turbo 2.6.4-canary.4

Turborepo v2.6.4-canary.4

on Node.js NPM

What's Changed

Docs

• fix: React Server Components CVE vulnerabilities by @vercel[bot] in #11245
• docs: Add turboExtendsKeyword future flag and $TURBO_EXTENDS$ microsyntax by @anthonyshew in #11246
• docs: Fix Bun filtered install commands by @anthonyshew in #11260
• docs: Add turbo.json composition docs by @anthonyshew in #11247

@turbo/repository

• chore: Update to Rust 1.92.0 by @ognevny in #11250

Examples

• examples(dev-deps): bump the with-svelte group in /examples/with-svelte with 2 updates by @dependabot[bot] in #11254
• examples(dev-deps): bump typescript-eslint from 8.48.1 to 8.49.0 in /examples/basic in the basic group by @dependabot[bot] in #11253
• examples(deps): bump react from 19.2.0 to 19.2.3 in /examples/non-monorepo by @dependabot[bot] in #11255

Changelog

• fix: Compose tasks when composing turbo.json by @anthonyshew in #11248
• chore: Run pre-commit fmt on all files by @anthonyshew in #11261
• feat: Task-level extends field by @anthonyshew in #11259
• fix: Allow root microfrontends.json config for @vercel/microfrontends by @anthonyshew in #11264

New Contributors

• @vercel[bot] made their first contribution in #11245

Full Changelog: v2.6.4-canary.3...v2.6.4-canary.4