[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10,"_11":12},"actionData","errors","root",{"_489":-7,"_490":-5,"_491":-5,"_492":-5,"_493":14,"_494":40,"_495":496,"_497":498,"_499":14,"_500":501,"_502":503,"_37":38,"_39":40},"routes/_auth",{"_470":-5,"_471":472,"_473":474,"_475":476,"_134":14,"_33":14,"_477":14,"_478":14,"_479":14,"_480":14,"_481":-7,"_482":483,"_484":485,"_486":487,"_488":14,"_37":38,"_39":40},"routes/_auth.cipes.$cipeId",{"_20":108,"_109":14,"_110":-5,"_18":111,"_112":113,"_114":-5,"_115":116,"_117":14,"_118":40,"_119":14,"_15":-5,"_120":-5,"_121":14,"_122":123,"_124":-7,"_22":14,"_125":14,"_126":40,"_127":128,"_129":130,"_131":128,"_132":133,"_134":14,"_135":14,"_136":14,"_137":40,"_138":40,"_139":140,"_141":142,"_143":14,"_144":-5,"_37":38,"_39":40,"_145":146},"routes/_auth.cipes.$cipeId.self-healing",{"_13":14,"_15":-5,"_16":-5,"_17":-5,"_18":19,"_20":21,"_22":14,"_23":14,"_24":-5,"_25":-5,"_26":-5,"_27":-5,"_28":29,"_30":14,"_31":14,"_32":-5,"_33":14,"_34":14,"_35":-5,"_36":14,"_37":38,"_39":40},"hasRightToTakeAction",false,"aiFix","triggeredCipeId","existingFeedback","ciPipelineExecution",{"_41":47,"_48":49,"_50":51,"_52":53,"_54":55},"workspace",{"_41":42,"_43":44,"_45":46},"multipleFailuresWithoutFixes","showLogsButton","isFork","isDraft","actionByInfo","autoApplySuggestion","userDismissedTaskTypes",[],"autoApplyAlreadyEnabled","canEnableAutoApply","claudeStatus","isSystemAdmin","hasSuggestedFixFailureReasonDetails","firstAiFixAgentStepUrl","throttleAlreadyDismissed","result","success","ok",true,"_id","63e6951e043da20dd8321aec","orgId","63e68e668b89af000d2644c4","name","@o3r/framework","6acca897d10bc06543fe57ff","branch","gh-readonly-queue/main/pr-4526-b4d47cccfb0d4b1c791f16eb6107504f8c17bd0c","vcsContext",{"_48":49,"_85":49,"_86":87,"_88":89,"_90":-5,"_91":-5,"_92":93,"_94":95,"_96":97,"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_24":-5,"_25":-5},"selfHealing",{"_62":63,"_64":65,"_66":14},"selfHealingSkipInfo",{"_56":57,"_58":59,"_60":61},"reason","MERGE_QUEUE_NOT_SUPPORTED","message","Self-Healing CI is not yet supported for GitHub merge queue runs. This CI run will continue without generating an AI fix.","recordedAt",["D",1791797873836],"cliOverrides",{"_83":-5,"_84":-5},"workspaceConfigSnapshot",{"_67":40,"_68":40,"_69":40,"_70":14,"_71":40,"_72":73,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":-5},"isLongLivedBranch","enabled","commentNotificationEnabled","allowAnonymousExternalCommand","enableFlakyRerunsAutomatically","allowDraftPullRequests","protectedBranchPatterns",[],"selfHealingCISetupCompletedAt","fixPatterns","neverFixPatterns",[],"autoApplyIncludePatterns",[],"autoApplyExcludePatterns",[],"formatCommand","fixTasks","autoApplyFixes","ref","title","chore(deps): update dependency nx to ~23.2.0 [security] (main) (#4526)\n\nThis PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n| [nx](https://nx.dev)\n([source](https://redirect.github.com/nrwl/nx/tree/HEAD/packages/nx)) |\n[`~23.1.0` →\n`~23.2.0`](https://renovatebot.com/diffs/npm/nx/23.1.3/23.2.1) |\n![age](https://developer.mend.io/api/mc/badges/age/npm/nx/23.2.1?slim=true)\n|\n![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/nx/23.1.3/23.2.1?slim=true)\n|\n\n---\n\n### Nx: Path traversal in nx migrate package-migrations extraction\n[CVE-2026-104853](https://nvd.nist.gov/vuln/detail/CVE-2026-104853) /\n[GHSA-hrvq-x7jp-36xv](https://redirect.github.com/advisories/GHSA-hrvq-x7jp-36xv)\n\n

More information

\n\n#### Details\n##### Summary\n\n`nx migrate` reads each target package's `nx-migrations.migrations`\nvalue from its manifest and extracts the referenced file to a path built\nby joining that value onto a temporary directory. The value is never\nvalidated, so a package whose `migrations` field contains `..` segments\n(or an absolute path) steers the extraction to write outside the\ntemporary directory. A hostile package — or any package pulled in\ntransitively through a trusted package's `packageGroup` — can write\nattacker-controlled content, or truncate an existing file, anywhere the\nrunning user can write. This happens during migration *planning*, before\nthe user reviews the migration list and before `--run-migrations`, so it\ndoes not require the user to approve or execute anything.\n\n**Most workspaces need no action.** By default `nx migrate` does not run\nthe nx installed in your workspace — it installs `nx@latest` into a\ntemporary directory and performs the upgrade planning, including this\nextraction, with that copy. Now that a patched nx is the latest release,\na default `nx migrate` run is unaffected whatever version the workspace\nhas installed. The installed version only runs, and is only then\nexposed, when that hand-off is bypassed — see Remediation.\n\n##### Severity\n\nExploitable when the victim runs `nx migrate` against a package the\nattacker controls, directly or through a trusted package's\n`packageGroup`. The primary impact is a file write with\nattacker-controlled content and no path confinement; overwriting an\nauto-loaded file (a shell rc, a git hook, a CI script) escalates that\nwrite to code execution. There is no known evidence of exploitation in\nthe wild.\n\n##### Affected & Patched Versions\n\n| Package | Vulnerable | Patched |\n| --- | --- | --- |\n| `nx` | `>= 13.10.0, < 22.7.10`; `>= 23.0.0, < 23.2.1` | `22.7.10`,\n`23.2.1` |\n\nEvery version in the ranges above is affected. The lower bound is\n13.10.0, the first release where `nx migrate` extracted a package's\nmigrations file from its tarball; earlier versions resolved migrations\nwithout that extraction.\n\n> [!IMPORTANT]\n> `nx migrate` normally fetches and runs `nx@latest` rather than the nx\ninstalled in your workspace. The ranges above therefore say where the\nvulnerable code ships, not who is exposed — it only runs when that\nhand-off is bypassed.\n\n##### Remediation\n\n**If you run `nx migrate` normally, there is nothing to do.** It\nresolves and runs the latest nx, which is patched, so your workspace's\nown nx version does not matter for this flaw.\n\nUpgrade only if you bypass that hand-off and run the workspace's nx\ninstead — that is, if you set `NX_USE_LOCAL` or `NX_MIGRATE_USE_LOCAL`,\npin `NX_MIGRATE_CLI_VERSION` to an affected version, resume an existing\nrun with `--run-id`, or run where the temporary install fails and `nx\nmigrate` falls back to the local nx. In those cases upgrade to\n**22.7.10** (22.x line) or **23.2.1** (23.x line) or later:\n\n```\nnx migrate 23.2.1\n```\n\nThe fix is a drop-in — no configuration changes are required, and no\nlegitimate `migrations` value is affected (real packages reference\n`./migrations.json` or another path within their own directory, all of\nwhich remain valid). Either way, do not run `nx migrate` against\npackages, or `packageGroup` members, that you do not trust.\n\n##### Details\n\nWhile planning an upgrade, `nx migrate` extracts each target package's\nmigrations file to a destination built by joining the package's own\n`nx-migrations.migrations` value onto a temporary directory. That value\nis read from the manifest without validation, and it is handled\nasymmetrically: the name Nx matches against the archive entries is\nnormalized (so its `..` segments collapse), while the destination path\nit writes to is a raw join that keeps the `..