chore(deps): update dependency turbo to v2.10.9 by renovate[bot] · Pull Request #438 · grendel-consulting/favicon-creator

renovate · 2026-08-11T05:38:50Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
turbo (source)	`2.9.14` → `2.10.9`

Release Notes

vercel/turborepo (turbo)

`v2.10.9`: Turborepo v2.10.9

Compare Source

What's Changed

Changelog

chore: Release Turborepo 2.10.8 by @github-actions[bot] in #13626
perf: Walk literal-prefix tree globs without wax compilation by @charpeni in #13522
fix: Accept semver ranges in devEngines.packageManager.version by @bangseongbeom in #13623
docs: Explain affected package invalidation reasons by @ghoullier in #13594
perf(lockfiles): Borrow field-name scalars in the pnpm fast parser by @anthonyshew in #13648
perf(repository): Avoid discarded alias allocation in Relationship by @anthonyshew in #13650
perf(lockfiles): Drop redundant human_name clone for pnpm v7/v9 by @anthonyshew in #13649
perf: Index workspace nodes by name in project_relationships by @anthonyshew in #13647
perf: Share resolution identity lists across identical workspace closures by @anthonyshew in #13641
docs: Fix duplicated word in runtime dependencies guide summary by @anthonyshew in #13630
refactor: Remove turborepo-lsp dependency on turborepo-lib by @anthonyshew in #13631
perf: Index Bun nested lockfile entries by name for fallback resolution by @anthonyshew in #13633
perf: Memoize framework inference per package during task hashing by @anthonyshew in #13634
perf: Avoid materializing transient declarations in external_dependencies by @anthonyshew in #13646
perf: Enable shared closure DP for npm and yarn1 lockfiles by @anthonyshew in #13635
perf: Parse pnpm explicit-key entries in the lockfile fast path by @anthonyshew in #13640
perf: Parallelize resolution fingerprint hashing by @anthonyshew in #13642
perf: Build resolution identity lists in parallel by @anthonyshew in #13643
perf: Intern resolution identities as Arc<str> across closures by @anthonyshew in #13645
fix: Compose affected tasks with package filters by @anthonyshew in #13656
docs: Explain worktree cache path isolation by @anthonyshew in #13657
fix: Upgrade brace-expansion to 5.0.9 by @anthonyshew in #13658
docs: Correct verified inaccuracies in the Turborepo Agent Skill by @charpeni in #13644
chore: Update Next.js to 16.3.0 by @anthonyshew in #13659
fix: Don't use eprintln! in the panic hook by @molofsky in #13637
fix: Invalidate only when Git ignore sources change by @smasato in #13632
docs: Update Geistdocs to 1.19.4 by @christopherkindl in #13680
docs: Exclude Turborepo from its own OSS products menu by @christopherkindl in #13681
docs: Use the geistdocs Turborepo logo in the navbar by @christopherkindl in #13682
docs: Update redirected vercel.com/nextjs.org links to current targets by @molebox in #13685
refactor: Generalize native command arguments by @anthonyshew in #13664
refactor: Move native contracts to tasks by @anthonyshew in #13665
docs: Fix loadTransformers reference in turbo-codemod README by @latent-9 in #13683
refactor: Model native task execution explicitly by @anthonyshew in #13666
feat: Compose aggregate native task dependencies by @anthonyshew in #13667
fix: Respect aggregate task overrides by @anthonyshew in #13668
test: Stabilize watch task inputs regression test by @anthonyshew in #13686
feat: Parse Python quality tool declarations by @anthonyshew in #13669
feat: Resolve Python quality plans by @anthonyshew in #13670
refactor: Extract uv native task specs by @anthonyshew in #13671
feat: Synthesize Python quality tasks by @anthonyshew in #13672
test: Cover Python quality task commands by @anthonyshew in #13673
feat: Hash Python quality task inputs by @anthonyshew in #13674
test: Cover Python quality task graph by @anthonyshew in #13675
chore: Release Turborepo 2.10.9-canary.1 by @github-actions[bot] in #13687
docs: Document dependency-driven Python tasks by @anthonyshew in #13676
fix: Prune Bun wildcard workspace dev dependencies by @anthonyshew in #13694
fix: Prevent Windows process cleanup PID reuse by @anthonyshew in #13695

New Contributors

@bangseongbeom made their first contribution in #13623
@ghoullier made their first contribution in #13594
@molofsky made their first contribution in #13637
@smasato made their first contribution in #13632
@latent-9 made their first contribution in #13683

Full Changelog: vercel/turborepo@v2.10.8...v2.10.9

`v2.10.8`: Turborepo v2.10.8

Compare Source

What's Changed

Changelog

fix: Scroll TUI task list with mouse wheel by @anthonyshew in #13479
fix: Make releases resumable by @anthonyshew in #13486
refactor: Expose knowledge-backed package scope views by @anthonyshew in #13456
chore: Release Turborepo 2.10.7 by @anthonyshew in #13489
refactor: Use package knowledge for configuration scopes by @anthonyshew in #13457
refactor: Use package knowledge for run scope enumeration by @anthonyshew in #13458
release(turborepo): 2.10.8-canary.1 by @github-actions[bot] in #13490
refactor: Use package knowledge in repository views by @anthonyshew in #13459
refactor: Use package knowledge in package integrations by @anthonyshew in #13460
ci: Parallelize environment setup steps by @anthonyshew in #13491
release(turborepo): 2.10.8-canary.2 by @github-actions[bot] in #13492
refactor: Use package knowledge for task hashing paths by @anthonyshew in #13461
refactor: Use package knowledge for run-cache paths by @anthonyshew in #13462
refactor: Bind toolchain callbacks to package knowledge by @anthonyshew in #13463
refactor: Use package knowledge for microfrontend commands by @anthonyshew in #13464
refactor: Use package knowledge for run summaries by @anthonyshew in #13465
refactor: Use package knowledge for watcher paths by @anthonyshew in #13466
ci: Enable remote cache for types codegen by @anthonyshew in #13495
docs: Fix llms.txt links to page markdown routes by @molebox in #13497
refactor: Use package knowledge for prune paths by @anthonyshew in #13467
refactor: Use package knowledge in the LSP by @anthonyshew in #13468
refactor: Use consistent repository construction by @anthonyshew in #13469
refactor: Delete legacy package and scope authority by @anthonyshew in #13470
perf: Cache telemetry salt instead of re-reading config on every hash by @charpeni in #13498
feat: Support Android (Termux) by @gtbuchanan in #12735
ci: Restore Cargo targets on all test platforms by @anthonyshew in #13505
fix: Resolve gitdir for linked worktrees in repo index by @charpeni in #13503
test: Characterize relationship projections by @anthonyshew in #13499
refactor: Produce native relationship observations by @anthonyshew in #13500
feat: Resolve GitHub Actions remote base refs behind future flag by @louis-bompart in #10732
refactor: Add core relationship projections by @anthonyshew in #13502
refactor: Define external resolution contracts by @anthonyshew in #13507
refactor: Move repository tasks into Turbo configuration by @anthonyshew in #13504
refactor: Build JavaScript external resolution generations by @anthonyshew in #13508
refactor: Contribute Cargo external resolutions by @anthonyshew in #13509
refactor: Migrate external declaration consumers by @anthonyshew in #13511
ci: Auto-merge release PRs by @anthonyshew in #13510
chore: Release Turborepo 2.10.8-canary.3 by @anthonyshew in #13512
fix: Use tokenless release review gate by @anthonyshew in #13513
refactor: Use resolution fingerprints for task hashes by @anthonyshew in #13514
fix: Support fork PRs in review gate by @anthonyshew in #13516
refactor: Migrate lockfile affectedness by @anthonyshew in #13519
refactor: Migrate external resolution summaries by @anthonyshew in #13520
refactor: Migrate external package queries to resolution knowledge by @anthonyshew in #13523
fix: Serialize macOS Homebrew setup by @anthonyshew in #13549
refactor: Migrate prune lockfile keys to resolution identities by @anthonyshew in #13524
refactor: Migrate global hash inputs to resolution knowledge by @anthonyshew in #13525
refactor: Delete legacy external-resolution PackageInfo state by @anthonyshew in #13526
chore: Release Turborepo 2.10.8-canary.4 by @github-actions[bot] in #13557
refactor: Remove external declaration compatibility paths by @anthonyshew in #13527
refactor: Produce immutable native task and command knowledge by @anthonyshew in #13528
refactor: Migrate native task registration and suggestions by @anthonyshew in #13529
refactor: Migrate turbo-json native task synthesis by @anthonyshew in #13530
refactor: Migrate persistent and recursive task validation by @anthonyshew in #13531
refactor: Migrate native task definition precedence by @anthonyshew in #13532
refactor: Migrate engine native command planning by @anthonyshew in #13533
refactor: Migrate executor native command resolution by @anthonyshew in #13534
refactor: Migrate native task query, devtools, and LSP views by @anthonyshew in #13535
refactor: Migrate command summaries and delete legacy task paths by @anthonyshew in #13536
refactor: Produce immutable task-contract knowledge by @anthonyshew in #13537
refactor: Migrate engine task-contract composition by @anthonyshew in #13538
refactor: Migrate hashing engines to task contracts by @anthonyshew in #13539
refactor: Exclude JavaScript from toolchain task-I/O dispatch by @anthonyshew in #13540
refactor: Migrate change classification to immutable knowledge by @anthonyshew in #13543
refactor: Separate prune rendering with golden coverage by @anthonyshew in #13546
refactor: Delete JS format interpretation from prune orchestration by @anthonyshew in #13554
refactor: Audit remaining JS knowledge consumer reads by @anthonyshew in #13556
refactor: Migrate MFE dependency detection off PackageInfo by @anthonyshew in #13558
refactor: Remove prune PackageInfo dependencies by @anthonyshew in #13562
refactor: Remove residual runtime PackageInfo gates by @anthonyshew in #13564
refactor: Migrate boundary diagnostics off PackageInfo by @anthonyshew in #13571
docs: Audit Cargo package knowledge by @anthonyshew in #13572
refactor: Complete Cargo relationship and resolution knowledge by @anthonyshew in #13576
refactor: Port Cargo task and contract knowledge by @anthonyshew in #13581
refactor: Port Cargo watch and prune knowledge by @anthonyshew in #13582
refactor: Remove runtime toolchain dispatch by @anthonyshew in #13584
ci: Restore Cargo target for lockfile tests by @anthonyshew in #13588
refactor: Replace toolchains with repository contributors by @anthonyshew in #13585
refactor: Remove Cargo contributor plumbing by @anthonyshew in #13586
refactor: Remove ToolchainId runtime dispatch by @anthonyshew in #13587
refactor: Route task behavior through contract domains by @anthonyshew in #13589
refactor: Route package consumers by manifest by @anthonyshew in #13591
refactor: Route MFE eligibility by manifest by @anthonyshew in #13592
refactor: Project manifest-derived repository facts by @anthonyshew in #13593
refactor: Route residual task behavior by capability by @anthonyshew in #13595
refactor: Route resolution through explicit domains by @anthonyshew in #13596
refactor: Route N-API package listing by manifest by @anthonyshew in #13597
docs: Vercel Remote Cache authentication with OIDC policies by @markandrus in #13140
refactor: Own resolution fingerprints in repository by @anthonyshew in #13598
refactor: Fail closed on invalid relationships by @anthonyshew in #13599
perf: Reuse Cargo metadata discovery snapshot by @anthonyshew in #13600
refactor: Resolve MFE package ownership from graph by @anthonyshew in #13601
refactor: Remove retained package payloads by @anthonyshew in #13603
feat: Add native Cargo format task by @anthonyshew in #13606
refactor: Compose repository graphs for optional toolchains by @anthonyshew in #13608
ci: Invalidate Cap'n Proto caches by @anthonyshew in #13616
feat: Discover uv workspaces by @anthonyshew in #13609
feat: Run native uv tasks by @anthonyshew in #13610
feat: Hash uv lockfile closures by @anthonyshew in #13611
fix: Make Windows Cap'n Proto cache relocatable by @anthonyshew in #13621
feat: Watch uv workspace changes by @anthonyshew in #13612
feat: Prune uv workspaces by @anthonyshew in #13613
fix: Fall back to polling on macOS by @anthonyshew in #13622
test: Add uv workspace integration coverage by @anthonyshew in #13602

New Contributors

@gtbuchanan made their first contribution in #12735

Full Changelog: vercel/turborepo@v2.10.7...v2.10.8

`v2.10.7`: Turborepo v2.10.7

Compare Source

What's Changed

Changelog

release(turborepo): 2.10.6 by @github-actions[bot] in #13431
chore: Refine bug report template help section by @anthonyshew in #13433
fix: Verify version after attempting codemod upgrade by @anthonyshew in #13446
test: Characterize JavaScript package discovery by @anthonyshew in #13440
refactor: Separate package graph node assembly by @anthonyshew in #13441
fix: Upgrade @vercel/connect by @anthonyshew in #13450
refactor: Add authoritative package knowledge by @anthonyshew in #13442
feat: Select runnable task entrypoints by @anthonyshew in #13452
refactor: Add workspace root contribution contract by @anthonyshew in #13447
refactor: Use package knowledge for scope selection by @anthonyshew in #13443
fix: Prevent mobile homepage overflow by @anthonyshew in #13453
docs: Document service readiness probes by @anthonyshew in #13472
fix: Preserve pnpm root dependencies during prune by @anthonyshew in #13476
fix: Preserve pnpm aliased dependencies during prune by @anthonyshew in #13477
release(turborepo): 2.10.7-canary.1 by @github-actions[bot] in #13478
test: Add Terminal UI sanity tests by @anthonyshew in #13475
chore: Upgrade Next.js by @anthonyshew in #13482
chore: Upgrade brace-expansion by @anthonyshew in #13483
fix: Support multiple macOS file watch roots by @anthonyshew in #13484

Full Changelog: vercel/turborepo@v2.10.6...v2.10.7

`v2.10.6`: Turborepo v2.10.6

Compare Source

What's Changed

Changelog

release(turborepo): 2.10.5 by @github-actions[bot] in #13368
fix: Disable unresolved Cargo artifact caching by @anthonyshew in #13362
fix: Surface create-turbo Git failures by @anthonyshew in #13371
fix: Resolve exact cargo profile outputs by @anthonyshew in #13366
fix: Prune Bun production workspace dev dependencies by @anthonyshew in #13369
fix: Resolve Cargo target output layouts by @anthonyshew in #13370
release(turborepo): 2.10.6-canary.1 by @github-actions[bot] in #13374
fix: Preserve Yarn Babel extension during pruning by @anthonyshew in #13373
feat: Support Cargo-only repos by @anthonyshew in #13378
fix: Preserve colors in TUI output by @anthonyshew in #13381
feat: Infer Cargo workspace tasks by @anthonyshew in #13380
fix: Retain shutdown signals for force exit by @anthonyshew in #13382
release(turborepo): 2.10.6-canary.2 by @github-actions[bot] in #13383
fix: Resolve weekly security audit vulnerabilities by @cursor[bot] in #13358
chore: Update to Rust 1.97.0 by @ognevny in #13322
fix: Pin VS Code extension macOS runners by @anthonyshew in #13391
release(turborepo): 2.10.6-canary.3 by @github-actions[bot] in #13392
docs: Add Experimental Rust Guide by @anthonyshew in #13375
ci: Use affected filtering for JS tests by @anthonyshew in #13386
ci: Fold docs checks into quality by @anthonyshew in #13385
ci: Verify schemas through Turborepo by @anthonyshew in #13387
chore: Avoid duplicate N-API Cargo build by @anthonyshew in #13388
chore: Hash embedded frameworks data in Rust builds by @anthonyshew in #13389
ci: Include VS Code extension type checks by @anthonyshew in #13390
refactor: Run releaser bundle directly by @anthonyshew in #13393
refactor: Move release publishing into releaser by @anthonyshew in #13394
refactor: Consolidate release orchestration by @anthonyshew in #13395
feat: Add crate-scoped Cargo verification tasks by @anthonyshew in #13398
ci: Fetch release commit parent by @anthonyshew in #13400
docs: Update Geistdocs to 1.13.0 by @molebox in #13412
release(turborepo): 2.10.6-canary.4 by @github-actions[bot] in #13401
fix: Preserve pnpm node@runtime: lockfile entries by @anthonyshew in #13408
chore: Fix typos in with-solid example and globwatch comment by @tajo in #13416
refactor: Remove unused public APIs found by Hawk by @anthonyshew in #13420
fix: Check dynamic imports in boundaries by @anthonyshew in #13418
refactor: Use regex! for static pattern compilation by @anthonyshew in #13419
fix: Refactor turbo watch by @anthonyshew in #13423
release(turborepo): 2.10.6-canary.5 by @github-actions[bot] in #13424
chore: Upgrade brace-expansion by @anthonyshew in #13429
chore: Update tar to 7.5.18 by @anthonyshew in #13428
chore: Upgrade js-yaml by @anthonyshew in #13427
fix: Match JIT inputs for affected tasks by @anthonyshew in #13426
fix: Preserve project Yarn package extensions by @anthonyshew in #13425

New Contributors

@tajo made their first contribution in #13416

Full Changelog: vercel/turborepo@v2.10.5...v2.10.6

`v2.10.5`: Turborepo v2.10.5

Compare Source

What's Changed

Changelog

perf: Evaluate simple include globs without wax compilation by @anthonyshew in #13285
chore: Dogfood native Cargo support in this repository by @anthonyshew in #13283
release(turborepo): 2.10.4 by @github-actions[bot] in #13286
ci: Remove dead sccache configuration by @anthonyshew in #13289
feat: Serve the Remote Cache as an sccache backend for Cargo tasks by @anthonyshew in #13288
fix: Reject output path traversal by @anthonyshew in #13290
fix: Disable the sccache proxy when remote cache use is off by @anthonyshew in #13291
feat: Embed sccache so the Cargo compile cache needs no installation by @anthonyshew in #13293
release(turborepo): 2.10.5-canary.1 by @github-actions[bot] in #13294
fix: Pin a flag-aware turbo canary for the eve-agent deployment by @anthonyshew in #13295
fix: Make the sccache compile cache actually cache by @anthonyshew in #13296
release(turborepo): 2.10.5-canary.2 by @github-actions[bot] in #13297
fix: Stop ambient CARGO_INCREMENTAL from suppressing compile cache injection by @anthonyshew in #13298
fix: Never let compile cache storage failures fail the build by @anthonyshew in #13299
test: Add outputs path-traversal negative-case regression tests by @dnukumamras in #13300
release(turborepo): 2.10.5-canary.3 by @github-actions[bot] in #13302
ci: Authenticate to Remote Cache via OIDC token exchange by @anthonyshew in #13303
fix: Keep pnpm patches with version range keys during prune by @anthonyshew in #13307
test: Scrub ambient turbo configuration from integration test children by @anthonyshew in #13306
fix: Show toolchain tasks in the TUI and never run in silence by @anthonyshew in #13308
ci: Fix change detection on push events by @anthonyshew in #13304
refactor: Rename the Cargo toolchain id to rust by @anthonyshew in #13311
fix: Remove extraneous bun.lock entries during prune by @anthonyshew in #13317
feat: Require a user-declared name for the Cargo workspace package by @anthonyshew in #13312
feat: Parse and validate the task command field by @anthonyshew in #13313
chore: Harden turbo-vsc to invoke turbo without a shell by @dnukumamras in #13319
feat: Resolve and execute task command overrides by @anthonyshew in #13315
release(turborepo): 2.10.5-canary.4 by @github-actions[bot] in #13325
feat: Run the Rust workspace tests through nextest via command override by @anthonyshew in #13316
feat: Engage the Remote Cache and sccache compile cache for Rust CI by @anthonyshew in #13292
ci: Pin GitHub Actions to full commit SHAs by @XananasX7 in #13143
fix: Make npm prune rehoisting deterministic and complete by @anthonyshew in #13323
feat: Report incremental cache reuse in the run summary by @anthonyshew in #13327
chore: Remove planning docs by @anthonyshew in #13329
docs: Migrate docs site to @vercel/geistdocs package by @molebox in #13320
ci: Update Remote Cache action by @anthonyshew in #13330
release(turborepo): 2.10.5-canary.5 by @github-actions[bot] in #13331
ci: Remove path-based workflow scheduling by @anthonyshew in #13332
