dependabot[bot] opened a new pull request, #42651: URL: https://github.com/apache/superset/pull/42651
Bumps [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) from 22.6.1 to 22.7.8. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nrwl/nx/releases";>nx's releases</a>.</em></p> <blockquote> <h2>22.7.8 (2026-07-30)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>angular-rspack:</strong> dispose stylesheet bundler so one-shot builds exit (<a href="https://redirect.github.com/nrwl/nx/pull/35869";>#35869</a>)</li> <li><strong>core:</strong> use workspace package manager when fetching migrations via install (<a href="https://redirect.github.com/nrwl/nx/pull/35866";>#35866</a>)</li> <li><strong>core:</strong> omit peer dependencies when installing packages to a temp dir (<a href="https://redirect.github.com/nrwl/nx/pull/36295";>#36295</a>)</li> <li><strong>core:</strong> prevent shell injection in nx import (<a href="https://redirect.github.com/nrwl/nx/pull/36348";>#36348</a>)</li> <li><strong>core:</strong> stop passing git revisions through a shell in affected commands (<a href="https://redirect.github.com/nrwl/nx/pull/36379";>#36379</a>)</li> <li><strong>core:</strong> allow nx build scripts in generated pnpm-workspace.yaml (<a href="https://redirect.github.com/nrwl/nx/pull/35564";>#35564</a>)</li> <li><strong>core:</strong> acknowledge <code>@​swc/core</code> build script in generated pnpm-workspace.yaml (<a href="https://redirect.github.com/nrwl/nx/issues/35608";>#35608</a>)</li> <li><strong>core:</strong> keep real dependencies when omitting peers from npm temp installs (<a href="https://redirect.github.com/nrwl/nx/pull/36518";>#36518</a>, <a href="https://redirect.github.com/nrwl/nx/issues/36295";>#36295</a>)</li> <li><strong>core:</strong> bump pinned axios and brace-expansion past vulnerable versions (<a href="https://redirect.github.com/nrwl/nx/pull/36507";>#36507</a>, <a href="https://redirect.github.com/nrwl/nx/issues/36474";>#36474</a>)</li> <li><strong>detox:</strong> resolve jest versions locally instead of importing <code>@​nx/jest</code> internals (<a href="https://github.com/nrwl/nx/commit/3ce3f6ab6e";>3ce3f6ab6e</a>)</li> <li><strong>docker:</strong> run release pipeline docker commands without a shell (<a href="https://redirect.github.com/nrwl/nx/pull/36505";>#36505</a>)</li> <li><strong>js:</strong> exclude typescript 7 from supported versions on 22.7.x (<a href="https://github.com/nrwl/nx/commit/dc804964e9";>dc804964e9</a>)</li> <li><strong>js:</strong> resolve the verdaccio bin through its package.json (<a href="https://redirect.github.com/nrwl/nx/pull/36479";>#36479</a>)</li> <li><strong>misc:</strong> use default import for chalk in <code>@​nx/workspace</code> output.ts (<a href="https://redirect.github.com/nrwl/nx/pull/35523";>#35523</a>, <a href="https://redirect.github.com/nrwl/nx/issues/35521";>#35521</a>, <a href="https://redirect.github.com/nrwl/nx/issues/34111";>#34111</a>, <a href="https://redirect.github.com/nrwl/nx/issues/21201";>#21201</a>, <a href="https://redirect.github.com/nrwl/nx/issues/26667";>#26667</a>)</li> <li><strong>repo:</strong> use default inputs instead of the '...' token in nx-dev on 22.7.x (<a href="https://redirect.github.com/nrwl/nx/issues/35530";>#35530</a>)</li> <li><strong>repo:</strong> trust wix/brew tap so macOS detox CI can install applesimutils (<a href="https://redirect.github.com/nrwl/nx/pull/36146";>#36146</a>)</li> <li><strong>testing:</strong> seed typescript before plugins in e2e workspaces to avoid TS7 stub (<a href="https://github.com/nrwl/nx/commit/7f5ffbfcbc";>7f5ffbfcbc</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Craigory Coppola <a href="https://github.com/AgentEnder";><code>@​AgentEnder</code></a></li> <li>FrozenPandaz <a href="https://github.com/FrozenPandaz";><code>@​FrozenPandaz</code></a></li> <li>Jack Hsu <a href="https://github.com/jaysoo";><code>@​jaysoo</code></a></li> <li>Jason Jean <a href="https://github.com/FrozenPandaz";><code>@​FrozenPandaz</code></a></li> <li>Jonathan Garvey <a href="https://github.com/jdgarvey";><code>@​jdgarvey</code></a></li> <li>Miroslav Jonaš <a href="https://github.com/meeroslav";><code>@​meeroslav</code></a></li> </ul> <h2>22.7.7 (2026-07-10)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>core:</strong> prevent path traversal / zip-slip in self-hosted remote cache (<a href="https://redirect.github.com/nrwl/nx/pull/36116";>#36116</a>)</li> <li><strong>core:</strong> warn when the self-hosted remote cache disables TLS verification (NXC-4593) (<a href="https://redirect.github.com/nrwl/nx/pull/36132";>#36132</a>, <a href="https://redirect.github.com/nrwl/nx/issues/36116";>#36116</a>)</li> <li><strong>dotnet:</strong> declare obj as a publish output to fix sandbox violation (<a href="https://redirect.github.com/nrwl/nx/issues/35858";>#35858</a>)</li> <li><strong>dotnet:</strong> declare directory build props input for analyzer dotnet tasks (<a href="https://github.com/nrwl/nx/commit/df7540195a";>df7540195a</a>)</li> <li><strong>dotnet:</strong> declare directory build props on the separate release build target (<a href="https://github.com/nrwl/nx/commit/6545ee2222";>6545ee2222</a>)</li> <li><strong>dotnet:</strong> declare directory build props on the analyzer tests dotnet targets (<a href="https://github.com/nrwl/nx/commit/e72ee0dd79";>e72ee0dd79</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>FrozenPandaz <a href="https://github.com/FrozenPandaz";><code>@​FrozenPandaz</code></a></li> <li>Jason Jean <a href="https://github.com/FrozenPandaz";><code>@​FrozenPandaz</code></a></li> </ul> <h2>22.7.6 (2026-06-23)</h2> <h3>🩹 Fixes</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nrwl/nx/commit/f7afd77de568bc5f1edbd94e2c6b0707cdf52d68";><code>f7afd77</code></a> fix(core): bump pinned axios and brace-expansion past vulnerable versions (<a href="https://github.com/nrwl/nx/tree/HEAD/packages/nx/issues/3";>#3</a>...</li> <li><a href="https://github.com/nrwl/nx/commit/983413b1115d0caac0007152fb146d1a6e746591";><code>983413b</code></a> fix(core): keep real dependencies when omitting peers from npm temp installs ...</li> <li><a href="https://github.com/nrwl/nx/commit/4159295a037fdbd8e7f44a33a19d85ab3792415b";><code>4159295</code></a> fix(core): stop passing git revisions through a shell in affected commands (#...</li> <li><a href="https://github.com/nrwl/nx/commit/cf996496bbad727362d48292b50fafc8c3665847";><code>cf99649</code></a> fix(core): prevent shell injection in nx import (<a href="https://github.com/nrwl/nx/tree/HEAD/packages/nx/issues/36348";>#36348</a>)</li> <li><a href="https://github.com/nrwl/nx/commit/74311e713ddc705559f24e43381aea41dd1c0759";><code>74311e7</code></a> fix(core): omit peer dependencies when installing packages to a temp dir (<a href="https://github.com/nrwl/nx/tree/HEAD/packages/nx/issues/36";>#36</a>...</li> <li><a href="https://github.com/nrwl/nx/commit/84beebcb39d3a693abe2bd6b5cb9b790cfedf704";><code>84beebc</code></a> fix(core): use workspace package manager when fetching migrations via install...</li> <li><a href="https://github.com/nrwl/nx/commit/a328bf1d5eb3f32571500578867a18730e7f1db0";><code>a328bf1</code></a> fix(core): warn when the self-hosted remote cache disables TLS verification (...</li> <li><a href="https://github.com/nrwl/nx/commit/a82807621e4176e37909d2c1afede661b45cc30a";><code>a828076</code></a> fix(core): prevent path traversal / zip-slip in self-hosted remote cache (<a href="https://github.com/nrwl/nx/tree/HEAD/packages/nx/issues/36";>#36</a>...</li> <li><a href="https://github.com/nrwl/nx/commit/dc849bbd9492d667f0162ca54c2f429f4cd27ed7";><code>dc849bb</code></a> fix(core): update brace-expansion and yaml (<a href="https://github.com/nrwl/nx/tree/HEAD/packages/nx/issues/35790";>#35790</a>)</li> <li><a href="https://github.com/nrwl/nx/commit/8fd1febdcf586a3cd0561b17bef5ff1c25cc806c";><code>8fd1feb</code></a> fix(core): allow local plugin subpath imports without custom conditions (<a href="https://github.com/nrwl/nx/tree/HEAD/packages/nx/issues/35751";>#35751</a>)</li> <li>Additional commits viewable in <a href="https://github.com/nrwl/nx/commits/22.7.8/packages/nx";>compare view</a></li> </ul> </details> <details> <summary>Install script changes</summary> <p>This version modifies <code>postinstall</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/superset/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