` segments and resolves\noutside the temporary directory. Because the attacker controls the\ntarball, they name their entry to equal the normalized form; the match\nthen succeeds and the bytes are written to the un-normalized, escaping\ndestination. The normalization is not a defence — it only dictates what\nthe attacker must name their entry.\n\nThe same value also seeds the directory used for prompt-file extraction,\nwhich has the same shape, so both writes are steerable from the one\nfield.\n\nTwo distinct primitives fall out of this:\n\n- **Truncation** — the destination write stream is opened, and\ntruncates, before any tar entry is inspected. So a package that points\n`migrations` at an existing file empties that file even when no tar\nentry matches — no crafted archive required.\n- **Controlled write** — when a tar entry's name matches, its bytes are\nwritten to the escaping destination. The extractor performs no path\ncontainment of its own.\n\n##### Credits\n\n- **Arkadiusz Marta** (RE:SOURCE) — Reporter\n\n#### Severity\n- CVSS Score: 5.8 / 10 (Medium)\n- Vector String:\n`CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N`\n\n#### References\n-\n[https://github.com/nrwl/nx/security/advisories/GHSA-hrvq-x7jp-36xv](https://redirect.github.com/nrwl/nx/security/advisories/GHSA-hrvq-x7jp-36xv)\n-\n[https://nvd.nist.gov/vuln/detail/CVE-2026-104853](https://nvd.nist.gov/vuln/detail/CVE-2026-104853)\n-\n[https://github.com/nrwl/nx/pull/36887](https://redirect.github.com/nrwl/nx/pull/36887)\n-\n[https://github.com/nrwl/nx/commit/38cd82a0c05e8212e538bdb87ccb198d6504e58f](https://redirect.github.com/nrwl/nx/commit/38cd82a0c05e8212e538bdb87ccb198d6504e58f)\n-\n[https://github.com/nrwl/nx/commit/95474ab457e8e1dbdbefad29040c166105a8fb90](https://redirect.github.com/nrwl/nx/commit/95474ab457e8e1dbdbefad29040c166105a8fb90)\n-\n[https://github.com/nrwl/nx/commit/de37c5ebd1852fac700d70726326236ac398af3f](https://redirect.github.com/nrwl/nx/commit/de37c5ebd1852fac700d70726326236ac398af3f)\n-\n[https://github.com/nrwl/nx/releases/tag/22.7.10](https://redirect.github.com/nrwl/nx/releases/tag/22.7.10)\n-\n[https://github.com/nrwl/nx/releases/tag/23.2.1](https://redirect.github.com/nrwl/nx/releases/tag/23.2.1)\n-\n[https://github.com/advisories/GHSA-hrvq-x7jp-36xv](https://redirect.github.com/advisories/GHSA-hrvq-x7jp-36xv)\n\nThis data is provided by the [GitHub Advisory\nDatabase](https://redirect.github.com/advisories/GHSA-hrvq-x7jp-36xv)\n([CC-BY\n4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).\n

\n\n---\n\n### Release Notes\n\n

nrwl/nx (nx)

\n\n### [`v23.2.1`](https://redirect.github.com/nrwl/nx/releases/tag/23.2.1)\n\n[Compare\nSource](https://redirect.github.com/nrwl/nx/compare/23.2.0...23.2.1)\n\n#### 23.2.1 (2026-09-09)\n\n##### 🚀 Features\n\n- **core:** report the cache location alongside usage\n([#36959](https://redirect.github.com/nrwl/nx/pull/36959))\n- **repo:** add a .NET example for\n[@nx/dotnet](https://redirect.github.com/nx/dotnet)\n([#36701](https://redirect.github.com/nrwl/nx/pull/36701))\n\n##### 🩹 Fixes\n\n- **angular:** correct declaration maps and exports of buildable\nlibraries\n([#36373](https://redirect.github.com/nrwl/nx/pull/36373),\n[#36357](https://redirect.github.com/nrwl/nx/issues/36357))\n- **core:** separate daemon runtime env from graph identity\n([#36565](https://redirect.github.com/nrwl/nx/pull/36565),\n[#36564](https://redirect.github.com/nrwl/nx/issues/36564))\n- **core:** validate the migrations path before extracting package\nmigrations\n([#36887](https://redirect.github.com/nrwl/nx/pull/36887))\n- **core:** release per-run process listeners and task history results\n([#36866](https://redirect.github.com/nrwl/nx/pull/36866))\n- **core:** read the pnpm 12 min-release-age policy instead of deferring\nto an install\n([#36915](https://redirect.github.com/nrwl/nx/pull/36915),\n[#36914](https://redirect.github.com/nrwl/nx/issues/36914))\n- **core:** carry minimumReleaseAge into pruned pnpm deploy output\n([#36900](https://redirect.github.com/nrwl/nx/pull/36900),\n[#36899](https://redirect.github.com/nrwl/nx/issues/36899))\n- **core:** report how a plugin worker was lost instead of always\ncalling it an exit\n([#36894](https://redirect.github.com/nrwl/nx/pull/36894))\n- **core:** keep the cache in the workspace on CI\n([#36922](https://redirect.github.com/nrwl/nx/pull/36922))\n- **core:** restore the wasm walker imports dropped by a stray cfg\nattribute\n([#36924](https://redirect.github.com/nrwl/nx/pull/36924))\n- **core:** avoid mutating target options when resolving configurations\n([#36934](https://redirect.github.com/nrwl/nx/pull/36934))\n- **js:** resolve tsconfig to absolute path so ${configDir} paths\ntype-check without baseUrl\n([#36445](https://redirect.github.com/nrwl/nx/pull/36445))\n- **misc:** scan package projects for env vars\n([#36847](https://redirect.github.com/nrwl/nx/pull/36847))\n- **release:** exclude AI coding agents from the changelog Thank You\nsection\n([#36892](https://redirect.github.com/nrwl/nx/pull/36892))\n- **release:** use the release group name when resolving the previous\ntag for fixed groups\n([#36554](https://redirect.github.com/nrwl/nx/pull/36554))\n- **repo:** provision JDK 17 for Gradle builds with mise\n([#36965](https://redirect.github.com/nrwl/nx/pull/36965))\n- **repo:** guard JAVA17\\_HOME against an uninstalled JDK\n([#36969](https://redirect.github.com/nrwl/nx/pull/36969))\n- **rspack:** write the normalized cache option in NxAppRspackPlugin\n([#36905](https://redirect.github.com/nrwl/nx/pull/36905),\n[#36878](https://redirect.github.com/nrwl/nx/issues/36878))\n\n##### ❤️ Thank You\n\n- AgentEnder\n[@AgentEnder](https://redirect.github.com/AgentEnder)\n- Caleb Ukle\n- Claude\n- Craigory Coppola\n[@AgentEnder](https://redirect.github.com/AgentEnder)\n- Denis Frenademetz\n[@skrtheboss](https://redirect.github.com/skrtheboss)\n- Eduardo Speroni\n[@edusperoni](https://redirect.github.com/edusperoni)\n- Federico Bartoli\n- FrozenPandaz\n[@FrozenPandaz](https://redirect.github.com/FrozenPandaz)\n- Jack Stevenson\n- Jason Jean\n[@FrozenPandaz](https://redirect.github.com/FrozenPandaz)\n- Jupiter Jayna [@sdjayna](https://redirect.github.com/sdjayna)\n- Juri Strumpflohner\n[@juristr](https://redirect.github.com/juristr)\n- Leosvel Pérez Espinosa\n[@leosvelperez](https://redirect.github.com/leosvelperez)\n- Nicolas Beaussart\n[@beaussan](https://redirect.github.com/beaussan)\n- ShwethaSundar\n- Stephen Jayna\n\n### [`v23.2.0`](https://redirect.github.com/nrwl/nx/releases/tag/23.2.0)\n\n[Compare\nSource](https://redirect.github.com/nrwl/nx/compare/23.1.3...23.2.0)\n\n##### 23.2.0 (2026-09-02)\n\n##### 🚀 Features\n\n- **angular:** add support for Angular v22.1\n([#36521](https://redirect.github.com/nrwl/nx/pull/36521))\n- **core:** confirm before creating migration commits on the default\nbranch ([#36314](https://redirect.github.com/nrwl/nx/pull/36314))\n- **core:** add a full-width TUI status bar and vim-style pane search\n([#36263](https://redirect.github.com/nrwl/nx/pull/36263))\n- **core:** forward mouse and resize events to tasks running in the\nTUI's pty\n([#36322](https://redirect.github.com/nrwl/nx/pull/36322))\n- **core:** add bun dependency-catalog support\n([#36434](https://redirect.github.com/nrwl/nx/pull/36434))\n- **core:** derive stable repo key from normalized remote and relative\npath ([#36439](https://redirect.github.com/nrwl/nx/pull/36439))\n- **core:** add