chore(deps-dev): bump nx from 23.1.1 to 23.1.2

[dependabot]

Bumps nx from 23.1.1 to 23.1.2.

Release notes

Sourced from nx's releases.

23.1.2 (2026-08-26)

🩹 Fixes

• angular: make webpack-related packages optional peer dependencies (#36310)
• angular: keep buildable libraries private (#36545)
• angular-rspack: stop builds crashing on non-array styleUrls (#36550)
• angular-rspack: rebuild components when their templates or styles change on Windows (#36641, #36619)
• core: normalize resolved module paths (#36556, #36549)
• core: stop pruneProjectGraph from mutating the source project graph (#36517, #36470)
• core: make preset empty work without github.com and improve template download errors (#36508)
• core: drain to stdout before exiting nx affected (#36569, #36568)
• core: update brace-expansion to 5.0.9 for CVE-2026-14257 (#36577)
• core: restrict daemon and plugin worker socket access to the owning user (#36370)
• core: drain stdout before exiting nx run-many and nx run (#36607, #36606)
• core: resolve main worktree root without a Windows verbatim prefix (#36649, #35637)
• core: accept bun.lock lockfileVersion 2 and 3 (#36666)
• core: maintain cacheability when an executor target default applies (#36477)
• core: don't leave an unkillable nx process when a terminal closes (#36683, #36682)
• core: honor the package manager's registry config in nx migrate (#35954, #35843)
• core: resolve telemetry DNS in-process to avoid a getenv segfault (#36673)
• core: skip target group members without a target (#36711, #36712)
• core: port quoteShellArg helper for no-shell spawn fixes (a9e493bf5f)
• core: stop resending accumulated task hash results to the daemon when hashing tasks (#36716)
• core: apply package.json updates unblocked by later package groups (#36636)
• core: adapt held-updates spec to enquirer prompt shape (8fe6dab9d2)
• core: create external nodes for out-of-workspace link dependencies (#36745)
• core: point duplicate project names from worktrees at the fix (#36734)
• core: exclude volatile shell and editor env vars from the daemon (#36642, #36610)
• core: stop the daemon before nx add installs a package (#36767)
• devkit: honour cascading ignore files in tree walks and generator formatting (#36575)
• devkit: correct version floor validation for ranges and prereleases (#36724)
• docker: skip unchanged version action projects (#36542)
• expo: keep the expo dev server alive under jest (#36635)
• expo: derive metro projectRoot and node_modules from the app being bundled (#36650, #36531)
• gradle: emit valid Groovy when applying the plugin to an existing allprojects block (#36697)
• gradle: surface project graph timeout errors when the process ignores the kill signal (#36713)
• js: avoid duplicate node start without watch (#36695, #36694)
• js: resolve override selectors in affected detection (#36699, #36698)
• maven: stop running maven and gradle graph analysis through a shell (#36626)
• misc: move plugin internal imports to devkit/internal (#36430)
• misc: use workspaceRoot in workspaceModule path (#35142)
• misc: bump css-loader so npm can resolve rspack core 2 (#36643)
• misc: make generated code lint-clean under oxlint defaults (#36749)
• misc: de-flake the nx watch e2e suite (#36758)
• nextjs: stop installing unused Next.js ESLint packages from the library generator (#36779)
• nextjs: describe the library generator and export its server entry (#36776)
• nx-dev: keep the kb index working for uncommitted articles (#36588)
• nx-dev: update docs pricing link (#36625)
• react: make module federation packages optional peer dependencies (#36492)

... (truncated)

Commits

• d139a85 chore(core): drop arboard image-data feature from native build (#36781)
• 17dfb12 fix(core): stop the daemon before nx add installs a package (#36767)
• b30fcf4 fix(misc): de-flake the nx watch e2e suite (#36758)
• 80e12ad fix(core): exclude volatile shell and editor env vars from the daemon (#36642)
• 6cf9540 fix(release): resolve out-of-set local dependency versions (#36334)
• b9cceaa fix(core): point duplicate project names from worktrees at the fix (#36734)
• 7000973 fix(core): create external nodes for out-of-workspace link dependencies (#36745)
• 8fe6dab fix(core): adapt held-updates spec to enquirer prompt shape
• 71d56a8 fix(js): resolve override selectors in affected detection (#36699)
• 77088e2 fix(core): apply package.json updates unblocked by later package groups (#36636)
• Additional commits viewable in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: f58eca23-f40d-440b-b113-17506dfe780e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[fennifith]

@dependabot recreate