Skip to content
verdict:

Turborepo 2.8.2

digest

Release notes

note: no summary for this digest release

Digest releases are listed without a summary. The original release notes for this version are below.

release-notesgithub.com/vercel/turborepo · 47 lines
  1. <!-- Release notes generated using configuration in .github/release.yml at v2.8.2 -->
  3. ## What's Changed
  4. ### Docs
  5. * fix: Upgrade next to fix HTTP deserialization DoS by @anthonyshew in https://github.com/vercel/turborepo/pull/11597
  6. * fix: Upgrade mermaid to fix lodash-es vulnerability by @anthonyshew in https://github.com/vercel/turborepo/pull/11611
  7. * fix: Upgrade recharts to fix lodash vulnerability by @anthonyshew in https://github.com/vercel/turborepo/pull/11606
  8. * chore: Move applications to apps/ directory by @anthonyshew in https://github.com/vercel/turborepo/pull/11613
  9. * fix: Upgrade rehype packages to fix mdast-util-to-hast vulnerability by @anthonyshew in https://github.com/vercel/turborepo/pull/11616
  10. ### create-turbo
  11. * fix: Upgrade tsup to fix rollup and glob vulnerabilities by @anthonyshew in https://github.com/vercel/turborepo/pull/11601
  12. * fix: Upgrade inquirer to 8.2.7 to fix tmp vulnerability by @anthonyshew in https://github.com/vercel/turborepo/pull/11622
  13. * fix: Upgrade ts-jest to 29.4.6 to fix brace-expansion ReDoS vulnerabilities by @anthonyshew in https://github.com/vercel/turborepo/pull/11623
  14. * feat: Migrate from tsup to tsdown by @anthonyshew in https://github.com/vercel/turborepo/pull/11649
  15. ### @turbo/codemod
  16. * fix: Upgrade axios to fix SSRF vulnerability by @anthonyshew in https://github.com/vercel/turborepo/pull/11599
  17. * fix: Replace axios with native fetch in turbo-codemod by @anthonyshew in https://github.com/vercel/turborepo/pull/11600
  18. * fix: Upgrade diff to fix DoS vulnerabilities by @anthonyshew in https://github.com/vercel/turborepo/pull/11621
  19. ### eslint
  20. * fix: Upgrade eslint devDependency to fix stack overflow vulnerability by @anthonyshew in https://github.com/vercel/turborepo/pull/11610
  21. * fix: Upgrade esbuild to fix arbitrary request vulnerability by @anthonyshew in https://github.com/vercel/turborepo/pull/11615
  22. ### Examples
  23. * examples: Update NODE_VERSION to 24.13.1 in Dockerfile by @i5d6 in https://github.com/vercel/turborepo/pull/11591
  24. * fix: escaping for link titles in LinksService by @odaysec in https://github.com/vercel/turborepo/pull/11632
  25. ### Changelog
  26. * fix: Add `allowComments` and `allowTrailingCommas` to turbo.json schema by @ddmoney420 in https://github.com/vercel/turborepo/pull/11579
  27. * chore: Eliminate ts-rs serde attribute parse warnings by @anthonyshew in https://github.com/vercel/turborepo/pull/11589
  28. * fix: Extract git argument validation into reusable helper by @anthonyshew in https://github.com/vercel/turborepo/pull/11593
  29. * fix: Upgrade fast-xml-parser to fix RangeError DoS by @anthonyshew in https://github.com/vercel/turborepo/pull/11598
  30. * fix: Upgrade semver to fix ReDoS vulnerability by @anthonyshew in https://github.com/vercel/turborepo/pull/11596
  31. * fix: Upgrade tar to fix security vulnerabilities by @anthonyshew in https://github.com/vercel/turborepo/pull/11602
  32. * fix: Upgrade @actions/github to fix @octokit vulnerabilities by @anthonyshew in https://github.com/vercel/turborepo/pull/11607
  33. * fix: Upgrade @vercel/blob and @actions packages to fix undici vulnerability by @anthonyshew in https://github.com/vercel/turborepo/pull/11608
  34. * docs: Running Root Tasks by @Netail in https://github.com/vercel/turborepo/pull/11630
  35. * Update README.md title and remove features section by @anthonyshew in https://github.com/vercel/turborepo/pull/11651
  36. * docs: Update using-environment-variables.mdx by @anthonyshew in https://github.com/vercel/turborepo/pull/11652
  37. * fix: Upgrade js-yaml to address CVE-2025-64718 by @alexmkio in https://github.com/vercel/turborepo/pull/11650
  38. * fix: Remove smooth scrolling from docs by @anthonyshew in https://github.com/vercel/turborepo/pull/11654
  39. * fix: Add sitemap link to 404 page and fix TurborepoLogo gradient by @anthonyshew in https://github.com/vercel/turborepo/pull/11655
  41. ## New Contributors
  42. * @ddmoney420 made their first contribution in https://github.com/vercel/turborepo/pull/11579
  43. * @i5d6 made their first contribution in https://github.com/vercel/turborepo/pull/11591
  44. * @Netail made their first contribution in https://github.com/vercel/turborepo/pull/11630
  45. * @alexmkio made their first contribution in https://github.com/vercel/turborepo/pull/11650
  47. **Full Changelog**: https://github.com/vercel/turborepo/compare/v2.8.1...v2.8.2

view on githubimported 2026-09-28 via npm