nx migrate --run-migration to run a single migration\n([#36407](https://redirect.github.com/nrwl/nx/pull/36407))\n- **core:** let migration generators skip their AI step\n([#36532](https://redirect.github.com/nrwl/nx/pull/36532))\n- **core:** show Cloud app link for remote cache instead of docs\n([#36460](https://redirect.github.com/nrwl/nx/pull/36460))\n- **core:** add durable run state and a dark orchestration loop to nx\nmigrate\n([#36403](https://redirect.github.com/nrwl/nx/pull/36403))\n- **core:** add built-in support for oxfmt formatter alongside prettier\n([#35089](https://redirect.github.com/nrwl/nx/pull/35089),\n[#30403](https://redirect.github.com/nrwl/nx/issues/30403))\n- **core:** filter static task output to failures and restore CI log\ngrouping\n([#36453](https://redirect.github.com/nrwl/nx/pull/36453))\n- **core:** let the daemon and plugin workers run inside agent sandboxes\n([#36586](https://redirect.github.com/nrwl/nx/pull/36586))\n- **dotnet:** infer OpenApiDocumentsDirectory as a build output\n([#36788](https://redirect.github.com/nrwl/nx/pull/36788))\n- **linter:** add the\n[@nx/oxlint](https://redirect.github.com/nx/oxlint) plugin\n([#36491](https://redirect.github.com/nrwl/nx/pull/36491))\n- **linter:** hash only lintable files for inferred oxlint tasks\n([#36828](https://redirect.github.com/nrwl/nx/pull/36828))\n- **misc:** support vitest generation for node, nest, and express\ngenerators\n([#36665](https://redirect.github.com/nrwl/nx/pull/36665))\n- **nx-cloud:** generate .nx/ci-config.yaml for agent distribution\n([#36504](https://redirect.github.com/nrwl/nx/pull/36504))\n- **nx-cloud:** add nx start-nx-agents as an alias for nx-cloud\nstart-nx-agents\n([#36572](https://redirect.github.com/nrwl/nx/pull/36572))\n- **nx-plugin:** add vitest support for e2e tests\n([#34041](https://redirect.github.com/nrwl/nx/pull/34041))\n- **release:** support tag-based project selection\n([#36537](https://redirect.github.com/nrwl/nx/pull/36537))\n- **repo:** add react + vite + vitest + playwright example\n([#35921](https://redirect.github.com/nrwl/nx/pull/35921))\n- **storybook:** adopt the storybook vitest addon for story testing\n([#36648](https://redirect.github.com/nrwl/nx/pull/36648),\n[#33759](https://redirect.github.com/nrwl/nx/issues/33759))\n- **testing:** offer vitest consistently across generators with a\nunitTestRunner option\n([#36715](https://redirect.github.com/nrwl/nx/pull/36715))\n\n##### 🩹 Fixes\n\n- **angular:** make webpack-related packages optional peer dependencies\n([#36310](https://redirect.github.com/nrwl/nx/pull/36310))\n- **angular:** keep buildable libraries private\n([#36545](https://redirect.github.com/nrwl/nx/pull/36545))\n- **angular:** import optional `ng-packagr` lazily\n([#36632](https://redirect.github.com/nrwl/nx/pull/36632))\n- **angular-rspack:** speed up builds and align behavior with the\nesbuild application builder\n([#36268](https://redirect.github.com/nrwl/nx/pull/36268),\n[#34936](https://redirect.github.com/nrwl/nx/issues/34936))\n- **angular-rspack:** stop builds crashing on non-array styleUrls\n([#36550](https://redirect.github.com/nrwl/nx/pull/36550))\n- **angular-rspack:** rebuild components when their templates or styles\nchange on Windows\n([#36641](https://redirect.github.com/nrwl/nx/pull/36641),\n[#36619](https://redirect.github.com/nrwl/nx/issues/36619))\n- **bundling:** support TypeScript esbuildConfig files in the esbuild\nexecutor\n([#36352](https://redirect.github.com/nrwl/nx/pull/36352),\n[#36349](https://redirect.github.com/nrwl/nx/issues/36349))\n- **bundling:** acknowledge\n[@swc/core](https://redirect.github.com/swc/core) build scripts\nwhen configuring rollup\n([#36412](https://redirect.github.com/nrwl/nx/pull/36412))\n- **bundling:** resolve esbuild paths from workspace root instead of cwd\n([#36830](https://redirect.github.com/nrwl/nx/pull/36830),\n[#34027](https://redirect.github.com/nrwl/nx/issues/34027))\n- **bundling:** allow overriding the css module hash algorithm\n([#36837](https://redirect.github.com/nrwl/nx/pull/36837),\n[#36829](https://redirect.github.com/nrwl/nx/issues/36829))\n- **core:** speed up npm lockfile parsing\n([#36216](https://redirect.github.com/nrwl/nx/pull/36216))\n- **core:** speed up lockfile parsing and catalog resolution\n([#36223](https://redirect.github.com/nrwl/nx/pull/36223))\n- **core:** show performance report recommendations only when actionable\n([#36344](https://redirect.github.com/nrwl/nx/pull/36344))\n- **core:** close daemon log descriptors after spawn to avoid Node 26\ncrash ([#36280](https://redirect.github.com/nrwl/nx/pull/36280))\n- **core:** prevent shell injection in nx import\n([#36348](https://redirect.github.com/nrwl/nx/pull/36348))\n- **core:** correct the 22.6.0 gitignore and analytics migration wiring\n([#36356](https://redirect.github.com/nrwl/nx/pull/36356))\n- **core:** support npm 12 and pnpm in the package provenance check\n([#36354](https://redirect.github.com/nrwl/nx/pull/36354),\n[#36338](https://redirect.github.com/nrwl/nx/issues/36338))\n- **core:** honor pnpm minimumReleaseAge config on pnpm 11\n([#36335](https://redirect.github.com/nrwl/nx/pull/36335),\n[#36330](https://redirect.github.com/nrwl/nx/issues/36330))\n- **core:** support pnpm 11 patched dependency hashes\n([#36360](https://redirect.github.com/nrwl/nx/pull/36360))\n- **core:** resolve name refs copied into pattern-matched target arrays\n([#36359](https://redirect.github.com/nrwl/nx/pull/36359))\n- **core:** resolve source-loaded plugin transitive workspace imports\n([#36296](https://redirect.github.com/nrwl/nx/pull/36296))\n- **core:** unbreak pnpm 11 installs by acknowledging build-script deps\nfrom generators\n([#36302](https://redirect.github.com/nrwl/nx/pull/36302))\n- **core:** include continuous and default-config dependencies in show\ntarget ([#36374](https://redirect.github.com/nrwl/nx/pull/36374))\n- **core:** make unit tests pass locally regardless of invoking package\nmanager\n([#35994](https://redirect.github.com/nrwl/nx/pull/35994))\n- **core:** respect --aiAgents none to skip AI agent file generation\n([#34944](https://redirect.github.com/nrwl/nx/pull/34944),\n[#34692](https://redirect.github.com/nrwl/nx/issues/34692))\n- **core:** use --config.frozen-lockfile=false for pnpm add during\nmigrate\n([#36337](https://redirect.github.com/nrwl/nx/pull/36337))\n- **core:** run selected projects with --exclude-task-dependencies\n([#35562](https://redirect.github.com/nrwl/nx/pull/35562))\n- **core:** stop passing git revisions through a shell in affected\ncommands\n([#36379](https://redirect.github.com/nrwl/nx/pull/36379))\n- **core:** collect trickling watcher bursts fully on daemon force-flush\n([#36391](https://redirect.github.com/nrwl/nx/pull/36391))\n- **core:** report tasks running in another Nx process in the inline TUI\n([#36341](https://redirect.github.com/nrwl/nx/pull/36341))\n- **core:** stop ratatui cursor queries from racing the TUI event stream\n([#36318](https://redirect.github.com/nrwl/nx/pull/36318))\n- **core:** render critical-path tasks as a nested list in the job\nsummary\n([#36394](https://redirect.github.com/nrwl/nx/pull/36394))\n- **core:** keep pnpm-workspace.yaml comments and read package.json as\njsonc ([#36411](https://redirect.github.com/nrwl/nx/pull/36411))\n- **core:** support multiple brace groups in workspace glob