●Change8

v2.9.18

📦 turborepoView on GitHub →
🐛 11 fixes

Summary

This release focuses heavily on security and stability fixes, hardening cache operations, file access, and preventing argument injection. It also removes the deprecated web UI mode.

Migration Steps

  1. Remove usage of web UI mode, as it has been removed.

🐛 Bug Fixes

  • Harden cache archive symlink restore.
  • Harden query server file access.
  • Confine prune patch paths.
  • Prevent git argument injection in SCM refs.
  • Strip special mode bits from cache restore.
  • Contain incremental cache outputs.
  • Normalize Windows daemon path hash.
  • Preserve vt100 cell byte counts.
  • Separate artifact signature fields.
  • Validate OidHash hex buffers.
  • Block self-hosted login URLs from attempting to use Vercel's SSO.