build(deps-dev): bump nx from 23.0.1 to 23.0.2

[dependabot]

Bumps nx from 23.0.1 to 23.0.2.

Release notes

Sourced from nx's releases.

23.0.2 (2026-07-10)

🚀 Features

• core: re-add isCacheableTask helper (#36177)

🩹 Fixes

• bundling: prevent TS6059 when an app imports a workspace lib from source (#36217, #35017)
• core: prefer module.registerHooks to avoid DEP0205 deprecation warning (#36081)
• core: prevent nx migrate crash when include=optional filters out the target package (#36087)
• core: make nx migrate honor preapproved packages and emit a valid temp workspace (#36086)
• core: skip daemon project-graph recompute on no-op file rewrites (#36082)
• core: prevent the TUI from auto-selecting a completed task when a batch finishes (#35833)
• core: deregister pseudo-terminal exit handlers when tasks finish (#36115)
• core: prevent path traversal / zip-slip in self-hosted remote cache (#36116)
• core: respect explicit --nxCloud=skip for AI agents in create-nx-workspace (#36131)
• core: warn when the self-hosted remote cache disables TLS verification (NXC-4593) (#36132, #36116)
• core: throw actionable error when pnpm .modules.yaml is missing (#35666, #35635)
• core: support ${configDir} in tsconfig path alias resolution (#36037, #35804)
• core: prevent non-npm devEngines pin from breaking npm registry lookups (#36020, #35815)
• core: clarify nx sync remediation messaging and surface spinner output in non-tty (#35747)
• core: exclude direct-dependency overrides from generated package.json (#36040, #35675)
• core: apply target defaults when project.json overrides an inferred run-commands target with different commands (#36142, #36067)
• core: run the nx.bat wrapper for dot-nx setup on windows (#36048)
• core: speed up bun lockfile parsing (#36198)
• core: set NX_CLI_SET in batch worker processes (#36214, #36210)
• core: preserve comments in catalog YAML updates (#35733)
• core: box JsonFileSet payload to keep HashInstruction small (#36247, #35248, #36244, #36152)
• core: share workspace fileset hash results instead of deep-cloning per task (#36244, #34971, #34942)
• core: replace per-input visited clones with undo-log scoping in hash planner (#36248, #35071, #36152, #34971, #36244, #35248, #36247)
• core: intern hash instructions in a pool and plan with id lists (#36249, #35071, #36152, #36248)
• core: detect Codex sandbox on Linux to disable daemon and plugin isolation (#36273)
• devkit: restore prettier v2 support in formatFiles (#36193)
• graph: prevent project details web view top from being clipped (#36154)
• js: prevent doubled output paths in buildable library path mappings (#36138, #36079)
• js: scope incremental type-check .tsbuildinfo per project (#36137, #36113)
• js: preserve npm allowScripts allowlist in pruned package.json (#36016, #35931)
• js: resolve catalog references in pruned package.json output (#35805, #35419)
• js: avoid import locator unicode position panic (#36133, #36128)
• js: prevent Windows TS6059 rootDir errors in tsc builds (#36184, #35696)
• js: wait for process tree exit when stopping node executor tasks (#36230)
• linter: update terminal cli regex for local-dist build (#36201, #36199)
• maven: de-flake maven e2e by dropping -X debug forks and widening timeout (#36091)
• misc: bump axios to 1.16.1 (#36120)
• misc: use default import for chalk in @​nx/workspace output.ts (#35523, #35521, #34111, #21201, #26667)
• misc: remove duplicate nx init cloud-prompt telemetry event (#36145)
• nx-cloud: use standard utm params on cloud prompt links (#36227, #36226)
• nx-dev: remove empty SaaS and Mobile template filters (#36085)
• react: reserve ports in rspack e2e test to avoid default port collisions (#36090)

... (truncated)

Commits

• e095537 chore(core): apply cargo fmt to tasks_list.rs
• c02ed72 fix(core): detect Codex sandbox on Linux to disable daemon and plugin isolati...
• a60514e docs(misc): refresh angular docs pages and fix broken angular urls (#36276)
• 15e01d7 fix(core): intern hash instructions in a pool and plan with id lists (#36249)
• 3524863 fix(core): replace per-input visited clones with undo-log scoping in hash pla...
• 033a94a fix(core): share workspace fileset hash results instead of deep-cloning per t...
• bf79d75 fix(core): box JsonFileSet payload to keep HashInstruction small (#36247)
• fd4b65d fix(core): preserve comments in catalog YAML updates (#35733)
• 2970003 fix(nx-cloud): use standard utm params on cloud prompt links (#36227)
• f853ab3 cleanup(core): reduce redundant work in project graph construction (#36224)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.