what stackpulse tracks
Turborepo releases from GitHub
StackPulse watches Turborepo release notes and keeps the original source link close to every summary.
#stacks/turborepo/tooling
Turborepo release notes, breaking changes, and upgrade notes.
High-performance build system for JavaScript and TypeScript monorepos StackPulse turns upstream changelogs into scannable summaries with risky changes, deprecations, migration notes, and source links.
releases
20
breaking
0
security
3
deprecated
3
migrations
0
upgrade risk
Breaking changes and deprecations
Risky changes are separated from normal feature notes so you can scan upgrade impact before changing production dependencies.
migration notes
Source-backed next steps
Migration steps and recommended actions are only shown when the upstream release notes support them.
# latest_releases
source-backedv2.10.1-canary.1mediumdeprecationfeatureprereleaseJun 25, 2026
Turborepo v2.10.1-canary.1
This release includes performance improvements, dependency updates, and maintenance changes. Notable updates include migrating TUI virtual terminals and removing deprecated packages.
affected
Developers using Turborepo's TUI virtual terminals or the tbx package may be affected.
action
Update to the latest version to benefit from performance improvements and ensure compatibility.
release_signals
!Removed tbx package
!Removed a few pre-push hooks
+Migrate TUI virtual terminals from vt100 to Ghostty
v2.9.19-canary.1criticaldeprecationsecurityprereleaseJun 11, 2026
Turborepo v2.9.19-canary.1
This release focuses on hardening security and fixing bugs, particularly around cache handling, Windows PTY tasks, and authentication flows. Several vulnerabilities related to cache restoration, file access, and Git argument injection have been addressed.
affected
Users relying on cache restoration, Git integrations, or self-hosted login URLs may be affected by security fixes.
action
Upgrade to this version to benefit from security improvements and bug fixes.
release_signals
!Prevent Git argument injection in SCM refs
!Harden cache archive symlink restore
!Block self-hosted login URLs from attempting to use Vercel's SSO
!Validate OidHash hex buffers
!Separate artifact signature fields
!Removed web UI mode
v2.9.18mediumdeprecationsecurityJun 10, 2026
Turborepo v2.9.18
This release focuses on hardening security and fixing bugs related to cache handling, file access, and Git argument injection. Several improvements were made to ensure safer symlink restoration, artifact signature validation, and path normalization.
affected
Users relying on the web UI mode or self-hosted login URLs may be affected.
action
Update to this version to benefit from security fixes and deprecation changes.
release_signals
!Prevent Git argument injection in SCM refs
!Block self-hosted login URLs from attempting to use Vercel's SSO
!Harden cache archive symlink restore
!Validate OidHash hex buffers
!Separate artifact signature fields
!Remove web UI mode