Change8

v2.9.11-canary.1

📦 turborepoView on GitHub →
1 features🐛 8 fixes

Summary

This release focuses on numerous security hardening fixes and improvements, including randomizing temp paths for repo downloads and enforcing cache filesystem boundaries. It also includes the publishing of the VS Code extension on release.

✨ New Features

  • Publish VS Code extension on release.

🐛 Bug Fixes

  • Use random temp path for repo downloads.
  • Reject OTel endpoints with userinfo.
  • Authenticate local devtools WebSocket.
  • Handle clipboard exec errors.
  • Restrict Vercel token reuse to trusted API origins.
  • Keep workspace config discovery inside root.
  • Hardening for daemon IPC endpoints.
  • Enforce cache filesystem boundaries.