Update dependency turbo to v2.8.3 #337

renovate · 2026-01-05T20:42:15Z

This PR contains the following updates:

Package	Change	Age	Confidence
turbo (source)	`2.7.2` → `2.8.3`

Release Notes

vercel/turborepo (turbo)

`v2.8.3`: Turborepo v2.8.3

Compare Source

What's Changed

Changelog

fix: Upgrade capnp to 0.24 by @anthonyshew in #11656
fix: Upgrade h2 to fix CONTINUATION Flood by @anthonyshew in #11658
fix: Upgrade crossbeam-channel to 0.5.15 by @anthonyshew in #11657
chore: Remove abandoned turbo clone command by @anthonyshew in #11673
fix: Upgrade rustls and ring by @anthonyshew in #11659
fix: Upgrade openssl to 0.10.75 by @anthonyshew in #11660
fix: Replace unmaintained adler with adler2 by @anthonyshew in #11661

Full Changelog: vercel/turborepo@v2.8.2...v2.8.3

`v2.8.2`: Turborepo v2.8.2

Compare Source

What's Changed

Docs

fix: Upgrade next to fix HTTP deserialization DoS by @anthonyshew in #11597
fix: Upgrade mermaid to fix lodash-es vulnerability by @anthonyshew in #11611
fix: Upgrade recharts to fix lodash vulnerability by @anthonyshew in #11606
chore: Move applications to apps/ directory by @anthonyshew in #11613
fix: Upgrade rehype packages to fix mdast-util-to-hast vulnerability by @anthonyshew in #11616

create-turbo

fix: Upgrade tsup to fix rollup and glob vulnerabilities by @anthonyshew in #11601
fix: Upgrade inquirer to 8.2.7 to fix tmp vulnerability by @anthonyshew in #11622
fix: Upgrade ts-jest to 29.4.6 to fix brace-expansion ReDoS vulnerabilities by @anthonyshew in #11623
feat: Migrate from tsup to tsdown by @anthonyshew in #11649

@turbo/codemod

fix: Upgrade axios to fix SSRF vulnerability by @anthonyshew in #11599
fix: Replace axios with native fetch in turbo-codemod by @anthonyshew in #11600
fix: Upgrade diff to fix DoS vulnerabilities by @anthonyshew in #11621

eslint

fix: Upgrade eslint devDependency to fix stack overflow vulnerability by @anthonyshew in #11610
fix: Upgrade esbuild to fix arbitrary request vulnerability by @anthonyshew in #11615

Examples

examples: Update NODE_VERSION to 24.13.1 in Dockerfile by @i5d6 in #11591
fix: escaping for link titles in LinksService by @odaysec in #11632

Changelog

fix: Add allowComments and allowTrailingCommas to turbo.json schema by @ddmoney420 in #11579
chore: Eliminate ts-rs serde attribute parse warnings by @anthonyshew in #11589
fix: Extract git argument validation into reusable helper by @anthonyshew in #11593
fix: Upgrade fast-xml-parser to fix RangeError DoS by @anthonyshew in #11598
fix: Upgrade semver to fix ReDoS vulnerability by @anthonyshew in #11596
fix: Upgrade tar to fix security vulnerabilities by @anthonyshew in #11602
fix: Upgrade @actions/github to fix @octokit vulnerabilities by @anthonyshew in #11607
fix: Upgrade @vercel/blob and @actions packages to fix undici vulnerability by @anthonyshew in #11608
docs: Running Root Tasks by @Netail in #11630
Update README.md title and remove features section by @anthonyshew in #11651
docs: Update using-environment-variables.mdx by @anthonyshew in #11652
fix: Upgrade js-yaml to address CVE-2025-64718 by @alexmkio in #11650
fix: Remove smooth scrolling from docs by @anthonyshew in #11654
fix: Add sitemap link to 404 page and fix TurborepoLogo gradient by @anthonyshew in #11655

New Contributors

@ddmoney420 made their first contribution in #11579
@i5d6 made their first contribution in #11591
@Netail made their first contribution in #11630
@alexmkio made their first contribution in #11650

Full Changelog: vercel/turborepo@v2.8.1...v2.8.2

`v2.8.1`: Turborepo v2.8.1

Compare Source

What's Changed

Docs

docs: Release post for 2.8 by @anthonyshew in #11559
docs: Update oxc.mdx to include cache false by @bestickley in #11571
docs: Fix curl markdown Accept header syntax in 2.8 release blog by @marko-hologram in #11580
docs: Fix worktree command in blog post by @anthonyshew in #11583
docs: Rename command → subcommand by @anthonyshew in #11584
feat: Add requestType tracking for header-negotiated markdown by @molebox in #11585

Changelog

fix: Support trailing commas in microfrontends JSONC files by @anthonyshew in #11573
perf: Replace third-party crates with Rust std lib equivalents by @anthonyshew in #11569
perf: Reduce duplicate dependency versions by @anthonyshew in #11568
chore: Remove legacy Go/goreleaser buildcontainer directory by @anthonyshew in #11576
chore: Rename README.md to RULE.md in skills directory by @anthonyshew in #11582
fix: Validate turbo version from lockfile for all package managers by @anthonyshew in #11587

