nx 23.1.0 → 23.1.1

package/dist/src/utils/git-utils.js

@@ -4,6 +4,10 @@ exports.GitRepository = void 0;
 exports.cloneFromUpstream = cloneFromUpstream;
 exports.parseVcsRemoteUrl = parseVcsRemoteUrl;
 exports.getVcsRemoteInfo = getVcsRemoteInfo;
+exports.getGitRootPath = getGitRootPath;
+exports.getGitRootRelativePath = getGitRootRelativePath;
+exports.isShallowRepository = isShallowRepository;
+exports.getFirstCommitSha = getFirstCommitSha;
 exports.isGitRepository = isGitRepository;
 exports.hasUncommittedChanges = hasUncommittedChanges;
 exports.getUncommittedChangesSnapshot = getUncommittedChangesSnapshot;
@@ -16,9 +20,9 @@ const crypto = tslib_1.__importStar(require("crypto"));
 const fs = tslib_1.__importStar(require("fs"));
 const path_1 = require("path");
 const logger_1 = require("./logger");
-function execAsync(command, execOptions) {
+function execFileAsync(file, args, execOptions) {
     return new Promise((res, rej) => {
-        (0, child_process_1.exec)(command, { ...execOptions, windowsHide: true }, (err, stdout, stderr) => {
+        (0, child_process_1.execFile)(file, args, { ...execOptions, windowsHide: true }, (err, stdout) => {
             if (err) {
                 return rej(err);
             }
@@ -29,7 +33,14 @@ function execAsync(command, execOptions) {
 async function cloneFromUpstream(url, destination, { originName, depth } = {
     originName: 'origin',
 }) {
-    await execAsync(`git clone ${url} ${destination} ${depth ? `--depth ${depth}` : ''} --origin ${originName}`, {
+    await execFileAsync('git', [
+        'clone',
+        url,
+        destination,
+        ...(depth ? ['--depth', `${depth}`] : []),
+        '--origin',
+        originName,
+    ], {
         cwd: (0, path_1.dirname)(destination),
         maxBuffer: 10 * 1024 * 1024,
     });
@@ -41,25 +52,25 @@ class GitRepository {
         this.root = this.getGitRootPath(this.directory);
     }
     getGitRootPath(cwd) {
-        return (0, child_process_1.execSync)('git rev-parse --show-toplevel', {
-            cwd,
-            windowsHide: true,
-        })
-            .toString()
-            .trim();
+        return getGitRootPath(cwd);
     }
     async hasUncommittedChanges() {
-        const data = await this.execAsync(`git status --porcelain`);
+        const data = await this.execGit(['status', '--porcelain']);
         return data.trim() !== '';
     }
     async addFetchRemote(remoteName, branch) {
-        return await this.execAsync(`git config --add remote.${remoteName}.fetch "+refs/heads/${branch}:refs/remotes/${remoteName}/${branch}"`);
+        return await this.execGit([
+            'config',
+            '--add',
+            `remote.${remoteName}.fetch`,
+            `+refs/heads/${branch}:refs/remotes/${remoteName}/${branch}`,
+        ]);
     }
     async showStat() {
-        return await this.execAsync(`git show --stat`);
+        return await this.execGit(['show', '--stat']);
     }
     async listBranches() {
-        return (await this.execAsync(`git ls-remote --heads --quiet`))
+        return (await this.execGit(['ls-remote', '--heads', '--quiet']))
             .trim()
             .split('\n')
             .map((s) => s
@@ -70,45 +81,58 @@ class GitRepository {
     async getGitFiles(path) {
         // Use -z to return file names exactly as they are stored in git, separated by NULL (\x00) character.
         // This avoids problems with special characters in file names.
-        return (await this.execAsync(`git ls-files -z ${path}`))
+        return (await this.execGit(['ls-files', '-z', '--', path]))
             .trim()
             .split('\x00')
             .map((s) => s.trim())
             .filter(Boolean);
     }
     async reset(ref) {
-        return await this.execAsync(`git reset ${ref} --hard`);
+        return await this.execGit(['reset', '--hard', ref]);
     }
     async mergeUnrelatedHistories(ref, message) {
-        return await this.execAsync(`git merge ${ref} -X ours --allow-unrelated-histories -m "${message}"`);
+        return await this.execGit([
+            'merge',
+            ref,
+            '-X',
+            'ours',
+            '--allow-unrelated-histories',
+            '-m',
+            message,
+        ]);
     }
     async fetch(remote, ref) {
-        return await this.execAsync(`git fetch ${remote}${ref ? ` ${ref}` : ''}`);
