Turborepo v2.6.3

Source available — automated, not human-reviewed

Component: turbo · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified — check source notes

$ npm install --save-dev --save-exact [email protected]

📄 .MD

✨ Features 1 🔧 Bug Fixes 6

⚡ Executive Summary (TL;DR)

Turborepo v2.6.3. Source highlight: fix: Command injection in `turbo-ignore`

Visit Turborepo Official Site ↗ Official Release Source ↗ All Turborepo Releases 📡 Turborepo RSS

Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

✨ New Features & Capabilities (1)

feat: Add GitHub Actions environment variable as default passthrough

🔧 Bug Fixes & Patches (6)

fix: Command injection in `turbo-ignore`
fix: Prevent vt100 TUI crash during column wrap
fix: Handle pidlock AlreadyOwned without failing init in LSP
ci: Fix integration test logging style
fix: Normalize config dir env vars to absolute
fix(vercel-api): Add `VIEWER_FOR_PLUS` and `SECURITY` role variants

📄 View Raw Release Notes (Original Developer Log)

## What's Changed ### turbo-ignore * fix: Command injection in `turbo-ignore` by @pyrytakala in https://github.com/vercel/turborepo/pull/11154 ### Examples * examples(security): Upgrade `Next.js` versions by @2qp in https://github.com/vercel/turborepo/pull/11195 ### Changelog * fix: Prevent vt100 TUI crash during column wrap by @neel3o115 in https://github.com/vercel/turborepo/pull/11170 * feat: Add GitHub Actions environment variable as default passthrough by @louis-bompart in https://github.com/vercel/turborepo/pull/10740 * docs: Updating READMEs by @anthonyshew in https://github.com/vercel/turborepo/pull/11190 * fix: Handle pidlock AlreadyOwned without failing init in LSP by @AryanBagade in https://github.com/vercel/turborepo/pull/10831 * ci: Fix integration test logging style by @anthonyshew in https://github.com/vercel/turborepo/pull/11194 * fix: Normalize config dir env vars to absolute by @Vansh0204 in https://github.com/vercel/turborepo/pull/11146 * fix(vercel-api): Add `VIEWER_FOR_PLUS` and `SECURITY` role variants by @amondnet in https://github.com/vercel/turborepo/pull/11169 ## New Contributors * @neel3o115 made their first contribution in https://github.com/vercel/turborepo/pull/11170 * @louis-bompart made their first contribution in https://github.com/vercel/turborepo/pull/10740 * @AryanBagade made their first contribution in https://github.com/vercel/turborepo/pull/10831 * @Vansh0204 made their first contribution in https://github.com/vercel/turborepo/pull/11146 * @amondnet made their first contribution in https://github.com/vercel/turborepo/pull/11169 * @pyrytakala made their first contribution in https://github.com/vercel/turborepo/pull/11154 **Full Changelog**: https://github.com/vercel/turborepo/compare/v2.6.2...v2.6.3

← Older Version Turborepo v2.6.2 Newer Version → Turborepo v2.7.0