matching\n([#36395](https://redirect.github.com/nrwl/nx/pull/36395))\n- **core:** handle CRLF line endings in pnpm multi-document lockfiles\n([#36419](https://redirect.github.com/nrwl/nx/pull/36419),\n[#35828](https://redirect.github.com/nrwl/nx/issues/35828),\n[#35840](https://redirect.github.com/nrwl/nx/issues/35840))\n- **core:** correct glob pattern expansion for ZeroOrOne groups\n([#31857](https://redirect.github.com/nrwl/nx/pull/31857))\n- **core:** stop re-querying confirmed cache misses in task orchestrator\n([#36301](https://redirect.github.com/nrwl/nx/pull/36301),\n[#35632](https://redirect.github.com/nrwl/nx/issues/35632))\n- **core:** sample project graph perf span telemetry per session at 10%\n([#36420](https://redirect.github.com/nrwl/nx/pull/36420))\n- **core:** strip terminal query sequences when replaying task output\n([#36432](https://redirect.github.com/nrwl/nx/pull/36432))\n- **core:** preserve FORCE\\_COLOR=0 intent for forked child tasks\n([#35293](https://redirect.github.com/nrwl/nx/pull/35293))\n- **core:** handle colons in target name when resolving inputs to\ngenerate graph\n([#36429](https://redirect.github.com/nrwl/nx/pull/36429),\n[#33710](https://redirect.github.com/nrwl/nx/issues/33710))\n- **core:** merge default plugins through the source-map-aware merge\npath ([#36257](https://redirect.github.com/nrwl/nx/pull/36257))\n- **core:** keep nx migrate on the requested version when release-age\ngates interfere\n([#36444](https://redirect.github.com/nrwl/nx/pull/36444))\n- **core:** avoid bogus duplicate project name errors when generating\nnested apps\n([#36458](https://redirect.github.com/nrwl/nx/pull/36458))\n- **core:** make tui cloud icon visible on light terminal themes\n([#36495](https://redirect.github.com/nrwl/nx/pull/36495))\n- **core:** pin typescript in preset dependencies so npm cannot hoist\ntypescript 7\n([#36497](https://redirect.github.com/nrwl/nx/pull/36497))\n- **core:** bump pinned axios and brace-expansion past vulnerable\nversions\n([#36507](https://redirect.github.com/nrwl/nx/pull/36507),\n[#36474](https://redirect.github.com/nrwl/nx/issues/36474))\n- **core:** parse pnpm lockfiles that omit the packages block\n([#36512](https://redirect.github.com/nrwl/nx/pull/36512))\n- **core:** keep real dependencies when omitting peers from npm temp\ninstalls\n([#36518](https://redirect.github.com/nrwl/nx/pull/36518))\n- **core:** normalize resolved module paths\n([#36556](https://redirect.github.com/nrwl/nx/pull/36556),\n[#36549](https://redirect.github.com/nrwl/nx/issues/36549))\n- **core:** stop pruneProjectGraph from mutating the source project\ngraph ([#36517](https://redirect.github.com/nrwl/nx/pull/36517),\n[#36470](https://redirect.github.com/nrwl/nx/issues/36470))\n- **core:** make preset empty work without github.com and improve\ntemplate download errors\n([#36508](https://redirect.github.com/nrwl/nx/pull/36508))\n- **core:** drain to stdout before exiting `nx affected`\n([#36569](https://redirect.github.com/nrwl/nx/pull/36569),\n[#36568](https://redirect.github.com/nrwl/nx/issues/36568))\n- **core:** update brace-expansion to 5.0.9 for CVE-2026-14257\n([#36577](https://redirect.github.com/nrwl/nx/pull/36577))\n- **core:** restrict daemon and plugin worker socket access to the\nowning user\n([#36370](https://redirect.github.com/nrwl/nx/pull/36370))\n- **core:** drain stdout before exiting nx run-many and nx run\n([#36607](https://redirect.github.com/nrwl/nx/pull/36607),\n[#36606](https://redirect.github.com/nrwl/nx/issues/36606))\n- **core:** re-spawn nx migrate without a shell to preserve argv exactly\n([#36215](https://redirect.github.com/nrwl/nx/pull/36215))\n- **core:** resolve main worktree root without a Windows verbatim prefix\n([#36649](https://redirect.github.com/nrwl/nx/pull/36649),\n[#35637](https://redirect.github.com/nrwl/nx/issues/35637))\n- **core:** accept bun.lock lockfileVersion 2 and 3\n([#36666](https://redirect.github.com/nrwl/nx/pull/36666))\n- **core:** maintain cacheability when an executor target default\napplies\n([#36477](https://redirect.github.com/nrwl/nx/pull/36477))\n- **core:** don't leave an unkillable nx process when a terminal closes\n([#36683](https://redirect.github.com/nrwl/nx/pull/36683),\n[#36682](https://redirect.github.com/nrwl/nx/issues/36682))\n- **core:** honor the package manager's registry config in nx migrate\n([#35954](https://redirect.github.com/nrwl/nx/pull/35954),\n[#35843](https://redirect.github.com/nrwl/nx/issues/35843))\n- **core:** resolve telemetry DNS in-process to avoid a getenv segfault\n([#36673](https://redirect.github.com/nrwl/nx/pull/36673))\n- **core:** skip target group members without a target\n([#36711](https://redirect.github.com/nrwl/nx/pull/36711),\n[#36712](https://redirect.github.com/nrwl/nx/issues/36712))\n- **core:** stop resending accumulated task hash results to the daemon\nwhen hashing tasks\n([#36716](https://redirect.github.com/nrwl/nx/pull/36716))\n- **core:** apply package.json updates unblocked by later package groups\n([#36636](https://redirect.github.com/nrwl/nx/pull/36636))\n- **core:** create external nodes for out-of-workspace link dependencies\n([#36745](https://redirect.github.com/nrwl/nx/pull/36745))\n- **core:** point duplicate project names from worktrees at the fix\n([#36734](https://redirect.github.com/nrwl/nx/pull/36734))\n- **core:** exclude volatile shell and editor env vars from the daemon\n([#36642](https://redirect.github.com/nrwl/nx/pull/36642),\n[#36610](https://redirect.github.com/nrwl/nx/issues/36610))\n- **core:** stop the daemon before nx add installs a package\n([#36767](https://redirect.github.com/nrwl/nx/pull/36767))\n- **core:** do not allowlist the analytics domain when analytics are off\n([#36663](https://redirect.github.com/nrwl/nx/pull/36663),\n[#36486](https://redirect.github.com/nrwl/nx/issues/36486))\n- **core:** isolate pnpm version detection from workspace\n([#36728](https://redirect.github.com/nrwl/nx/pull/36728),\n[#36727](https://redirect.github.com/nrwl/nx/issues/36727))\n- **core:** key the main-worktree-root cache on the workspace root\n([#36768](https://redirect.github.com/nrwl/nx/pull/36768))\n- **core:** give pnpm a fresh cache dir per e2e run\n([#36802](https://redirect.github.com/nrwl/nx/pull/36802))\n- **core:** apply targetDefaults options to an inferred target that is\nnot redeclared\n([#36717](https://redirect.github.com/nrwl/nx/pull/36717),\n[#36700](https://redirect.github.com/nrwl/nx/issues/36700))\n- **core:** devkit util - detect esm config with top level await\n([#33644](https://redirect.github.com/nrwl/nx/pull/33644))\n- **core:** share worktree cache under \\~/.nx so agent sandboxes can\nreach it\n([#36514](https://redirect.github.com/nrwl/nx/pull/36514))\n- **core:** compare daemon workspace roots case-insensitively on Windows\n([#36835](https://redirect.github.com/nrwl/nx/pull/36835),\n[#36722](https://redirect.github.com/nrwl/nx/issues/36722))\n- **core:** raise the nx package vitest timeout to cover the graph\nrecompute spec\n([#36850](https://redirect.github.com/nrwl/nx/pull/36850))\n- **core:** single-inference convert-to-inferred engine with centralized\nconfig ([#36547](https://redirect.github.com/nrwl/nx/pull/36547))\n- **core:** fall back to v8 for oversized daemon responses and\nlength-prefix the wire protocol\n([#36838](https://redirect.github.com/nrwl/nx/pull/36838))\n- **core:** use