chore(deps): bump the patch group across 5 directories with 9 updates #107

dependabot · 2025-02-03T23:24:34Z

Bumps the patch group with 9 updates in the / directory:

Package	From	To
turbo	`2.2.3`	`2.4.0`
@changesets/cli	`2.27.9`	`2.27.12`
@apollo/server	`4.11.0`	`4.11.3`
node-mocks-http	`1.16.1`	`1.16.2`
tsup	`8.3.0`	`8.3.6`
typescript	`5.6.3`	`5.7.3`
jose	`5.4.0`	`5.9.6`
@types/jsonwebtoken	`9.0.6`	`9.0.8`
graphql-yoga	`5.9.0`	`5.10.11`

Bumps the patch group with 2 updates in the /packages/apollo directory: turbo and @changesets/cli.
Bumps the patch group with 3 updates in the /packages/core directory: turbo, @changesets/cli and jose.
Bumps the patch group with 3 updates in the /packages/react directory: turbo, @changesets/cli and @types/jsonwebtoken.
Bumps the patch group with 2 updates in the /packages/yoga directory: turbo and @changesets/cli.

Updates turbo from 2.2.3 to 2.4.0

Release notes

Sourced from turbo's releases.

Turborepo v2.4.0

What's Changed

Docs

docs: migration guide for users coming from Nx by @anthonyshew in vercel/turborepo#9762

docs: make incremental migration more prominent on Nx doc by @anthonyshew in vercel/turborepo#9796

feat(prune): add --use-gitignore flag by @chris-olszewski in vercel/turborepo#9797

docs: fix typo by @arosequist in vercel/turborepo#9814

docs: update ESLint package docs by @anthonyshew in vercel/turborepo#9833

docs: new page for examples by @anthonyshew in vercel/turborepo#9843

docs: Fix broken link by @benwaffle in vercel/turborepo#9857

docs: schema.json in node_modules by @anthonyshew in vercel/turborepo#9832

docs: keybinds for tui by @anthonyshew in vercel/turborepo#9831

docs: experimental flag for watch caching by @anthonyshew in vercel/turborepo#9830

docs: boundaries experimental page by @anthonyshew in vercel/turborepo#9834

@turbo/repository

feat: makes affectedPackages lockfile aware by @dimitropoulos in vercel/turborepo#9795

chore(@turbo/repository): silence noop lint by @chris-olszewski in vercel/turborepo#9835

Examples

feat(create-turbo): fix official examples by @tknickman in vercel/turborepo#9837

chore: move create-turbo community note and format it better by @anthonyshew in vercel/turborepo#9836

chore(examples): update with-tailwind by @anthonyshew in vercel/turborepo#9764

chore(examples): update non-monorepo example by @anthonyshew in vercel/turborepo#9770

chore: add best practices to Prisma ORM example by @ankur-arch in vercel/turborepo#9794

chore(deps): bump the basic group across 1 directory with 17 updates by @dependabot in vercel/turborepo#9772

feat(examples): add example-with-vite-react by @shivam-pawar in vercel/turborepo#9620

chore(deps): bump the kitchen-sink group across 1 directory with 25 updates by @dependabot in vercel/turborepo#9771

chore(deps-dev): bump @types/node from 20.17.16 to 22.10.10 in /examples/non-monorepo in the non-monorepo group across 1 directory by @dependabot in vercel/turborepo#9777

chore(deps-dev): bump the basic group in /examples/basic with 6 updates by @dependabot in vercel/turborepo#9806

chore(deps-dev): bump turbo from 2.3.3 to 2.3.4 in /examples/with-shell-commands in the with-shell-commands group by @dependabot in vercel/turborepo#9807

chore(deps-dev): bump the with-tailwind group in /examples/with-tailwind with 6 updates by @dependabot in vercel/turborepo#9808

fix(example): remove conflict css property from with-tailwind example by @kayumuzzaman in vercel/turborepo#9816

chore(examples): update with-svelte dependencies by @anthonyshew in vercel/turborepo#9822

ci: add check-types task to examples testing by @anthonyshew in vercel/turborepo#9824

chore(deps-dev): bump the basic group in /examples/basic with 2 updates by @dependabot in vercel/turborepo#9846

chore(deps-dev): bump the with-tailwind group in /examples/with-tailwind with 2 updates by @dependabot in vercel/turborepo#9847

chore(deps): bump the kitchen-sink group in /examples/kitchen-sink with 2 updates by @dependabot in vercel/turborepo#9848

fix(examples): kitchen-sink package tests by @tknickman in vercel/turborepo#9851

fix(examples): downgrade tailwind by @anthonyshew in vercel/turborepo#9855

chore: removing unused script by @anthonyshew in vercel/turborepo#9854

fix(pnpm): revert lockfile upgrade by @tknickman in vercel/turborepo#9862

Changelog

chore: upgrade to Rust 1.84.0 by @ognevny in vercel/turborepo#9766

feat(mfe): v2->v1 & make version optional by @tknickman in vercel/turborepo#9787

feat(mfe): support user specified local proxy by @chris-olszewski in vercel/turborepo#9695

feat(watch): caching by @NicholasLYang in vercel/turborepo#9815

chore: suggest ways to break cyclic dependencies by @chris-olszewski in vercel/turborepo#9799

fix(deps): use windows-sys instead of winapi by @ognevny in vercel/turborepo#9805

chore(turborepo-wax): remove lockfile by @ognevny in vercel/turborepo#9817

... (truncated)

Commits

b733d73 publish 2.4.0 to registry
b2a8034 fix(pnpm): revert lockfile upgrade (#9862)
072e73b docs: boundaries experimental page (#9834)
dfbc7e1 docs: experimental flag for watch caching (#9830)
7ebaf75 docs: keybinds for tui (#9831)
b04f81d docs: schema.json in node_modules (#9832)
72413c3 feat(boundaries): add a nice message after finishing boundaries checks (#9861)
d240f30 fix: use microdnf for ubuntu images (#9858)
8a2a1c1 docs: Fix broken link (#9857)
10bd9ed fix: use an image that supports glibc for @turbo/repository ubuntu (#9845)
Additional commits viewable in compare view

Updates @changesets/cli from 2.27.9 to 2.27.12

Release notes

Sourced from @changesets/cli's releases.

@changesets/cli@2.27.12

Patch Changes

#1562 a0f87f1 Thanks @Netail, @cefn! - Fixed changelog application when executing using npx and similar tools

Updated dependencies [a0f87f1]:

@changesets/apply-release-plan@7.0.8

@changesets/cli@2.27.11

Patch Changes

Updated dependencies [f0270f6]:

@changesets/config@3.0.5

@changesets/apply-release-plan@7.0.7

@changesets/get-release-plan@4.0.6

@changesets/cli@2.27.10

Patch Changes

#1485 baf5644 Thanks @bluwy! - Ignore error if failed to find changed packages in changeset add

#1489 7bf751c Thanks @marcalexiei! - Use custom errors when exiting add command due to missing tool

#1466 ccce743 Thanks @marcalexiei! - Add error message and exit when there are no versionable packages

#1514 962ab91 Thanks @nicoalonsop! - Update spawndamnit to fix cross-spawn vulnerability

Updated dependencies [7323704, 26c8ba9, 82cacb2, 962ab91]:

@changesets/config@3.0.4

@changesets/git@3.0.2

@changesets/assemble-release-plan@6.0.5

@changesets/read@0.6.2

@changesets/apply-release-plan@7.0.6

@changesets/get-release-plan@4.0.5

Commits

68a83d5 Version Packages (#1567)
a0f87f1 Fixed changelog application when executing through npx (#1562)
a8c474f Update default config object in config-file-options.md (#1052)
0417c90 Fix minor grammar and spelling in docs (#609)
6d3fab3 Update common-questions.md (#1256)
eedd3fa Standardized all code snippets for consistency (#1422)
262bdd7 Improve docs npx usage (#1515)
a3acd12 Bump @babel/preset-env from 7.20.2 to 7.26.0 (#1538)
acb04d6 Bump eslint-plugin-import from 2.26.0 to 2.31.0 (#1541)
574822f Bump @babel/cli from 7.19.3 to 7.26.4 (#1540)
Additional commits viewable in compare view

Updates @apollo/server from 4.11.0 to 4.11.3

Release notes

Sourced from @apollo/server's releases.

@apollo/server-integration-testsuite@4.11.3

Patch Changes

#8010 f4228e8 Thanks @glasser! - Compatibility with Next.js Turbopack. Fixes #8004.

Updated dependencies [f4228e8, 70eecce]:

@apollo/server@4.11.3

@apollo/server@4.11.3

Patch Changes

#8010 f4228e8 Thanks @glasser! - Compatibility with Next.js Turbopack. Fixes #8004.

@apollo/server-integration-testsuite@4.11.2

Patch Changes

#7879 b0fb33b Thanks @renovate! - Update graphql-http dependency

#7968 68977e2 Thanks @glasser! - Upgrade supertest and superagent dependencies

Updated dependencies []:

@apollo/server@4.11.2

@apollo/server@4.11.2

(No change; there is a change to the @apollo/server-integration-testsuite used to test integrations, and the two packages always have matching versions.)

