What's Changed
Changelog
- fix: Pass repository to release asset commands by @anthonyshew in #14327
- chore: Release Turborepo 2.11.5-canary.5 by @anthonyshew in #14328
- chore: Release Turborepo 2.11.5 by @github-actions[bot] in #14329
- fix: Upgrade standalone turbo on installer reruns by @anthonyshew in #14330
- test: Deflake OpenTelemetry and PTY shutdown tests by @anthonyshew in #14331
- docs: Document standalone turbo installation by @anthonyshew in #14332
- ci: Install standalone turbo on Windows with PowerShell by @anthonyshew in #14334
- fix: Keep Yarn patch resolutions with npm protocol selectors in prune by @anthonyshew in #14337
- chore: Update with-tailwind example by @vercel-gh-bot-5[bot] in #14264
- ci: Resolve latest turbo release with workflow token by @anthonyshew in #14339
- chore: Update with-ultracite example by @vercel-gh-bot-5[bot] in #14335
- fix: Match production MFE negative lookaheads locally by @kitfoster in #13496
- docs: Add missing system environment variables and run flags by @BABTUNA in #13811
- fix: Normalize task inputs consistently for affected detection and hashing by @anthonyshew in #14341
- feat: Add task tags with configuration inheritance by @anthonyshew in #14342
- fix: Upgrade brace-expansion to latest compatible releases by @anthonyshew in #14347
- docs: Point security.txt to Vercel HackerOne program by @swarnava in #14346
- test: Deflake untracked scan-scope assertions by @anthonyshew in #14348
- feat: Expose task and package tags in
queryby @anthonyshew in #14343 - feat: Filter
querytasks and packages by tags by @anthonyshew in #14344 - feat: Filter tasks by tags in the CLI by @anthonyshew in #14345
- fix: Complete task
querymetadata for non-script entrypoints by @anthonyshew in #14350 - fix: Infer single-package mode for query commands by @anthonyshew in #14351
- chore: Release Turborepo 2.11.6 by @github-actions[bot] in #14352
- fix: Pass SDKROOT through to repository tasks by @anthonyshew in #14353
- chore: Update with-vite-module-federation example by @vercel-gh-bot-5[bot] in #14349
- fix: Ignore Vercel OIDC token rotation in .env.local cache inputs by @anthonyshew in #14356
- chore: Release Turborepo 2.11.7 by @github-actions[bot] in #14357
- chore: Update with-vitest example by @vercel-gh-bot-3[bot] in #14355
- feat: Add experimental setup future flag by @anthonyshew in #14361
- fix: Remove Bash dependency from strict environment tests by @vercel-gh-bot-3[bot] in #14362
- fix: Use repository package manager for automatic Turbo downloads by @vercel-gh-bot-3[bot] in #14360
- chore: Improve Factory chat and model controls by @vercel-gh-bot-3[bot] in #14368
- chore: Add Linear connector to Factory by @vercel-gh-bot-3[bot] in #14369
- chore: Remove HarnessAgent from Factory by @vercel-gh-bot-3[bot] in #14370
- chore: Remove Factory UI clutter by @vercel-gh-bot-2[bot] in #14371
- feat: Add shared platform primitives for setup and shim by @anthonyshew in #14363
- fix: Populate task graphs for affected and filtered listings by @sahyl in #14366
- feat: Add bounded checksum-verifying downloads by @anthonyshew in #14374
- feat: Validate setup npm version requests by @anthonyshew in #14375
- fix: Prune unused pnpm catalog snapshots by @vercel-gh-bot-3[bot] in #14376
- feat: Resolve Node versions from native declarations by @anthonyshew in #14378
- feat: Honor tool-download proxy and certificate settings by @anthonyshew in #14379
- feat: Check bounded setup version-request overlap by @anthonyshew in #14381
- feat: Discover setup JavaScript package-manager declarations by @anthonyshew in #14382
- feat: Verify local artifact bytes without HTTP by @anthonyshew in #14383
- fix: Deflake concurrent agent guidance updates by @anthonyshew in #14388