+        return await this.execGit(['fetch', remote, ...(ref ? [ref] : [])]);
     }
     async checkout(branch, opts) {
-        return await this.execAsync(`git checkout ${opts.new ? '-b ' : ' '}${branch}${opts.base ? ' ' + opts.base : ''}`);
+        return await this.execGit([
+            'checkout',
+            ...(opts.new ? ['-b'] : []),
+            branch,
+            ...(opts.base ? [opts.base] : []),
+        ]);
     }
     async move(path, destination) {
-        return await this.execAsync(`git mv ${this.quotePath(path)} ${this.quotePath(destination)}`);
+        return await this.execGit(['mv', '--', path, destination]);
     }
     async push(ref, remoteName) {
-        return await this.execAsync(`git push -u -f ${remoteName} ${ref}`);
+        return await this.execGit(['push', '-u', '-f', remoteName, ref]);
     }
     async commit(message) {
-        return await this.execAsync(`git commit -am "${message}"`);
+        return await this.execGit(['commit', '-am', message]);
     }
     async amendCommit() {
-        return await this.execAsync(`git commit --amend -a --no-edit`);
+        return await this.execGit(['commit', '--amend', '-a', '--no-edit']);
     }
     async deleteGitRemote(name) {
-        return await this.execAsync(`git remote rm ${name}`);
+        return await this.execGit(['remote', 'rm', name]);
     }
     async addGitRemote(name, url) {
-        return await this.execAsync(`git remote add ${name} ${url}`);
+        return await this.execGit(['remote', 'add', name, url]);
     }
     async hasFilterRepoInstalled() {
         try {
-            await this.execAsync(`git filter-repo --help`);
+            await this.execGit(['filter-repo', '--help']);
             return true;
         }
         catch {
@@ -121,35 +145,57 @@ class GitRepository {
         // NOTE: filter-repo requires POSIX path to work
         const sourcePosixPath = source.split(path_1.sep).join(path_1.posix.sep);
         const destinationPosixPath = destination.split(path_1.sep).join(path_1.posix.sep);
-        await this.execAsync(`git filter-repo -f ${source !== '' ? `--path ${this.quotePath(sourcePosixPath)}` : ''} ${source !== destination
-            ? `--path-rename ${this.quotePath(sourcePosixPath, true)}:${this.quotePath(destinationPosixPath, true)}`
-            : ''}`);
+        const sourcePath = ensureTrailingSlash(sourcePosixPath);
+        const destinationPath = ensureTrailingSlash(destinationPosixPath);
+        await this.execGit([
+            'filter-repo',
+            '-f',
+            ...(source !== '' ? ['--path', sourcePosixPath] : []),
+            ...(source !== destination
+                ? ['--path-rename', `${sourcePath}:${destinationPath}`]
+                : []),
+        ]);
     }
     async filterBranch(source, destination, branchName) {
         // We need non-ASCII file names to not be quoted, or else filter-branch will exclude them.
-        await this.execAsync(`git config core.quotepath false`);
+        await this.execGit(['config', 'core.quotepath', 'false']);
         // NOTE: filter-repo requires POSIX path to work
         const sourcePosixPath = source.split(path_1.sep).join(path_1.posix.sep);
         const destinationPosixPath = destination.split(path_1.sep).join(path_1.posix.sep);
         // First, if the source is not a root project, then only include commits relevant to the subdirectory.
         if (source !== '') {
-            const indexFilterCommand = this.quoteArg(`node ${(0, path_1.join)(__dirname, 'git-utils.index-filter.js')}`);
-            await this.execAsync(`git filter-branch -f --index-filter ${indexFilterCommand} --prune-empty -- ${branchName}`, {
+            const indexFilterCommand = `node ${quoteForShell((0, path_1.join)(__dirname, 'git-utils.index-filter.js'))}`;
+            await this.execGit([
+                'filter-branch',
+                '-f',
+                '--index-filter',
+                indexFilterCommand,
+                '--prune-empty',
+                '--',
+                branchName,
+            ], {
                 NX_IMPORT_SOURCE: sourcePosixPath,
                 NX_IMPORT_DESTINATION: destinationPosixPath,
             });
         }
         // Then, move files to their new location if necessary.
         if (source === '' || source !== destination) {
