Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 18, 2025

Bumps js-yaml to 4.1.1 and updates ancestor dependencies js-yaml, @nx/workspace and nx. These dependencies need to be updated together.

Updates js-yaml from 4.1.0 to 4.1.1

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

Updates js-yaml from 3.13.1 to 3.14.2

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

Updates @nx/workspace from 17.2.8 to 22.0.4

Release notes

Sourced from @​nx/workspace's releases.

22.0.4 (2025-11-17)

🚀 Features

  • core: pull nx init from latest before executing (#33446)
  • docker: add skipDefaultTag option to build target (#33477, #33506)
  • maven: add option to prefix all maven targets (#33420)

🩹 Fixes

  • core: resolve lockfile cache regression with keyMap state (#33448, #33256)
  • core: optimize batch task scheduling to prevent redundant traversals (#33455, #33366)
  • core: capture stderr in nx add command for better error messages (#33462)
  • core: include require paths when resolving specified plugins (#33495)
  • core: prevent hanging between command end and process exit (#33500)
  • gradle: bump gradle migration version (#33479)
  • graph: add nx:build-native dependency to typecheck target (#33428)
  • js: improve typescript plugin performance (#33425, #33076)
  • maven: skip maven plugin computation on vercel/netlify (#33486)
  • misc: handle ERR_USE_AFTER_CLOSE gracefully in nx init and create-nx-workspace (#33469)
  • release: changelog renderer should render commit title with breaking changes (#33439)

❤️ Thank You

22.0.3 (2025-11-10)

🚀 Features

  • core: batch hash tasks without custom hashers (#33327)
  • core: add OSC 9;4 progress indicator support to TUI (#33325)
  • core: disable interactivity by default for run-one task outputs in tui (#33358)
  • gradle: use gitignore to determine dependant task output files (#33402)
  • maven: upgrade to version 0.0.8 with automated migration (#33315)
  • maven: add ci-workflow generator (#33346)
  • maven: bump version from 0.0.8 to 0.0.9 (#33405)
  • misc: remove CI investigation recommendations from agent rules (#33309)
  • vite: add vitest 4 to peerDep range to prevent conflicts (#33394)

🩹 Fixes

... (truncated)

Commits
  • 8801be3 chore(repo): rename jest.config.ts to jest.config.cts to be compat with Node ...
  • f958ebc fix(testing): use .cts config files for Jest 30+ to fix __dirname issues (#33...
  • 6e98692 chore(repo): dogfood pnpm catalogs (#33232)
  • 6a104c5 fix(misc)!: don't set legacy-peer-deps by default (#33014)
  • 8360341 chore(repo): disable duplicated typecheck targets if the project already uses...
  • 54dc259 feat(misc): remove migrations prior to v20 (#32904)
  • a24f416 chore(core): update workspace snapshot tests to be correct (#32890)
  • c54727d feat(core): add configure-ai-agents command (#32825)
  • 7ba9a24 feat(core): generate AI files in create-nx-workspace (#32442)
  • e574baf feat(angular): support angular v20.3.0 (#32730)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​nx/workspace since your current version.


Updates nx from 17.2.8 to 22.0.4

Release notes

Sourced from nx's releases.

22.0.4 (2025-11-17)

🚀 Features

  • core: pull nx init from latest before executing (#33446)
  • docker: add skipDefaultTag option to build target (#33477, #33506)
  • maven: add option to prefix all maven targets (#33420)

🩹 Fixes

  • core: resolve lockfile cache regression with keyMap state (#33448, #33256)
  • core: optimize batch task scheduling to prevent redundant traversals (#33455, #33366)
  • core: capture stderr in nx add command for better error messages (#33462)
  • core: include require paths when resolving specified plugins (#33495)
  • core: prevent hanging between command end and process exit (#33500)
  • gradle: bump gradle migration version (#33479)
  • graph: add nx:build-native dependency to typecheck target (#33428)
  • js: improve typescript plugin performance (#33425, #33076)
  • maven: skip maven plugin computation on vercel/netlify (#33486)
  • misc: handle ERR_USE_AFTER_CLOSE gracefully in nx init and create-nx-workspace (#33469)
  • release: changelog renderer should render commit title with breaking changes (#33439)

❤️ Thank You

22.0.3 (2025-11-10)

🚀 Features

  • core: batch hash tasks without custom hashers (#33327)
  • core: add OSC 9;4 progress indicator support to TUI (#33325)
  • core: disable interactivity by default for run-one task outputs in tui (#33358)
  • gradle: use gitignore to determine dependant task output files (#33402)
  • maven: upgrade to version 0.0.8 with automated migration (#33315)
  • maven: add ci-workflow generator (#33346)
  • maven: bump version from 0.0.8 to 0.0.9 (#33405)
  • misc: remove CI investigation recommendations from agent rules (#33309)
  • vite: add vitest 4 to peerDep range to prevent conflicts (#33394)

🩹 Fixes

... (truncated)

Commits
  • 8a0715b fix(core): prevent hanging between command end and process exit (#33500)
  • ea560ba fix(core): include require paths when resolving specified plugins (#33495)
  • b5126d5 fix(misc): handle ERR_USE_AFTER_CLOSE gracefully in nx init and create-nx-wor...
  • 24baf1c fix(core): capture stderr in nx add command for better error messages (#33462)
  • 9eca9d4 fix(core): optimize batch task scheduling to prevent redundant traversals (#3...
  • 3769d2e feat(core): pull nx init from latest before executing (#33446)
  • ea9785e chore(repo): bump to Node 24 (#33441)
  • c01a64a fix(core): resolve lockfile cache regression with keyMap state (#33448)
  • 872801f fix(release): changelog renderer should render commit title with breaking cha...
  • 2d53ffd fix(core): correctly identify local workspace dependencies on windows (#33408)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for nx since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 4.1.1 and updates ancestor dependencies [js-yaml](https://github.com/nodeca/js-yaml), [@nx/workspace](https://github.com/nrwl/nx/tree/HEAD/packages/workspace) and [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx). These dependencies need to be updated together.


Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

Updates `js-yaml` from 3.13.1 to 3.14.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

Updates `@nx/workspace` from 17.2.8 to 22.0.4
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.0.4/packages/workspace)

Updates `nx` from 17.2.8 to 22.0.4
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.0.4/packages/nx)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
- dependency-name: "@nx/workspace"
  dependency-version: 22.0.4
  dependency-type: direct:development
- dependency-name: nx
  dependency-version: 22.0.4
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies An issue or PR primarily about updating/managing dependencies javascript Pull requests that update javascript code labels Nov 18, 2025
@nx-cloud
Copy link

nx-cloud bot commented Nov 18, 2025

View your CI Pipeline Execution ↗ for commit 928a05a

Command Status Duration Result
nx affected --target=build --parallel=3 ✅ Succeeded 13s View ↗
nx affected --target=test --parallel=3 --ci --c... ✅ Succeeded 13s View ↗
nx affected --target=lint --parallel=3 ✅ Succeeded 13s View ↗
nx-cloud record -- npx nx format:check ✅ Succeeded 2s View ↗

☁️ Nx Cloud last updated this comment at 2025-11-18 12:01:37 UTC

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies An issue or PR primarily about updating/managing dependencies javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant