Update nx monorepo to v22.7.5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@nx/esbuild (source)	22.7.1 → 22.7.5
@nx/eslint (source)	22.7.1 → 22.7.5
@nx/eslint-plugin (source)	22.7.1 → 22.7.5
@nx/jest (source)	22.7.1 → 22.7.5
@nx/js (source)	22.7.1 → 22.7.5
@nx/node (source)	22.7.1 → 22.7.5
@nx/web (source)	22.7.1 → 22.7.5
nx (source)	22.7.1 → 22.7.5

---

Release Notes

nrwl/nx (@​nx/esbuild)

v22.7.5

Compare Source

22.7.5 (2026-05-27)

🩹 Fixes

• core: update tmp to 0.2.6 due to CVE-2026-44705 (#​35813)

❤️ Thank You

• Jack Hsu @​jaysoo

v22.7.4

Compare Source

22.7.4 (2026-05-25)

🩹 Fixes

• core: update brace-expansion and yaml (#​35790)

❤️ Thank You

• Jack Hsu @​jaysoo

v22.7.3

Compare Source

22.7.3 (2026-05-22)

🚀 Features

• js: support pnpm 11.2.2 (#​35772)

🩹 Fixes

• angular: only add @​oxc-project/runtime on the vitest-analog path (#​35734)
• angular-rspack: exclude eslint config from tailwind v4 source scan (#​35663)
• core: warn before installing unknown npm packages as preset (#​35644)
• core: preserve input order in createNodes plugin results (#​35595)
• core: resolve local plugin subpath imports from source (#​35631)
• core: treat undefined task parallelism as parallel when scheduling (#​35736)
• core: handle object form of bin field in getPrettierPath (#​35680)
• core: detect vscode copilot ai agent (#​35757)
• core: allow local plugin subpath imports without custom conditions (#​35751, #​35631)
• dotnet: include Directory.. files in inputs (#​35738)
• gradle: add transitive:true to all tasks (#​35677)
• gradle: pin generated e2e project toolchain to installed JDK (#​35703)
• js: fall back to npm publish when bun publish fails with auth error (#​35756)
• linter: improve convert-to-flat-config output fidelity (#​35330)
• linter: only rewrite workspace-package peer deps to workspace:* (#​35423, #​35318, #​33417)
• misc: stop inferring projects: 'self' in dependsOn entries (#​35686)
• misc: skip $ escaping in file paths on windows (#​35692)
• repo: run dotnet restore before publish (#​35771)
• repo: run dotnet restore before macos e2e job (#​35774)
• rsbuild: infer build outputs from distPath.root directly (#​35707)
• rsbuild: lazy-require @​rsbuild/core in plugin so spec mocks work after jest.resetModules (#​35707)
• testing: correct yargs-parser import in getJestProjectsAsync (#​35672, #​35654)

❤️ Thank You

• AgentEnder @​AgentEnder
• Artur @​arturovt
• Benjamin Staneck @​Stanzilla
• Copilot @​Copilot
• Craigory Coppola @​AgentEnder
• FrozenPandaz @​FrozenPandaz
• Jason Jean @​FrozenPandaz
• Leosvel Pérez Espinosa @​leosvelperez
• leosvelperez @​leosvelperez
• Louie Weng @​lourw

v22.7.2

Compare Source

22.7.2 (2026-05-14)

🚀 Features

• gradle: stream batch task results to nx as they finish (#​35487)
• nx-dev: track docs analytics for code copy, LLM prompt, YouTube (#​35526)
• testing: add migration for Jest 30 snapshot guide link (#​35629)