scoped config form for pnpm 11+ publish\n([#36867](https://redirect.github.com/nrwl/nx/pull/36867),\n[#36860](https://redirect.github.com/nrwl/nx/issues/36860))\n- **devkit:** resolve ensurePackage against the workspace\n([#36496](https://redirect.github.com/nrwl/nx/pull/36496))\n- **devkit:** honour cascading ignore files in tree walks and generator\nformatting\n([#36575](https://redirect.github.com/nrwl/nx/pull/36575))\n- **devkit:** correct version floor validation for ranges and\nprereleases\n([#36724](https://redirect.github.com/nrwl/nx/pull/36724))\n- **devkit:** reload TS config files fresh instead of serving stale\ncached modules\n([#36656](https://redirect.github.com/nrwl/nx/pull/36656))\n- **docker:** run release pipeline docker commands without a shell\n([#36505](https://redirect.github.com/nrwl/nx/pull/36505))\n- **docker:** skip unchanged version action projects\n([#36542](https://redirect.github.com/nrwl/nx/pull/36542))\n- **dotnet:** make msbuild-analyzer run cancellable and kill it when the\nhost process exits\n([#36813](https://redirect.github.com/nrwl/nx/pull/36813))\n- **dotnet:** derive output paths from MSBuild instead of hardcoded\nassumptions\n([#36804](https://redirect.github.com/nrwl/nx/pull/36804))\n- **expo:** keep the expo dev server alive under jest\n([#36635](https://redirect.github.com/nrwl/nx/pull/36635))\n- **expo:** derive metro projectRoot and node\\_modules from the app\nbeing bundled\n([#36650](https://redirect.github.com/nrwl/nx/pull/36650),\n[#36531](https://redirect.github.com/nrwl/nx/issues/36531))\n- **gradle:** emit valid Groovy when applying the plugin to an existing\nallprojects block\n([#36697](https://redirect.github.com/nrwl/nx/pull/36697))\n- **gradle:** surface project graph timeout errors when the process\nignores the kill signal\n([#36713](https://redirect.github.com/nrwl/nx/pull/36713))\n- **gradle:** compile Kotlin in-process in the e2e fixture\n([#36803](https://redirect.github.com/nrwl/nx/pull/36803))\n- **gradle:** support builds that configure subprojects from an ancestor\nbuild file\n([#36693](https://redirect.github.com/nrwl/nx/pull/36693),\n[#36668](https://redirect.github.com/nrwl/nx/issues/36668))\n- **gradle:** retry nxProjectGraph on lock timeout and kill orphaned\ngradle builds on exit\n([#36806](https://redirect.github.com/nrwl/nx/pull/36806))\n- **js:** support private methods and static blocks in babel preset\n([#36218](https://redirect.github.com/nrwl/nx/pull/36218),\n[#36205](https://redirect.github.com/nrwl/nx/issues/36205))\n- **js:** parse pnpm/npm publish JSON containing braces in file paths\n([#36241](https://redirect.github.com/nrwl/nx/pull/36241),\n[#36236](https://redirect.github.com/nrwl/nx/issues/36236))\n- **js:** resolve the verdaccio bin through its package.json\n([#36479](https://redirect.github.com/nrwl/nx/pull/36479))\n- **js:** resolve package and extension-less tsconfig extends read from\nthe tree\n([#36271](https://redirect.github.com/nrwl/nx/pull/36271))\n- **js:** avoid duplicate node start without watch\n([#36695](https://redirect.github.com/nrwl/nx/pull/36695),\n[#36694](https://redirect.github.com/nrwl/nx/issues/36694))\n- **js:** resolve override selectors in affected detection\n([#36699](https://redirect.github.com/nrwl/nx/pull/36699),\n[#36698](https://redirect.github.com/nrwl/nx/issues/36698))\n- **js:** make pruned pnpm output installable and run its workspace\nmodules\n([#36139](https://redirect.github.com/nrwl/nx/pull/36139),\n[#36055](https://redirect.github.com/nrwl/nx/issues/36055),\n[#36066](https://redirect.github.com/nrwl/nx/issues/36066),\n[#36140](https://redirect.github.com/nrwl/nx/issues/36140),\n[#35425](https://redirect.github.com/nrwl/nx/issues/35425),\n[#18402](https://redirect.github.com/nrwl/nx/issues/18402))\n- **js:** keep the deprecated-prepend warning in the task's terminal\noutput ([#36789](https://redirect.github.com/nrwl/nx/pull/36789))\n- **js:** detect all files changed during lock file update\n([#34856](https://redirect.github.com/nrwl/nx/pull/34856))\n- **linter:** keep override parser when convert-to-flat-config uses\nFlatCompat\n([#36363](https://redirect.github.com/nrwl/nx/pull/36363))\n- **linter:** use projectService for typed linting in flat configs\n([#35727](https://redirect.github.com/nrwl/nx/pull/35727))\n- **linter:** restore the nx subpath ban in the create-\\* oxlint configs\n([#36821](https://redirect.github.com/nrwl/nx/pull/36821))\n- **linter:** declare .gitignore as an input for inferred oxlint tasks\n([#36869](https://redirect.github.com/nrwl/nx/pull/36869))\n- **linter:** flag banned external imports reached through internal\nprojects\n([#36654](https://redirect.github.com/nrwl/nx/pull/36654),\n[#36519](https://redirect.github.com/nrwl/nx/issues/36519))\n- **linter:** stop an inferred oxlint task from linting nested projects\n([#36873](https://redirect.github.com/nrwl/nx/pull/36873))\n- **maven:** stop running maven and gradle graph analysis through a\nshell ([#36626](https://redirect.github.com/nrwl/nx/pull/36626))\n- **maven:** stop writing a failing task's output three times\n([#36790](https://redirect.github.com/nrwl/nx/pull/36790))\n- **misc:** resolve CSS url() assets on Windows in postcss-cli-resources\n([#36353](https://redirect.github.com/nrwl/nx/pull/36353),\n[#36336](https://redirect.github.com/nrwl/nx/issues/36336))\n- **misc:** suppress outdated disclaimer for unsupported AI agents with\nAGENTS.md\n([#36324](https://redirect.github.com/nrwl/nx/pull/36324),\n[#36264](https://redirect.github.com/nrwl/nx/issues/36264))\n- **misc:** bump ci-workflow generator to node 24 and current action\nmajors ([#36364](https://redirect.github.com/nrwl/nx/pull/36364))\n- **misc:** preserve package alias keys in generated package.json\n([#35207](https://redirect.github.com/nrwl/nx/pull/35207))\n- **misc:** prevent crash when opening browser in Podman+WSL container\n([#34639](https://redirect.github.com/nrwl/nx/pull/34639))\n- **misc:** move plugin internal imports to devkit/internal\n([#36430](https://redirect.github.com/nrwl/nx/pull/36430))\n- **misc:** use workspaceRoot in workspaceModule path\n([#35142](https://redirect.github.com/nrwl/nx/pull/35142))\n- **misc:** bump css-loader so npm can resolve rspack core 2\n([#36643](https://redirect.github.com/nrwl/nx/pull/36643))\n- **misc:** make generated code lint-clean under oxlint defaults\n([#36749](https://redirect.github.com/nrwl/nx/pull/36749))\n- **misc:** de-flake the nx watch e2e suite\n([#36758](https://redirect.github.com/nrwl/nx/pull/36758))\n- **misc:** ignore bundled snapshots when pruning npm lockfiles\n([#36763](https://redirect.github.com/nrwl/nx/pull/36763),\n[#36672](https://redirect.github.com/nrwl/nx/issues/36672))\n- **module-federation:** do not cache static remote assets in the\ndev-server plugin\n([#36279](https://redirect.github.com/nrwl/nx/pull/36279),\n[#36278](https://redirect.github.com/nrwl/nx/issues/36278))\n- **module-federation:** strip version suffix from npm dependency names\nfor bun compatibility\n([#34960](https://redirect.github.com/nrwl/nx/pull/34960))\n- **nextjs:** stop installing unused Next.js ESLint packages from the\nlibrary generator\n([#36779](https://redirect.github.com/nrwl/nx/pull/36779))\n- **nextjs:** describe the library generator and export its server entry\n([#36776](https://redirect.github.com/nrwl/nx/pull/36776))\n- **nextjs:** stop