# Turborepo v2.6.3 — Release & Upgrade Intelligence
- **Product:** Turborepo (https://turbo.build)
- **Version:** v2.6.3
- **Released:** Dec 04, 2025
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/turborepo/updates/v2.6.3/

## Executive Summary (TL;DR)
Turborepo v2.6.3. Source highlight: fix: Command injection in `turbo-ignore`

## New Features
- feat: Add GitHub Actions environment variable as default passthrough

## Bug Fixes
- fix: Command injection in `turbo-ignore`
- fix: Prevent vt100 TUI crash during column wrap
- fix: Handle pidlock AlreadyOwned without failing init in LSP
- ci: Fix integration test logging style
- fix: Normalize config dir env vars to absolute
- fix(vercel-api): Add `VIEWER_FOR_PLUS` and `SECURITY` role variants

## Upgrade Command
```bash
npm install --save-dev --save-exact turbo@2.6.3
```