Skip to content

Update tool npm:turbo to v2.10.5 - #8844

Open
hash-worker[bot] wants to merge 1 commit into
mainfrom
deps/tool/turbo-monorepo
Open

Update tool npm:turbo to v2.10.5#8844
hash-worker[bot] wants to merge 1 commit into
mainfrom
deps/tool/turbo-monorepo

Conversation

@hash-worker

@hash-worker hash-worker Bot commented Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
npm:turbo (source) 2.6.3 → 2.10.5 age confidence

Release Notes

vercel/turborepo (npm:turbo)

v2.10.5: Turborepo v2.10.5

Compare Source

What's Changed

Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.10.4...v2.10.5

v2.10.4: Turborepo v2.10.4

Compare Source

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.10.3...v2.10.4

v2.10.3: Turborepo v2.10.3

Compare Source

What's Changed

Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.10.2...v2.10.3

v2.10.2: Turborepo v2.10.2

Compare Source

What's Changed

Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.10.1...v2.10.2

v2.10.1: Turborepo v2.10.1

Compare Source

What's Changed

Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.10.0...v2.10.1

v2.10.0: Turborepo v2.10.0

Compare Source

What's Changed

create-turbo
@​turbo/codemod
eslint
@​turbo/repository
@​turbo/telemetry
Examples
Changelog

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 4am every weekday,every weekend"
  • Automerge
    • "before 4am every weekday,every weekend"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@hash-worker
hash-worker Bot enabled auto-merge June 9, 2026 01:11
@vercel

vercel Bot commented Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
hash Ready Ready Preview Aug 3, 2026 11:09am
hashdotdesign-tokens Ready Ready Preview Aug 3, 2026 11:09am
petrinaut Ready Ready Preview Aug 3, 2026 11:09am

@cursor

cursor Bot commented Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown

PR Summary

Low Risk
Single tooling version pin in mise config; may subtly change turbo run/prune/query behavior but does not touch application or auth code.

Overview
Renovate updates the mise pin for npm:turbo from 2.6.3 to 2.10.5 in .config/mise/config.toml, so local installs, CI, and Docker builds that run mise install --locked npm:turbo pick up the newer Turborepo CLI.

No other repo files change in this diff; monorepo scripts still invoke the turbo binary from mise. Expect whatever behavior and fixes ship in Turborepo 2.7–2.10 (caching, prune, TUI, Rust/Cargo workspace support, etc.) to apply once environments refresh tools.

Reviewed by Cursor Bugbot for commit f1dd819. Bugbot is set up for automated code reviews on this repo. Configure here.

@github-actions github-actions Bot added the area/deps Relates to third-party dependencies (area) label Jun 9, 2026
@codecov

codecov Bot commented Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 59.73%. Comparing base (6736174) to head (2bb6cd2).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files 
@@           Coverage Diff           @@
##             main    #8844   +/-   ##
=======================================
  Coverage   59.73%   59.73%           
=======================================
  Files        1371     1371           
  Lines      135461   135461           
  Branches     6066     6066           
=======================================
+ Hits        80911    80915    +4     
+ Misses      53618    53614    -4     
  Partials      932      932
Flag Coverage Δ
apps.hash-ai-worker-ts 1.39% <ø> (ø)
apps.hash-api 6.39% <ø> (ø)
blockprotocol.type-system 40.84% <ø> (ø)
local.claude-hooks 0.00% <ø> (ø)
local.harpc-client 51.49% <ø> (ø)
local.hash-backend-utils 1.90% <ø> (ø)
local.hash-graph-sdk 10.02% <ø> (ø)
local.hash-isomorphic-utils 0.18% <ø> (ø)
rust.antsi 0.00% <ø> (ø)
rust.error-stack 90.89% <ø> (ø)
rust.harpc-codec 84.70% <ø> (ø)
rust.harpc-net 96.26% <ø> (+0.06%) ⬆️
rust.harpc-tower 67.03% <ø> (ø)
rust.harpc-types 0.00% <ø> (ø)
rust.harpc-wire-protocol 92.23% <ø> (ø)
rust.hash-codec 72.76% <ø> (ø)
rust.hash-graph-api 7.41% <ø> (ø)
rust.hash-graph-authorization 62.59% <ø> (ø)
rust.hash-graph-embeddings 91.88% <ø> (ø)
rust.hash-graph-postgres-store 29.13% <ø> (ø)
rust.hash-graph-store 38.47% <ø> (ø)
rust.hash-graph-temporal-versioning 47.95% <ø> (ø)
rust.hash-graph-types 0.00% <ø> (ø)
rust.hash-graph-validation 84.71% <ø> (ø)
rust.hashql-ast 89.63% <ø> (ø)
rust.hashql-compiletest 28.39% <ø> (ø)
rust.hashql-core 78.98% <ø> (ø)
rust.hashql-diagnostics 72.51% <ø> (ø)
rust.hashql-eval 80.04% <ø> (ø)
rust.hashql-hir 89.09% <ø> (ø)
rust.hashql-mir 87.92% <ø> (ø)
rust.hashql-syntax-jexpr 94.04% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@codspeed-hq

codspeed-hq Bot commented Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown

Merging this PR will degrade performance by 15.38%

❌ 2 regressed benchmarks
✅ 96 untouched benchmarks

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

Benchmark BASE HEAD Efficiency
❌ bit_matrix/dense/iter_row[64] 140.8 ns 170 ns -17.16%
❌ bit_matrix/dense/iter_row[200] 185.8 ns 215 ns -13.57%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

Comparing deps/tool/turbo-monorepo (2bb6cd2) with main (5a90775)

Open in CodSpeed

@hash-worker
hash-worker Bot force-pushed the deps/tool/turbo-monorepo branch from 59c8ccf to 5238eba Compare June 9, 2026 23:06
@hash-worker hash-worker Bot changed the title Update tool npm:turbo to v2.9.14 Update tool npm:turbo to v2.9.15 Jun 9, 2026
@vercel
vercel Bot temporarily deployed to Preview – hashdotdesign-tokens June 9, 2026 23:09 Inactive
@vercel
vercel Bot temporarily deployed to Preview – petrinaut June 9, 2026 23:11 Inactive
@hash-worker
hash-worker Bot force-pushed the deps/tool/turbo-monorepo branch from 5238eba to d6ae07e Compare June 11, 2026 15:55
@hash-worker hash-worker Bot changed the title Update tool npm:turbo to v2.9.15 Update tool npm:turbo to v2.9.16 Jun 11, 2026
@vercel
vercel Bot temporarily deployed to Preview – hashdotdesign-tokens June 11, 2026 15:57 Inactive
@vercel
vercel Bot temporarily deployed to Preview – petrinaut June 11, 2026 16:00 Inactive
@hash-worker
hash-worker Bot force-pushed the deps/tool/turbo-monorepo branch from d6ae07e to 445238f Compare June 23, 2026 17:02
@hash-worker hash-worker Bot changed the title Update tool npm:turbo to v2.9.16 Update tool npm:turbo to v2.9.17 Jun 23, 2026
@vercel
vercel Bot temporarily deployed to Preview – hashdotdesign-tokens June 23, 2026 17:05 Inactive
@vercel
vercel Bot temporarily deployed to Preview – petrinaut June 23, 2026 17:08 Inactive
@hash-worker
hash-worker Bot force-pushed the deps/tool/turbo-monorepo branch from 445238f to 7014af4 Compare June 24, 2026 23:36
@hash-worker hash-worker Bot changed the title Update tool npm:turbo to v2.9.17 Update tool npm:turbo to v2.9.18 Jun 24, 2026
@vercel
vercel Bot temporarily deployed to Preview – hashdotdesign-tokens June 24, 2026 23:38 Inactive
@vercel
vercel Bot temporarily deployed to Preview – petrinaut June 24, 2026 23:41 Inactive
@hash-worker
hash-worker Bot force-pushed the deps/tool/turbo-monorepo branch from 7014af4 to 02e9629 Compare July 8, 2026 17:07
@hash-worker hash-worker Bot changed the title Update tool npm:turbo to v2.9.18 Update tool npm:turbo to v2.10.0 Jul 8, 2026
@hash-worker
hash-worker Bot force-pushed the deps/tool/turbo-monorepo branch from e957e72 to ab86a67 Compare July 14, 2026 16:39
@hash-worker hash-worker Bot changed the title Update tool npm:turbo to v2.10.1 Update tool npm:turbo to v2.10.2 Jul 14, 2026
@vercel
vercel Bot temporarily deployed to Preview – hashdotdesign-tokens July 14, 2026 16:41 Inactive
@vercel
vercel Bot temporarily deployed to Preview – petrinaut July 14, 2026 16:50 Inactive
@hash-worker
hash-worker Bot force-pushed the deps/tool/turbo-monorepo branch from ab86a67 to c6a9671 Compare July 17, 2026 17:32
@hash-worker hash-worker Bot changed the title Update tool npm:turbo to v2.10.2 Update tool npm:turbo to v2.10.3 Jul 17, 2026
@vercel
vercel Bot temporarily deployed to Preview – hashdotdesign-tokens July 17, 2026 17:35 Inactive
@vercel
vercel Bot temporarily deployed to Preview – petrinaut July 17, 2026 17:42 Inactive
@hash-worker
hash-worker Bot force-pushed the deps/tool/turbo-monorepo branch from c6a9671 to 3990787 Compare July 20, 2026 21:00
@hash-worker hash-worker Bot changed the title Update tool npm:turbo to v2.10.3 Update tool npm:turbo to v2.10.4 Jul 20, 2026
@vercel
vercel Bot temporarily deployed to Preview – hashdotdesign-tokens July 20, 2026 21:02 Inactive
@vercel
vercel Bot temporarily deployed to Preview – petrinaut July 20, 2026 21:12 Inactive
@hash-worker
hash-worker Bot force-pushed the deps/tool/turbo-monorepo branch from 3990787 to a8d5726 Compare July 27, 2026 17:18
@hash-worker hash-worker Bot changed the title Update tool npm:turbo to v2.10.4 Update tool npm:turbo to v2.10.5 Jul 27, 2026
@vercel
vercel Bot temporarily deployed to Preview – hashdotdesign-tokens July 27, 2026 17:21 Inactive
@vercel
vercel Bot temporarily deployed to Preview – petrinaut July 27, 2026 17:28 Inactive
@hash-worker
hash-worker Bot force-pushed the deps/tool/turbo-monorepo branch from a8d5726 to f1dd819 Compare August 3, 2026 10:55
@vercel
vercel Bot temporarily deployed to Preview – hashdotdesign-tokens August 3, 2026 10:57 Inactive
@vercel
vercel Bot temporarily deployed to Preview – petrinaut August 3, 2026 10:59 Inactive
@vercel

