Skip to content

chore(deps): bump brace-expansion and nx - #1028

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-0d46935c46
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-0d46935c46

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 24, 2026 •

Copy link
Copy Markdown
Contributor

Bumps brace-expansion to 5.0.12 and updates ancestor dependency nx. These dependencies need to be updated together.

Updates brace-expansion from 5.0.8 to 5.0.12

Commits

Updates nx from 22.7.10 to 24.0.1

Release notes

Sourced from nx's releases.

24.0.1 (2026-10-23)

🩹 Fixes

  • angular-rspack: install the plugin after Angular dependencies (#37562)
  • core: resolve pnpm aliased dependencies to their own snapshot (#37538, #37429)
  • core: drop repository-local git env from the ai-config clone (#37498, #37436)
  • core: pin the package manager version in generated workspaces (#37261)
  • core: match project patterns with unknown colon prefixes or regex characters (#37500)
  • core: keep migrations.json and prompt files out of migrate commits (#37530)
  • core: load Nx Cloud code in the daemon with Node's native .js loader (#37534)
  • core: keep the daemon running when PROCESS_IN_BACKGROUND fails (#37535)
  • core: stop readyWhen logMatches from matching Nx command lines (#37550)
  • core: avoid MaxListenersExceededWarning on Nx Cloud agents (#37553)
  • core: let readyWhen read the NX_READY_URL its producer reports (#37554)
  • core: name every pending dependency in the readiness wait line (#37555)
  • core: avoid MaxListenersExceededWarning with parallel run-commands (#37556)
  • core: preserve TUI task start times across mode switches (#37558)
  • core: recover external dependencies after configuration errors (#37560)
  • core: avoid pnpm store probes during version detection (#37561)
  • core: count every run-commands readyWhen match, including on stderr (#37567)
  • core: exit 1, not 130, when dependents of a failed task are skipped (#37574, #37506)
  • maven: suppress wire payloads in verbose batch builds (#37566)
  • misc: write versioned docs lockfile into the staging dir (#37546)
  • nx-plugin: preserve the working directory in generated e2e tests (#37565)
  • release: stop release e2e flaking on the GitHub username lookup (#37544)
  • rspack: keep user optimization settings in development web builds (#37570, #37557)
  • rspack: keep extract licenses from crashing module federation builds (#37572, #37209)
  • rspack: apply browserslist targets to scripts, styles and runtime (#37571, #37564)
  • storybook: migrate workspaces past the storybook dev server advisories (#37407)
  • testing: generate working spec tsconfigs in TS solution workspaces (#37504)
  • testing: resolve type errors in generated Playwright e2e projects (#37552)
  • testing: keep root project and custom-named jest configs working in v24 (#37503)

❤️ Thank You

24.0.0 (2026-10-21)

🚀 Features

  • angular: support angular v22.2 (#37234, #37375)
  • ⚠️ angular: remove deprecated SCAM generators (#37508)

... (truncated)

Commits
  • 70e7c33 fix(core): exit 1, not 130, when dependents of a failed task are skipped (#37...
  • d88fd0b fix(core): count every run-commands readyWhen match, including on stderr (#37...
  • 3149837 fix(core): avoid pnpm store probes during version detection (#37561)
  • 20ae7b0 fix(core): recover external dependencies after configuration errors (#37560)
  • 4022054 fix(core): preserve TUI task start times across mode switches (#37558)
  • 0d0fd12 fix(core): avoid MaxListenersExceededWarning with parallel run-commands (#37556)
  • b5a0c90 fix(core): name every pending dependency in the readiness wait line (#37555)
  • 2a28cc4 fix(core): let readyWhen read the NX_READY_URL its producer reports (#37554)
  • e16c22d fix(core): avoid MaxListenersExceededWarning on Nx Cloud agents (#37553)
  • c3b8f3d fix(core): stop readyWhen logMatches from matching Nx command lines (#37550)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

This change is Reviewable

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) to 5.0.12 and updates ancestor dependency [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx). These dependencies need to be updated together.


Updates `brace-expansion` from 5.0.8 to 5.0.12
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v5.0.8...v5.0.12)

Updates `nx` from 22.7.10 to 24.0.1
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/24.0.1/packages/nx)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 5.0.12
  dependency-type: indirect
- dependency-name: nx
  dependency-version: 24.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Issues that can be solved in javascript code labels Oct 24, 2026
@coderabbitai

coderabbitai Bot commented Oct 24, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: e2a4449d-5105-4b03-92f8-dbdc18fd31e2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@highperformancecoder

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Oct 24, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 24, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-0d46935c46 branch October 24, 2026 10:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Issues that can be solved in javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant