Change8

v2.9.10-canary.1

📦 turborepoView on GitHub →
🐛 14 fixes🔧 2 symbols

Summary

This release focuses on numerous bug fixes, including improvements to dry-run lockfile preservation, SCM environment variable handling, and various security/validation fixes related to microfrontend proxies and telemetry.

🐛 Bug Fixes

  • Preserved lockfiles during dry-run conversion.
  • Fixed LSP workflow container matrix.
  • Respect SCM environment variables in `turbo query affected`.
  • Packaged VSCode extension in release workflow.
  • Avoided some raw `create-turbo` example telemetry.
  • Escaped graph HTML payloads.
  • Prevented OTEL token injection to spoofed origins.
  • Retried HTTP status failures.
  • Validated microfrontend proxy Host header.
  • Redacted task hash environment variable debug logs.
  • Filtered microfrontend proxy environments.
  • Preserved FSEvents mount points for device-relative paths.
  • Validated proxy Host headers.
  • Resolved TypeScript `.js` extension imports to `.ts` files in boundaries.

Affected Symbols