Today we officially deprecated 4 packages that facilitated remote caching with Nx and different cloud providers: nx/s3-cache, nx/gcs-cache, nx/azure-cache
and nx/shared-fs-cache. This is a proactive move to discourage a known attack vector in recent supply chain attacks: cache poisoning.
This isn't related to Nx Cloud's remote caching which has built-in protection against poisoning. These plugins were used by teams who couldn't use Nx Cloud but wanted the speed benefits of distributed task caching.
We published a CVE (CREEP CVE-2025-36852) last year against these packages to make it clear that they shouldn't be used for serious projects because of the inherent design flaw. But we still see the plugins used in irresponsible ways.
Cyber attacks are ramping up, and are only going to get more effective as the tools the attackers use become more powerful. We're no longer compromising by providing tools that we know most users are using irresponsibly.
The notice linked in the next tweet gives more details and recommendations.
Static code analysis and AI check on the published VSCode extension would be great. We publish to other marketplaces like Chocolatey, and they have code scanning prior to making new versions public.
It feels awful to be part of a supply-chain attack. At this point, we have to assume your machine can be compromised at any point because the supply chain has so many holes in it. It's easy to miss something because the defaults are insecure.
Never leave anything on disk. Use vaults. Don't use `gh` -- unless `gh auth token` is removed from the CLI.
Nx is 7x more memory efficient now.
Yet, another feature we added to the Nx platform that really helped us track down how to improve Nx itself.
- https://t.co/WTa5tZ06uc
- https://t.co/vdWpQT0064
Task sandboxing has been useful for us internally to find cache misconfiguration. This can result in both false-positive and false-negative cache hits/misses. We've been patching our plugins so Nx users get the right config OOTB.
Looking forward to making this feature more widely available in the future.
Nx v22.7 is out!! π¨
π¦ Task Sandboxing
π more fine-grained cache control
β‘ 7x more memory efficient & 90% faster
π€ Agentic Nx Import
..and a lot more
Check out @juristr's blog post & video below
Self-Healing CI is all about helping you waste less time debugging broken PRs. So the more we can trust to auto-apply, the better.
Thatβs why we now analyze tasks and suggest the ones that can confidently be auto-applied.
Read more in our blog post below.
Moved my personal website/blog to @Cloudflare + made it Agent-Native
(while prepping lunch for kids...)
These things are so easy nowadays...
(also wrote a quick article about how I deploy to Cloudflare from a monorepo because these questions keep coming up; link below)
As an aside, I exclusively use Claude and Claude Code to learn or setup new tools.
Like switching from Ghostty to Kitty, I had Claude inspect my Ghostty, neovim, and tmux setup and try to keep the key bindings similar so I don't have to retrain my brain too much.
The new tutorial series also serves as a great way to use AI agents to learn Nx. You can copy the prompt into Claude Code or a similar tool, and it'll guide you through the content using the actual repo!
https://t.co/DqsyMeZg0I
We reworked the Nx docs so the "getting started" experience is more streamlined and caters only to things everyone should learn.
Nx is simpler than ever, and if you haven't tried it in a while I highly recommend taking a look again.
Check it out! https://t.co/szLtgEtVqR
I've been running CI monitor in Claude Code for two weeks, and it 100% of the time got my PR to green without my intervention.
The only bottleneck now is getting human reviews once the PR is green. But I no longer need to use up mental capacity to babysit PRs.
Also ICYMI, we updated our information architecture for https://t.co/O96aUKuVuN.
We've grouped topics to general vs specific content, like general CI features vs specific Playwright features. It should be easier to navigate and find things.
We're working on a lot of cool things in 2026.
I'm very excited about bring the benefits of Nx to synthetic monorepos. Definitely a lot of value to unlock here.
Also, looking forward to less manual work to get that last mile to merged PRs using AI agents.
In 2026, Nx becomes essential for autonomous AI agent performance.
π€ Local-to-CI Integration: bridge the boundary between your local agent and CI
π Synthetic Monorepos: monorepo benefits for people with a polyrepo setup
π Task Sandboxing: automatically detect misconfiguration
π ...and more!
A little gift before we head out for the holidays: Nx 22.3 is live π
π Full @angular 21 support: zoneless, esbuild, and Vitest out of the box
π Experimental tsgo compiler: test the future of @typescript
π @PrettierCode v3 compatibility
Enjoy your holiday hacking!
We gave Claude Code the same feature request twice.
β³ Polyrepo: 2 hours
π Nx monorepo: 30 minutes
Same app. Different setups. Wildly different results.
Here's why your repo structure matters more than you think π§΅
(π sound on π)
Tired of guessing why your CI is running out of memory? π€
Nx's new Agent Resource Usage view shows you exactly which tasks are consuming resources.
No more blind guessing. Just data-driven decisions. π
1/2 Nx's Self-Healing CI Agent accounts for 15% of commits on the Nx repo.
That makes it our third most productive team member. Claude Code comes in at #7.
@NxDevTools