v2.8.8
📦 turborepoView on GitHub →
🐛 13 fixes🔧 3 symbols
Summary
This release focuses primarily on bug fixes and stability improvements across various components, including security hardening, Windows TUI fixes, and dependency synchronization. Examples were also updated to use Postgres instead of MySQL references.
Migration Steps
- If you were using examples referencing mysql, update them to use postgres.
🐛 Bug Fixes
- Enhanced path validation in @turbo/codemod's assertSafeGitArgument.
- Fixed agents app to use private blob store access.
- Fixed initialization of blob log files to pass a non-empty body.
- Allowed overwriting existing blobs during run updates and log appends.
- Set a 5-hour timeout on the security audit sandbox.
- Resolved Windows TUI hang caused by portable-pty 0.9.0 ConPTY changes.
- Repaired audit fixer log streaming and replaced git push with patch upload.
- Pinned @turbo/gen version to match the running turbo binary.
- Used `secret_key_override` in tests to eliminate environment variable race conditions.
- Avoided panic in sandboxed environments by removing the system-configuration dependency.
- Hardened token protection using the `secrecy` crate and closed exposure gaps.
- Cleaned up orphaned Windows child processes upon shutdown.
- Synced lockfile with @turbo/gen optionalDependencies.