Change8

v2.7.0

📦 turborepoView on GitHub →
3 features🐛 8 fixes🔧 4 symbols

Summary

This release introduces Turborepo Devtools and adds support for Yarn 4 catalogs and task-level extends configuration. It also includes important security fixes related to React Server Components and Next.js dependencies.

Migration Steps

  1. If you were using future flags related to configuration extension (`nonRootExtends` or `turboExtendsKeyword`), note that these have been removed in preparation for a stable release.

✨ New Features

  • Introduced Turborepo Devtools.
  • Added Yarn 4 catalogs support.
  • Added task-level `extends` field support in configuration.

🐛 Bug Fixes

  • Fixed React Server Components CVE vulnerabilities.
  • Preserved exit codes in notifyUpdate functions within create-turbo CLI.
  • Fixed quoting issues in turbo-ignore commands.
  • Upgraded Next.js to 15.5.7 to address CVE-2025-55182 in eslint integration.
  • Added Windows-specific environment variable to default passthroughs.
  • Added fine-grained interruptible task restarts in watch mode.
  • Fixed task composition when composing turbo.json files.
  • Allowed root microfrontends.json configuration for @vercel/microfrontends.

🔧 Affected Symbols

create-turbo CLIturbo-ignoreeslint (Next.js integration)@vercel/microfrontends