TypeScript 6 (#​36245)
  • js: wait for process tree exit when stopping node executor tasks (#​36230)
  • js: pin tsconfig root dir even when it matches the config directory (#​36272, #​3175)
  • js: pin rootDir on composite tsconfigs for ts6 (ts-jest strips composite) (#​36285, #​36272)
  • js: bump @​swc/cli to 0.8.1 to patch critical decompress advisory (#​36294)
  • linter: install angular-eslint when converting Angular configs to flat config (#​36160)
  • linter: run typescript-eslint v8 rule migrations for scoped-only workspaces (#​36180)
  • linter: harden the ESLint v9 flat-config migration (#​36204)
  • linter: reconcile angular-eslint v22 breaking changes in flat config (#​36200)
  • linter: update terminal cli regex for local-dist build (#​36201, #​36199)
  • maven: de-flake maven e2e by dropping -X debug forks and widening timeout (#​36091)
  • misc: bump happy-dom, tmp, and form-data to patched versions (#​36013)
  • misc: bump axios to 1.16.1 (#​36120)
  • misc: use default import for chalk in @​nx/workspace output.ts (#​35523, #​35521, #​34111, #​21201, #​26667)
  • misc: remove duplicate nx init cloud-prompt telemetry event (#​36145)
  • misc: export @​nx/esbuild/executors entry point (#​36282)
  • nx-cloud: use standard utm params on cloud prompt links (#​36227, #​36226)
  • nx-dev: keep mobile sidebar toggle clear of the conference banner (#​36047)
  • nx-dev: run next-sitemap directly instead of via pnpm (#​36054)
  • nx-dev: remove empty SaaS and Mobile template filters (#​36085)
  • react: skip react 19 update for workspaces using remix v2 (#​36065, #​418)
  • react: reserve ports in rspack e2e test to avoid default port collisions (#​36090)
  • react: bump eslint-plugin-react below 7.35 for ESLint 9 compatibility (#​36161)
  • react: stop pinning eslint-plugin-react in generated projects (#​36168, #​36161)
  • react: validate typecheck in the React 19 migration (#​36186)
  • ⚠️ release: stop breaking change changelog entry from swallowing trailing PR body (#​36052, #​35910, #​33070)
  • release: widen release e2e timeouts to absorb pre-version dlx install (#​36092)
  • repo: trust wix/brew tap so macOS detox CI can install applesimutils (#​36146)
  • rsbuild: bump @​rsbuild/plugin-sass with @​rsbuild/core for the v2 migration (#​36162)
  • rspack: use contenthash for chunkFilename to prevent stale chunks (#​36136, #​2292, #​36014)
  • testing: keep ts-jest resolving exports-only libs on typescript < 6 (#​36089)
  • testing: disable justInTimeCompile for webpack Cypress component testing (#​36185)
  • testing: update eslint-plugin-cypress for ESLint 9 compatibility (#​36202)
  • testing: template the e2e config for fresh projects instead of ast-parsing it (#​36304)
  • vite: widen vite ts-solution e2e build timeouts for cold multi-lib build (#​36093)
  • vite: detect @​vitejs/plugin-vue2 (vite:vue2) for vue-tsc typecheck (#​36125, #​36094)
  • vite: update deprecation docs link (#​36070, #​36053)
  • vitest: apply mode-based config consistently in the test executor (#​36041, #​35196)
  • vitest: support passing mode through to vitest (#​35069)
  • web: run executor/plugin/generator commands with the workspace package manager (#​36021, #​35950)
  • webpack: prevent TS6059 when a tsc build bundles a workspace lib (#​36188, #​35017)
⚠️ Breaking Changes
  • angular: support angular v22 (#​35851, #​35910)
    Angular v19 is no longer supported.
  • linter: drop eslint v8 support (#​36006)
    ESLint v8 is no longer supported. Nx requires ESLint v9
    or later.
❤️ Thank You