@apollo/server-integration-testsuite@4.11.1

Patch Changes

#7952 bb81b2c Thanks @glasser! - Upgrade dependencies so that automated scans don't detect a vulnerability.

@apollo/server depends on express which depends on cookie. Versions of express older than v4.21.1 depend on a version of cookie vulnerable to CVE-2024-47764. Users of older express versions who call res.cookie() or res.clearCookie() may be vulnerable to this issue.

However, Apollo Server does not call this function directly, and it does not expose any object to user code that allows TypeScript users to call this function without an unsafe cast.

The only way that this direct dependency can cause a vulnerability for users of Apollo Server is if you call startStandaloneServer with a context function that calls Express-specific methods such as res.cookie() or res.clearCookies() on the response object, which is a violation of the TypeScript types provided by startStandaloneServer (which only promise that the response object is a core Node.js http.ServerResponse rather than the Express-specific subclass). So this vulnerability can only affect Apollo Server users who use unsafe JavaScript or unsafe as typecasts in TypeScript.

However, this upgrade will at least prevent vulnerability scanners from alerting you to this dependency, and we encourage all Express users to upgrade their project's own express dependency to v4.21.1 or newer.

Updated dependencies [bb81b2c]:

@apollo/server@4.11.1

@apollo/server@4.11.1

Patch Changes

#7952 bb81b2c Thanks @glasser! - Upgrade dependencies so that automated scans don't detect a vulnerability.

@apollo/server depends on express which depends on cookie. Versions of express older than v4.21.1 depend on a version of cookie vulnerable to CVE-2024-47764. Users of older express versions who call res.cookie() or res.clearCookie() may be vulnerable to this issue.

However, Apollo Server does not call this function directly, and it does not expose any object to user code that allows TypeScript users to call this function without an unsafe cast.

... (truncated)

Changelog

Sourced from @apollo/server's changelog.

4.11.3

Patch Changes

#8010 f4228e8 Thanks @glasser! - Compatibility with Next.js Turbopack. Fixes #8004.

4.11.2

(No change; there is a change to the @apollo/server-integration-testsuite used to test integrations, and the two packages always have matching versions.)

4.11.1

Patch Changes

#7952 bb81b2c Thanks @glasser! - Upgrade dependencies so that automated scans don't detect a vulnerability.

@apollo/server depends on express which depends on cookie. Versions of express older than v4.21.1 depend on a version of cookie vulnerable to CVE-2024-47764. Users of older express versions who call res.cookie() or res.clearCookie() may be vulnerable to this issue.

However, Apollo Server does not call this function directly, and it does not expose any object to user code that allows TypeScript users to call this function without an unsafe cast.

The only way that this direct dependency can cause a vulnerability for users of Apollo Server is if you call startStandaloneServer with a context function that calls Express-specific methods such as res.cookie() or res.clearCookies() on the response object, which is a violation of the TypeScript types provided by startStandaloneServer (which only promise that the response object is a core Node.js http.ServerResponse rather than the Express-specific subclass). So this vulnerability can only affect Apollo Server users who use unsafe JavaScript or unsafe as typecasts in TypeScript.

However, this upgrade will at least prevent vulnerability scanners from alerting you to this dependency, and we encourage all Express users to upgrade their project's own express dependency to v4.21.1 or newer.

Commits

4ae18e7 Version Packages (#8006)
f4228e8 Upgrade @apollo/utils.createhash (#8010)
a830562 chore(deps): update dependency graphql-subscriptions to v3 (#7989)
9e946d5 Remove discord
1475d82 Version Packages (#7969)
2a26f23 chore(deps): update all non-major dependencies (#7951)
b7e7cd1 Version Packages (#7953)
bb81b2c deps: upgrade express to v4.21.1 to quiet automated scans (#7952)
See full diff in compare view

Updates node-mocks-http from 1.16.1 to 1.16.2

Changelog

Sourced from node-mocks-http's changelog.

v 1.16.2

Fix: writeHead() sets headersSent [Issue #313]313.

Commits

306a8cf Release 1.16.2
9bd17ca npm audit fix
8618dd8 fix(mockResponse): writeHead() sets headersSent. (#313)
See full diff in compare view

Updates tsup from 8.3.0 to 8.3.6

Release notes

Sourced from tsup's releases.

v8.3.6

   🐞 Bug Fixes

Don't await sub-process of onSuccess - by @laat in egoist/tsup#1256 (314a6)

    View changes on GitHub

v8.3.5

   🐞 Bug Fixes

Run experimentalDts only once - by @aryaemami59 in egoist/tsup#1236 (fddd4)

    View changes on GitHub

v8.3.4

No significant changes

    View changes on GitHub

v8.3.3

No significant changes

    View changes on GitHub

v8.3.1

   🚀 Features

Add es2024 target - by @sxzz (4c8cd)

   🐞 Bug Fixes

Support TS 5.6 for svelte - by @sxzz (28b9c)

Add neutral value to platform options in schema.json - by @venables in egoist/tsup#982 (a03db)

Wider restriction for target option - by @odanado in egoist/tsup#1118 (1979b)

Add terser value to minify option in schema.json - by @damienbutt in egoist/tsup#991 (34951)

Change newlineKind to lf for experimentalDts - by @aryaemami59 in egoist/tsup#1234 (4584b)

Enable rollup output.compact when minify is enabled - by @hyrious in egoist/tsup#1232 (9cc86)

Support Node16 and NodeNext module resolution in experimentalDts - by @aryaemami59 in egoist/tsup#1225 (41c98)

    View changes on GitHub

Commits

bee8f42 chore: release v8.3.6
86c3b0b chore: fix pass options
314a6d7 fix: don't await sub-process of onSuccess (#1256)
cd03e1e chore: release v8.3.5
fddd451 fix: run experimentalDts only once (#1236)
21b1193 chore: release v8.3.4
580e03d ci: fix release workflow
01b38f2 chore: release v8.3.3
4f5b71e ci: fix release workflow
e80dad6 chore: release v8.3.2
Additional commits viewable in compare view

Updates typescript from 5.6.3 to 5.7.3

Release notes

Sourced from typescript's releases.

TypeScript 5.7.3

For release notes, check out the release announcement.

fixed issues query for Typescript 5.7.0 (Beta).

fixed issues query for Typescript 5.7.1 (RC).

fixed issues query for Typescript 5.7.2 (Stable).

fixed issues query for Typescript 5.7.3 (Stable).

Downloads are available on npm

TypeScript 5.7

For release notes, check out the release announcement.

fixed issues query for Typescript 5.7.0 (Beta).

fixed issues query for Typescript 5.7.1 (RC).

fixed issues query for Typescript 5.7.2 (Stable).

Downloads are available on:

npm

TypeScript 5.7 RC

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

fixed issues query for Typescript 5.7.0 (Beta).

fixed issues query for Typescript 5.7.1 (RC).

Downloads are available on:

npm

TypeScript 5.7 Beta

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

fixed issues query for Typescript 5.7.0 (Beta).

Downloads are available on:

npm

Commits

a5e123d Update LKG
8bc0204 🤖 Pick PR #60828 (Fix CodeQL configuration, releases) into release-5.7 (#60923)
7aa63df 🤖 Pick PR #60393 (Don't try to add an implicit undefi...) into release-5.7 (#...
9df7c36 Bump version to 5.7.3 and LKG
e167412 🤖 Pick PR #60794 (Harden sanitizeLog against incorr...) into release-5.7 (#...
9ba364c Fix coverage build on release-5.7 (#60792)
4b7441a 🤖 Pick PR #60680 (Mark the inherited any-based index ...) into release-5.7 (#...
e844dc3 Cherry-pick #60402, #60440, #60616 into release-5.7 (#60777)
21b02a1 🤖 Pick PR #60749 (Do not require import attribute on ...) into release-5.7 (#...
b82fd16 🤖 Pick PR #60576 (Avoid incorrectly reusing assertion...) into release-5.7 (#...
Additional commits viewable in compare view

Updates jose from 5.4.0 to 5.9.6

Release notes

Sourced from jose's releases.

v5.9.6

Reverts

Revert "refactor(build): simplify package exports" (2ef3a52)

v5.9.4

Refactor

types: update error definitions (510c5ca)

v5.9.3

Refactor

use as Type for type assertions instead of <Type> (c4dc24d)

v5.9.2

Refactor

types: remove index signatures from JWK interfaces (ccf0cda)

v5.9.1

Fixes

types: add missing index signature on the convenience JWK types (90a93dc)

v5.9.0

Features

allow JWK objects as "key" input to sign and verify (c6302ea)

This method of passing private or public keys does not yield the same performance as passing a CryptoKey or KeyObject instances, its main purpose is for convenience or for when you're not going to be re-using the same set of keys for the operation, in which case you should use one of the import key methods to obtain a CryptoKey or KeyObject.

Example Signing

const alg = "RS256";
const jwk = {
  kty: "RSA",
  n: "whYOFK2Ocbbpb_zVypi9SeKiNUqKQH0zTKN1-6fpCTu6ZalGI82s7XK3tan4dJt90ptUPKD2zvxqTzFNfx4HHHsrYCf2-FMLn1VTJfQazA2BvJqAwcpW1bqRUEty8tS_Yv4hRvWfQPcc2Gc3-_fQOOW57zVy-rNoJc744kb30NjQxdGp03J2S3GLQu7oKtSDDPooQHD38PEMNnITf0pj-KgDPjymkMGoJlO3aKppsjfbt_AH6GGdRghYRLOUwQU-h-ofWHR3lbYiKtXPn5dN24kiHy61e3VAQ9_YAZlwXC_99GGtw_NpghFAuM4P1JDn0DppJldy3PGFC0GfBCZASw",
  e: "AQAB",
  d: "VuVE_KEP6323WjpbBdAIv7HGahGrgGANvbxZsIhm34lsVOPK0XDegZkhAybMZHjRhp-gwVxX5ChC-J3cUpOBH5FNxElgW6HizD2Jcq6t6LoLYgPSrfEHm71iHg8JsgrqfUnGYFzMJmv88C6WdCtpgG_qJV1K00_Ly1G1QKoBffEs-v4fAMJrCbUdCz1qWto-PU-HLMEo-krfEpGgcmtZeRlDADh8cETMQlgQfQX2VWq_aAP4a1SXmo-j0cvRU4W5Fj0RVwNesIpetX2ZFz4p_JmB5sWFEj_fC7h5z2lq-6Bme2T3BHtXkIxoBW0_pYVnASC8P2puO5FnVxDmWuHDYQ",
  p: "07rgXd_tLUhVRF_g1OaqRZh5uZ8hiLWUSU0vu9coOaQcatSqjQlIwLW8UdKv_38GrmpIfgcEVQjzq6rFBowUm9zWBO9Eq6enpasYJBOeD8EMeDK-nsST57HjPVOCvoVC5ZX-cozPXna3iRNZ1TVYBY3smn0IaxysIK-zxESf4pM",
  q: "6qrE9TPhCS5iNR7QrKThunLu6t4H_8CkYRPLbvOIt2MgZyPLiZCsvdkTVSOX76QQEXt7Y0nTNua69q3K3Jhf-YOkPSJsWTxgrfOnjoDvRKzbW3OExIMm7D99fVBODuNWinjYgUwGSqGAsb_3TKhtI-Gr5ls3fn6B6oEjVL0dpmk",
  dp: "mHqjrFdgelT2OyiFRS3dAAPf3cLxJoAGC4gP0UoQyPocEP-Y17sQ7t-ygIanguubBy65iDFLeGXa_g0cmSt2iAzRAHrDzI8P1-pQl2KdWSEg9ssspjBRh_F_AiJLLSPRWn_b3-jySkhawtfxwO8Kte1QsK1My765Y0zFvJnjPws",
  dq: "KmjaV4YcsVAUp4z-IXVa5htHWmLuByaFjpXJOjABEUN0467wZdgjn9vPRp-8Ia8AyGgMkJES_uUL_PDDrMJM9gb4c6P4-NeUkVtreLGMjFjA-_IQmIMrUZ7XywHsWXx0c2oLlrJqoKo3W-hZhR0bPFTYgDUT_mRWjk7wV6wl46E",
  qi: "iYltkV_4PmQDfZfGFpzn2UtYEKyhy-9t3Vy8Mw2VHLAADKGwJvVK5ficQAr2atIF1-agXY2bd6KV-w52zR8rmZfTr0gobzYIyqHczOm13t7uXJv2WygY7QEC2OGjdxa2Fr9RnvS99ozMa5nomZBqTqT7z5QV33czjPRCjvg6FcE",
};
const jwt = await new jose.SignJWT({ "urn:example:claim": true })
.setProtectedHeader({ alg })
</tr></table>

... (truncated)

Changelog

Sourced from jose's changelog.

5.9.6 (2024-10-20)

Reverts

Revert "refactor(build): simplify package exports" (2ef3a52)

5.9.5 (2024-10-20)

Refactor

build: simplify package exports (4783f7f)

5.9.4 (2024-10-11)

Refactor

types: update error definitions (510c5ca)

5.9.3 (2024-09-22)

Refactor

use as Type for type assertions instead of (c4dc24d)

5.9.2 (2024-09-14)

Refactor

types: remove index signatures from JWK interfaces (ccf0cda)

5.9.1 (2024-09-13)

Fixes

types: add missing index signature on the convenience JWK types (90a93dc)

5.9.0 (2024-09-13)

Features

allow JWK objects as "key" input to sign and verify (c6302ea)

5.8.0 (2024-08-26)

... (truncated)

Commits

27d26a4 chore(release): 5.9.6
2ef3a52 Revert "refactor(build): simplify package exports"
460a959 chore(release): 5.9.5
4783f7f refactor(build): simplify package exports
7521425 docs: resolve remaining conflict
30365fd ci: use default CodeQL
ea5f212 chore: bump dev deps
ffad408 docs: update docs building dependencies
e2f737d test: temporary workaround chrome 130 and testcafe
43c4bcc test: browser logs are polled
Additional commits viewable in compare view

Updates @types/jsonwebtoken from 9.0.6 to 9.0.8

Commits

See full diff in compare view

Updates graphql-yoga from 5.9.0 to 5.10.11

Changelog

Sourced from graphql-yoga's changelog.

5.10.11

Patch Changes

#3712 1c055f5 Thanks @ardatan! - Show deprecated input fields, arguments and all other input values in GraphiQL

5.10.10

Patch Changes

Updated dependencies [d4cbae1, d4cbae1]:

@graphql-yoga/logger@2.0.1

@graphql-yoga/subscription@5.0.3

5.10.9

Patch Changes

#3620 d24c5d5 Thanks @enisdenjo! - Bump dset dependency handling the CVE-2024-21529

https://security.snyk.io/vuln/SNYK-JS-DSET-7116691

#3620 d24c5d5 Thanks @enisdenjo! - dependencies updates:

Updated dependency dset@^3.1.4 ↗︎ (from ^3.1.1, in dependencies)

5.10.8

Patch Changes

#3588 ed344ea Thanks @ardatan! - Mark createLRUCache utility as deprecated, and export it as _createLRUCache marking it as an internal utility

5.10.7

Patch Changes

#3547

... (truncated)

Commits

0430c68 chore(release): update monorepo packages versions (#3713)
1c055f5 fix(graphiql): show input value deprecations (#3712)
601491c fix(deps): update all non-major dependencies (#3701)
0b5f173 fix(deps): update all non-major dependencies (#3700)
bfc6c32 chore(release): update monorepo packages versions (#3661)
def5562 fix(deps): update all non-major dependencies (#3664)
d4cbae1 fix(deps): update dependency graphql-ws to v6 (#3660)
19aab45 fix(deps): update all non-major dependencies (#3646)
b705d96 chore(deps): update dependency graphql-sse to v2.5.4 (#3635)
9f25a72 chore(release): update monorepo packages versions (#3621)
Additional commits viewable in compare view

Updates turbo from 2.2.3 to 2.4.0

Release notes

Sourced from turbo's releases.

Turborepo v2.4.0

What's Changed

Docs

docs: migration guide for users coming from Nx by @anthonyshew in vercel/turborepo#9762

docs: make incremental migration more prominent on Nx doc by @anthonyshew in vercel/turborepo#9796

feat(prune): add --use-gitignore flag by @chris-olszewski in vercel/turborepo#9797

docs: fix typo by @arosequist in vercel/turborepo#9814

docs: update ESLint package docs by @anthonyshew in vercel/turborepo#9833

docs: new page for examples by @anthonyshew in vercel/turborepo#9843

docs: Fix broken link by @benwaffle in vercel/turborepo#9857

docs: schema.json in node_modules by @anthonyshew in vercel/turborepo#9832

docs: keybinds for tui by @anthonyshew in vercel/turborepo#9831

docs: experimental flag for watch caching by @anthonyshew in vercel/turborepo#9830

docs: boundaries experimental page by @anthonyshew in vercel/turborepo#9834

@turbo/repository

feat: makes affectedPackages lockfile aware by @dimitropoulos in vercel/turborepo#9795

chore(@turbo/repository): silence noop lint by @chris-olszewski in vercel/turborepo#9835

