chore(deps): update dependency turbo to v2.9.12 by renovate[bot] · Pull Request #1520 · settlemint/sdk

renovate · 2026-01-12T02:02:18Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
turbo (source)	devDependencies	minor	`2.7.3` → `2.9.12`

Release Notes

vercel/turborepo (turbo)

`v2.9.12`: Turborepo v2.9.12

Compare Source

What's Changed

Changelog

release(turborepo): 2.9.11 by @github-actions[bot] in #12771
fix: Allow transit nodes in LSP diagnostics by @anthonyshew in #12773

Full Changelog: vercel/turborepo@v2.9.11...v2.9.12

`v2.9.11`: Turborepo v2.9.11

Compare Source

What's Changed

Changelog

release(turborepo): 2.9.10 by @github-actions[bot] in #12745
ci: Publish VS Code extension on release by @anthonyshew in #12747
fix: Start daemon for VSCode Extension from the extension itself by @anthonyshew in #12749
release(turborepo): 2.9.11-canary.1 by @github-actions[bot] in #12748
fix: Include file URIs in LSP lifecycle logs by @anthonyshew in #12751
fix: Handle JSON decoration visitor depth by @anthonyshew in #12752
fix: Resolve relative turbo path in VS Code extension by @anthonyshew in #12753
fix: Preserve Bun nested dependencies during prune by @anthonyshew in #12754
fix: Prefer installed Turbo for LSP by @anthonyshew in #12755
release(turborepo): 2.9.11-canary.2 by @github-actions[bot] in #12750
ci: Parallelize LSP release publishing by @anthonyshew in #12758
fix: Reduce VS Code extension startup popups by @anthonyshew in #12759
fix: Support turbo.jsonc in VS Code extension by @anthonyshew in #12760
fix: Remove VS Code task key gradient by @anthonyshew in #12761
release(turborepo): 2.9.11-canary.3 by @github-actions[bot] in #12756
chore: Release v2.9.11-canary.4 by @anthonyshew in #12762
ci: Stop VS Code publish from blocking release PR by @anthonyshew in #12763
release(turborepo): 2.9.11-canary.5 by @github-actions[bot] in #12764
fix: Publish VS Code extension from release tag by @anthonyshew in #12765
fix: Support shimmed VS Code LSP probes by @anthonyshew in #12767
release(turborepo): 2.9.11-canary.6 by @github-actions[bot] in #12766
release(turborepo): 2.9.11-canary.7 by @github-actions[bot] in #12768
fix: Allow $TURBO_EXTENDS$ in LSP diagnostics by @anthonyshew in #12770

Full Changelog: vercel/turborepo@v2.9.10...v2.9.11

`v2.9.10`: Turborepo v2.9.10

Compare Source

What's Changed

Changelog

release(turborepo): 2.9.9-canary.4 by @github-actions[bot] in #12716
release(turborepo): 2.9.9 by @github-actions[bot] in #12719
fix: Respect SCM env vars in turbo query affected by @anthonyshew in #12722
ci: Package VSCode extension in release workflow by @anthonyshew in #12723
fix: Avoid some raw create-turbo example telemetry by @anthonyshew in #12725
fix: Escape graph HTML payloads by @anthonyshew in #12726
fix: Prevent OTEL token injection to spoofed origins by @anthonyshew in #12727
fix: Retry HTTP status failures by @anthonyshew in #12728
fix: Validate microfrontend proxy Host header by @anthonyshew in #12730
fix: Redact task hash env debug logs by @anthonyshew in #12733
fix: Filter microfrontend proxy environments by @anthonyshew in #12732
fix: Preserve FSEvents mount points for device-relative paths by @anthonyshew in #12729
fix: Validate proxy Host headers by @anthonyshew in #12731
fix: Resolve TypeScript .js extension imports to .ts files in boundaries by @maschwenk in #12644
fix: Use random temp path for repo downloads by @anthonyshew in #12736
release(turborepo): 2.9.10-canary.1 by @github-actions[bot] in #12734
fix: Reject OTel endpoints with userinfo by @anthonyshew in #12737
fix: Authenticate local devtools WebSocket by @anthonyshew in #12738
fix: Handle clipboard exec errors by @anthonyshew in #12739
fix: Restrict Vercel token reuse to trusted API origins by @anthonyshew in #12740
fix: Keep workspace config discovery inside root by @anthonyshew in #12741
fix: Hardening for daemon IPC endpoints by @anthonyshew in #12742
fix: Enforce cache filesystem boundaries by @anthonyshew in #12743

