What's Changed
Changelog
- release(turborepo): 2.9.9-canary.4 by @github-actions[bot] in #12716
- release(turborepo): 2.9.9 by @github-actions[bot] in #12719
- fix: Respect SCM env vars in
turbo query affectedby @anthonyshew in #12722 - ci: Package VSCode extension in release workflow by @anthonyshew in #12723
- fix: Avoid some raw
create-turboexample telemetry by @anthonyshew in #12725 - fix: Escape graph HTML payloads by @anthonyshew in #12726
- fix: Prevent OTEL token injection to spoofed origins by @anthonyshew in #12727
- fix: Retry HTTP status failures by @anthonyshew in #12728
- fix: Validate microfrontend proxy Host header by @anthonyshew in #12730
- fix: Redact task hash env debug logs by @anthonyshew in #12733
- fix: Filter microfrontend proxy environments by @anthonyshew in #12732
- fix: Preserve FSEvents mount points for device-relative paths by @anthonyshew in #12729
- fix: Validate proxy Host headers by @anthonyshew in #12731
- fix: Resolve TypeScript
.jsextension imports to.tsfiles in boundaries by @maschwenk in #12644 - fix: Use random temp path for repo downloads by @anthonyshew in #12736
- release(turborepo): 2.9.10-canary.1 by @github-actions[bot] in #12734
- fix: Reject OTel endpoints with userinfo by @anthonyshew in #12737
- fix: Authenticate local devtools WebSocket by @anthonyshew in #12738
- fix: Handle clipboard exec errors by @anthonyshew in #12739
- fix: Restrict Vercel token reuse to trusted API origins by @anthonyshew in #12740
- fix: Keep workspace config discovery inside root by @anthonyshew in #12741
- fix: Hardening for daemon IPC endpoints by @anthonyshew in #12742
- fix: Enforce cache filesystem boundaries by @anthonyshew in #12743
Full Changelog: v2.9.9...v2.9.10