- chore: Remove Linear from factory by @anthonyshew in #14389
- feat: Extract verified TAR archives into private staging by @anthonyshew in #14384
- feat: Add experimental setup command surface by @anthonyshew in #14385
- chore: Remove Factory branch naming restrictions by @vercel-gh-bot-4[bot] in #14391
- chore: Consolidate CI into one required summary by @anthonyshew in #14390
- docs: Clarify task graph filter traversal by @vercel-gh-bot-2[bot] in #14392
- feat: Extract safe Node TAR symlinks by @anthonyshew in #14393
- feat: Infer setup roots without package managers by @anthonyshew in #14395
- feat: Add atomic managed tool installation inventory by @anthonyshew in #14398
- fix: Invalidate managed repositories when turbo.lock changes by @anthonyshew in #14396
- feat: Safely extract verified ZIP archives by @anthonyshew in #14394
- test: Add installed-wrapper process launcher by @anthonyshew in #14401
- fix: Avoid duplicate code CI on pull request reviews by @anthonyshew in #14414
- chore(deps): Update dependency @vercel/geistdocs to v1.28.1 by @vercel-gh-bot-4[bot] in #14416
- docs: Remove premature setup guidance by @anthonyshew in #14409
- feat: Validate portable setup tool resolutions by @anthonyshew in #14400
- fix: Preserve scoped tool paths and owner-executable exports by @anthonyshew in #14403
- fix: Preserve Node runtime failure policy provenance by @anthonyshew in #14406
- feat: Add an internal managed-run capability query by @anthonyshew in #14408
- feat: Verify bounded SHA-512 tool artifacts by @anthonyshew in #14411
- test: Stabilize lockfile closure parity coverage by @anthonyshew in #14420
- fix: Repair missing install generations and share tool readiness by @anthonyshew in #14404
- feat: Add secure ignored setup writer storage by @anthonyshew in #14407
- feat: Parse bounded Node release metadata by @anthonyshew in #14410
- feat: Write setup locks atomically by @anthonyshew in #14399
- feat: Parse bounded npm registry release metadata by @anthonyshew in #14412
- chore: Update with-yarn example by @vercel-gh-bot-2[bot] in #14364
- fix: Preserve unknown pnpm lockfile settings through prune by @dnalborczyk in #14423
- fix: Preserve symlinked AGENTS.md when updating agent guidance by @drakeo338 in #14418
- feat: Compare setup source snapshots before lock publication by @anthonyshew in #14428
- refactor: Add fail-closed managed CLI selection by @anthonyshew in #14413
- test: Isolate optional root initialization from watcher services by @anthonyshew in #14427
- feat: Provision locked pnpm with managed Node launchers by @anthonyshew in #14431
- feat: Resolve native Node.js declarations into lock selections by @anthonyshew in #14432
- fix: Reuse healthy Node.js across managed inventory changes by @anthonyshew in #14429
- fix: Support npm patches in pruned workspaces by @vercel-gh-bot-3[bot] in #14434
- feat: Project selected managed execution identity by @anthonyshew in #14430
- perf: Skip ignored directories when discovering nested .gitignore files by @withkarann in #14442
- test: Avoid Windows CLI teardown deadlocks by @anthonyshew in #14435
- test: Cover pnpm release-age exclusions during prune by @anthonyshew in #14440
- feat: Provision independently pinned npm with managed Node by @anthonyshew in #14437
- fix: Capture setup discovery context for revalidation by @anthonyshew in #14439
- chore: Upgrade Ghostty for Zig 0.17 by @Mearman in #14419
New Contributors
- @swarnava made their first contribution in #14346
- @dnalborczyk made their first contribution in #14423
- @drakeo338 made their first contribution in #14418
- @withkarann made their first contribution in #14442
- @Mearman made their first contribution in #14419
Full Changelog: v2.11.5-canary.5...v2.11.8-canary.1