Skip to content

chore(deps-dev): bump turbo from 2.8.3 to 2.8.12#76

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/turbo-2.8.12
Closed

chore(deps-dev): bump turbo from 2.8.3 to 2.8.12#76
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/turbo-2.8.12

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 28, 2026

Bumps turbo from 2.8.3 to 2.8.12.

Release notes

Sourced from turbo's releases.

Turborepo v2.8.12

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.8.11...v2.8.12

Turborepo v2.8.12-canary.3

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.8.11-canary.28...v2.8.12-canary.3

Turborepo v2.8.12-canary.2

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.8.12-canary.1...v2.8.12-canary.2

... (truncated)

Commits
  • 50a9e4b publish 2.8.12 to registry
  • 2bc9f04 release(turborepo): 2.8.12-canary.3 (#12035)
  • 829b351 ci: Disable flaky Rust unit tests from release pipeline (#12034)
  • f698b04 fix: Suppress npm upgrade notices in Rust integration tests (#12033)
  • b47e099 fix: Add nextest retries for flaky prune_test::test_prune_composable_config (...
  • 9479a54 ci: Use larger runners for macOS Rust tests (#12029)
  • 9b66431 fix: Add nextest retries for flaky prysk tests (#12030)
  • 0c1bd47 ci: Increase Rust test partitions from 4 to 10 (#12028)
  • 329bdb5 refactor: Migrate prune and run-summary tests to Rust (#12022)
  • 9d90270 fix: Add nextest retries for flaky tests (#12027)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 28, 2026

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions
Copy link
Contributor

github-actions bot commented Feb 28, 2026

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/turbo 2.8.13 UnknownUnknown
npm/turbo-darwin-64 2.8.13 UnknownUnknown
npm/turbo-darwin-arm64 2.8.13 UnknownUnknown
npm/turbo-linux-64 2.8.13 UnknownUnknown
npm/turbo-linux-arm64 2.8.13 UnknownUnknown
npm/turbo-windows-64 2.8.13 UnknownUnknown
npm/turbo-windows-arm64 2.8.13 UnknownUnknown

Scanned Files

  • package-lock.json

@github-actions
Copy link
Contributor

🤖 Auto-Test Results

Check Status
Linting ✅ Passed
Build ✅ Passed
Tests ✅ Passed
Config Sync ✅ Validated
Environment ✅ Healthy

Automated checks completed at 2026-02-28T03:24:03.634Z

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the repository’s Turborepo devDependency to the latest 2.8.12 patch release, along with the corresponding npm lockfile updates, to keep the build/task orchestration tooling current and reproducible.

Changes:

  • Bump turbo from ^2.8.3 to ^2.8.12 in root package.json.
  • Update package-lock.json to reflect Turborepo 2.8.12 and its platform-specific optional packages.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Updates the Turborepo devDependency version range to ^2.8.12.
package-lock.json Refreshes locked Turborepo package versions/resolved tarballs/integrity hashes to match 2.8.12.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Bumps [turbo](https://github.com/vercel/turborepo) from 2.8.3 to 2.8.12.
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.8.3...v2.8.12)

---
updated-dependencies:
- dependency-name: turbo
  dependency-version: 2.8.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/turbo-2.8.12 branch from 3b17e7a to 05308cc Compare March 6, 2026 12:08
@github-actions
Copy link
Contributor

github-actions bot commented Mar 6, 2026

🤖 Auto-Test Results

Check Status
Linting ✅ Passed
Build ✅ Passed
Tests ✅ Passed
Config Sync ✅ Validated
Environment ✅ Healthy

Automated checks completed at 2026-03-06T12:11:39.634Z

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 7, 2026

Superseded by #86.

@dependabot dependabot bot closed this Mar 7, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/turbo-2.8.12 branch March 7, 2026 03:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants