chore(deps-dev): bump turbo from 2.8.13 to 2.9.14
Closed
DE
3mo ago+1+1+0123456789-1-1-0123456789
Bumps turbo from 2.8.13 to 2.9.14.
Release notes
Sourced from turbo's releases.
Turborepo v2.9.14
[!NOTE] This release contains important security fixes.
High:
Low:
- GHSA-hcf7-66rw-9f5r: Login callback CSRF/session fixation
- GHSA-3qcw-2rhx-2726: Unexpected local code execution during Yarn Berry detection
What's Changed
Changelog
- release(turborepo): 2.9.12 by
@github-actions[bot] in vercel/turborepo#12774- fix: Restore docs mobile menu by
@anthonyshewin vercel/turborepo#12782- ci: Use
pull_requestfor PR title linting by@anthonyshewin vercel/turborepo#12787- ci: Scope GitHub Actions caches by branch by
@anthonyshewin vercel/turborepo#12788- test: Validate lockfiles without dependency downloads by
@anthonyshewin vercel/turborepo#12789- Removed unneeded import form hash creation script in docs by
@dancrumbin vercel/turborepo#12799- fix: Validate auth callback state by
@anthonyshewin vercel/turborepo#12802- fix: Harden VS Code extension command execution by
@anthonyshewin vercel/turborepo#12800- fix: Avoid project-local Yarn during detection by
@anthonyshewin vercel/turborepo#12801- chore: Release 2.9.13 by
@anthonyshewin vercel/turborepo#12803New Contributors
@dancrumbmade their first contribution in vercel/turborepo#12799Full Changelog: https://github.com/vercel/turborepo/compare/v2.9.12...v2.9.14
Turborepo v2.9.13-canary.1
What's Changed
Changelog
- release(turborepo): 2.9.11-canary.7 by
@github-actions[bot] in vercel/turborepo#12768- fix: Allow
$TURBO_EXTENDS$in LSP diagnostics by@anthonyshewin vercel/turborepo#12770- release(turborepo): 2.9.11 by
@github-actions[bot] in vercel/turborepo#12771- fix: Allow transit nodes in LSP diagnostics by
@anthonyshewin vercel/turborepo#12773- release(turborepo): 2.9.12 by
@github-actions[bot] in vercel/turborepo#12774- fix: Restore docs mobile menu by
@anthonyshewin vercel/turborepo#12782- ci: Use
pull_requestfor PR title linting by@anthonyshewin vercel/turborepo#12787- ci: Scope GitHub Actions caches by branch by
@anthonyshewin vercel/turborepo#12788- test: Validate lockfiles without dependency downloads by
@anthonyshewin vercel/turborepo#12789- Removed unneeded import form hash creation script in docs by
@dancrumbin vercel/turborepo#12799- fix: Validate auth callback state by
@anthonyshewin vercel/turborepo#12802- fix: Harden VS Code extension command execution by
@anthonyshewin vercel/turborepo#12800- fix: Avoid project-local Yarn during detection by
@anthonyshewin vercel/turborepo#12801
... (truncated)
Commits
fc62fe0publish 2.9.14 to registryfb8c9aechore: Release 2.9.13 (#12803)e8e629dfix: Avoid project-local Yarn during detection (#12801)91c90cbfix: Harden VS Code extension command execution (#12800)84f4508fix: Validate auth callback state (#12802)1779ad7Removed unneeded import form hash creation script in docs (#12799)71f8c90test: Validate lockfiles without dependency downloads (#12789)5fcb960ci: Scope GitHub Actions caches by branch (#12788)4cf9fabci: Usepull_requestfor PR title linting (#12787)859c629fix: Restore docs mobile menu (#12782)- Additional commits viewable in compare view
You can trigger a rebase of this PR by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Summary by cubic
Upgrade turbo to 2.9.14 to pull in important security fixes and keep our Turborepo tooling current.
- Dependencies
- Bumped dev dependency
turbofrom 2.8.13 to 2.9.14; includes security patches for VS Code command execution and auth callback CSRF/session fixation.
- Bumped dev dependency
Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.