v23.0.2

Compare Source

23.0.2 (2026-07-10)
🚀 Features
  • core: re-add isCacheableTask helper (#​36177)
🩹 Fixes
  • bundling: prevent TS6059 when an app imports a workspace lib from source (#​36217, #​35017)
  • core: prefer module.registerHooks to avoid DEP0205 deprecation warning (#​36081)
  • core: prevent nx migrate crash when include=optional filters out the target package (#​36087)
  • core: make nx migrate honor preapproved packages and emit a valid temp workspace (#​36086)
  • core: skip daemon project-graph recompute on no-op file rewrites (#​36082)
  • core: prevent the TUI from auto-selecting a completed task when a batch finishes (#​35833)
  • core: deregister pseudo-terminal exit handlers when tasks finish (#​36115)
  • core: prevent path traversal / zip-slip in self-hosted remote cache (#​36116)
  • core: respect explicit --nxCloud=skip for AI agents in create-nx-workspace (#​36131)
  • core: warn when the self-hosted remote cache disables TLS verification (NXC-4593) (#​36132, #​36116)
  • core: throw actionable error when pnpm .modules.yaml is missing (#​35666, #​35635)
  • core: support ${configDir} in tsconfig path alias resolution (#​36037, #​35804)
  • core: prevent non-npm devEngines pin from breaking npm registry lookups (#​36020, #​35815)
  • core: clarify nx sync remediation messaging and surface spinner output in non-tty (#​35747)
  • core: exclude direct-dependency overrides from generated package.json (#​36040, #​35675)
  • core: apply target defaults when project.json overrides an inferred run-commands target with different commands (#​36142, #​36067)
  • core: run the nx.bat wrapper for dot-nx setup on windows (#​36048)
  • core: speed up bun lockfile parsing (#​36198)
  • core: set NX_CLI_SET in batch worker processes (#​36214, #​36210)
  • core: preserve comments in catalog YAML updates (#​35733)
  • core: box JsonFileSet payload to keep HashInstruction small (#​36247, #​35248, #​36244, #​36152)
  • core: share workspace fileset hash results instead of deep-cloning per task (#​36244, #​34971, #​34942)
  • core: replace per-input visited clones with undo-log scoping in hash planner (#​36248, #​35071, #​36152, #​34971, #​36244, #​35248, #​36247)
  • core: intern hash instructions in a pool and plan with id lists (#​36249, #​35071, #​36152, #​36248)
  • core: detect Codex sandbox on Linux to disable daemon and plugin isolation (#​36273)
  • devkit: restore prettier v2 support in formatFiles (#​36193)
  • graph: prevent project details web view top from being clipped (#​36154)
  • js: prevent doubled output paths in buildable library path mappings (#​36138, #​36079)
  • js: scope incremental type-check .tsbuildinfo per project (#​36137, #​36113)
  • js: preserve npm allowScripts allowlist in pruned package.json (#​36016, #​35931)
  • js: resolve catalog references in pruned package.json output (#​35805, #​35419)
  • js: avoid import locator unicode position panic (#​36133, #​36128)
  • js: prevent Windows TS6059 rootDir errors in tsc builds (#​36184, #​35696)
  • js: wait for process tree exit when stopping node executor tasks (#​36230)
  • linter: update terminal cli regex for local-dist build (#​36201, #​36199)
  • maven: de-flake maven e2e by dropping -X debug forks and widening timeout (#​36091)
  • misc: bump axios to 1.16.1 (#​36120)
  • misc: use default import for chalk in @​nx/workspace output.ts (#​35523, #​35521, #​34111, #​21201, #​26667)
  • misc: remove duplicate nx init cloud-prompt telemetry event (#​36145)
  • nx-cloud: use standard utm params on cloud prompt links (#​36227, #​36226)
  • nx-dev: remove empty SaaS and Mobile template filters (#​36085)
  • react: reserve ports in rspack e2e test to avoid default port collisions (#​36090)
  • react: stop pinning eslint-plugin-react in generated projects (#​36168, #​36161)
  • release: widen release e2e timeouts to absorb pre-version dlx install (#​36092)
  • repo: trust wix/brew tap so macOS detox CI can install applesimutils (#​36146)
  • rspack: use contenthash for chunkFilename to prevent stale chunks (#​36136, #​2292, #​36014)
  • rspack: stop mocking non-existent is-serve-mode util in apply-base-config test (fea2cabbcc)
  • vite: widen vite ts-solution e2e build timeouts for cold multi-lib build (#​36093)
  • vite: detect @​vitejs/plugin-vue2 (vite:vue2) for vue-tsc typecheck (#​36125, #​36094)
  • vite: update deprecation docs link (#​36070, #​36053)
  • vitest: support passing mode through to vitest (#​35069)
  • web: run executor/plugin/generator commands with the workspace package manager (#​36021, #​35950)
  • webpack: prevent TS6059 when a tsc build bundles a workspace lib (#​36188, #​35017)
❤️ Thank You

v23.0.1

Compare Source

23.0.1 (2026-06-23)
🚀 Features
  • nx-cloud: add utm tracking to clickable cloud prompt links (#​36028)
🩹 Fixes
  • angular: resolve esbuild option paths relative to the workspace root (#​36017, #​35936)
  • angular-rspack: surface compilation failures as build errors and release resources on teardown (#​36018)
  • bundling: restore preprocessor extensions in postcss normalizeOp… ([#​36057](https://redirect.githu

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "after 2am and before 3am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team January 3, 2026 12:01
@renovate renovate Bot added the dependencies Upgrade or downgrade of project dependencies. label Jan 3, 2026
@renovate
renovate Bot requested review from a team and sullivanpj as code owners January 3, 2026 12:01
@renovate
renovate Bot enabled auto-merge (squash) January 3, 2026 12:01
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from c0d78db to d5f63c6 Compare January 8, 2026 06:59
@socket-security

socket-security Bot commented Jan 8, 2026 •
edited
Loading

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from 17fbdc4 to bce6bcd Compare January 13, 2026 19:16
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 8 times, most recently from 68da564 to a3c403f Compare January 22, 2026 07:45
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 6 times, most recently from bb7d6a8 to ac7ea5a Compare January 28, 2026 18:52
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 6 times, most recently from 338335f to 08b596c Compare February 14, 2026 11:50
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from 93b21ce to 41eefb4 Compare February 22, 2026 03:46
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 3 times, most recently from 9e263a0 to 58ad5bf Compare March 2, 2026 06:22
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 2 times, most recently from 195ab9e to 75c782c Compare March 14, 2026 09:34
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 3 times, most recently from 5c1aa86 to f084a77 Compare March 31, 2026 18:31
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 2 times, most recently from 0f691e9 to 3e339e6 Compare April 19, 2026 03:10
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 5 times, most recently from 305748c to cf208d0 Compare May 6, 2026 11:28
@renovate
renovate Bot force-pushed the renovate/auto-merge-non-major-dependencies branch 2 times, most recently from 6ffff96 to 42ff586 Compare May 8, 2026 16:01
@socket-security

socket-security Bot commented Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Added@​swc/​helpers@​0.5.231001007284100
Added@​nx/​plugin@​23.1.1771009299100
Added@​swc-node/​register@​1.12.19810010090100
Added@​types/​web@​0.0.3541001009096100
Added@​swc/​core@​1.15.479210010096100
Addedts-jest@​29.4.12971009593100
Addedverdaccio@​6.9.29610010098100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sullivanpj sullivanpj Awaiting requested review from sullivanpj sullivanpj is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Upgrade or downgrade of project dependencies.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants