[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
nx (source)	23.3.0 → 23.3.1

---

Release Notes

nrwl/nx (nx)

v23.3.1

Compare Source

23.3.1 (2026-10-23)

🩹 Fixes

• vitest: allow vitest 5 when angular packages peer it (#​37394, #​37393)

❤️ Thank You

• Minijus L @​minijus

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Summary by Bito

This PR updates the root development dependency Nx from 23.3.0 to 23.3.1. The update is limited to the dependency declaration in package.json.

Detailed Changes

• Changes the Nx version declared in package.json from 23.3.0 to 23.3.1.
• Includes the Nx 23.3.1 release fix allowing Vitest 5 when Angular packages declare it as a peer dependency.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
nextjs-marketing-demo-bug-test	Error		Oct 25, 2026 9:30pm UTC

3 Skipped Deployments

Project	Deployment	Actions	Updated
experience-builder-test-app	Ignored		Oct 25, 2026 9:30pm UTC
studio-nextjs-marketing-demo	Ignored		Oct 25, 2026 9:30pm UTC
studio-react-vite-template	Ignored		Oct 25, 2026 9:30pm UTC

[bito-code-review]

Code Review Agent Run #83eee0

Actionable Suggestions - 0

Review Details

• Files reviewed - 1 · Commit Range: accef71..accef71

  • package.json
• Files skipped - 1

  • package-lock.json - Reason: Filter setting
• Tools

  • Whispers (Secret Scanner) - ✔︎ Successful
  • Detect-secrets (Secret Scanner) - ✔︎ Successful

---

Bito Usage Guide

Commands

Type the following command in the pull request comment and save the comment.

• /review - Manually triggers an incremental AI Review.

• /review full - Manually triggers a full AI Review.

• /pause - Pauses automatic reviews on this pull request.

• /resume - Resumes automatic reviews.

• /resolve - Marks all Bito-posted review comments as resolved.

• /abort - Cancels all in-progress reviews.

Refer to the documentation for additional commands.

Configuration

This repository uses Default Agent You can customize the agent settings here or contact your Bito workspace admin at jared.jolton@contentful.com.

Documentation & Help

• Customize agent settings
• Review rules
• General documentation
• FAQ

AI Code Review powered by

[bito-code-review]

Changelist by Bito

This pull request implements the following key changes.

Key Change	Files Impacted	Summary
Other Improvements - Update Nx dependency to 23.3.1	package.json	Updates the root development dependency Nx from 23.3.0 to 23.3.1.

[bito-code-review]

Impact Analysis by Bito

Interaction Diagram

sequenceDiagram
participant Dev as Developer
participant CI as GitHub Actions CI
participant Manifest as package.json<br/>🔄 Updated | ●●○ Medium
participant Lock as package-lock.json<br/>🔄 Updated | ●●○ Medium
participant NPM as npm installer
participant Nx as Nx task runner<br/>🔄 Updated | ●●○ Medium
participant Lerna as Lerna
participant Packages as Workspace packages
Dev->>Manifest: Update Nx dependency to 23.3.1
Dev->>Lock: Refresh Nx package resolution
CI->>Manifest: Read workspace scripts and dependencies
CI->>NPM: Install from package-lock.json
NPM->>Lock: Resolve pinned Nx 23.3.1 packages
NPM-->>CI: Install Nx and platform-specific optional packages
CI->>Lerna: Run npm build, lint, or test scripts
Lerna->>Nx: Orchestrate configured workspace tasks
Nx->>Packages: Run package targets
Packages-->>Nx: Return task results
Nx-->>Lerna: Return orchestration results
Lerna-->>CI: Return command status
CI-->>Dev: Report build and check results

Loading

---

This change updates the existing Nx development dependency and its lockfile resolution from 23.3.0 to 23.3.1, including the platform-specific packages used during installation. The build and check journey still runs through CI, npm, Lerna, and Nx to the workspace packages; it changes build-tool dependency resolution, not application data transformation or persistence. The repository dependency analysis found no incoming cross-repository consumers of this monorepo, and the indexed code search found no direct use of the changed version in other repositories.

Cross-Repository Impact Analysis

What Changed	Impact of Change	Suggested Review Actions
Nx was upgraded from 23.3.0 to 23.3.1 in the reviewed repository; the matching indexed package.json hit was checked as a candidate consumer.	- create-contentful-app/package.json:39 — candidate dependency-version match; not verified as consuming experience-builder: getCode confirms this is a separate workspace's own Nx devDependency pin, not a reference to the reviewed repository or its package. Do not infer a consumer relationship from the matching version alone.	- Treat the matching Nx pin as an independent toolchain choice unless a direct repository dependency is established; no coordinated consumer update is evidenced by this match.

Code Paths Analyzed

Impact:
This is a development-tooling patch update, not an application API or runtime behavior change. The root package manifest and lockfile now consistently pin Nx to 23.3.1, including its optional platform packages.

Flow:
Root package.json Nx devDependency → package-lock root dependency and resolved nx/platform package entries → npm install/CI tooling environment. No application entry point or runtime request/data path changes.

Direct Changes (Diff Files):
• package-lock.json [3-212] — Updates the root Nx pin and resolved Nx package/platform artifacts from 23.3.0 to 23.3.1, including integrity/resolved URLs and optional platform metadata.
• package.json [213-223] — Changes the root devDependency pin for nx from 23.3.0 to 23.3.1.

Repository Impact:
• Root development and CI task orchestration: Nx is used as a root development dependency alongside Lerna; the update affects the version installed for repository tasks, without changing declared scripts.
• Cross-platform dependency installation: Lockfile resolutions and optional Nx platform packages are updated; the lockfile also records libc metadata for relevant Linux packages.

Cross-Repository Dependencies:
• create-contentful-app/package.json:39: An indexed search found a separate manifest retaining its own Nx 23.3.0 pin. The opened manifest confirms only an independent Nx devDependency, not consumption of experience-builder.

Database/Caching Impact:
• None

API Contract Violations:
• None.

Infrastructure Dependencies:
• Dependency installation and CI/build environments consuming the root package-lock.json.
• Verify npm lockfile consistency and platform-specific optional package installation, particularly on Linux glibc and musl.

Additional Insights:
• Lockfile reproducibility: The package manifest and lockfile should remain synchronized at Nx 23.3.1, with resolved package URLs and integrity values matching the new version.

Testing Recommendations

Frontend Impact:
• None.

Service Integration:
• None.

Data Serialization:
• None.

Privacy Compliance:
• None.

Backward Compatibility:
• Run npm ci from the updated package-lock.json and confirm it completes without lockfile or optional-package resolution errors.

OAuth Functionality:
• None

Reliability Testing:
• None

Additional Insights:
• Run the repository's Nx-backed build, lint, and test workflows to confirm the 23.3.1 task runner remains compatible with existing Lerna scripts.
• Validate dependency resolution on supported CI platforms, including Linux glibc and musl where applicable.

_{Analysis based on known dependency patterns and edges. Actual impact may vary.}

[bito-code-review]

✅ Review Settings Overridden

Status: Overridden Successfully

Guidelines:

• Accepted:

  • General : Review Posture, Repo Truth And Alignment, Domain Invariants

Note: Extra guidelines beyond 3 general purpose guidelines and 1 language specific guideline per language are not processed. Guidelines are fetched from the source branch.