Impact Score: 5/10
Turborepo v2.7.0
Source available โ automated, not human-reviewed
Component: turbo ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
โก Executive Summary (TL;DR)
Turborepo v2.7.0. Source highlight: docs(security): Update Next.js
Who Does This Impact? (Role-Based Analysis)
๐ป Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
โจ New Features & Capabilities (5)
- docs: Add `turboExtendsKeyword` future flag and `$TURBO_EXTENDS$` microsyntax
- docs: Add `turbo.json` composition docs
- feat: Turborepo Devtools
- feat: Yarn 4 catalogs
- feat: Task-level `extends` field
โก Performance & Enhancements (1)
- perf: Find tasks impacted by packages faster
๐ง Bug Fixes & Patches (6)
- docs(fix): Sitemap
- docs: fix typo in design-system.css comment
- fix: React Server Components CVE vulnerabilities by @vercel[bot] in https://github.com/vercel/turborepo/pull/11245
- docs: Fix Bun filtered install commands
- fix: Improve layouts and task graph sourcing for devtools"
- fix(cli): Preserve exit codes in notifyUpdate functions
๐ View Raw Release Notes (Original Developer Log)
<!-- Release notes generated using configuration in .github/release.yml at v2.7.0 -->
## What's Changed
### Docs
* docs(security): Update Next.js by @anthonyshew in https://github.com/vercel/turborepo/pull/11208
* docs: Remove flags code by @anthonyshew in https://github.com/vercel/turborepo/pull/11209
* docs: Cleanup Sentry from gitignore by @anthonyshew in https://github.com/vercel/turborepo/pull/11210
* docs: Comment out Tinybird by @anthonyshew in https://github.com/vercel/turborepo/pull/11211
* docs(fix): Sitemap by @anthonyshew in https://github.com/vercel/turborepo/pull/11207
* docs: Revert "Comment out Tinybird" by @anthonyshew in https://github.com/vercel/turborepo/pull/11223
* docs: Move search to built-in by @anthonyshew in https://github.com/vercel/turborepo/pull/11224
* docs: fix typo in design-system.css comment by @YASHRDX0001 in https://github.com/vercel/turborepo/pull/11231
* chore: Upgrade pnpm to 9 by @anthonyshew in https://github.com/vercel/turborepo/pull/11226
* chore: Update pnpm to version 10 by @anthonyshew in https://github.com/vercel/turborepo/pull/11237
* fix: React Server Components CVE vulnerabilities by @vercel[bot] in https://github.com/vercel/turborepo/pull/11245
* docs: Add `turboExtendsKeyword` future flag and `$TURBO_EXTENDS$` microsyntax by @anthonyshew in https://github.com/vercel/turborepo/pull/11246
* docs: Fix Bun filtered install commands by @anthonyshew in https://github.com/vercel/turborepo/pull/11260
* docs: Add `turbo.json` composition docs by @anthonyshew in https://github.com/vercel/turborepo/pull/11247
* feat: Turborepo Devtools by @anthonyshew in https://github.com/vercel/turborepo/pull/11263
* fix: Improve layouts and task graph sourcing for devtools" by @anthonyshew in https://github.com/vercel/turborepo/pull/11269
* docs: Devtools by @anthonyshew in https://github.com/vercel/turborepo/pull/11270
* chore: Remove future flags for nonRootExtends and turboExtendsKeyword in preparation for stable release by @anthonyshew in https://github.com/vercel/turborepo/pull/11280
### create-turbo
* fix(cli): Preserve exit codes in notifyUpdate functions by @pyrytakala in https://github.com/vercel/turborepo/pull/11153
### turbo-ignore
* fix: Quoting in turbo-ignore commands by @anthonyshew in https://github.com/vercel/turborepo/pull/11239
### eslint
* fix: Upgrade Next.js to 15.5.7 (CVE-2025-55182) by @ctate in https://github.com/vercel/turborepo/pull/11232
### @turbo/repository
* chore: Update to Rust 1.92.0 by @ognevny in https://github.com/vercel/turborepo/pull/11250
### Examples
* examples(dev-deps): bump turbo from 2.6.1 to 2.6.3 in /examples/with-shell-commands by @dependabot[bot] in https://github.com/vercel/turborepo/pull/11217
* examples(dev-deps): bump the basic group in /examples/basic with 2 updates by @dependabot[bot] in https://github.com/vercel/turborepo/pull/11218
* examples(dev-deps): bump the with-svelte group in /examples/with-svelte with 3 updates by @dependabot[bot] in https://github.com/vercel/turborepo/pull/11219
* examples: Use slim image (debian) for prepare and builder stage, use latest noโฆ by @mrr11k in https://github.com/vercel/turborepo/pull/11228
* examples(dev-deps): bump the with-svelte group in /examples/with-svelte with 2 updates by @dependabot[bot] in https://github.com/vercel/turborepo/pull/11254
* examples(dev-deps): bump typescript-eslint from 8.48.1 to 8.49.0 in /examples/basic in the basic group by @dependabot[bot] in https://github.com/vercel/turborepo/pull/11253
* examples(deps): bump react from 19.2.0 to 19.2.3 in /examples/non-monorepo by @dependabot[bot] in https://github.com/vercel/turborepo/pull/11255
### Changelog
* fix(turbo-utils): Add test for conflicting configs and remove stale TODO by @deepakpathik in https://github.com/vercel/turborepo/pull/11201
* feat: Yarn 4 catalogs by @anthonyshew in https://github.com/vercel/turborepo/pull/11115
* fix: Add Windows-specific env var to default passthroughs by @anthonyshew in https://github.com/vercel/turborepo/pull/11233
* fix: Add fine grained interruptible task restarts in watch mode by @johnpyp in https://github.com/vercel/turborepo/pull/11135
* perf: Find tasks impacted by packages faster by @anthonyshew in https://github.com/vercel/turborepo/pull/11235
* ci: Fix release pipeline by @anthonyshew in https://github.com/vercel/turborepo/pull/11240
* ci: Fix release pipeline by @anthonyshew in https://github.com/vercel/turborepo/pull/11241
* fix: Compose tasks when composing turbo.json by @anthonyshew in https://github.com/vercel/turborepo/pull/11248
* chore: Run pre-commit fmt on all files by @anthonyshew in https://github.com/vercel/turborepo/pull/11261
* feat: Task-level `extends` field by @anthonyshew in https://github.com/vercel/turborepo/pull/11259
* fix: Allow root microfrontends.json config for @vercel/microfrontends by @anthonyshew in https://github.com/vercel/turborepo/pull/11264
* chore: Fix lint-staged and orphan GitHub Action by @anthonyshew in https://github.com/vercel/turborepo/pull/11275
* chore: Remove coverage tooling by @anthonyshew in https://github.com/vercel/turborepo/pull/11276
* chore: Clear false positive unused warnings by @anthonyshew in https://github.com/vercel/turborepo/pull/11277
* ci: Fix flaky test (hopefully) by @anthonyshew in https://github.com/vercel/turborepo/pull/11278
## New Contributors
* @deepakpathik made their first contribution in https://github.com/vercel/turborepo/pull/11201
* @YASHRDX0001 made their first contribution in https://github.com/vercel/turborepo/pull/11231
* @ctate made their first contribution in https://github.com/vercel/turborepo/pull/11232
* @johnpyp made their first contribution in https://github.com/vercel/turborepo/pull/11135
* @vercel[bot] made their first contribution in https://github.com/vercel/turborepo/pull/11245
**Full Changelog**: https://github.com/vercel/turborepo/compare/v2.6.3...v2.7.0