Bump tmp and nx

[dependabot]

Bumps tmp and nx. These dependencies needed to be updated together.
Updates tmp from 0.2.4 to 0.2.6

Commits

• 41f7159 Bump up the version
• efa4a06 Merge commit from fork
• 7ef2728 Check for relative values
• 3d2fe38 Bump up the version
• e162828 Merge pull request #309 from fflorent/fix-tmp-dir-with-dir
• b847d2f Fix use of tmp.dir() with dir option
• See full diff in compare view

Updates nx from 22.7.2 to 22.7.5

Release notes

Sourced from nx's releases.

22.7.5 (2026-05-27)

🩹 Fixes

• core: update tmp to 0.2.6 due to CVE-2026-44705 (#35813)

❤️ Thank You

• Jack Hsu @​jaysoo

22.7.4 (2026-05-25)

🩹 Fixes

• core: update brace-expansion and yaml (#35790)

❤️ Thank You

• Jack Hsu @​jaysoo

22.7.3 (2026-05-22)

🚀 Features

• js: support pnpm 11.2.2 (#35772)

🩹 Fixes

• angular: only add @​oxc-project/runtime on the vitest-analog path (#35734)
• angular-rspack: exclude eslint config from tailwind v4 source scan (#35663)
• core: warn before installing unknown npm packages as preset (#35644)
• core: preserve input order in createNodes plugin results (#35595)
• core: resolve local plugin subpath imports from source (#35631)
• core: treat undefined task parallelism as parallel when scheduling (#35736)
• core: handle object form of bin field in getPrettierPath (#35680)
• core: detect vscode copilot ai agent (#35757)
• core: allow local plugin subpath imports without custom conditions (#35751, #35631)
• dotnet: include Directory.. files in inputs (#35738)
• gradle: add transitive:true to all tasks (#35677)
• gradle: pin generated e2e project toolchain to installed JDK (#35703)
• js: fall back to npm publish when bun publish fails with auth error (#35756)
• linter: improve convert-to-flat-config output fidelity (#35330)
• linter: only rewrite workspace-package peer deps to workspace:* (#35423, #35318, #33417)
• misc: stop inferring projects: 'self' in dependsOn entries (#35686)
• misc: skip $ escaping in file paths on windows (#35692)
• repo: run dotnet restore before publish (#35771)
• repo: run dotnet restore before macos e2e job (#35774)
• rsbuild: infer build outputs from distPath.root directly (#35707)
• rsbuild: lazy-require @​rsbuild/core in plugin so spec mocks work after jest.resetModules (#35707)
• testing: correct yargs-parser import in getJestProjectsAsync (#35672, #35654)

... (truncated)

Commits

• dc849bb fix(core): update brace-expansion and yaml (#35790)
• 8fd1feb fix(core): allow local plugin subpath imports without custom conditions (#35751)
• 22f3c2e fix(core): detect vscode copilot ai agent (#35757)
• 0d18512 fix(misc): skip $ escaping in file paths on windows (#35692)
• 7c1318f fix(core): handle object form of bin field in getPrettierPath (#35680)
• a3acfd6 fix(core): treat undefined task parallelism as parallel when scheduling (#35736)
• c574207 cleanup(core): drop stale @​nrwl dedup TODO in nx report (#35730)
• 0d002ec fix(core): resolve local plugin subpath imports from source (#35631)
• b58ccd8 fix(core): preserve input order in createNodes plugin results (#35595)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.