Full Changelog: vercel/turborepo@v2.9.9...v2.9.10

`v2.9.9`: Turborepo v2.9.9

Compare Source

What's Changed

Changelog

release(turborepo): 2.9.8 by @github-actions[bot] in #12700
fix: Remove Unix parent death watchdogs by @anthonyshew in #12699
release(turborepo): 2.9.9-canary.1 by @github-actions[bot] in #12705
fix: Scope repo index prefixes to Git root by @anthonyshew in #12706
release(turborepo): 2.9.9-canary.2 by @github-actions[bot] in #12708
ci: Harden non-release GitHub Actions by @anthonyshew in #12707
docs: Add pnpm workspace flag (-w) to Oxc setup docs by @mattjoll in #12655
fix: Harden OG image signatures by @anthonyshew in #12709
fix: Scope release npm publishing credentials by @anthonyshew in #12710
ci: Harden release workflows by @anthonyshew in #12711
release(turborepo): 2.9.9-canary.3 by @github-actions[bot] in #12712
fix: Harden docs security endpoints by @anthonyshew in #12713
ci: Harden internal GitHub Actions by @anthonyshew in #12714
ci: Harden release workflow handling by @anthonyshew in #12715
fix: Preserve lockfiles during dry-run conversion by @anthonyshew in #12717
ci: Fix LSP workflow container matrix by @anthonyshew in #12718

New Contributors

@mattjoll made their first contribution in #12655

Full Changelog: vercel/turborepo@v2.9.8...v2.9.9

`v2.9.8`: Turborepo v2.9.8

Compare Source

What's Changed

@turbo/repository

chore: Update to Rust 1.95.0 by @ognevny in #12636

Changelog

release(turborepo): 2.9.7 by @github-actions[bot] in #12679
test: Add regression for gitignored output restore by @anthonyshew in #12681
docs: Clarify root task guidance by @anthonyshew in #12683
fix: Preserve concrete dependency precedence by @anthonyshew in #12682
release(turborepo): 2.9.8-canary.1 by @github-actions[bot] in #12685
fix: Resolve Yarn catalog affected packages by @anthonyshew in #12684
release(turborepo): 2.9.8-canary.2 by @github-actions[bot] in #12687
fix: Preserve Bun prune lockfile validity by @anthonyshew in #12686
release(turborepo): 2.9.8-canary.3 by @github-actions[bot] in #12689
fix: Create prune docker bin stubs by @anthonyshew in #12688
release(turborepo): 2.9.8-canary.4 by @github-actions[bot] in #12690
fix: Keep tbx shell connections stable by @anthonyshew in #12692
perf: Reduce turbo watch hash memory spikes by @anthonyshew in #12695
release(turborepo): 2.9.8-canary.5 by @github-actions[bot] in #12696
fix: Reduce parent-death watchdog CPU usage by @anthonyshew in #12697
release(turborepo): 2.9.8-canary.6 by @github-actions[bot] in #12698

Full Changelog: vercel/turborepo@v2.9.7...v2.9.8

`v2.9.7`: Turborepo v2.9.7

Compare Source

What's Changed

eslint

chore: Upgrade dependencies to resolve their known vulnerabilities by @anthonyshew in #12604

Examples

feat(sandbox): Bump @vercel/sandbox from v1 to beta by @marc-vercel in #12595
chore: Update examples to Turbo 2.9.6 by @cursor[bot] in #12600
examples: Add Ultracite example by @haydenbleasel in #12615

