Nx 22.7.8

22.7.8
Fixed 13
  • Dispose stylesheet bundler in angular-rspack so one-shot builds exit
  • Use workspace package manager when fetching migrations via install
  • Omit peer dependencies when installing packages to a temp dir
  • Allow nx build scripts in generated pnpm-workspace.yaml
  • Acknowledge @swc/core build script in generated pnpm-workspace.yaml
  • Keep real dependencies when omitting peers from npm temp installs
Security 4
  • Prevent shell injection in nx import
  • Stop passing git revisions through a shell in affected commands
  • Bump pinned axios and brace-expansion past vulnerable versions
  • Run release pipeline docker commands without a shell
22.7.8 (2026-07-30)
🩹 Fixes
  • angular-rspack: dispose stylesheet bundler so one-shot builds exit (#35869)
  • core: use workspace package manager when fetching migrations via install (#35866)
  • core: omit peer dependencies when installing packages to a temp dir (#36295)
  • core: prevent shell injection in nx import (#36348)
  • core: stop passing git revisions through a shell in affected commands (#36379)
  • core: allow nx build scripts in generated pnpm-workspace.yaml (#35564)
  • core: acknowledge @swc/core build script in generated pnpm-workspace.yaml (#35608)
  • core: keep real dependencies when omitting peers from npm temp installs (#36518, #36295)
  • core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)
  • detox: resolve jest versions locally instead of importing @nx/jest internals (3ce3f6ab6e)
  • docker: run release pipeline docker commands without a shell (#36505)
  • js: exclude typescript 7 from supported versions on 22.7.x (dc804964e9)
  • js: resolve the verdaccio bin through its package.json (#36479)
  • misc: use default import for chalk in @nx/workspace output.ts (#35523, #35521, #34111, #21201, #26667)
  • repo: use default inputs instead of the '...' token in nx-dev on 22.7.x (#35530)
  • repo: trust wix/brew tap so macOS detox CI can install applesimutils (#36146)
  • testing: seed typescript before plugins in e2e workspaces to avoid TS7 stub (7f5ffbfcbc)
❤️ Thank You
  • Craigory Coppola @AgentEnder
  • FrozenPandaz @FrozenPandaz
  • Jack Hsu @jaysoo
  • Jason Jean @FrozenPandaz
  • Jonathan Garvey @jdgarvey
  • Miroslav Jonaš @meeroslav
View original

Upgraded? How did it go?

Discussion