installing unused babel-jest for generated apps\n([#36765](https://redirect.github.com/nrwl/nx/pull/36765))\n- **nextjs:** respect the src option when setting sourceRoot in the\napplication generator\n([#36833](https://redirect.github.com/nrwl/nx/pull/36833),\n[#35181](https://redirect.github.com/nrwl/nx/issues/35181))\n- **nextjs:** expose compiler and inSourceTests options in the library\ngenerator\n([#36780](https://redirect.github.com/nrwl/nx/pull/36780))\n- **nextjs:** make built next.config load without\n[@nx/next](https://redirect.github.com/nx/next) installed\n([#36655](https://redirect.github.com/nrwl/nx/pull/36655),\n[#36511](https://redirect.github.com/nrwl/nx/issues/36511))\n- **nx-dev:** keep the kb index working for uncommitted articles\n([#36588](https://redirect.github.com/nrwl/nx/pull/36588))\n- **nx-dev:** update docs pricing link\n([#36625](https://redirect.github.com/nrwl/nx/pull/36625))\n- **nx-dev:** let six legacy backlink paths reach their redirects\n([#36819](https://redirect.github.com/nrwl/nx/pull/36819))\n- **nx-dev:** show repository path in light mode\n([#36818](https://redirect.github.com/nrwl/nx/pull/36818))\n- **react:** make module federation packages optional peer dependencies\n([#36492](https://redirect.github.com/nrwl/nx/pull/36492))\n- **react:** write the dev-server port onto the generated serve target\n([#36589](https://redirect.github.com/nrwl/nx/pull/36589))\n- **react-native:** include migration docs in the built package\n([#36378](https://redirect.github.com/nrwl/nx/pull/36378))\n- **release:** only extract body issue references linked via closing\nkeywords\n([#36326](https://redirect.github.com/nrwl/nx/pull/36326),\n[#123](https://redirect.github.com/nrwl/nx/issues/123))\n- **release:** ignore deleted projects in historical affectedness\n([#36538](https://redirect.github.com/nrwl/nx/pull/36538))\n- **release:** support custom conventional commit types\n([#36539](https://redirect.github.com/nrwl/nx/pull/36539))\n- **release:** skip changelog resolution for unversioned projects\n([#36544](https://redirect.github.com/nrwl/nx/pull/36544))\n- **release:** preserve package.json formatting\n([#36540](https://redirect.github.com/nrwl/nx/pull/36540))\n- **release:** Don't attribute commits with no author email to `@find`\n([#36526](https://redirect.github.com/nrwl/nx/pull/36526))\n- **release:** resolve out-of-set local dependency versions\n([#36334](https://redirect.github.com/nrwl/nx/pull/36334))\n- **repo:** bump decompress to safe version\n([#36333](https://redirect.github.com/nrwl/nx/pull/36333))\n- **repo:** drop stale e2e dependsOn overrides that omit the local\nregistry\n([#36482](https://redirect.github.com/nrwl/nx/pull/36482))\n- **repo:** serialize cypress installs and skip the binary when unused\n([#36493](https://redirect.github.com/nrwl/nx/pull/36493))\n- **repo:** tell review-pr agents to compare base and HEAD with git\n([#36644](https://redirect.github.com/nrwl/nx/pull/36644))\n- **repo:** restore missing linux native binding entries to pnpm-lock\n([#36785](https://redirect.github.com/nrwl/nx/pull/36785))\n- **repo:** stop CI cache churn from evicting the cargo caches\n([#36801](https://redirect.github.com/nrwl/nx/pull/36801))\n- **repo:** serve nx executor schema reads from source in unit tests\n([#36809](https://redirect.github.com/nrwl/nx/pull/36809))\n- **repo:** stop pnpm from installing inside nx script tasks\n([#36839](https://redirect.github.com/nrwl/nx/pull/36839))\n- **repo:** stop parallel sandbox reviews from clobbering each other's\nregistry\n([#36840](https://redirect.github.com/nrwl/nx/pull/36840))\n- **rspack:** lazy-load\n[@rspack/core](https://redirect.github.com/rspack/core) in\ncreate-compiler to avoid eager ESM resolution\n([#36476](https://redirect.github.com/nrwl/nx/pull/36476))\n- **rspack:** preload\n[@rspack/core](https://redirect.github.com/rspack/core) before\nloading rspack config files\n([#36687](https://redirect.github.com/nrwl/nx/pull/36687),\n[#36685](https://redirect.github.com/nrwl/nx/issues/36685))\n- **storybook:** update configuration generator nx.json\n([#34880](https://redirect.github.com/nrwl/nx/pull/34880),\n[#34879](https://redirect.github.com/nrwl/nx/issues/34879))\n- **testing:** add\n[@swc/core](https://redirect.github.com/swc/core) when\nconfiguring jest with the swc compiler\n([#36409](https://redirect.github.com/nrwl/nx/pull/36409))\n- **testing:** reserve dev-server ports in the react-router e2e suite\n([#36585](https://redirect.github.com/nrwl/nx/pull/36585))\n- **testing:** install typescript in npm e2e workspaces to keep tsquery\noff TypeScript 7\n([#36478](https://redirect.github.com/nrwl/nx/pull/36478))\n- **testing:** unblock Cypress component testing on Angular 22.1\n([#36637](https://redirect.github.com/nrwl/nx/pull/36637))\n- **testing:** prevent playwright from launching a redundant web server\n([#36402](https://redirect.github.com/nrwl/nx/pull/36402),\n[#34698](https://redirect.github.com/nrwl/nx/issues/34698))\n- **vite:** prevent watch false leaking into dev server config\n([#36080](https://redirect.github.com/nrwl/nx/pull/36080),\n[#36078](https://redirect.github.com/nrwl/nx/issues/36078))\n- **vitest:** honor watch config and keep --ui open in the test executor\n([#36237](https://redirect.github.com/nrwl/nx/pull/36237),\n[#30263](https://redirect.github.com/nrwl/nx/issues/30263))\n- **vitest:** generate root vitest.config.ts instead of deprecated\nvitest.workspace\n([#36316](https://redirect.github.com/nrwl/nx/pull/36316),\n[#36311](https://redirect.github.com/nrwl/nx/issues/36311))\n- **vitest:** prevent out-of-memory crash during atomized test graph\ncreation\n([#36339](https://redirect.github.com/nrwl/nx/pull/36339),\n[#36315](https://redirect.github.com/nrwl/nx/issues/36315))\n- **vitest:** use esm config files and import.meta.dirname\n([#36605](https://redirect.github.com/nrwl/nx/pull/36605))\n- **vitest:** generate the requested e2e target in inferred workspaces\nand de-flake the generated plugin e2e\n([#36623](https://redirect.github.com/nrwl/nx/pull/36623))\n- **vitest:** do not set projectType when inferring targets\n([#36831](https://redirect.github.com/nrwl/nx/pull/36831),\n[#33989](https://redirect.github.com/nrwl/nx/issues/33989))\n- **vitest:** write each atomized target's coverage to its own directory\n([#36658](https://redirect.github.com/nrwl/nx/pull/36658),\n[#36503](https://redirect.github.com/nrwl/nx/issues/36503))\n- **webpack:** disable extractComments on the swc terser minimizer\n([#36238](https://redirect.github.com/nrwl/nx/pull/36238),\n[#36233](https://redirect.github.com/nrwl/nx/issues/36233))\n- **webpack:** bundle non-buildable library subpaths with fallback-array\nexports\n([#36313](https://redirect.github.com/nrwl/nx/pull/36313),\n[#36309](https://redirect.github.com/nrwl/nx/issues/36309))\n- **webpack:** propagate watch option from executor to webpack config\n([#34927](https://redirect.github.com/nrwl/nx/pull/34927),\n[#22945](https://redirect.github.com/nrwl/nx/issues/22945))\n- **webpack:** set optimization.minimize to its normalized object form\n([#36815](https://redirect.github.com/nrwl/nx/pull/36815))\n- **webpack:** add development configuration to inferred build target\n([#36832](https://redirect.github.com/nrwl/nx/pull/36832),\n[#33004](https://redirect.github.com/nrwl/nx/issues/33004))\n\n##### ❤️ Thank You\n\n- Aaron