Impact Score: 5/10
Turborepo v2.8.5
Source available โ automated, not human-reviewed
Component: turbo ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
โก Executive Summary (TL;DR)
Turborepo v2.8.5. Source highlight: fix: Upgrade tsdown to fix valibot and diff vulnerabilities
Who Does This Impact? (Role-Based Analysis)
๐ป Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
โจ New Features & Capabilities (1)
- chore: Add internal agents app for repo automation
๐ง Bug Fixes & Patches (5)
- fix: Upgrade tsdown to fix valibot and diff vulnerabilities
- fix: Upgrade semver to fix ReDoS vulnerability
- fix: Rename cli workspace package to avoid false audit match
- fix: Add Vary: Accept header to docs markdown endpoint
- Revert "fix: Upgrade node-plop to 0.32.3"
๐ View Raw Release Notes (Original Developer Log)
<!-- Release notes generated using configuration in .github/release.yml at v2.8.5 -->
## What's Changed
### @turbo/codemod
* fix: Upgrade tsdown to fix valibot and diff vulnerabilities by @anthonyshew in https://github.com/vercel/turborepo/pull/11766
* fix: Upgrade semver to fix ReDoS vulnerability by @anthonyshew in https://github.com/vercel/turborepo/pull/11765
### @turbo/repository
* fix: Rename cli workspace package to avoid false audit match by @anthonyshew in https://github.com/vercel/turborepo/pull/11767
### Changelog
* fix: Add Vary: Accept header to docs markdown endpoint by @molebox in https://github.com/vercel/turborepo/pull/11759
* chore: Agentic workflows app by @anthonyshew in https://github.com/vercel/turborepo/pull/11773
* chore: Add internal agents app for repo automation by @anthonyshew in https://github.com/vercel/turborepo/pull/11776
* chore: Update reproduction request message by @anthonyshew in https://github.com/vercel/turborepo/pull/11778
* Revert "fix: Upgrade node-plop to 0.32.3" by @anthonyshew in https://github.com/vercel/turborepo/pull/11780
**Full Changelog**: https://github.com/vercel/turborepo/compare/v2.8.4...v2.8.5