-            const treeFilterCommand = this.quoteArg(`node ${(0, path_1.join)(__dirname, 'git-utils.tree-filter.js')}`);
-            await this.execAsync(`git filter-branch -f --tree-filter ${treeFilterCommand} -- ${branchName}`, {
+            const treeFilterCommand = `node ${quoteForShell((0, path_1.join)(__dirname, 'git-utils.tree-filter.js'))}`;
+            await this.execGit([
+                'filter-branch',
+                '-f',
+                '--tree-filter',
+                treeFilterCommand,
+                '--',
+                branchName,
+            ], {
                 NX_IMPORT_SOURCE: sourcePosixPath,
                 NX_IMPORT_DESTINATION: destinationPosixPath,
             });
         }
     }
-    execAsync(command, env) {
-        return execAsync(command, {
+    execGit(args, env) {
+        return execFileAsync('git', args, {
             cwd: this.root,
             maxBuffer: 10 * 1024 * 1024,
             env: {
@@ -158,25 +204,14 @@ class GitRepository {
             },
         });
     }
-    quotePath(path, ensureTrailingSlash) {
-        return this.quoteArg(ensureTrailingSlash && path !== '' && !path.endsWith('/')
-            ? `${path}/`
-            : path);
-    }
-    quoteArg(arg) {
-        return process.platform === 'win32'
-            ? // Windows/CMD only understands double-quotes, single-quotes are treated as part of the file name
-                // Bash and other shells will substitute `$` in file names with a variable value.
-                `"${arg
-                    // Need to keep two slashes for Windows or else the path will be invalid.
-                    // e.g. 'C:\Users\bob\projects\repo' is invalid, but 'C:\\Users\\bob\\projects\\repo' is valid
-                    .replaceAll('\\', '\\\\')}"`
-            : // e.g. `git mv "$$file.txt" "libs/a/$$file.txt"` will not work since `$$` is swapped with the PID of the last process.
-                // Using single-quotes prevents this substitution.
-                `'${arg}'`;
-    }
 }
 exports.GitRepository = GitRepository;
+function ensureTrailingSlash(path) {
+    return path !== '' && !path.endsWith('/') ? `${path}/` : path;
+}
+function quoteForShell(arg) {
+    return `'${arg.replaceAll("'", "'\"'\"'")}'`;
+}
 function parseVcsRemoteUrl(url) {
     // Remove whitespace and handle common URL formats
     const cleanUrl = url.trim();
@@ -260,6 +295,65 @@ function getVcsRemoteInfo(directory) {
         return null;
     }
 }
+function getGitRootPath(cwd) {
+    return (0, child_process_1.execFileSync)('git', ['rev-parse', '--show-toplevel'], {
+        cwd,
+        windowsHide: true,
+    })
+        .toString()
+        .trim();
+}
+/**
+ * Path of `directory` relative to its git root, posix-separated so it is
+ * identical on every OS, and '' when the directory is the git root itself.
+ * Null outside a git repository.
+ */
+function getGitRootRelativePath(directory) {
+    try {
+        return (0, path_1.relative)(getGitRootPath(directory), directory)
+            .split(path_1.sep)
+            .join(path_1.posix.sep);
+    }
+    catch {
+        return null;
+    }
+}
+/** A shallow clone's truncated history has no stable root commit. */
+function isShallowRepository(directory) {
+    try {
+        return ((0, child_process_1.execFileSync)('git', ['rev-parse', '--is-shallow-repository'], {
+            encoding: 'utf8',
+            stdio: 'pipe',
+            cwd: directory,
+            windowsHide: true,
+        }).trim() === 'true');
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * SHA of the repository's first commit. Merged unrelated histories leave
+ * several root commits — the sorted-first one is picked so every clone
+ * agrees. Null when there are no commits, or outside a git repository.
+ */
+function getFirstCommitSha(directory) {
+    try {
+        const roots = (0, child_process_1.execFileSync)('git', ['rev-list', '--max-parents=0', 'HEAD'], {
+            encoding: 'utf8',
+            stdio: 'pipe',
+            cwd: directory,
+            windowsHide: true,
+        })
+            .trim()
+            .split(/\r?\n/)
+            .filter(Boolean);
+        return roots.sort()[0] ?? null;
+    }
+    catch {
+        return null;
+    }
+}
 function isGitRepository(directory) {
     try {
         (0, child_process_1.execSync)('git rev-parse --is-inside-work-tree', {