Changelog

fix: Align Markdown docs routing with docs/md endpoints by @molebox in #12596
fix: Support two-dot git ranges in filter selectors by @anthonyshew in #12599
feat: Graceful shutdown by @anthonyshew in #12607
test: Add stdin EOF startup regression coverage by @anthonyshew in #12609
fix: Ignore SIGINT in shim after spawning local turbo by @anthonyshew in #12612
fix: Support pnpm v11 multi-document lockfiles by @anthonyshew in #12616
fix: Preserve graceful shutdown exit code by @anthonyshew in #12620
fix: Keep Node wrapper alive during graceful shutdown by @anthonyshew in #12622
fix: Preserve PTY graceful shutdown semantics by @anthonyshew in #12624
feat: Move Vercel auth to standard OAuth/device flows by @markandrus in #12526
fix: Preserve legacy Vercel auth compatibility by @anthonyshew in #12629
fix: Recover Vercel auth tokens across login flows by @anthonyshew in #12631
docs: Fix TURBO_PLATFORM_ENV_DISABLED value in docs (true, not false) by @sleitor in #12633
chore: Update flags SDK by @AndyBitz in #12646
ci: Disable AWS-backed sccache by @anthonyshew in #12663
fix: Prevent prune from overmatching gitignore entries by @anthonyshew in #12662
ci: Harden release API commits by @anthonyshew in #12664
ci: Fix release API commit paths by @anthonyshew in #12665
release(turborepo): 2.9.7-canary.14 by @github-actions[bot] in #12666
chore: Add tbx sandbox helper by @anthonyshew in #12668
fix: Allow npm registry in tbx sandboxes by @anthonyshew in #12669
fix: Install turbo globally in tbx base by @anthonyshew in #12670
docs: Clarify package hash file inputs by @anthonyshew in #12671
fix: Allow tbx sandboxes to use stale bases by @anthonyshew in #12672
fix: Install dotfiles during tbx base refresh by @anthonyshew in #12673
fix: Improve tbx sandbox startup by @anthonyshew in #12674
fix: Improve tbx sandbox startup defaults by @anthonyshew in #12675
fix: Support pnpm 11 flat patch lockfiles by @anthonyshew in #12676
docs: Fix link to passthrough variables source code by @Wartijn in #12643
release(turborepo): 2.9.7-canary.15 by @github-actions[bot] in #12677
fix: Avoid rerunning non-cacheable watch dependencies by @anthonyshew in #12678

New Contributors

@marc-vercel made their first contribution in #12595
@cursor[bot] made their first contribution in #12600
@markandrus made their first contribution in #12526
@AndyBitz made their first contribution in #12646
@Wartijn made their first contribution in #12643

Full Changelog: vercel/turborepo@v2.9.6...v2.9.7

`v2.9.6`: Turborepo v2.9.6

Compare Source

What's Changed

create-turbo

chore: Update dependencies found in audits by @anthonyshew in #12586

Examples

fix: Add missing @types/node to with-svelte example apps by @anthonyshew in #12585

Changelog

docs: Add Bun equivalent for updating dependencies by @anthonyshew in #12580
fix: Mention turbo.json in concurrency error message by @anthonyshew in #12582
fix: Surface actionable message when remote cache is requested but not linked by @anthonyshew in #12584
chore: Delete agents app by @anthonyshew in #12587
fix: Load custom CA certificates in fast webpki-only HTTP client by @anthonyshew in #12591
docs: Remove pre-release badges by @anthonyshew in #12592

Full Changelog: vercel/turborepo@v2.9.5...v2.9.6

`v2.9.5`: Turborepo v2.9.5

Compare Source

What's Changed

create-turbo

feat: Replace package manager commands in scaffolded README files by @DependerKumarSoni in #6747

@turbo/telemetry

fix: Suppress telemetry alert when running on Vercel by @anthonyshew in #12576

Changelog

feat: Add circular package dependency detection to boundaries by @anthonyshew in #12567
perf: Increase remote cache upload chunk size from 8KB to 256KB by @anthonyshew in #12568
perf: Parallelize boundaries checking with Rayon and cache DFS traversals by @anthonyshew in #12569