Thomas [@ATKasem](https://redirect.github.com/ATKasem)\n- AgentEnder\n[@AgentEnder](https://redirect.github.com/AgentEnder)\n- AI-JamesHenry\n[@AI-JamesHenry](https://redirect.github.com/AI-JamesHenry)\n- Aleksandr Lihih [@sanshan](https://redirect.github.com/sanshan)\n- ATKasem [@ATKasem](https://redirect.github.com/ATKasem)\n- Austin Turner [@paustint](https://redirect.github.com/paustint)\n- Benjamin Brienen\n- BenjaminBrienen-CanonPP\n- Caleb Ukle\n- Charlie Croom\n- Christopher Buss\n[@christopher-buss](https://redirect.github.com/christopher-buss)\n- Cogi [@dbwodlf3](https://redirect.github.com/dbwodlf3)\n- Craigory Coppola\n[@AgentEnder](https://redirect.github.com/AgentEnder)\n- David Johnson\n[@djohnson-aperture](https://redirect.github.com/djohnson-aperture)\n- driessamyn-sparta\n- duckot13\n- Dylan Pulver\n[@dylanpulver](https://redirect.github.com/dylanpulver)\n- Federico Bartoli\n- Fnine59\n- FrozenPandaz\n[@FrozenPandaz](https://redirect.github.com/FrozenPandaz)\n- Harsh Mathur\n[@harshmathurx](https://redirect.github.com/harshmathurx)\n- ilan weissberg\n[@ilanwei1](https://redirect.github.com/ilanwei1)\n- Jack Hsu [@jaysoo](https://redirect.github.com/jaysoo)\n- Jack Stevenson\n- Jaeil Yu\n- Jamie Trip\n- Jarred Sumner\n[@Jarred-Sumner](https://redirect.github.com/Jarred-Sumner)\n- Jason Jean\n[@FrozenPandaz](https://redirect.github.com/FrozenPandaz)\n- Jelle Bruisten\n[@JelleBruisten](https://redirect.github.com/JelleBruisten)\n- Jeong Seungdeok\n[@seungdeok](https://redirect.github.com/seungdeok)\n- Juri [@juristr](https://redirect.github.com/juristr)\n- Juri Strumpflohner\n[@juristr](https://redirect.github.com/juristr)\n- Kevin [@kevindcode](https://redirect.github.com/kevindcode)\n- Leosvel Pérez Espinosa\n[@leosvelperez](https://redirect.github.com/leosvelperez)\n- leosvelperez\n[@leosvelperez](https://redirect.github.com/leosvelperez)\n- Louie Weng [@lourw](https://redirect.github.com/lourw)\n- Louis DeScioli\n- Martijn van der Meij\n[@Squixx](https://redirect.github.com/Squixx)\n- meeroslav [@meeroslav](https://redirect.github.com/meeroslav)\n- Miroslav Jonas\n[@meeroslav](https://redirect.github.com/meeroslav)\n- Miroslav Jonaš\n[@meeroslav](https://redirect.github.com/meeroslav)\n- Nicole Oliver\n- Optischa [@Optischa](https://redirect.github.com/Optischa)\n- Prafful S\n[@prafful1234](https://redirect.github.com/prafful1234)\n- Richard Roozenboom\n[@Roozenboom](https://redirect.github.com/Roozenboom)\n- Robby Rabbitman\n[@RobbyRabbitman](https://redirect.github.com/RobbyRabbitman)\n- Thees Hengstermann\n[@theescodes](https://redirect.github.com/theescodes)\n- Tyler Kindy\n- Victor Savkin [@vsavkin](https://redirect.github.com/vsavkin)\n- wangxp\n\n

\n\n---\n\n### Configuration\n\n📅 **Schedule**: (in timezone Europe/Paris)\n\n- Branch creation\n - At any time (no schedule defined)\n- Automerge\n - At any time (no schedule defined)\n\n🚦 **Automerge**: Enabled.\n\n♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the\nrebase/retry checkbox.\n\n🔕 **Ignore**: Close this PR and you won't be reminded about these\nupdates again.\n\n---\n\n- [ ] If you want to rebase/retry this PR, check\nthis box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/).\nView the [repository job\nlog](https://developer.mend.io/github/AmadeusITGroup/otter).\n\n","headSha","dd56697b665ce9183d92e80bb73ce3e81e597330","baseSha","parentShas","commitLink","https://github.com/AmadeusITGroup/otter/commit/dd56697b665ce9183d92e80bb73ce3e81e597330","author","Salomé Do","authorEmail","117105135+sdo-1A@users.noreply.github.com","authorUrl","https://github.com/sdo-1A","authorAvatarUrl","https://github.com/sdo-1A.png","repositoryUrl","https://github.com/AmadeusITGroup/otter","platformName","GITHUB_ACTIONS","runnerProvider","GITHUB",{"_41":42,"_43":44,"_154":424,"_45":46,"_67":40,"_425":426,"_427":-5,"_428":-5,"_429":430,"_431":432,"_433":434,"_435":40,"_436":437,"_438":437,"_180":439,"_440":441,"_442":443,"_444":40,"_445":40,"_446":447,"_448":449,"_450":-7,"_451":-7},"isAdmin","membership",{"_41":47,"_317":42,"_318":224,"_48":49,"_154":319,"_156":320,"_227":321,"_322":323,"_50":324,"_229":230,"_325":14,"_326":-5,"_327":328,"_329":330,"_331":332,"_333":334,"_335":-5,"_336":40,"_337":-5,"_83":-5,"_84":-5,"_52":338,"_54":339,"_340":-5,"_341":-5,"_342":-5,"_343":-5,"_344":-5},"runGroup",{"_222":223,"_112":224,"_154":225,"_156":226,"_227":228,"_229":230,"_231":-5,"_232":40,"_233":-5,"_234":-5,"_235":-5,"_236":237,"_238":40,"_239":240,"_241":14,"_242":243,"_244":245,"_246":247,"_248":-5,"_249":250,"_251":252,"_253":254,"_255":-5,"_256":14,"_257":258,"_259":260},"cancellationTriggeringUserName","organization",{"_45":153,"_154":155,"_156":157,"_151":40,"_158":159,"_67":40,"_160":161,"_162":163,"_164":14,"_165":166,"_167":40,"_168":169,"_170":44,"_41":44,"_171":172,"_173":-7,"_174":14,"_175":14,"_176":14,"_177":14,"_178":14,"_179":-5,"_180":-5,"_181":-5,"_182":14,"_183":-5,"_184":-7},"shouldCompleteAccessControlSetup","isWorkspaceClaimed","isCurrentUserOrganizationMember","mostRecentCipeForBranch","supersededOnBranch","attempts",[],"guideMilestoneStatus","isResourceUsageAvailable","isCipeExecutionTimelineEnabled","cappedCiPipelineExecutionCount",10,"currentUsagePercentage",71,"contributorsCount","nxCloudAppUrl","https://cloud.nx.app","isPrivateCloud","isSandboxingToggleEnabled","isUltracacheUiEnabled","isSandboxingPreviewEligible","isResourceUsagePreviewEligible","organizationActor",{"_150":151,"_152":14},"settingsDestinations",[],"managedCiNavigation","pipelinePreview","managedContext",{"_147":148,"_149":-5},"loadedAt",1792071813048,"managed","access","public","isInternalAdmin","AmadeusITGroup","createdAt",["D",1676054118998],"updatedAt",["D",1681913345534],"allowedEmailDomains",[221],"plan","OSS","planActivationDate",["D",1686144031537],"isEligibleForProTrial","planLimits",{"_205":206,"_207":208,"_209":210,"_211":212,"_213":212,"_214":215,"_216":217,"_218":217,"_219":220},"isAiEnabled","planTransitions",[],"id","memberships",[185,186,187,188,189,190,191,192],"privateCloudInstallationId","hasBillingInformation","hasLicense","isUnclaimed","isOnTrial","isHighPriority","vcsProfileLink","vcsConfiguration","lastMembersSyncedAt","isAiBringYourOwnKey","enterpriseTrial","disabledReasonMessage",{"_193":204,"_195":196},{"_193":203,"_195":198},{"_193":202,"_195":196},{"_193":201,"_195":198},{"_193":200,"_195":198},{"_193":199,"_195":198},{"_193":197,"_195":198},{"_193":194,"_195":196},"userId","63eb8f0c1147ed000ed89147","role","admin","656f2a38d8c7f6f8d5bfdab5","member","64a51a42097e04000dcff5a3","63f5d0d76abadd000e2a636a","63ee2a741147ed000ed892b0","63ecec5bd91fa9000e2ebaa1","63ecec62d91fa9000e2ebaa3","63e68de49bae37000e41c9c6","baseIncludedCredits",300000,"additionalCredits",{},"discountedCreditsMaximum",0,"contributorLimit",70,"concurrentConnectionLimit","runsLimit",1000000,"adminUserLimit",9999,"workspaceLimit","modifiers",[],"amadeus.com","ciExecutionEnv","","38229823100-1",["D",1791797399671],["D",1791802596774],"completedAt",["D",1791802596774],"status","SUCCEEDED","agentCount","stopAgentsOnFailure","criticalErrorMessage","commandCount","stopAgentsAfter","agents",[],"closed","completedBy","HEARTBEAT","requireExplicitCompletion","linkedWorkflows",[],"activeAgents",[],"assignmentRules",[],"schedulingConstraintsInput","agentsMetadata",{},"agentInstances",{},"stopAgentsAfterConditions",{},"continuousAssignment","resourcePackingEnabled","packingDecisionReason","default","config",{"_261":262,"_222":-5},"sources",{"_263":264,"_265":266,"_267":268,"_269":270},"lifecycle",{"_306":307,"_308":309,"_310":311},"ai",{"_298":299,"_300":301},"dte",{"_278":279,"_280":281,"_246":282,"_283":284},"nxAgents",{"_271":272},"withEnvVars",[273],{"_274":275,"_276":277,"_222":-5},"kind","LEGACY","value",[],"enabledByDefault",[297],"distributeOn",[],[292],"schedulingConstraints",[285],{"_274":286,"_276":287,"_222":-5},"DEFAULT",{"_288":289,"_290":291},"_t","io.nrwl.models.SchedulingConstraintsInput.Inline","constraints",[],{"_274":286,"_276":293,"_222":-5},{"_288":294,"_295":296},"io.nrwl.models.AssignmentRulesInput.Inline","rules",[],{"_274":286,"_276":40,"_222":-5},"fixTasksPatterns",[304],"autoApplyPatterns",[302],{"_274":286,"_276":303,"_222":-5},[],{"_274":286,"_276":305,"_222":-5},[],"failAfter",[315],"heartbeat",[314],"stopAfter",[312],{"_274":275,"_276":313,"_222":-5},[],{"_274":275,"_276":40,"_222":-5},{"_274":275,"_276":316,"_222":-5},1,"workspaceId","ciExecutionId",["D",1791797399671],["D",1791802597057],["D",1791802596774],"runGroups",[421],{"_48":49,"_85":49,"_86":87,"_88":89,"_90":-5,"_91":-5,"_92":93,"_94":95,"_96":97,"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_24":-5,"_25":-5},"cancellationRequested","affectedProjectRatio","touchedProjects",[],"affectedProjects",[352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,20,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420],"criticalWorkflowErrors",[],"projectGraphSha","a261da625698ef3b657b383597017f4851381c7da15e6e4e9be12e0525ccde95","fileMapSha","cacheEnabled","hashScope",{"_62":346,"_64":347,"_66":14},{"_56":57,"_58":59,"_60":345},"pipelineHeadSha","pipelineParentShas","ioSnapshotCommitGraph","managedCi","cancellation",["D",1791797873836],{"_83":-5,"_84":-5},{"_67":40,"_68":40,"_69":40,"_70":14,"_71":40,"_72":348,"_74":-5,"_75":-5,"_76":349,"_78":350,"_80":351,"_82":-5},[],[],[],[],"ama-sdk-openapi-codegen-typescript","github-actions-yarn-errors-reporter","ama-style-dictionary","ama-stylelint-plugin","ama-figma-extractor","training-tools","ama-openapi-redocly-plugin","training-sdk","training-showcase-sdk","ama-sdk-swagger-builder","ama-sdk-client-angular","github-actions-get-npm-tag","github-actions-new-version","ama-figma-sdk","ama-sdk-client-beacon","artifactory-tools","ama-sdk-client-fetch","dynamic-content","ama-openapi-create","ama-sdk-schematics","ama-styling-devkit","github-actions-release","workspace-helpers","configuration","eslint-config","eslint-plugin","ama-mfe-messages","ama-mfe-ng-utils","ama-openapi-core","apis-manager","github-actions-audit","localization","rules-engine","test-helpers","ama-mcp-angular","ama-openapi-cli","application","azure-tools","github-cascading-app","new-version","third-party","ama-mcp-github","ama-sdk-create","build-helpers","components","extractors","schematics","store-sync","ama-mcp-otter","analytics","telemetry","transloco","ama-mcp-core","ama-sdk-core","o3r-palette-generator","pipeline","ama-styling-mcp","routing","testing","vscode-extension","chrome-devtools","create","logger","mobile","forms","core","ama-sdk-mcp","mcp","showcase",{"_222":223,"_112":224,"_154":225,"_156":226,"_227":228,"_229":230,"_231":-5,"_232":40,"_233":-5,"_234":-5,"_235":-5,"_236":237,"_238":40,"_239":240,"_241":14,"_242":422,"_244":245,"_246":247,"_248":-5,"_249":250,"_251":423,"_253":254,"_255":-5,"_256":14,"_257":258,"_259":260},[],{},["D",1676055838344],"type","PRIMARY","publicCloudCounterpartId","privateCloudCounterpartId","installationSource","user","remoteSourceIntegrationType","GITHUB_EVENTLESS","featureMarkers",{"_467":40,"_468":14,"_469":40},"manualSetAccessLevel","idAccessLevel","READ_ONLY","patAccessLevel",{"_460":107,"_461":462,"_463":464,"_465":466},"flakyTaskConfiguration",{"_456":457,"_458":459},"aiTaskFixingConfiguration",{"_67":40,"_68":40,"_69":40,"_70":14,"_71":40,"_72":452,"_75":-5,"_76":453,"_78":454,"_80":455},"enableWorkspaceDataCaching","showVcsStatusChecks","defaultBranch","main","visibility","ALLOW_UNAUTHENTICATED","sandboxingConfiguration","launchTemplate",[],[],[],[],"threshold","NORMAL","samplePeriodDays",28,"provider","repositoryFullName","AmadeusITGroup/otter","repositoryId","589619867","repositoryVisibility","PUBLIC","isRemoteCachingActive","isDistributedTaskExecutionActive","isVCSIntegrationActive","currentUser","currentHostname","cloud.nx.app","incident",["P",474],"notifications",["P",476],"isSingleTenant","isPATExpiryAfterLoginEnabled","isOrganizationAccessEnabled","isExecutiveReportDisabled","loginas","repositoryAccessProvidersToOffer",[],"redirectTo","/cipes/6acca897d10bc06543fe57ff/self-healing?runGroup=38229823100-1","deferredUserOrganizations",["P",487],"sidebarCollapsed","toast","currentUserId","currentUserEmail","signedInUser","isImpersonating","isBotRequest","ENV",{"_560":40,"_134":14,"_561":40,"_562":40,"_563":40,"_564":565,"_566":567,"_568":14,"_569":570,"_571":572,"_500":573},"posthogBootstrap",{"_530":531,"_532":533},"ultracacheUiEnabled","pylon",{"_522":523,"_524":525,"_45":526,"_527":-7,"_528":529},"requestInfo",{"_504":505,"_506":133,"_507":508,"_509":510,"_511":512},"hints",{"_515":518,"_520":521},"origin","path","/cipes/6acca897d10bc06543fe57ff/self-healing","url","https://cloud.nx.app/cipes/6acca897d10bc06543fe57ff/self-healing","userPreferences",{"_513":514},"theme",{"_45":258,"_515":516,"_517":518,"_519":518},"variant","system","resolvedVariant","light","clientColorScheme","timeZone","UTC","appId","a1074fe2-8172-4ebd-9889-879f8308a0a2","email","30f81ddb-c4ab-4b0e-8c9a-9832f6d8328a@nxcloud.invalid","Anonymous Nx Cloud Visitor","avatarUrl","emailHash","302e1fd680bbb26c5e378617fd31a574234948328f218e2a00ae69122dfc80de","distinctID","30f81ddb-c4ab-4b0e-8c9a-9832f6d8328a","featureFlags",{"_534":40,"_535":536,"_537":14,"_538":40,"_539":540,"_541":542,"_543":40,"_544":40,"_545":40,"_546":14,"_547":40,"_548":40,"_549":40,"_550":14,"_551":40,"_552":40,"_553":14,"_554":67,"_555":40,"_556":40,"_557":40,"_558":40,"_559":67},"config_yaml","one_page_connect_workspace_manual","test","run_details_polling","resource_usage_toggle","welcome_view_cnw_experiment","variant-2","cnw_empty_workspace_position","treatment","survey-targeting-8e88152ae4-custom","workspace_badges","show_setup_self_healing_ci_alert","cipe_execution_timeline","new_access_control","automated_add_ons","teams_minimum_spend","feature_activation_guide","pylon_chat","non_dte_resource_usage","new_layout","one_page_connect_workspace_github","workspace_sandboxing_toggle","resource_addon_default","demo-mode","workspace_rewind","one_page_connect_workspace_gitlab","isProduction","isAnalyticsEnabled","isPosthogEnabled","isPylonEnabled","privateCloud",{"_592":583,"_132":133},"auth0",{"_586":587,"_588":589,"_590":591},"e2eTestMode","rollbar",{"_578":579,"_580":581,"_67":40,"_582":583,"_584":40,"_585":40},"posthog",{"_574":575,"_576":577},{"_522":523},"apiKey","phc_eTmACxF0EKeNRjAZbfpdszbHYumyKhWqsIpMU4Wi53c","apiHost","https://pha-prx.ops.cloud.nx.app","accessToken","d0e4070ed1d54ed29429808f497ffbab3e77f1c74c2a9427fa5c5e418eea62ca96294bc716a7e8210acf93f0d37b6d29","environment","production","codeVersion","2610.14.0002","captureUncaught","captureUnhandledRejections","domain","auth.nx.app","clientId","Ron6k221B4IaH0QK9hmHuCneTovLLPpX","audience","https://api.nrwl.io/","containerVersionTimestamp"]

Merge queue run