package/dist/src/utils/min-release-age/behavior/pnpm.js

@@ -88,15 +88,17 @@ function readPnpmConfigList(root) {
         return null;
     }
 }
-// Extracts the cooldown keys from pnpm's reported config. pnpm reports the
-// kebab-case keys; the exclude list comes back as a JSON array (set in a yaml
-// surface) or a comma-joined string (set via .npmrc / env).
+// Extracts the cooldown keys from pnpm's reported config. pnpm 11 reports them
+// camelCase; pnpm 10 reported them kebab-case, so read both forms. The exclude
+// list comes back as a JSON array (set in a yaml surface) or a comma-joined
+// string (set via .npmrc / env).
 function parseCooldownConfig(config) {
+    const read = (camelKey, kebabKey) => config[camelKey] ?? config[kebabKey];
     return {
-        windowMinutes: toNumber(config['minimum-release-age']) ?? undefined,
-        excludes: parseExcludeValue(config['minimum-release-age-exclude']),
-        strictExplicit: toBoolean(config['minimum-release-age-strict']),
-        ignoreMissingTimeExplicit: toBoolean(config['minimum-release-age-ignore-missing-time']),
+        windowMinutes: toNumber(read('minimumReleaseAge', 'minimum-release-age')) ?? undefined,
+        excludes: parseExcludeValue(read('minimumReleaseAgeExclude', 'minimum-release-age-exclude')),
+        strictExplicit: toBoolean(read('minimumReleaseAgeStrict', 'minimum-release-age-strict')),
+        ignoreMissingTimeExplicit: toBoolean(read('minimumReleaseAgeIgnoreMissingTime', 'minimum-release-age-ignore-missing-time')),
     };
 }
 function parseExcludeValue(value) {

package/dist/src/utils/package-json.js

@@ -225,19 +225,23 @@ function preparePackageInstallation(pkg, requiredVersion, packageManager) {
     // it into the temp dir, so the `-w` here resolves to the temp dir.
     const pmCommands = (0, package_manager_1.getPackageManagerCommand)(packageManager);
     const preInstallCommand = pmCommands.preInstall;
-    // Omit peer dependencies from the temp install. `ensurePackage` puts the
+    // Keep peer dependencies out of the temp install. `ensurePackage` puts the
     // workspace's `node_modules` on `NODE_PATH`, so a loaded package resolves its
     // peers from the workspace instead of pulling its own (possibly incompatible)
     // copies into the temp dir.
-    const omitPeerDependenciesFlag = packageManager === 'npm' || packageManager === 'bun'
-        ? '--omit=peer'
-        : packageManager === 'pnpm'
-            ? '--config.auto-install-peers=false'
-            : '';
+    //
+    // npm needs `--legacy-peer-deps` rather than `--omit=peer`: npm marks a package
+    // as a peer if anything in the tree peer-depends on it, so `--omit=peer` also
+    // prunes packages that are real dependencies. Bun's `--omit=peer` does not.
+    const skipPeerDependenciesFlags = {
+        npm: '--legacy-peer-deps',
+        bun: '--omit=peer',
+        pnpm: '--config.auto-install-peers=false',
+    };
     const installCommand = [
         pmCommands.addDev,
         `${pkg}@${requiredVersion}`,
-        omitPeerDependenciesFlag,
+        skipPeerDependenciesFlags[packageManager],
         pmCommands.ignoreScriptsFlag,
     ]
         .filter(Boolean)

package/dist/src/utils/package-manager.d.ts

@@ -121,7 +121,9 @@ export declare function resolvePackageVersionUsingInstallation(packageName: stri
 export declare function packageRegistryView(pkg: string, version: string, args: string, options?: {
     forceNpm?: boolean;
 }): Promise<string>;
-export declare function packageRegistryPack(cwd: string, pkg: string, version: string): Promise<{
+export declare function packageRegistryPack(cwd: string, pkg: string, version: string, options?: {
+    bypassMinReleaseAge?: boolean;
+}): Promise<{
     tarballPath: string;
 }>;
 /**

package/dist/src/utils/package-manager.js

@@ -165,8 +165,12 @@ function getPackageManagerCommand(packageManager = detectPackageManager(), root
                 install: 'pnpm install --no-frozen-lockfile', // explicitly disable in case of CI
                 ciInstall: 'pnpm install --frozen-lockfile',
                 updateLockFile: 'pnpm install --lockfile-only',
-                add: isPnpmWorkspace ? 'pnpm add -w' : 'pnpm add',
-                addDev: isPnpmWorkspace ? 'pnpm add -Dw' : 'pnpm add -D',
+                add: isPnpmWorkspace
+                    ? 'pnpm add -w --config.frozen-lockfile=false'
+                    : 'pnpm add --config.frozen-lockfile=false',
+                addDev: isPnpmWorkspace
+                    ? 'pnpm add -Dw --config.frozen-lockfile=false'
+                    : 'pnpm add -D --config.frozen-lockfile=false',
                 rm: 'pnpm rm',
                 exec: modernPnpm ? 'pnpm exec' : 'pnpx',
                 dlx: modernPnpm ? 'pnpm dlx' : 'pnpx',
@@ -345,6 +349,20 @@ function modifyPnpmWorkspaceYamlToFitNewDirectory(contents) {
     doc.set('packages', ['.']);
     // Relative patch paths don't resolve in the temp dir.
     doc.delete('patchedDependencies');
+    // link:/file: overrides (e.g. written by `pnpm link`) point at paths that
+    // don't exist in the temp dir, and an override would hijack an exact-version
+    // add (`pnpm add pkg@x.y.z` would install the linked dir instead).
+    const overrides = doc.toJS()?.overrides;
+    if (overrides && typeof overrides === 'object') {
+        for (const [name, spec] of Object.entries(overrides)) {
+            if (typeof spec === 'string' && /^(link|file):/.test(spec)) {
+                doc.deleteIn(['overrides', name]);
+            }
+        }
+        if (Object.keys(doc.toJS()?.overrides ?? {}).length === 0) {
+            doc.delete('overrides');
+        }
+    }
     return doc.toString();
 }
 function copyPackageManagerConfigurationFiles(root, destination) {
@@ -515,7 +533,7 @@ options) {
     });
     return stdout.toString().trim();
 }
-async function packageRegistryPack(cwd, pkg, version) {
+async function packageRegistryPack(cwd, pkg, version, options) {
     /**
      * Only `npm pack` supports downloading a tarball of a specified remote
      * package. `yarn` packs the active workspace, `pnpm pack` only packs
@@ -529,7 +547,13 @@ async function packageRegistryPack(cwd, pkg, version) {
         windowsHide: true,
         // npm enforces `devEngines.packageManager` even on `pack`; force keeps the
         // download working in workspaces that pin a non-npm manager (onFail: error).
-        env: { ...process.env, npm_config_force: 'true' },
+        env: {
+            ...process.env,
+            npm_config_force: 'true',
+            ...(options?.bypassMinReleaseAge
+                ? { npm_config_min_release_age: '0' }
+                : {}),
+        },
     });
     const tarballPath = stdout.trim();
     return { tarballPath };

package/dist/src/utils/provenance.js

@@ -22,8 +22,18 @@ async function ensurePackageHasProvenance(packageName, packageVersion) {
     }
     try {
         const result = await (0, package_manager_1.packageRegistryView)(packageName, packageVersion, '--json --silent');
-        const npmViewResult = JSON.parse(result);
-        const attURL = npmViewResult.dist?.attestations?.url;
+        const parsed = JSON.parse(result);
+        // `npm view <pkg>@<spec> --json` returns a bare object on npm <= 11 but an
+        // array on npm 12 and pnpm, even for a single resolved version. A version
+        // range matches several versions and the registry lists all of them
+        // (including deprecated ones the installer skips), so we cannot tell which
+        // one will actually be installed; refuse rather than verify the wrong
+        // artifact.
+        if (Array.isArray(parsed) && parsed.length > 1) {
+            throw new ProvenanceError(packageName, packageVersion, 'Provenance can only be verified for a single version, but this version resolved to multiple candidates. Specify an exact version.');
+        }
+        const npmViewResult = Array.isArray(parsed) ? parsed[0] : parsed;
+        const attURL = npmViewResult?.dist?.attestations?.url;
         if (!attURL)
             throw new ProvenanceError(packageName, packageVersion, 'No attestation URL found');
         const response = await fetch(attURL);