New Contributors

@DependerKumarSoni made their first contribution in #6747

Full Changelog: vercel/turborepo@v2.9.4...v2.9.5

`v2.9.4`: Turborepo v2.9.4

Compare Source

What's Changed

@turbo/codemod

fix: Always update $schema URL to versioned format during migration by @anthonyshew in #12529
fix: Support turbo.jsonc in codemod transforms by @anthonyshew in #12532
fix: Preserve prerelease info in schema URL during codemod migration by @anthonyshew in #12542

Examples

build(deps): Bump @xmldom/xmldom from 0.8.11 to 0.8.12 in /examples/with-react-native-web by @dependabot[bot] in #12537

Changelog

feat: Add incremental task caching by @anthonyshew in #12531
docs: Send siteId as label on feedback GitHub issues by @molebox in #12527
Replace local ai-agent-detection with @vercel/agent-readability by @molebox in #12528
fix: Prevent filterUsingTasks --filter from pulling dependents into Task Graph by @anthonyshew in #12535
fix: Only enforce signature key length for keys that exist by @anthonyshew in #12538
fix: Validate engine concurrency after task-level filtering by @anthonyshew in #12540
feat: Allow --affected and --filter to be combined by @anthonyshew in #12543
fix(config): Deep-merge nested OTEL config across priority sources by @bitttttten in #12513
fix: Retain microfrontend proxy tasks when using filterUsingTasks by @anthonyshew in #12545
fix: Bun workspace lockfile pruning producing invalid output by @JRoy in #12548
fix: Respect dirty .gitignore patterns during task input hashing by @anthonyshew in #12557

New Contributors

@JRoy made their first contribution in #12548

Full Changelog: vercel/turborepo@v2.9.3...v2.9.4

`v2.9.3`: Turborepo v2.9.3

Compare Source

What's Changed

Changelog

fix: Preserve per-workspace lockfiles during pnpm pruning by @anthonyshew in #12519

Full Changelog: vercel/turborepo@v2.9.2...v2.9.3

`v2.9.2`: Turborepo v2.9.2

Compare Source

What's Changed

Examples

feat(examples): Add Next.js + Elysia full-stack starter template by @eastgold15 in #12414

Changelog

docs: Add documentation for cacheMaxAge and cacheMaxSize options by @anthonyshew in #12500
fix: Resolve correct nested bun lockfile versions during prune by @anthonyshew in #12506
Revert "fix: Avoid setsid() in PTY spawn to prevent macOS Gatekeeper CPU spikes" by @anthonyshew in #12507
fix: Unblock watch loop so interruptible persistent tasks restart on file changes by @anthonyshew in #12509
fix(api-client): Treat * as wildcard in preflight Access-Control-Allow-Headers by @bitttttten in #12503
docs: Document turbo.* generator variables by @anthonyshew in #12511
fix: Backfill missing pnpm workspace importer entries during prune by @anthonyshew in #12514
fix: Include transitive dependencies in engine graph pruning for affected paths using Task Graph by @anthonyshew in #12516
fix: Update AI-generated response disclaimer to include human attribution by @Copilot in #12517
fix: Preserve shallow install strategy during npm lockfile pruning by @anthonyshew in #12520

New Contributors

@eastgold15 made their first contribution in #12414

Full Changelog: vercel/turborepo@v2.9.1...v2.9.2

`v2.9.1`: Turborepo v2.9.1

Compare Source

What's Changed

@turbo/codemod

feat: Handle package manager catalogs in migration codemod by @anthonyshew in #12496

@turbo/repository

feat: Add cacheMaxAge and cacheMaxSize for local cache eviction by @anthonyshew in #12487

