build(deps-dev): bump nx from 18.3.5 to 23.1.1

[dependabot]

Bumps nx from 18.3.5 to 23.1.1.

Release notes

Sourced from nx's releases.

23.1.1 (2026-07-30)

🚀 Features

• core: derive stable repo key from normalized remote and relative path (#36439)
• repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

• angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)
• bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)
• bundling: acknowledge @​swc/core build scripts when configuring rollup (#36412)
• core: speed up npm lockfile parsing (#36216)
• core: speed up lockfile parsing and catalog resolution (#36223)
• core: show performance report recommendations only when actionable (#36344)
• core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)
• core: prevent shell injection in nx import (#36348)
• core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)
• core: support npm 12 and pnpm in the package provenance check (#36354, #36338)
• core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)
• core: support pnpm 11 patched dependency hashes (#36360)
• core: resolve name refs copied into pattern-matched target arrays (#36359)
• core: resolve source-loaded plugin transitive workspace imports (#36296)
• core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)
• core: include continuous and default-config dependencies in show target (#36374)
• core: make unit tests pass locally regardless of invoking package manager (#35994)
• core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)
• core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)
• core: run selected projects with --exclude-task-dependencies (#35562)
• core: stop passing git revisions through a shell in affected commands (#36379)
• core: collect trickling watcher bursts fully on daemon force-flush (#36391)
• core: report tasks running in another Nx process in the inline TUI (#36341)
• core: stop ratatui cursor queries from racing the TUI event stream (#36318)
• core: render critical-path tasks as a nested list in the job summary (#36394)
• core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)
• core: support multiple brace groups in workspace glob matching (#36395)
• core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)
• core: correct glob pattern expansion for ZeroOrOne groups (#31857)
• core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)
• core: sample project graph perf span telemetry per session at 10% (#36420)
• core: strip terminal query sequences when replaying task output (#36432)
• core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)
• core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)
• core: merge default plugins through the source-map-aware merge path (#36257)
• core: keep nx migrate on the requested version when release-age gates interfere (#36444)
• core: avoid bogus duplicate project name errors when generating nested apps (#36458)
• core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)
• core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)
• core: parse pnpm lockfiles that omit the packages block (#36512)
• core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits

• 8841f1c fix(core): keep real dependencies when omitting peers from npm temp installs ...
• 86dbded fix(core): parse pnpm lockfiles that omit the packages block (#36512)
• cff77e2 fix(core): bump pinned axios and brace-expansion past vulnerable versions (#3...
• a2e6ac4 chore(repo): stop eslint linting json files with no applicable rules (#36454)
• dd97e9c fix(core): avoid bogus duplicate project name errors when generating nested a...
• 50f61ef feat(core): derive stable repo key from normalized remote and relative path (...
• 9d51f0a fix(core): keep nx migrate on the requested version when release-age gates in...
• 36208e9 fix(core): merge default plugins through the source-map-aware merge path (#36...
• 49a9afe fix(misc): prevent crash when opening browser in Podman+WSL container (#34639)
• a92116d fix(core): handle colons in target name when resolving inputs to generate gra...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nx since your current version.

Install script changes

This version modifies postinstall script that runs during installation. Review the package contents before updating.

[codecov]

❌ 1 Tests Failed:

Tests completed	Failed	Passed	Skipped
224	1	223	0

View the full list of 1 ❄️ flaky test(s)

src/components/pdk/components.spec.ts::src/components/pdk/components.spec.ts

Flake rate in main: 100.00% (Passed 0 times, Failed 159 times)

Stack Traces | 0s run time

Error: [🍍]: "getActivePinia()" was called but there was no active Pinia. Are you trying to use a store before calling "app.use(pinia)"?
See https://pinia.vuejs.org/core-concepts/outside-component-usage.html for help.
This will fail in production.
 ❯ Module.useStore ../../../node_modules/@.../pinia/dist/pinia.mjs:1741:19
 ❯ runModalTest ../../../node_modules/@.../src/components/runModalTest.ts:7:44
 ❯ ../../../node_modules/@.../src/tests/executeAdminComponentTest.ts:29:7

To view more test analytics, go to the Test Analytics Dashboard
_{📋 Got 3 mins? Take this short survey to help us improve Test Analytics.}

[myparcel-bot]

✅ Build successful!

You can find a link to the downloadable artifact below.

Name	Link
Commit	23da3d9
Logs	https://github.com/myparcelnl/woocommerce/actions/runs/31472322192
Download	https://github.com/myparcelnl/woocommerce/suites/85365040632/artifacts/9093955219

[FreekVR]

@dependabot recreate

[dependabot]

A newer version of nx exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.