fix: Resolve EADDRINUSE in kitchen-sink api dev script by @ashusnapx in #13328
ci: Disable telemetry messages in workflows by @anthonyshew in #13334
fix: Prevent Cargo run tasks from being cached by @anthonyshew in #13335
fix: Isolate Cargo cache by host platform by @anthonyshew in #13337
fix: Continue TUI text selection beyond viewport by @anthonyshew in #13338
ci: Dogfood Cargo target restoration by @anthonyshew in #13336
fix: Require current Cargo lockfiles for caching by @anthonyshew in #13339
fix: Reject unsupported Cargo local packages by @anthonyshew in #13340
fix: Allow outputs outside package roots by @anthonyshew in #13342
fix: Resolve Cargo lock dependencies by source by @anthonyshew in #13343
docs: Update Cargo workspace support by @anthonyshew in #13349
fix: Build Ghostty for baseline CPUs by @anthonyshew in #13352
fix: Preserve watch rerun semantics for task inputs by @anthonyshew in #13351
fix: Isolate Command Overrides From Toolchain Cache I/O by @anthonyshew in #13354
release(turborepo): 2.10.5-canary.6 by @github-actions[bot] in #13355
fix: Include patched Ghostty crate in Cargo workspace by @anthonyshew in #13357
ci: Shard Rust tests across runners by @anthonyshew in #13356
fix: Hash Cargo build environment inputs by @anthonyshew in #13348
fix: Synchronize Cargo prune Docker lockfile by @anthonyshew in #13350
chore: Update agents app Eve dependency by @anthonyshew in #13364
fix: Preserve Yarn package extension ranges when pruning by @anthonyshew in #13363
refactor: Add Toolchain output availability by @anthonyshew in #13360

New Contributors

@dnukumamras made their first contribution in #13300
@XananasX7 made their fir

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/London)

Branch creation
- At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
- Only on Sunday and Saturday (* * * * 0,6)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

chore(deps): update dependency turbo to v2.10.9

47b698d

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot force-pushed the renovate/turbo-monorepo branch from 5331de0 to 47b698d Compare August 11, 2026 05:41

ramirezj merged commit cf9a859 into main Aug 11, 2026
5 checks passed

ramirezj deleted the renovate/turbo-monorepo branch August 11, 2026 05:44

Navigation Menu

Uh oh!

chore(deps): update dependency turbo to v2.10.9 - #438

chore(deps): update dependency turbo to v2.10.9#438
ramirezj merged 1 commit into
mainfrom
renovate/turbo-monorepo

renovate Bot commented Aug 11, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

renovate Bot commented Aug 11, 2026

Release Notes

v2.10.9: Turborepo v2.10.9

What's Changed

Changelog

New Contributors

v2.10.8: Turborepo v2.10.8

What's Changed

Changelog

New Contributors

v2.10.7: Turborepo v2.10.7

What's Changed

Changelog

v2.10.6: Turborepo v2.10.6

What's Changed

Changelog

New Contributors

v2.10.5: Turborepo v2.10.5

What's Changed

Changelog

New Contributors

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`v2.10.9`: Turborepo v2.10.9

`v2.10.8`: Turborepo v2.10.8

`v2.10.7`: Turborepo v2.10.7

`v2.10.6`: Turborepo v2.10.6

`v2.10.5`: Turborepo v2.10.5