# Turborepo v2.8.15 — Release & Upgrade Intelligence
- **Product:** Turborepo (https://turbo.build)
- **Version:** v2.8.15
- **Released:** Mar 09, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/turborepo/updates/v2.8.15/

## Executive Summary (TL;DR)
Turborepo v2.8.15. Source highlight: chore: Remove pnpm-eslint .vscode transform from create-turbo

## New Features
- feat: Add `futureFlags.longerSignatureKey` to enforce minimum HMAC key length
- feat: Add `runAttributes` config to OTel metrics for cardinality control
- test: Add integration test coverage for `--anon-profile` markdown generation
- feat: Add AI coding agent detection telemetry
- feat: Instrument post-hashing setup phase for trace visibility
- feat: Include version, platform, and CPU count in Chrome trace profiles

## Improvements
- perf: Skip irrelevant packages when using package#task syntax
- perf: Fire-and-forget telemetry and analytics HTTP flushes on shutdown
- perf: Defer lockfile await until after internal dependency resolution
- perf: Defer SCM task await to overlap with setup work
- perf: Defer cache save to after callback to unblock dependents sooner
- perf: Avoid Unconditional HTTP Client Warmup

## Bug Fixes
- fix: Use delta temporality for OTel metrics export
- fix: Wait for dependsOn on first run of turbo watch
- fix: Treat Bun runtime modules as builtins in Boundaries
- fix: Preserve deeply nested workspace deps during npm lockfile pruning
- fix: Ensure noUpdateNotifier from turbo.json is respected
- fix: Add `FORCE_COLOR` and `NO_COLOR` to builtin passthrough env vars

## Upgrade Command
```bash
npm install --save-dev --save-exact turbo@2.8.15
```