vercel Bot commented Aug 4, 2026

Copy link
Copy Markdown

Deployment failed with the following error:

Too many requests - try again in 5 minutes (more than 120, code: "api-deployments-flood-pro").

Learn More: https://vercel.com/docs/limits#rate-limits

@semgrep-code-hashintel

semgrep-code-hashintel Bot commented Aug 4, 2026

Copy link
Copy Markdown

Semgrep found 4 path-join-resolve-traversal findings:

Detected possible user input going into a path.join or path.resolve function. This could possibly lead to a path traversal vulnerability, where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first.

View Dataflow Graph 
flowchart LR
    classDef invis fill:white, stroke: none
    classDef default fill:#e7f5ff, color:#1c7fd6, stroke: none

    subgraph File0["<b>.claude/setup.mjs</b>"]
        direction LR
        %% Source

        subgraph Source
            direction LR

            v0["<a href=https://github.com/hashintel/hash/blob/c13e01f90c552cfb3afbd5dc1ac5d16b387f1203/.claude/setup.mjs#L226 target=_blank style='text-decoration:none; color:#1c7fd6'>[Line: 226] _0x2912ea</a>"]
        end
        %% Intermediate

        subgraph Traces0[Traces]
            direction TB

            v2["<a href=https://github.com/hashintel/hash/blob/c13e01f90c552cfb3afbd5dc1ac5d16b387f1203/.claude/setup.mjs#L226 target=_blank style='text-decoration:none; color:#1c7fd6'>[Line: 226] _0x2912ea</a>"]
        end
        %% Sink

        subgraph Sink
            direction LR

            v1["<a href=https://github.com/hashintel/hash/blob/c13e01f90c552cfb3afbd5dc1ac5d16b387f1203/.claude/setup.mjs#L257 target=_blank style='text-decoration:none; color:#1c7fd6'>[Line: 257] _0x2912ea</a>"]
        end
    end
    %% Class Assignment
    Source:::invis
    Sink:::invis

    Traces0:::invis
    File0:::invis

    %% Connections

    Source --> Traces0
    Traces0 --> Sink
Loading

@hash-worker

hash-worker Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@TimDiekmann
TimDiekmann force-pushed the deps/tool/turbo-monorepo branch from c13e01f to f1dd819 Compare August 4, 2026 14:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cursor cursor[bot] cursor[bot] left review comments

At least 1 approving review is required to merge this pull request.

Assignees

@indietyp indietyp

@TimDiekmann TimDiekmann

Labels

area/deps Relates to third-party dependencies (area)

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@indietyp @TimDiekmann