chore(deps): bump the nx group with 2 updates

[dependabot]

Bumps the nx group with 2 updates: @nx/js and nx.

Updates @nx/js from 23.1.1 to 23.1.3

Release notes

Sourced from @​nx/js's releases.

23.1.3 (2026-08-31)

🩹 Fixes

• angular: import optional ng-packagr lazily (#36632)
• core: compare daemon workspace roots case-insensitively on Windows (#36835, #36722)
• devkit: reload TS config files fresh instead of serving stale cached modules (#36656)
• nextjs: expose compiler and inSourceTests options in the library generator (#36780)
• nextjs: make built next.config load without @​nx/next installed (#36655, #36511)
• nx-dev: let six legacy backlink paths reach their redirects (#36819)
• nx-dev: show repository path in light mode (#36818)

❤️ Thank You

• Benjamin Brienen
• BenjaminBrienen-CanonPP
• Jack Hsu @​jaysoo
• Jelle Bruisten @​JelleBruisten
• Juri Strumpflohner @​juristr
• Leosvel Pérez Espinosa @​leosvelperez

23.1.2 (2026-08-26)

🩹 Fixes

• angular: make webpack-related packages optional peer dependencies (#36310)
• angular: keep buildable libraries private (#36545)
• angular-rspack: stop builds crashing on non-array styleUrls (#36550)
• angular-rspack: rebuild components when their templates or styles change on Windows (#36641, #36619)
• core: normalize resolved module paths (#36556, #36549)
• core: stop pruneProjectGraph from mutating the source project graph (#36517, #36470)
• core: make preset empty work without github.com and improve template download errors (#36508)
• core: drain to stdout before exiting nx affected (#36569, #36568)
• core: update brace-expansion to 5.0.9 for CVE-2026-14257 (#36577)
• core: restrict daemon and plugin worker socket access to the owning user (#36370)
• core: drain stdout before exiting nx run-many and nx run (#36607, #36606)
• core: resolve main worktree root without a Windows verbatim prefix (#36649, #35637)
• core: accept bun.lock lockfileVersion 2 and 3 (#36666)
• core: maintain cacheability when an executor target default applies (#36477)
• core: don't leave an unkillable nx process when a terminal closes (#36683, #36682)
• core: honor the package manager's registry config in nx migrate (#35954, #35843)
• core: resolve telemetry DNS in-process to avoid a getenv segfault (#36673)
• core: skip target group members without a target (#36711, #36712)
• core: port quoteShellArg helper for no-shell spawn fixes (a9e493bf5f)
• core: stop resending accumulated task hash results to the daemon when hashing tasks (#36716)
• core: apply package.json updates unblocked by later package groups (#36636)
• core: adapt held-updates spec to enquirer prompt shape (8fe6dab9d2)
• core: create external nodes for out-of-workspace link dependencies (#36745)
• core: point duplicate project names from worktrees at the fix (#36734)
• core: exclude volatile shell and editor env vars from the daemon (#36642, #36610)

... (truncated)

Commits

• 6cf9540 fix(release): resolve out-of-set local dependency versions (#36334)
• 7cf5317 fix(devkit): correct version floor validation for ranges and prereleases (#36...
• 6e75c23 fix(js): avoid duplicate node start without watch (#36695)
• be6f699 chore(repo): merge duplicate import declarations and forbid them via lint (#3...
• 5f460e1 fix(misc): use workspaceRoot in workspaceModule path (#35142)
• dab0395 fix(misc): move plugin internal imports to devkit/internal (#36430)
• ffac3fd fix(release): preserve package.json formatting (#36540)
• See full diff in compare view

Updates nx from 23.1.1 to 23.1.3

Release notes

Sourced from nx's releases.

23.1.3 (2026-08-31)

🩹 Fixes

• angular: import optional ng-packagr lazily (#36632)
• core: compare daemon workspace roots case-insensitively on Windows (#36835, #36722)
• devkit: reload TS config files fresh instead of serving stale cached modules (#36656)
• nextjs: expose compiler and inSourceTests options in the library generator (#36780)
• nextjs: make built next.config load without @​nx/next installed (#36655, #36511)
• nx-dev: let six legacy backlink paths reach their redirects (#36819)
• nx-dev: show repository path in light mode (#36818)

❤️ Thank You

• Benjamin Brienen
• BenjaminBrienen-CanonPP
• Jack Hsu @​jaysoo
• Jelle Bruisten @​JelleBruisten
• Juri Strumpflohner @​juristr
• Leosvel Pérez Espinosa @​leosvelperez

23.1.2 (2026-08-26)

🩹 Fixes

• angular: make webpack-related packages optional peer dependencies (#36310)
• angular: keep buildable libraries private (#36545)
• angular-rspack: stop builds crashing on non-array styleUrls (#36550)
• angular-rspack: rebuild components when their templates or styles change on Windows (#36641, #36619)
• core: normalize resolved module paths (#36556, #36549)
• core: stop pruneProjectGraph from mutating the source project graph (#36517, #36470)
• core: make preset empty work without github.com and improve template download errors (#36508)
• core: drain to stdout before exiting nx affected (#36569, #36568)
• core: update brace-expansion to 5.0.9 for CVE-2026-14257 (#36577)
• core: restrict daemon and plugin worker socket access to the owning user (#36370)
• core: drain stdout before exiting nx run-many and nx run (#36607, #36606)
• core: resolve main worktree root without a Windows verbatim prefix (#36649, #35637)
• core: accept bun.lock lockfileVersion 2 and 3 (#36666)
• core: maintain cacheability when an executor target default applies (#36477)
• core: don't leave an unkillable nx process when a terminal closes (#36683, #36682)
• core: honor the package manager's registry config in nx migrate (#35954, #35843)
• core: resolve telemetry DNS in-process to avoid a getenv segfault (#36673)
• core: skip target group members without a target (#36711, #36712)
• core: port quoteShellArg helper for no-shell spawn fixes (a9e493bf5f)
• core: stop resending accumulated task hash results to the daemon when hashing tasks (#36716)
• core: apply package.json updates unblocked by later package groups (#36636)
• core: adapt held-updates spec to enquirer prompt shape (8fe6dab9d2)
• core: create external nodes for out-of-workspace link dependencies (#36745)
• core: point duplicate project names from worktrees at the fix (#36734)
• core: exclude volatile shell and editor env vars from the daemon (#36642, #36610)

... (truncated)

Commits

• a5a1e68 fix(core): compare daemon workspace roots case-insensitively on Windows (#36835)
• fc9e67a fix(devkit): reload TS config files fresh instead of serving stale cached mod...
• 20fd46d docs(misc): clarify forwardAllArgs default for interpolated commands (#36035)
• d139a85 chore(core): drop arboard image-data feature from native build (#36781)
• 17dfb12 fix(core): stop the daemon before nx add installs a package (#36767)
• b30fcf4 fix(misc): de-flake the nx watch e2e suite (#36758)
• 80e12ad fix(core): exclude volatile shell and editor env vars from the daemon (#36642)
• 6cf9540 fix(release): resolve out-of-set local dependency versions (#36334)
• b9cceaa fix(core): point duplicate project names from worktrees at the fix (#36734)
• 7000973 fix(core): create external nodes for out-of-workspace link dependencies (#36745)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions