Change8

v2.8.2-canary.0

📦 turborepoView on GitHub →
🐛 5 fixes🔧 4 symbols

Summary

This canary release focuses primarily on security updates by upgrading several dependencies like tsup, axios, and fast-xml-parser to patch vulnerabilities. It also includes minor configuration updates to the turbo.json schema.

Migration Steps

  1. Update NODE_VERSION to 24.13.1 in Dockerfile within examples.

🐛 Bug Fixes

  • Upgrade tsup to fix rollup and glob vulnerabilities.
  • Upgrade axios to fix SSRF vulnerability.
  • Add `allowComments` and `allowTrailingCommas` to turbo.json schema.
  • Extract git argument validation into reusable helper.
  • Upgrade fast-xml-parser to fix RangeError DoS.

Affected Symbols