Turborepo v2.8.5stable Released Feb 10, 2026
Impact Score: 5/10

Turborepo v2.8.5

Source available โ€” automated, not human-reviewed

Component: turbo ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified โ€” check source notes
$ npm install --save-dev --save-exact [email protected]
๐Ÿ“„ .MD
โšก Executive Summary (TL;DR)

Turborepo v2.8.5. Source highlight: fix: Upgrade tsdown to fix valibot and diff vulnerabilities

Who Does This Impact? (Role-Based Analysis)

๐Ÿ’ป Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

๐Ÿ“Š Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

โš™๏ธ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

โœจ New Features & Capabilities (1)

  • chore: Add internal agents app for repo automation

๐Ÿ”ง Bug Fixes & Patches (5)

  • fix: Upgrade tsdown to fix valibot and diff vulnerabilities
  • fix: Upgrade semver to fix ReDoS vulnerability
  • fix: Rename cli workspace package to avoid false audit match
  • fix: Add Vary: Accept header to docs markdown endpoint
  • Revert "fix: Upgrade node-plop to 0.32.3"
๐Ÿ“„ View Raw Release Notes (Original Developer Log)
<!-- Release notes generated using configuration in .github/release.yml at v2.8.5 --> ## What's Changed ### @turbo/codemod * fix: Upgrade tsdown to fix valibot and diff vulnerabilities by @anthonyshew in https://github.com/vercel/turborepo/pull/11766 * fix: Upgrade semver to fix ReDoS vulnerability by @anthonyshew in https://github.com/vercel/turborepo/pull/11765 ### @turbo/repository * fix: Rename cli workspace package to avoid false audit match by @anthonyshew in https://github.com/vercel/turborepo/pull/11767 ### Changelog * fix: Add Vary: Accept header to docs markdown endpoint by @molebox in https://github.com/vercel/turborepo/pull/11759 * chore: Agentic workflows app by @anthonyshew in https://github.com/vercel/turborepo/pull/11773 * chore: Add internal agents app for repo automation by @anthonyshew in https://github.com/vercel/turborepo/pull/11776 * chore: Update reproduction request message by @anthonyshew in https://github.com/vercel/turborepo/pull/11778 * Revert "fix: Upgrade node-plop to 0.32.3" by @anthonyshew in https://github.com/vercel/turborepo/pull/11780 **Full Changelog**: https://github.com/vercel/turborepo/compare/v2.8.4...v2.8.5