package/dist/src/utils/workspace-id.d.ts

@@ -0,0 +1,20 @@
+import type { NxJsonConfiguration } from '../config/nx-json';
+/**
+ * The workspace's analytics identity: the Nx Cloud id when the workspace has
+ * one (most stable — it survives repo moves and renames), else the repo key.
+ * Null when neither is available, in which case nothing is reported.
+ */
+export declare function generateWorkspaceId(root: string, nxJson: NxJsonConfiguration | null): string | null;
+/**
+ * Derive the stable, unsalted key identifying this workspace in the
+ * repoTelemetry registry: `sha256(<repo identity> + '#' + <workspace path
+ * relative to the git root>)`.
+ *
+ * The repo identity is the normalized `domain/slug` from the git remote
+ * (protocol-independent: ssh, https, and token-authenticated URLs of the
+ * same repo produce the same key), falling back to the first-commit SHA
+ * when no remote exists. Returns null when no identity is derivable — not
+ * a git repository, or a shallow clone without a remote.
+ */
+export declare function deriveRepoKey(directory: string): string | null;
+export declare function computeRepoKey(identity: string, relativePath: string): string;

package/dist/src/utils/workspace-id.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateWorkspaceId = generateWorkspaceId;
+exports.deriveRepoKey = deriveRepoKey;
+exports.computeRepoKey = computeRepoKey;
+const crypto_1 = require("crypto");
+const git_utils_1 = require("./git-utils");
+/**
+ * The workspace's analytics identity: the Nx Cloud id when the workspace has
+ * one (most stable — it survives repo moves and renames), else the repo key.
+ * Null when neither is available, in which case nothing is reported.
+ */
+function generateWorkspaceId(root, nxJson) {
+    const nxCloudId = nxJson?.nxCloudId ?? nxJson?.nxCloudAccessToken;
+    if (nxCloudId) {
+        return nxCloudId;
+    }
+    return deriveRepoKey(root);
+}
+/**
+ * Derive the stable, unsalted key identifying this workspace in the
+ * repoTelemetry registry: `sha256(<repo identity> + '#' + <workspace path
+ * relative to the git root>)`.
+ *
+ * The repo identity is the normalized `domain/slug` from the git remote
+ * (protocol-independent: ssh, https, and token-authenticated URLs of the
+ * same repo produce the same key), falling back to the first-commit SHA
+ * when no remote exists. Returns null when no identity is derivable — not
+ * a git repository, or a shallow clone without a remote.
+ */
+function deriveRepoKey(directory) {
+    const identity = getRepoIdentity(directory);
+    if (!identity) {
+        return null;
+    }
+    return computeRepoKey(identity, (0, git_utils_1.getGitRootRelativePath)(directory) ?? '');
+}
+function computeRepoKey(identity, relativePath) {
+    return (0, crypto_1.createHash)('sha256')
+        .update(`${identity}#${relativePath}`)
+        .digest('hex');
+}
+function getRepoIdentity(directory) {
+    const remote = (0, git_utils_1.getVcsRemoteInfo)(directory);
+    if (remote) {
+        // Hosts route case-insensitively and hold one canonical casing, so a
+        // hand-typed remote must key the same as the canonical one the claim
+        // flow derives from the host's API.
+        return `${remote.domain}/${remote.slug}`.toLowerCase().replace(/\/+$/, '');
+    }
+    // Without a remote the first commit is the only stable identity, and a
+    // shallow clone doesn't have a real one.
+    return (0, git_utils_1.isShallowRepository)(directory) ? null : (0, git_utils_1.getFirstCommitSha)(directory);
+}

