# Turborepo v2.8.2 — Release & Upgrade Intelligence
- **Product:** Turborepo (https://turbo.build)
- **Version:** v2.8.2
- **Released:** Feb 03, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/turborepo/updates/v2.8.2/

## Executive Summary (TL;DR)
Turborepo v2.8.2. Source highlight: fix: Upgrade next to fix HTTP deserialization DoS

## New Features
- feat: Migrate from tsup to tsdown
- Update README.md title and remove features section

## Bug Fixes
- fix: Upgrade next to fix HTTP deserialization DoS
- fix: Upgrade mermaid to fix lodash-es vulnerability
- fix: Upgrade recharts to fix lodash vulnerability
- fix: Upgrade rehype packages to fix mdast-util-to-hast vulnerability
- fix: Upgrade tsup to fix rollup and glob vulnerabilities
- fix: Upgrade inquirer to 8.2.7 to fix tmp vulnerability

## Upgrade Command
```bash
npm install --save-dev --save-exact turbo@2.8.2
```