Changelog

docs: Release post for 2.9 by @anthonyshew in #12441

Full Changelog: vercel/turborepo@v2.9.0...v2.9.1

`v2.9.0`: Turborepo v2.9.0

Compare Source

What's Changed

Docs

docs: Release post for 2.8 by @anthonyshew in #11559
docs: Update oxc.mdx to include cache false by @bestickley in #11571
docs: Fix curl markdown Accept header syntax in 2.8 release blog by @marko-hologram in #11580
docs: Fix worktree command in blog post by @anthonyshew in #11583
docs: Rename command → subcommand by @anthonyshew in #11584
feat: Add requestType tracking for header-negotiated markdown by @molebox in #11585
fix: Upgrade next to fix HTTP deserialization DoS by @anthonyshew in #11597
fix: Upgrade mermaid to fix lodash-es vulnerability by @anthonyshew in #11611
fix: Upgrade recharts to fix lodash vulnerability by @anthonyshew in #11606
chore: Move applications to apps/ directory by @anthonyshew in #11613
fix: Upgrade rehype packages to fix mdast-util-to-hast vulnerability by @anthonyshew in #11616
chore: Migrate to Ultracite by @haydenbleasel in #11948
fix: Strip JSX components from heading anchors and TOC entries by @anthonyshew in #12404

create-turbo

fix: Upgrade tsup to fix rollup and glob vulnerabilities by @anthonyshew in #11601
fix: Upgrade inquirer to 8.2.7 to fix tmp vulnerability by @anthonyshew in #11622
fix: Upgrade ts-jest to 29.4.6 to fix brace-expansion ReDoS vulnerabilities by @anthonyshew in #11623
feat: Migrate from tsup to tsdown by @anthonyshew in #11649
fix: Upgrade semver to fix ReDoS vulnerability by @anthonyshew in #11683
fix: Upgrade inquirer to remove lodash dependency by @anthonyshew in #11709
fix: Upgrade tsdown in create-turbo to resolve valibot ReDoS vulnerability by @anthonyshew in #11702
fix: Upgrade jest to v30 to resolve brace-expansion ReDoS vulnerability by @anthonyshew in #11706
fix: Recover version numbering to 2.8.9-canary.0 by @anthonyshew in #11853
fix: Sanitize git command inputs in create-turbo by @anthonyshew in #11876
chore: Remove pnpm-eslint .vscode transform from create-turbo by @anthonyshew in #12186
fix: Improve create-turbo connectivity check and offline error messages by @anthonyshew in #12257
feat: Add affectedUsingTaskInputs future flag for task-level --affected detection by @anthonyshew in #12247
fix: Replace dns.lookup with https.get for create-turbo online check by @anthonyshew in #12277
fix: Remove redundant online check from create-turbo by @anthonyshew in #12281
fix: Sort uninstalled package managers to bottom of create-turbo selection by @anthonyshew in #12353

turbo-ignore

fix: Resolve pnpm audit vulnerabilities via dependency bumps by @anthonyshew in #12220
feat: Deprecate turbo-ignore in favor of turbo query affected by @anthonyshew in #12382
fix: Tailored turbo-ignore deprecation notice for Vercel users by @anthonyshew in #12385

@turbo/codemod

fix: Upgrade axios to fix SSRF vulnerability by @anthonyshew in #11599
fix: Replace axios with native fetch in turbo-codemod by @anthonyshew in #11600
fix: Upgrade diff to fix DoS vulnerabilities by @anthonyshew in #11621
fix: Upgrade tsdown to fix valibot and diff vulnerabilities by @anthonyshew in #11766
fix: Upgrade semver to fix ReDoS vulnerability by @anthonyshew in #11765
fix: Enhance path validation in assertSafeGitArgument by @odaysec in #11788
fix: Guard against missing pipeline key in clean-globs codemod by @anthonyshew in #12235
fix: Stop add-package-names codemod from silently renaming existing packages by @anthonyshew in #12332
fix: Handle Yarn 2+ in @turbo/codemod install commands by @anthonyshew in #12477

eslint

fix: Upgrade eslint devDependency to fix stack overflow vulnerability by @anthonyshew in #11610
fix: Upgrade esbuild to fix arbitrary request vulnerability by @anthonyshew in #11615
fix: Upgrade Next.js to 16.1.5 to fix DoS vulnerabilities by @anthonyshew in #11681
fix: Upgrade eslint to v10 to resolve @eslint/plugin-kit ReDoS vulnerability by @anthonyshew in #11705
fix(eslint-plugin-turbo): Guard against missing tasks/pipeline in forEachTaskDef by @sleitor in #12411