🩹 Fixes

• angular: disable vitest watch by default (#​35493)
• angular-rspack: keep root-scoped assets out of per-locale i18n emit (#​35621)
• bundling: include tsconfig solution input for rollup (#​35476)
• bundling: include tsconfig solution input for webpack (#​35477, #​35476)
• core: bump axios to 1.16.0 for all packages (#​35568)
• core: add provenance check in nx console status path (#​35485)
• core: remove access control header from graph app (#​35494)
• core: ensure verbose logs go to stderr and daemon logs are properly decorated (#​34358)
• core: show flaky-task count in run summary (#​35491)
• core: unique telemetry user_id; expose workspace_id dimension (#​35553)
• core: update minimatch to 10.2.5 (#​35569, #​34660)
• core: restore use-legacy-versioning shim for @​nx/js@​21 ensurePackage path (#​35574)
• core: isolate NX_PARALLEL env var in parallel-related specs (#​35579)
• core: skip handleimport miss path when nx key packages are absent (#​35596)
• core: use gethostuuid(3) instead of ioreg on macOS (#​35599)
• core: isolate cache env vars in splitArgs spec (#​35584)
• core: enable node's native v8 compile cache support (#​35415, #​20454)
• core: support skipped batch tasks end-to-end and fix TUI double logs (#​35617)
• core: keep TUI task selection on the in-progress section (#​35640)
• core: allow nx mcp to run outside of an Nx workspace (#​35655)
• core: cast perf entries to PerformanceMeasure for detail access (43c0c821ba)
• devkit: exclude dist from jest module path scan (#​35615)
• devkit: expand @​nx/devkit/internal re-exports for cherry-picked v23 deep-import migration (#​35541)
• dotnet: correct output paths for Web SDK and centralized dist setups (#​35398)
• gradle: exclude batch-runner from jest haste-map crawl (#​35501)
• gradle: exclude project-graph from jest module path scan (#​35609)
• gradle: support Windows file paths (#​35184, #​34987)
• js: strip glob from inferred outputs before resolving as path (#​35463, #​35452)
• js: reference vitest.config in eslint dep-checks for vitest libs (#​35460, #​33670, #​35450)
• js: include transitive workspace deps in pruned pnpm lockfile (#​35532, #​35347, #​34655)
• linter: prevent ENOENT crash in getRelativeImportPath for unresolvable paths (#​35007, #​13872, #​34066, #​30491, #​16716, #​35006, #​21889, #​32190)
• maven: skip attached artifacts that fail to materialize in batch record (#​35473)
• maven: serialize Maven 4 build state recording (#​35555)
• maven: widen runCLI timeout for --no-batch maven.test.ts cases (#​35589)
• nx-dev: document nested CLI subcommands beyond two levels (#​35519)
• nx-dev: short-circuit bot probes in framer rewrite edge function (#​35527)
• react: withSvgr migration preserves other properties (#​35484)
• repo: clear NX_INVOCATION_ROOT_PID in run-native-target to avoid recursion false-positive (443dee0b22)
• repo: revert deep-import rewrites that targeted v23-only @​nx/devkit/internal entry (ac8187963d)
• repo: unblock 22.7.x cargo tests and nx-build e2e (#​34285)
• repo: expand "..." spread token in graph typecheck inputs (#​34285, #​35458)
• testing: pin jest to ~30.3.0 to avoid jest-runtime 30.4 RN incompat (#​35618)
• testing: handle absolute cypress screenshotsFolder/videosFolder paths (#​35624)
• testing: exclude dist and out-tsc from default jest module path scan (#​35619)
• testing: update remaining snapshot guide links missed by migration (cd350c1140)

❤️ Thank You

• Adam Keenan @​adamk33n3r
• AgentEnder @​AgentEnder
• beeman
• Claude
• Craigory Coppola @​AgentEnder
• FrozenPandaz @​FrozenPandaz
• Jack Hsu @​jaysoo
• Jason Jean @​FrozenPandaz
• Leosvel Pérez Espinosa @​leosvelperez
• Max Kless
• MaxKless @​MaxKless
• Optischa @​Optischa
• Sharon Lougheed

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​nx/​esbuild@​22.7.1 ⏵ 22.7.5
	npm/​@​nx/​web@​22.7.1 ⏵ 22.7.5	+1		+1
	npm/​@​nx/​jest@​22.7.1 ⏵ 22.7.5	+1		+1
	npm/​@​nx/​node@​22.7.1 ⏵ 22.7.5	+1		+1
	npm/​@​nx/​eslint@​22.7.1 ⏵ 22.7.5			+1
	npm/​@​nx/​js@​22.7.1 ⏵ 22.7.5			+1
	npm/​@​nx/​eslint-plugin@​22.7.1 ⏵ 22.7.5	+1		+1
	npm/​nx@​22.7.1 ⏵ 22.7.5	+20		+1

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report