Examples

feat(create-turbo): fix official examples by @tknickman in

Bumps the patch group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.2.3` | `2.4.0` | | [@changesets/cli](https://github.com/changesets/changesets) | `2.27.9` | `2.27.12` | | [@apollo/server](https://github.com/apollographql/apollo-server/tree/HEAD/packages/server) | `4.11.0` | `4.11.3` | | [node-mocks-http](https://github.com/eugef/node-mocks-http) | `1.16.1` | `1.16.2` | | [tsup](https://github.com/egoist/tsup) | `8.3.0` | `8.3.6` | | [typescript](https://github.com/microsoft/TypeScript) | `5.6.3` | `5.7.3` | | [jose](https://github.com/panva/jose) | `5.4.0` | `5.9.6` | | [@types/jsonwebtoken](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jsonwebtoken) | `9.0.6` | `9.0.8` | | [graphql-yoga](https://github.com/dotansimha/graphql-yoga/tree/HEAD/packages/graphql-yoga) | `5.9.0` | `5.10.11` | Bumps the patch group with 2 updates in the /packages/apollo directory: [turbo](https://github.com/vercel/turborepo) and [@changesets/cli](https://github.com/changesets/changesets). Bumps the patch group with 3 updates in the /packages/core directory: [turbo](https://github.com/vercel/turborepo), [@changesets/cli](https://github.com/changesets/changesets) and [jose](https://github.com/panva/jose). Bumps the patch group with 3 updates in the /packages/react directory: [turbo](https://github.com/vercel/turborepo), [@changesets/cli](https://github.com/changesets/changesets) and [@types/jsonwebtoken](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jsonwebtoken). Bumps the patch group with 2 updates in the /packages/yoga directory: [turbo](https://github.com/vercel/turborepo) and [@changesets/cli](https://github.com/changesets/changesets). Updates `turbo` from 2.2.3 to 2.4.0 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/release.md) - [Commits](vercel/turborepo@v2.2.3...v2.4.0) Updates `@changesets/cli` from 2.27.9 to 2.27.12 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/docs/modifying-changelog-format.md) - [Commits](https://github.com/changesets/changesets/compare/@changesets/[email protected]...@changesets/[email protected]) Updates `@apollo/server` from 4.11.0 to 4.11.3 - [Release notes](https://github.com/apollographql/apollo-server/releases) - [Changelog](https://github.com/apollographql/apollo-server/blob/main/packages/server/CHANGELOG.md) - [Commits](https://github.com/apollographql/apollo-server/commits/@apollo/[email protected]/packages/server) Updates `node-mocks-http` from 1.16.1 to 1.16.2 - [Release notes](https://github.com/eugef/node-mocks-http/releases) - [Changelog](https://github.com/eugef/node-mocks-http/blob/master/HISTORY.md) - [Commits](eugef/node-mocks-http@v1.16.1...v1.16.2) Updates `tsup` from 8.3.0 to 8.3.6 - [Release notes](https://github.com/egoist/tsup/releases) - [Commits](egoist/tsup@v8.3.0...v8.3.6) Updates `typescript` from 5.6.3 to 5.7.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml) - [Commits](microsoft/TypeScript@v5.6.3...v5.7.3) Updates `jose` from 5.4.0 to 5.9.6 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v5.4.0...v5.9.6) Updates `@types/jsonwebtoken` from 9.0.6 to 9.0.8 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jsonwebtoken) Updates `graphql-yoga` from 5.9.0 to 5.10.11 - [Release notes](https://github.com/dotansimha/graphql-yoga/releases) - [Changelog](https://github.com/dotansimha/graphql-yoga/blob/main/packages/graphql-yoga/CHANGELOG.md) - [Commits](https://github.com/dotansimha/graphql-yoga/commits/[email protected]/packages/graphql-yoga) Updates `turbo` from 2.2.3 to 2.4.0 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/release.md) - [Commits](vercel/turborepo@v2.2.3...v2.4.0) Updates `@changesets/cli` from 2.27.9 to 2.27.12 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/docs/modifying-changelog-format.md) - [Commits](https://github.com/changesets/changesets/compare/@changesets/[email protected]...@changesets/[email protected]) Updates `turbo` from 2.2.3 to 2.4.0 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/release.md) - [Commits](vercel/turborepo@v2.2.3...v2.4.0) Updates `@changesets/cli` from 2.27.9 to 2.27.12 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/docs/modifying-changelog-format.md) - [Commits](https://github.com/changesets/changesets/compare/@changesets/[email protected]...@changesets/[email protected]) Updates `jose` from 5.4.0 to 5.9.6 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v5.4.0...v5.9.6) Updates `turbo` from 2.2.3 to 2.4.0 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/release.md) - [Commits](vercel/turborepo@v2.2.3...v2.4.0) Updates `@changesets/cli` from 2.27.9 to 2.27.12 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/docs/modifying-changelog-format.md) - [Commits](https://github.com/changesets/changesets/compare/@changesets/[email protected]...@changesets/[email protected]) Updates `@types/jsonwebtoken` from 9.0.6 to 9.0.8 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jsonwebtoken) Updates `turbo` from 2.2.3 to 2.4.0 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/release.md) - [Commits](vercel/turborepo@v2.2.3...v2.4.0) Updates `@changesets/cli` from 2.27.9 to 2.27.12 - [Release notes](https://github.com/changesets/changesets/releases) - [Changelog](https://github.com/changesets/changesets/blob/main/docs/modifying-changelog-format.md) - [Commits](https://github.com/changesets/changesets/compare/@changesets/[email protected]...@changesets/[email protected]) --- updated-dependencies: - dependency-name: turbo dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: "@changesets/cli" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@apollo/server" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: node-mocks-http dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: tsup dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: typescript dependency-type: direct:development update-type: version-update:semver-minor dependency-group: patch - dependency-name: jose dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: "@types/jsonwebtoken" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: graphql-yoga dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: turbo dependency-type: indirect update-type: version-update:semver-minor dependency-group: patch - dependency-name: "@changesets/cli" dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: turbo dependency-type: indirect update-type: version-update:semver-minor dependency-group: patch - dependency-name: "@changesets/cli" dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: jose dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch - dependency-name: turbo dependency-type: indirect update-type: version-update:semver-minor dependency-group: patch - dependency-name: "@changesets/cli" dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@types/jsonwebtoken" dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: turbo dependency-type: indirect update-type: version-update:semver-minor dependency-group: patch - dependency-name: "@changesets/cli" dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch ... Signed-off-by: dependabot[bot] <[email protected]>