@turbo/repository

fix: Rename cli workspace package to avoid false audit match by @anthonyshew in #11767
perf: Defer TLS initialization to a background thread by @anthonyshew in #11967
fix: Add repository field to @turbo/repository package.json by @anthonyshew in #11982
release(library): 0.0.1-canary.19 by @github-actions[bot] in #11983
feat: Add experimentalObservability with an OTel backend by @bkonkle in #11130
release(library): 0.0.1-canary.20 by @github-actions[bot] in #12116
chore: Update to Rust 1.94.0 by @ognevny in #12192
feat: Add packagesFromLockfile() NAPI binding to @turbo/repository by @anthonyshew in #12454
release(library): 0.0.1-canary.21 by @github-actions[bot] in #12455

Examples

examples: Update NODE_VERSION to 24.13.1 in Dockerfile by @i5d6 in #11591
fix: escaping for link titles in LinksService by @odaysec in #11632
examples: Update NODE_VERSION to 24.13.1 in Dockerfile by @i5d6 in #11679
docs: Replace mysql refs with postgres by @kyedavey in #11827
feat: Add with-otel example with pre-configured Grafana dashboard by @anthonyshew in #12043
examples: Upgrade with-react-native-web example to use latest versions by @serjooo in #12085
fix: Duplicate /signup? in Vercel URL by @04cb in #12088
examples: Fix markdown links inside code blocks in basic README by @sleitor in #11946
fix: Match vite and @vitejs/plugin-react versions on example by @GabrielBB in #12193
fix: Sync yarn lockfile before upgrading turbo in examples updater by @anthonyshew in #12286
chore: Upgrade Next.js to 16.2.0 in examples and apps by @anthonyshew in #12389
fix(examples): Update of with-svelte example by @floriansalihovic in #11952
fix: Use script-shell=bash for cross-platform with-shell-commands example by @Goldyvaiiii in #12436

Changelog

fix: Support trailing commas in microfrontends JSONC files by @anthonyshew in #11573
perf: Replace third-party crates with Rust std lib equivalents by @anthonyshew in #11569
perf: Reduce duplicate dependency versions by @anthonyshew in #11568
chore: Remove legacy Go/goreleaser buildcontainer directory by @anthonyshew in #11576
chore: Rename README.md to RULE.md in skills directory by @anthonyshew in #11582
fix: Validate turbo version from lockfile for all package managers by @anthonyshew in #11587
fix: Add allowComments and allowTrailingCommas to turbo.json schema by @ddmoney420 in #11579
chore: Eliminate ts-rs serde attribute parse warnings by @anthonyshew in #11589
fix: Extract git argument validation into reusable helper by @anthonyshew in #11593
fix: Upgrade fast-xml-parser to fix RangeError DoS by @anthonyshew in #11598
fix: Upgrade semver to fix ReDoS vulnerability by @anthonyshew in #11596
fix: Upgrade tar to fix security vulnerabilities by @anthonyshew in #11602
fix: Upgrade @actions/github to fix @octokit vulnerabilities by @anthonyshew in #11607
fix: Upgrade @vercel/blob and @actions packages to fix undici vulnerability by @anthonyshew in #11608
docs: Running Root Tasks by @Netail in #11630
Update README.md title and remove features section by @anthonyshew in #11651
docs: Update using-environment-variables.mdx by @anthonyshew in #11652
fix: Upgrade js-yaml to address CVE-2025-64718 by @alexmkio in #11650
fix: Remove smooth scrolling from docs by @anthonyshew in #11654
fix: Add sitemap link to 404 page and fix TurborepoLogo gradient by @anthonyshew in #11655
fix: Upgrade capnp to 0.24 by @anthonyshew in #11656
fix: Upgrade h2 to fix CONTINUATION Flood by [@anthonyshew](https://redirect.git