package/migrations.json

@@ -160,7 +160,13 @@
       "cli": "nx",
       "version": "22.6.0-rc.0",
       "description": "Adds .claude/settings.local.json to .gitignore",
-      "implementation": "./dist/src/migrations/update-17-3-0/update-nxw"
+      "implementation": "./dist/src/migrations/update-22-6-0/add-claude-settings-local-to-git-ignore"
+    },
+    "22-6-0-enable-analytics-prompt": {
+      "cli": "nx",
+      "version": "22.6.0-beta.11",
+      "description": "Prompts to enable usage analytics",
+      "implementation": "./dist/src/migrations/update-22-6-0/enable-analytics-prompt"
     },
     "22-7-0-add-self-healing-to-gitignore": {
       "cli": "nx",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nx",
-  "version": "23.1.0",
+  "version": "23.1.1",
   "private": false,
   "type": "commonjs",
   "description": "The core Nx plugin contains the core functionality of Nx like the project graph, nx commands and task orchestration.",
@@ -61,12 +61,13 @@
     "ansi-styles": "4.3.0",
     "argparse": "2.0.1",
     "asynckit": "0.4.0",
-    "axios": "1.16.1",
+    "axios": "1.18.1",
     "balanced-match": "4.0.3",
     "base64-js": "1.5.1",
     "bl": "4.1.0",
-    "brace-expansion": "5.0.6",
+    "brace-expansion": "5.0.8",
     "buffer": "5.7.1",
+    "bundle-name": "4.1.0",
     "call-bind-apply-helpers": "1.0.2",
     "chalk": "4.1.2",
     "cli-cursor": "3.1.0",
@@ -77,8 +78,10 @@
     "color-name": "1.1.4",
     "combined-stream": "1.0.8",
     "debug": "4.4.3",
+    "default-browser": "5.2.1",
+    "default-browser-id": "5.0.0",
     "defaults": "1.0.4",
-    "define-lazy-prop": "2.0.0",
+    "define-lazy-prop": "3.0.0",
     "delayed-stream": "1.0.0",
     "dotenv": "16.4.7",
     "dotenv-expand": "12.0.3",
@@ -111,11 +114,12 @@
     "ieee754": "1.2.1",
     "ignore": "7.0.5",
     "inherits": "2.0.4",
-    "is-docker": "2.2.1",
+    "is-docker": "3.0.0",
     "is-fullwidth-code-point": "3.0.0",
+    "is-inside-container": "1.0.0",
     "is-interactive": "1.0.0",
     "is-unicode-supported": "0.1.0",
-    "is-wsl": "2.2.0",
+    "is-wsl": "3.1.0",
     "isexe": "2.0.0",
     "json5": "2.2.3",
     "jsonc-parser": "3.3.1",
@@ -131,7 +135,7 @@
     "npm-run-path": "4.0.1",
     "once": "1.4.0",
     "onetime": "5.1.2",
-    "open": "8.4.2",
+    "open": "10.1.0",
     "ora": "5.4.1",
     "path-key": "3.1.1",
     "picocolors": "1.1.1",
@@ -140,6 +144,7 @@
     "require-directory": "2.1.1",
     "resolve.exports": "2.0.3",
     "restore-cursor": "3.1.0",
+    "run-applescript": "7.0.0",
     "safe-buffer": "5.2.1",
     "semver": "7.8.4",
     "signal-exit": "3.0.7",
@@ -176,16 +181,16 @@
     }
   },
   "optionalDependencies": {
-    "@nx/nx-darwin-arm64": "23.1.0",
-    "@nx/nx-darwin-x64": "23.1.0",
-    "@nx/nx-freebsd-x64": "23.1.0",
-    "@nx/nx-linux-arm-gnueabihf": "23.1.0",
-    "@nx/nx-linux-arm64-gnu": "23.1.0",
-    "@nx/nx-linux-arm64-musl": "23.1.0",
-    "@nx/nx-linux-x64-gnu": "23.1.0",
-    "@nx/nx-linux-x64-musl": "23.1.0",
-    "@nx/nx-win32-arm64-msvc": "23.1.0",
-    "@nx/nx-win32-x64-msvc": "23.1.0"
+    "@nx/nx-darwin-arm64": "23.1.1",
+    "@nx/nx-darwin-x64": "23.1.1",
+    "@nx/nx-freebsd-x64": "23.1.1",
+    "@nx/nx-linux-arm-gnueabihf": "23.1.1",
+    "@nx/nx-linux-arm64-gnu": "23.1.1",
+    "@nx/nx-linux-arm64-musl": "23.1.1",
+    "@nx/nx-linux-x64-gnu": "23.1.1",
+    "@nx/nx-linux-x64-musl": "23.1.1",
+    "@nx/nx-win32-arm64-msvc": "23.1.1",
+    "@nx/nx-win32-x64-msvc": "23.1.1"
   },
   "nx-migrations": {
     "migrations": "./migrations.json",

package/dist/src/migrations/update-17-3-0/nx-release-path.d.ts

@@ -1,3 +0,0 @@
-import { Tree } from '../../generators/tree';
-export default function nxReleasePath(tree: Tree): void;
-export declare function visitNotIgnoredFiles(tree: Tree, dirPath: string, visitor: (path: string) => void): void;