# Turborepo v2.8.8 — Release & Upgrade Intelligence
- **Product:** Turborepo (https://turbo.build)
- **Version:** v2.8.8
- **Released:** Feb 14, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/turborepo/updates/v2.8.8/

## Executive Summary (TL;DR)
Turborepo v2.8.8. Source highlight: fix: Enhance path validation in assertSafeGitArgument

## Bug Fixes
- fix: Enhance path validation in assertSafeGitArgument
- fix: Use private blob store access in agents app
- fix: Pass non-empty body when initializing blob log files
- fix: Allow overwriting existing blobs in run updates and log appends
- fix: Set 5-hour timeout on security audit sandbox
- fix: Resolve Windows TUI hang caused by portable-pty 0.9.0 ConPTY changes

## Upgrade Command
```bash
npm install --save-dev --save-exact turbo@2.8.8
```