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
- Only on Sunday and Saturday (* * * * 0,6)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

cubic-dev-ai

No issues found across 2 files

socket-security · 2026-03-31T10:50:56Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	turbo@2.7.3 ⏵ 2.9.6	⁺¹		⁺¹	⁺¹

View full report

socket-security · 2026-03-31T10:50:58Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot added the dependencies Dependency updates label Jan 12, 2026

renovate Bot enabled auto-merge (squash) January 12, 2026 02:02

renovate-approve-2 Bot approved these changes Jan 12, 2026

View reviewed changes

renovate-approve Bot approved these changes Jan 12, 2026

View reviewed changes

github-actions Bot added qa:running QA workflow is currently running status:approved Pull request has been approved labels Jan 12, 2026

cubic-dev-ai Bot reviewed Jan 12, 2026

View reviewed changes

renovate Bot force-pushed the renovate/turbo-monorepo branch from 251f2c7 to 155afcc Compare January 17, 2026 06:10

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.7.4~~ chore(deps): update dependency turbo to v2.7.5 Jan 17, 2026

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.7.5~~ chore(deps): update dependency turbo to v2.7.6 Jan 24, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch 2 times, most recently from 3cf97f2 to 1dc5318 Compare January 28, 2026 19:15

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.7.6~~ chore(deps): update dependency turbo to v2.8.0 Jan 28, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from 1dc5318 to 9901082 Compare January 30, 2026 22:42

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.8.0~~ chore(deps): update dependency turbo to v2.8.1 Jan 30, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from 9901082 to d3e0bef Compare February 3, 2026 06:14

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.8.1~~ chore(deps): update dependency turbo to v2.8.2 Feb 3, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from d3e0bef to a9926e7 Compare February 3, 2026 23:00

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.8.2~~ chore(deps): update dependency turbo to v2.8.3 Feb 3, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from a9926e7 to 4a94302 Compare February 10, 2026 23:52

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.8.3~~ chore(deps): update dependency turbo to v2.8.5 Feb 10, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from 4a94302 to e09ef1c Compare February 11, 2026 15:35

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.8.5~~ chore(deps): update dependency turbo to v2.8.6 Feb 11, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from e09ef1c to bee6f7d Compare February 11, 2026 23:10

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.8.6~~ chore(deps): update dependency turbo to v2.8.7 Feb 11, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from bee6f7d to 392faaa Compare February 13, 2026 22:57

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.8.7~~ chore(deps): update dependency turbo to v2.8.8 Feb 13, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from 392faaa to d0014ae Compare February 15, 2026 02:31

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.8.8~~ chore(deps): update dependency turbo to v2.8.9 Feb 15, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from d0014ae to 7e19c3d Compare February 18, 2026 12:06

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.8.17~~ chore(deps): update dependency turbo to v2.8.18 Mar 18, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from f4e7f55 to d85f7be Compare March 18, 2026 22:42

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.8.18~~ chore(deps): update dependency turbo to v2.8.19 Mar 18, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from d85f7be to 58623bc Compare March 19, 2026 18:19

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.8.19~~ chore(deps): update dependency turbo to v2.8.20 Mar 19, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from 58623bc to ec523ff Compare March 31, 2026 10:49

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.8.20~~ chore(deps): update dependency turbo to v2.9.1 Mar 31, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from ec523ff to dfb0465 Compare March 31, 2026 22:39

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.9.1~~ chore(deps): update dependency turbo to v2.9.2 Mar 31, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from dfb0465 to 020196f Compare April 1, 2026 02:29

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.9.2~~ chore(deps): update dependency turbo to v2.9.3 Apr 1, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from 020196f to 3fcfe85 Compare April 6, 2026 02:47

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.9.3~~ chore(deps): update dependency turbo to v2.9.4 Apr 6, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from 3fcfe85 to b3c70da Compare April 7, 2026 19:00

