What vercel/turborepo shipped
Written by FoxPlug from the repository's own releases; not affiliated with Turborepo. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/vercel/turborepo; Turborepo did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of October 5, 2026
What shipped
- Turborepo v2.11.8-canary.2 was released. Release
- The docs now explain how to declare Cargo sources that are read from outside the crate under experimental Cargo workspaces. Pull request #14480
- Dry-run JSON output now reports inferred framework environment variables for tasks whose hash is computed at execution time instead of showing an empty framework and no inferred variables. Pull request #14478
- Turbo prune for uv workspaces now carries root tool configuration such as conftest.py, ruff and pytest ini files, tox.ini, mypy, Pyright and ty configuration into the pruned output. Pull request #14449
- Cargo lint tasks now hash Clippy configuration, so a change to clippy.toml no longer produces a cached result with stale warnings. Pull request #14448
- Uv member tasks now hash ruff and pytest configuration found between the repository root and the member, not just at the root. Pull request #14447
- Go discovery is now stable when the repository is reached through a symlink, so build tasks keep producing and caching their binary and hashes no longer depend on the path spelling. Pull request #14445
- Pruned lockfiles now skip optional npm peer dependencies so npm ci no longer fails with EPATCHUNUSED when an unused optional peer patch was carried into the output. Pull request #14470
- Discovering nested.gitignore files now skips ignored directories such as
node_modules, so turbo watch starts tasks without waiting on a full tree walk. Pull request #14442 - Next.js was upgraded to 16.3.8 across the repository to remediate a server-side request forgery advisory in image optimization. Pull request #14451
Why it matters
This week brings several correctness fixes that stop cached results from going stale: Clippy, ruff, pytest and uv tool configuration are now part of task hashes, and uv pruning carries that configuration along. Go users reaching a repository through a symlink get stable discovery again, and npm pruning no longer carries unused optional peer patches that break npm ci. Dry runs also report inferred framework environment variables for tasks hashed at execution time.
Changelog entry
- Release Turborepo v2.11.8-canary.2. Release
- Hash Clippy configuration for Cargo lint tasks. Pull request #14448
- Hash ruff and pytest configuration between the root and uv members. Pull request #14447
- Carry uv tool configuration into pruned workspaces. Pull request #14449
- Report inferred framework environment variables for deferred tasks in dry runs. Pull request #14478
- Keep Go discovery stable when the repository is reached through a symlink. Pull request #14445
- Exclude optional npm peers from pruned lockfiles. Pull request #14470
- Document declaring Cargo sources read from outside the crate. Pull request #14480
- Skip ignored directories when discovering nested.gitignore files. Pull request #14442
- Stop the add-package-names codemod from generating duplicate names. Pull request #14433
- Avoid Windows CLI teardown deadlocks. Pull request #14435
- Upgrade Next.js to 16.3.8 repo-wide. Pull request #14451
Canary 2 is out. Clippy, ruff, pytest and uv tool config now feed task hashes. Go discovery is stable behind symlinks. Pruned npm lockfiles drop optional peers that broke npm ci. Dry runs report framework env vars for deferred tasks. turbo watch skips ignored dirs.
Turborepo v2.11.8-canary.2 is out, alongside a set of caching and pruning fixes. Cargo lint tasks now hash Clippy configuration, and uv member tasks hash ruff and pytest configuration found between the root and the member, so edits to those files no longer return stale cached output. turbo prune for uv workspaces carries root tool configuration into the pruned output, and pruned npm lockfiles now skip optional peer dependencies so npm ci stops failing on an unused patch. Go discovery stays stable when a repository is reached through a symlink. Dry-run JSON reports inferred framework environment variables for tasks hashed at execution time. Discovering nested.gitignore files skips ignored directories, which lets turbo watch start tasks sooner. Next.js was upgraded to 16.3.8 repo-wide for a
Week of September 28, 2026
What shipped
- Added experimental futureFlags.experimentalSetup opt-in flag as foundation for managed repository setup. Pull request #14361
- Implemented task filtering by tags in the CLI to select and run tasks based on configured labels. Pull request #14345
- Extended query command to filter tasks and packages by tags in addition to standard predicates. Pull request #14344
- Exposed task and package tags in query output to surface configured labels. Pull request #14343
- Fixed cache misses caused by Vercel OIDC token rotation in.env.local by normalizing the token for cache hashing. Pull request #14356
- Fixed single-package mode inference for query commands to correctly report affected tasks. Pull request #14351
- Added SDKROOT to global passthrough environment variables to support native builds with Apple SDK in strict environment mode. Pull request #14353
- Normalized task input resolution consistently across affected detection and hashing to prevent path normalization mismatches. Pull request #14341
- Improved standalone turbo installer to upgrade existing binaries and report installation status. Pull request #14330
- Upgraded brace-expansion dependency to address stack-exhaustion vulnerability. Pull request #14347
Why it matters
Tags-based task filtering represents a major organizational feature for complex monorepos, allowing developers to group and select related tasks. Several bug fixes improve cache reliability and task detection accuracy, while infrastructure improvements stabilize CI and standalone installations across platforms.
