build(deps-dev): bump nx from 18.3.5 to 23.1.1

[dependabot]

Bumps nx from 18.3.5 to 23.1.1.

Release notes

Sourced from nx's releases.

23.1.1 (2026-07-30)

🚀 Features

• core: derive stable repo key from normalized remote and relative path (#36439)
• repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

• angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)
• bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)
• bundling: acknowledge @​swc/core build scripts when configuring rollup (#36412)
• core: speed up npm lockfile parsing (#36216)
• core: speed up lockfile parsing and catalog resolution (#36223)
• core: show performance report recommendations only when actionable (#36344)
• core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)
• core: prevent shell injection in nx import (#36348)
• core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)
• core: support npm 12 and pnpm in the package provenance check (#36354, #36338)
• core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)
• core: support pnpm 11 patched dependency hashes (#36360)
• core: resolve name refs copied into pattern-matched target arrays (#36359)
• core: resolve source-loaded plugin transitive workspace imports (#36296)
• core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)
• core: include continuous and default-config dependencies in show target (#36374)
• core: make unit tests pass locally regardless of invoking package manager (#35994)
• core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)
• core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)
• core: run selected projects with --exclude-task-dependencies (#35562)
• core: stop passing git revisions through a shell in affected commands (#36379)
• core: collect trickling watcher bursts fully on daemon force-flush (#36391)
• core: report tasks running in another Nx process in the inline TUI (#36341)
• core: stop ratatui cursor queries from racing the TUI event stream (#36318)
• core: render critical-path tasks as a nested list in the job summary (#36394)
• core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)
• core: support multiple brace groups in workspace glob matching (#36395)
• core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)
• core: correct glob pattern expansion for ZeroOrOne groups (#31857)
• core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)
• core: sample project graph perf span telemetry per session at 10% (#36420)
• core: strip terminal query sequences when replaying task output (#36432)
• core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)
• core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)
• core: merge default plugins through the source-map-aware merge path (#36257)
• core: keep nx migrate on the requested version when release-age gates interfere (#36444)
• core: avoid bogus duplicate project name errors when generating nested apps (#36458)
• core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)
• core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)
• core: parse pnpm lockfiles that omit the packages block (#36512)
• core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits

• 8841f1c fix(core): keep real dependencies when omitting peers from npm temp installs ...
• 86dbded fix(core): parse pnpm lockfiles that omit the packages block (#36512)
• cff77e2 fix(core): bump pinned axios and brace-expansion past vulnerable versions (#3...
• a2e6ac4 chore(repo): stop eslint linting json files with no applicable rules (#36454)
• dd97e9c fix(core): avoid bogus duplicate project name errors when generating nested a...
• 50f61ef feat(core): derive stable repo key from normalized remote and relative path (...
• 9d51f0a fix(core): keep nx migrate on the requested version when release-age gates in...
• 36208e9 fix(core): merge default plugins through the source-map-aware merge path (#36...
• 49a9afe fix(misc): prevent crash when opening browser in Podman+WSL container (#34639)
• a92116d fix(core): handle colons in target name when resolving inputs to generate gra...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nx since your current version.

Install script changes

This version modifies postinstall script that runs during installation. Review the package contents before updating.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.38%. Comparing base (06437ae) to head (c1880e7).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #408      +/-   ##
==========================================
- Coverage   82.79%   82.38%   -0.42%     
==========================================
  Files         689      689              
  Lines       11590    11590              
  Branches      836      836              
==========================================
- Hits         9596     9548      -48     
- Misses       1170     1217      +47     
- Partials      824      825       +1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.