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.9.4~~ chore(deps): update dependency turbo to v2.9.5 Apr 7, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from b3c70da to 0ba2605 Compare April 10, 2026 15:39

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.9.5~~ chore(deps): update dependency turbo to v2.9.6 Apr 10, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from 0ba2605 to d841e15 Compare May 1, 2026 04:26

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.9.6~~ chore(deps): update dependency turbo to v2.9.7 May 1, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from d841e15 to 0532968 Compare May 3, 2026 06:46

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.9.7~~ chore(deps): update dependency turbo to v2.9.8 May 3, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from 0532968 to 4f61999 Compare May 4, 2026 23:17

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.9.8~~ chore(deps): update dependency turbo to v2.9.9 May 4, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from 4f61999 to 939c3f9 Compare May 7, 2026 22:52

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.9.9~~ chore(deps): update dependency turbo to v2.9.10 May 7, 2026

renovate Bot force-pushed the renovate/turbo-monorepo branch from 939c3f9 to 7024866 Compare May 9, 2026 02:40

renovate Bot changed the title ~~chore(deps): update dependency turbo to v2.9.10~~ chore(deps): update dependency turbo to v2.9.11 May 9, 2026

chore(deps): update dependency turbo to v2.9.12

6fd47fe

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependency turbo to v2.9.12#1520

chore(deps): update dependency turbo to v2.9.12#1520
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/turbo-monorepo

renovate Bot commented Jan 12, 2026 •

edited

Loading

Uh oh!

cubic-dev-ai Bot left a comment

Uh oh!

socket-security Bot commented Mar 31, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Mar 31, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jan 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.9.12: Turborepo v2.9.12

What's Changed

Changelog

v2.9.11: Turborepo v2.9.11

What's Changed

Changelog

v2.9.10: Turborepo v2.9.10

What's Changed

Changelog

v2.9.9: Turborepo v2.9.9

What's Changed

Changelog

New Contributors

v2.9.8: Turborepo v2.9.8

What's Changed

@​turbo/repository

Changelog

v2.9.7: Turborepo v2.9.7

What's Changed

eslint

Examples

Changelog

New Contributors

v2.9.6: Turborepo v2.9.6

What's Changed

create-turbo

Examples

Changelog

v2.9.5: Turborepo v2.9.5

What's Changed

create-turbo

@​turbo/telemetry

Changelog

New Contributors

v2.9.4: Turborepo v2.9.4

What's Changed

@​turbo/codemod

Examples

Changelog

New Contributors

v2.9.3: Turborepo v2.9.3

What's Changed

Changelog

v2.9.2: Turborepo v2.9.2

What's Changed

Examples

Changelog

New Contributors

v2.9.1: Turborepo v2.9.1

What's Changed

@​turbo/codemod

@​turbo/repository

Changelog

v2.9.0: Turborepo v2.9.0

What's Changed

Docs

create-turbo

turbo-ignore

@​turbo/codemod

eslint

@​turbo/repository

Examples

Changelog

Configuration

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

socket-security Bot commented Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

renovate Bot commented Jan 12, 2026 •

edited

Loading

`v2.9.12`: Turborepo v2.9.12

`v2.9.11`: Turborepo v2.9.11

`v2.9.10`: Turborepo v2.9.10

`v2.9.9`: Turborepo v2.9.9

`v2.9.8`: Turborepo v2.9.8

@turbo/repository

`v2.9.7`: Turborepo v2.9.7

`v2.9.6`: Turborepo v2.9.6

`v2.9.5`: Turborepo v2.9.5

@turbo/telemetry

`v2.9.4`: Turborepo v2.9.4

@turbo/codemod

`v2.9.3`: Turborepo v2.9.3

`v2.9.2`: Turborepo v2.9.2

`v2.9.1`: Turborepo v2.9.1

@turbo/codemod

@turbo/repository

`v2.9.0`: Turborepo v2.9.0

@turbo/codemod

@turbo/repository

socket-security Bot commented Mar 31, 2026 •

edited

Loading

socket-security Bot commented Mar 31, 2026 •

edited

Loading