chore(deps): upgrade Nx 21.5.3 to 22.7.9

[simoncodes-ca]

Closes #82.

Two Dependabot advisories against nx could not be closed by a patch release. Both needed the Nx 21 to 22 major migration.

Severity	Advisory	Summary	Fixed in
High	GHSA-vp3h-ghgh-jr7g	Zip-Slip in the self-hosted remote cache	22.7.7
Medium	GHSA-g2r8-wvmj-jf5w	Permissive CORS on the nx graph dev server	22.7.2

Neither is reachable in CI or in the published package. We do not use a self-hosted Nx remote cache. Nothing in the workflows starts nx graph. This is upkeep to get the alert count to zero.

What changed

All twelve Nx packages plus nx move to 22.7.9, the latest on the 22.x line.

@nx/vitest joins them as a thirteenth package. Nx 22 split the vitest executor out of @nx/vite, so core, domain, and tracker now use @nx/vitest:test.

@swc-node/register and @swc/core move up because Nx 22 peers them.

Angular stayed on 20.3.30

nx migrate wanted to pull Angular to 21, vitest to 4, and Analog to 2 alongside the Nx bump. @nx/angular@22 peers Angular at >= 19 < 22, so none of that is required.

I limited the run to the Nx packages and their migrations. That keeps this change to one major hop.

Issue #92 tracks the Angular 21 upgrade as a separate step.

Two migration outputs needed correcting

The codemod broke nx affected -t test. It dropped testTargetName from the @nx/vite/plugin block in nx.json. The plugin then inferred a plain test target on libs/data-transfer. That project has a vite config but no spec files, so the target failed with No test files found. pr.yml runs pnpm nx affected -t test, so this check would have gone red.

Both inferred targets now keep names other than test. @nx/vite/plugin keeps vite:test and @nx/vitest uses vitest:test. This matches the existing convention, where test is only ever declared explicitly in a project.json.

Nx 22 rejects {options.reportsDirectory} as a cache output. It resolves outside the workspace and fails the target. Coverage outputs move to a single {workspaceRoot}/coverage/{projectRoot} default in nx.json, rather than repeating in three project.json files.

Verification

All of these pass locally:

• pnpm run lint and pnpm run format:check
• pnpm run typecheck
• pnpm run test — 1946 tests across five projects
• pnpm run build and pnpm run docs:build
• pnpm nx affected -t test --base=origin/develop and pnpm nx affected -t build --base=origin/develop, the two commands pr.yml runs
• pnpm nx build cli --skip-nx-cache, the command .releaserc.json runs
• node dist/apps/cli/main.cjs bundle --name tracker, the prebuild:tracker hook

One note for reviewers

Nx caches the project graph. Run pnpm nx reset before any nx show project, nx run-many, or nx affected command, or you will read a stale graph.

Alerts 263, 264, 282, and 283 should close once this merges.

🤖 Generated with Claude Code

https://claude.ai/code/session_01RifJr7xyhZkaTWn4ssV1b4

[lingo-tracker-release]

🎉 This PR is included in version 0.18.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