Changelog entry
- Feat: Add experimental setup future flag Pull request #14361
- Release: Turborepo v2.11.7 Release
- Fix: Ignore Vercel OIDC token rotation in.env.local cache inputs Pull request #14356
- Fix: Pass SDKROOT through to repository tasks Pull request #14353
- Fix: Infer single-package mode for query commands Pull request #14351
- Fix: Complete task query metadata for non-script entrypoints Pull request #14350
- Feat: Filter tasks by tags in the CLI Pull request #14345
- Feat: Filter query tasks and packages by tags Pull request #14344
- Feat: Expose task and package tags in query Pull request #14343
- Fix: Upgrade brace-expansion to latest compatible releases Pull request #14347
- Fix: Normalize task inputs consistently for affected detection and hashing Pull request #14341
- Fix: Upgrade standalone turbo on installer reruns Pull request #14330
Turborepo v2.11.7 ships task filtering by tags, fixes for cache misses and single-package queries, and improved standalone installer handling.
Turborepo v2.11.7 introduces task filtering by tags—a major organizational feature for monorepos. This release also fixes cache misses from environment variable rotation, improves single-package mode detection, and stabilizes CI with better standalone installer handling and dependency updates.
Week of September 21, 2026
What shipped
- Added standalone installer URLs for curl | bash installation on macOS, Linux, and Windows, serving installer scripts directly from the documentation site. Pull request #14325
- Published versioned standalone turbo archives for five platform targets with verification that each archive contains exactly one root-level executable. Pull request #14322
- Added version-matched agent guidance with a root-only configuration option and version-aware managed AGENTS.md block to guide automatic updates. Pull request #14250
- Fixed TUI log streaming after Ratatui upgrade by avoiding cursor-position queries during terminal clearing transitions. Pull request #14318
- Upgraded Ratatui from 0.30.0 to 0.30.2 to reduce TUI allocations by avoiding temporary vector builds in Terminal::flush. Pull request #14317
- Optimized GraphiQL serving by switching from compiled Handlebars templates to a static HTML page. Pull request #14315
- Optimized Bun lockfile parsing by removing trailing commas directly from validated tokens instead of reformatting the entire JSON tree. Pull request #14314
- Fixed LSP task reference resolution to locate package script keys through the JSONC AST instead of searching source text. Pull request #14298
- Improved error reporting to show actual missing lockfile paths and point Yarn configuration errors at.yarnrc.yml instead of the lockfile. Pull request #14296
- Fixed token file reading to treat empty token values as TokenNotFound instead of accepting empty strings. Pull request #14293
Why it matters
This week brings significant improvements to Turborepo installation and usability. The new standalone installers make getting turbo simpler on multiple platforms, while numerous performance optimizations and bug fixes improve the core tooling experience. Fixes to the LSP, error reporting, and package manager handling strengthen the development experience.
Changelog entry
- Standalone installer URLs for curl | bash installation on macOS, Linux, and Windows Pull request #14325
- Versioned standalone turbo archives published for five platform targets Pull request #14322
- Version-matched agent guidance with root-only configuration option added Pull request #14250
- TUI log streaming fixed after Ratatui upgrade Pull request #14318
- Ratatui upgraded to 0.30.2 for reduced TUI allocations Pull request #14317
- GraphiQL page now served statically instead of compiled on each request Pull request #14315
- Bun lockfile parsing optimized by removing trailing commas without full JSON formatting Pull request #14314
- LSP task references now resolved using JSONC AST instead of text search Pull request #14298
- Package manager error reporting now shows actual missing lockfile paths Pull request #14296
- Token files with empty values now treated as TokenNotFound Pull request #14293
- Standalone asset publication now passes repository explicitly to gh release commands Pull request #14327
- Installer test environment isolated from GitHub Actions PATH variables Pull request #14326
Turborepo now supports standalone installation via curl | bash. Reduced TUI allocations, faster Bun parsing, static GraphiQL serving, and improved LSP task resolution also shipped this week.
This week's Turborepo updates focus on easier installation and better performance. Standalone installers now available for curl | bash setup across platforms. Performance improvements include upgraded Ratatui reducing TUI allocations, optimized Bun lockfile parsing, and static GraphiQL serving. Fixes improve LSP task resolution, error reporting for package managers, and token file handling.