Upgrade NX to version 23.0.1 and TypeScript to version 7

[paustint]

Update dependencies to the latest versions, enhancing compatibility and performance across the project. Adjust configuration files to reflect changes in the NX and TypeScript ecosystems.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​typescript/​typescript6@​6.0.2
	nx@​22.7.2 ⏵ 23.0.1
	@​typescript-eslint/​parser@​8.46.2 ⏵ 8.62.1			+1
	@​nx/​playwright@​22.7.2 ⏵ 23.0.1			+1
	typescript-eslint@​8.61.0 ⏵ 8.62.1
	@​nx/​esbuild@​22.7.2 ⏵ 23.0.1			+21
	@​nx/​web@​22.7.2 ⏵ 23.0.1	+1
	@​swc/​cli@​0.7.10 ⏵ 0.8.1
	@​nx/​plugin@​22.7.2 ⏵ 23.0.1	-1
	@​nx/​node@​22.7.2 ⏵ 23.0.1				+1
	@​nx/​vitest@​22.7.2 ⏵ 23.0.1	+1
	@​nx/​js@​22.7.2 ⏵ 23.0.1
	@​nx/​vite@​22.7.2 ⏵ 23.0.1	+1
	@​nx/​eslint-plugin@​22.7.2 ⏵ 23.0.1	+1
	@​nx/​eslint@​22.7.2 ⏵ 23.0.1	+1
	@​nx/​workspace@​22.7.2 ⏵ 23.0.1
	@​nx/​react@​22.7.2 ⏵ 23.0.1	+1			+1
	@​typescript-eslint/​eslint-plugin@​8.46.2 ⏵ 8.62.1	+1		+1
	@​nx/​express@​22.7.2 ⏵ 23.0.1
	@​nx/​next@​22.7.2 ⏵ 23.0.1	-1
	@​nx/​devkit@​22.7.2 ⏵ 23.0.1	+1

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm @nx/workspace is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package.json → npm/@nx/workspace@23.0.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@nx/workspace@23.0.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm css-minimizer-webpack-plugin is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: ? → npm/@nx/web@23.0.1 → npm/@nx/next@23.0.1 → npm/css-minimizer-webpack-plugin@8.0.0 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/css-minimizer-webpack-plugin@8.0.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm execa is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: ? → npm/@swc/cli@0.8.1 → npm/execa@9.6.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/execa@9.6.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm less is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: ? → npm/@nx/web@23.0.1 → npm/@nx/next@23.0.1 → npm/vite@8.1.4 → npm/less@4.5.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/less@4.5.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm nx is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package.json → npm/nx@23.0.1 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/nx@23.0.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm strtok3 is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: ? → npm/@swc/cli@0.8.1 → npm/strtok3@10.3.5 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/strtok3@10.3.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm webpack is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: ? → npm/@docusaurus/types@3.10.1 → npm/@docusaurus/faster@3.10.1 → npm/@docusaurus/core@3.10.1 → npm/@docusaurus/theme-search-algolia@3.10.1 → npm/@docusaurus/preset-classic@3.10.1 → npm/@docusaurus/plugin-ideal-image@3.10.1 → npm/@nx/react@23.0.1 → npm/@nx/web@23.0.1 → npm/@nx/next@23.0.1 → npm/next-images@1.8.5 → npm/css-loader@6.11.0 → npm/babel-loader@9.2.1 → npm/style-loader@3.3.4 → npm/webpack@5.105.2 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/webpack@5.105.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[Copilot]

Pull request overview

This PR updates the workspace toolchain to Nx 23.0.1 and adjusts related configuration to match the Nx/Vite 8 migration path (notably the move from Rollup to Rolldown options), alongside TypeScript dependency changes.

Changes:

• Upgraded Nx packages (and nx) to 23.0.1, plus related tooling bumps (e.g., @swc/cli, @typescript-eslint/*).
• Applied Vite 8 migration changes by renaming rollupOptions to rolldownOptions across Vite configs.
• Updated migration and workspace config files (migrations.json, .gitignore, pnpm-workspace.yaml, nx.json) to reflect the new ecosystem expectations.

Reviewed changes

Copilot reviewed 9 out of 11 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
vitest.workspace.ts	Removes the Vitest workspace definition file.
pnpm-workspace.yaml	Expands minimumReleaseAgeExclude to include TypeScript 7-related packages.
package.json	Bumps Nx/tooling versions and changes how TypeScript versions are referenced via npm aliases.
nx.json	Flattens the eslint target inputs array formatting (no behavior change intended).
migrations.json	Updates Nx migration entries to Nx 23-era migration set.
apps/jetstream/vite.config.ts	Renames rollupOptions to rolldownOptions per Vite 8 migration.
apps/jetstream-web-extension/vite.plugins.ts	Renames rollupOptions to rolldownOptions in a build configuration for extension scripts.
apps/jetstream-web-extension/vite.config.ts	Renames rollupOptions to rolldownOptions for extension build config.
apps/jetstream-desktop-client/vite.config.ts	Renames rollupOptions to rolldownOptions for desktop client build config.
.gitignore	Adds .nx/migrate-runs to ignored paths.