●Change8

v2.9.19-canary.1

📦 turborepoView on GitHub →
🐛 13 fixes

Summary

This release focuses heavily on security hardening across cache operations, file access, and authentication flows. It also includes a fix for Ctrl+C handling on Windows PTY tasks and removes the deprecated web UI mode.

Migration Steps

  1. The web UI mode has been removed; users should rely on the CLI or other established workflows.

🐛 Bug Fixes

  • Fixed an issue where Ctrl+C was not being sent to Windows PTY tasks.
  • Harden cache archive symlink restore process.
  • Harden query server file access.
  • Confine patch paths used during pruning.
  • Prevent git argument injection when processing SCM refs.
  • Strip special mode bits during cache restoration.
  • Contain incremental cache outputs.
  • Normalized Windows daemon path hash.
  • Preserve vt100 cell byte counts.
  • Separated artifact signature fields.
  • Validated OidHash hex buffers.
  • Blocked self-hosted login URLs from attempting to use Vercel's SSO.
  • Implemented re-authentication when the stored token loses access to a linked team.