New Contributors

@bestickley made their first contribution in #11571
@marko-hologram made their first contribution in #11580

Full Changelog: vercel/turborepo@v2.8.0...v2.8.1

`v2.8.0`: Turborepo v2.8.0

Compare Source

What's Changed

Docs

fix(docs): Hide line numbers for terminal code blocks by @anthonyshew in #11560
fix: Disable pointer events on closed chat panel by @anthonyshew in #11561

@turbo/repository

chore: Update to Rust 1.93.0 by @ognevny in #11548

Changelog

chore: Update docs:dev script filter to point to the correct documentation site path by @yujiseok in #11551
docs(skills): Standardize --dry flag usage by @jeniabrook in #11550
fix: Normalize ANSI escape codes in insta snapshots by @anthonyshew in #11564
chore: Remove unused dependencies by @anthonyshew in #11565

New Contributors

@yujiseok made their first contribution in #11551

Full Changelog: vercel/turborepo@v2.7.6...v2.8.0

`v2.7.6`

Compare Source

`v2.7.5`: Turborepo v2.7.5

Compare Source

What's Changed

Docs

docs(fix): Add loading state after sources load in AI chat by @anthonyshew in #11442
feat(turbo-json): Add optional description field to task definitions by @anthonyshew in #11447
fix(docs): Clean up markdown output for LLM content negotiation by @anthonyshew in #11452
docs: Block search engine indexing on subdomains by @anthonyshew in #11455
chore: Update domain to turborepo.dev by @anthonyshew in #11454
fix(docs): Allow search engine indexing on production domain by @anthonyshew in #11456
fix(docs): Fix mobile hamburger menu not opening by @anthonyshew in #11482
feat(docs): Add search icon to mobile header by @anthonyshew in #11483
feat: Add errorsOnlyShowHash future flag by @anthonyshew in #11486
feat: Add docs subcommand for searching documentation by @anthonyshew in #11490
feat(docs): Implement two-stage chat by @anthonyshew in #11493
fix(docs): Cancel active stream when clearing chat by @anthonyshew in #11494
feat(docs): Add version warning for old docs subdomains by @anthonyshew in #11495
docs: Show 'Searching sources...' loading state in AI chat by @anthonyshew in #11496

create-turbo

chore: update copyright year to 2026 by @rootdiae in #11476

Changelog

fix(scope): Make package inference deterministic for subdirectory filters by @anthonyshew in #11432
fix(tui): Only call DisableMouseCapture on Windows if mouse capture was enabled by @anthonyshew in #11444
fix: Improve behavior for OOM-killed tasks by @anthonyshew in #11477
fix: Remove root app package requirement for polyrepo support by @anthonyshew in #11478
fix(tui): Enable mouse capture for all terminals to restore scroll functionality by @anthonyshew in #11487
fix: Replace execSync with execFileSync for oxfmt by @odaysec in #11463

Full Changelog: vercel/turborepo@v2.7.4...v2.7.5

`v2.7.4`: Turborepo v2.7.4

Compare Source

What's Changed

Docs

docs: Add dependsOn to lint task for proper cache invalidation by @anthonyshew in #11384
chore: Migrate from Prettier to oxfmt by @anthonyshew in #11392
docs: Add Oxc (oxlint, oxfmt) guide by @anthonyshew in #11398
chore: Update oxlint configuration by @anthonyshew in #11413
feat: Git worktree support by @anthonyshew in #11416
docs: Exclude sitemap.xml from middleware to prevent i18n rewrite by @anthonyshew in #11419
fix(docs): Exclude schema.json paths from middleware matcher by @anthonyshew in #11420
docs: Fix OpenAPI spec by @anthonyshew in #11421
fix(docs): Make mobile menu scrollable on small viewports by @anthonyshew in #11422
fix(docs): Fix markdown content negotation matcher by @anthonyshew in #11425

create-turbo

fix(create-turbo): Lowercase bun label for consistency by @anthonyshew in #11388
refactor(create-turbo): Simplify git initialization to single commit by @anthonyshew in #11387

Examples

fix: update outdated packages to remove node/nest deprecation warning by @varma-cephas in #11395
examples: Upgrade with-prisma to prisma 7.2.0 and pnpm by @msebi in #11402
fix(example): remove @expo/webpack-config from with-react-native-web by @wantop1 in #11408

Changelog

fix: Support file watching for non-root volumes on MacOS by @mdlawson in #11363
fix(create-turbo): Prevent hang when using bun package manager by @anthonyshew in #11386
fix(turbo-utils): Add proxy support to fetch requests by @anthonyshew in #11389
fix: Validate root and temp directory paths in download function by @odaysec in #11311
chore: Add fix scripts for lint, format, and TOML checking by @anthonyshew in #11397
fix: Prevent infinite loop in pnpm turbo script and update docs by @anthonyshew in #11400
docs: Add AGENTS.md and remove .cursor rules by @anthonyshew in #11401
fix: Normalize workspace globs with leading ./ by @anthonyshew in #11403
fix(ui): Fix text selection when TUI sidebar is hidden by @anthonyshew in #11405
fix(tui): Properly disable mouse mode on exit and panic by @anthonyshew in #11418

New Contributors

@mdlawson made their first contribution in #11363
@odaysec made their first contribution in #11311
@varma-cephas made their first contribution in #11395
@msebi made their first contribution in #11402
@wantop1 made their first contribution in #11408

Full Changelog: vercel/turborepo@v2.7.3...v2.7.4

`v2.7.3`: Turborepo v2.7.3

Compare Source

What's Changed

Examples

examples: Remove skipLibCheck from nestjs.json in nestJS example by @leos in #11323

Changelog

fix(bun): Add GitHub/git packages by @Palid in #11268
chore: Extract turborepo-boundaries crate from turborepo-lib by @anthonyshew in #11312
chore: Extract turborepo-engine crate from turborepo-lib by @anthonyshew in #11315
chore: Extract turborepo-gitignore crate from turborepo-lib by @anthonyshew in #11317
chore: Extract turborepo-json-rewrite crate from turborepo-lib by @anthonyshew in #11318
chore: Extract turborepo-hash and turborepo-types crates from turborepo-lib by @anthonyshew in #11319
chore: Extract turborepo-shim crate from turborepo-lib by @anthonyshew in #11320
chore: Extract types to turborepo-types and create turborepo-daemon crate by @anthonyshew in #11321
chore: Extract turborepo-daemon crate from turborepo-lib by @anthonyshew in #11322
chore: Extract turborepo-scope crate from turborepo-lib by @anthonyshew in #11324
chore: Extract turborepo-diagnostics crate from turborepo-lib by @anthonyshew in #11332
feat: Extract turborepo-task-hash crate from turborepo-lib by @anthonyshew in #11334
chore: Move TaskDefinition from turborepo-lib to turborepo-types by @anthonyshew in #11335
chore: Move DryRunMode, UIMode, and LogOrder to turborepo-types by @anthonyshew in #11337
chore: Fix loop in build script in package.json by @anthonyshew in #11336
chore: Move ContinueMode and LogPrefix to turborepo-types by @anthonyshew in #11338
chore: Extract run/summary to turborepo-run-summary crate by @anthonyshew in #11342
chore: Extract turbo_json module to turborepo-turbo-json crate by @anthonyshew in #11344
chore: Extract config and engine builder modules from turborepo-lib by @anthonyshew in #11346
chore: Remove duplicate task_inheritance.rs from turborepo-lib by @anthonyshew in #11347
chore: Extract run/cache.rs to turborepo-run-cache crate by @anthonyshew in #11348
chore: remove extra file by @anthonyshew in #11351
chore: Move resolved opts types to turborepo-types by @anthonyshew in #11349
chore: Extract some small items from turborepo-lib by @anthonyshew in #11350
chore: Move engine builder tests from turborepo-lib to turborepo-engine by @anthonyshew in #11353
chore: Move global_hash.rs from turborepo-lib to turborepo-task-hash by @anthonyshew in #11355
chore: Move more shared types to turborepo-types by @anthonyshew in #11356
chore: Add turborepo-task-executor crate by @anthonyshew in #11357
chore: Add generic CommandProvider trait to turborepo-task-executor by @anthonyshew in #11358
chore: Implement MfeConfigProvider and TaskAccessProvider traits by @anthonyshew in #11359
chore: Add From<&RunOpts> for ExecutorConfig conversion by @anthonyshew in #11360
chore: Move TurboJsonReader to turborepo-turbo-json crate by @anthonyshew in #11361
chore: Move TaskExecutor to turborepo-task-executor crate by @anthonyshew in #11364
chore: Move TurboJsonLoader to turborepo-turbo-json crate by @anthonyshew in #11365
chore: Consolidate TurboJson tests into turborepo-turbo-json crate by @anthonyshew in #11371
chore: Extract task executor components to turborepo-task-executor by @anthonyshew in #11378
chore: Move MicroFrontendProxyProvider to turborepo-task-executor by @anthonyshew in #11379
chore: Clean up turborepo-lib wrapper modules and dead code by @anthonyshew in #11380
fix: Show TUI when using --output-logs=errors-only|none by @anthonyshew in #11382

New Contributors

@Palid made their first contribution in #11268
@leos made their first contribution in #11323

Full Changelog: vercel/turborepo@v2.7.2...v2.7.3

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

vercel · 2026-01-05T20:42:17Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
stack-docs	Ready	Preview, Comment	Feb 4, 2026 1:44am

changeset-bot · 2026-01-05T20:42:19Z

⚠️ No Changeset found

Latest commit: 67ff774

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

github-actions · 2026-01-05T20:47:59Z