changeset-bot · 2025-02-03T23:24:38Z

⚠️ No Changeset found

Latest commit: 59580ba

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

dependabot · 2025-02-10T23:55:47Z

Superseded by #112.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 3, 2025

dependabot bot mentioned this pull request Feb 3, 2025

chore(deps): bump the patch group across 5 directories with 9 updates #104

Closed

dependabot bot closed this Feb 10, 2025

dependabot bot deleted the dependabot/npm_and_yarn/patch-084e47a238 branch February 10, 2025 23:55

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the patch group across 5 directories with 9 updates #107

chore(deps): bump the patch group across 5 directories with 9 updates #107

dependabot bot commented on behalf of github Feb 3, 2025 •

edited

Loading

changeset-bot bot commented Feb 3, 2025

dependabot bot commented on behalf of github Feb 10, 2025

chore(deps): bump the patch group across 5 directories with 9 updates #107

chore(deps): bump the patch group across 5 directories with 9 updates #107

Conversation

dependabot bot commented on behalf of github Feb 3, 2025 • edited Loading

Turborepo v2.4.0

What's Changed

Docs

@​turbo/repository

Examples

Changelog

@​changesets/cli@​2.27.12

Patch Changes

@​changesets/cli@​2.27.11

Patch Changes

@​changesets/cli@​2.27.10

Patch Changes

@​apollo/server-integration-testsuite@​4.11.3

Patch Changes

@​apollo/server@​4.11.3

Patch Changes

@​apollo/server-integration-testsuite@​4.11.2

Patch Changes

@​apollo/server@​4.11.2

@​apollo/server-integration-testsuite@​4.11.1

Patch Changes

@​apollo/server@​4.11.1

Patch Changes

4.11.3

Patch Changes

4.11.2

4.11.1

Patch Changes

v 1.16.2

v8.3.6

🐞 Bug Fixes

View changes on GitHub

v8.3.5

🐞 Bug Fixes

View changes on GitHub

v8.3.4

View changes on GitHub

v8.3.3

View changes on GitHub

v8.3.1

🚀 Features

🐞 Bug Fixes

View changes on GitHub

TypeScript 5.7.3

TypeScript 5.7

TypeScript 5.7 RC

TypeScript 5.7 Beta

v5.9.6

Reverts

v5.9.4

Refactor

v5.9.3

Refactor

v5.9.2

Refactor

v5.9.1

Fixes

v5.9.0

Features

Example Signing

5.9.6 (2024-10-20)

Reverts

5.9.5 (2024-10-20)

Refactor

5.9.4 (2024-10-11)

Refactor

5.9.3 (2024-09-22)

Refactor

5.9.2 (2024-09-14)

Refactor

5.9.1 (2024-09-13)

Fixes

5.9.0 (2024-09-13)

Features

5.8.0 (2024-08-26)

5.10.11

dependabot bot commented on behalf of github Feb 3, 2025 •

edited

Loading

`@turbo/repository`

`@changesets/cli@2`.27.12

`@changesets/cli@2`.27.11

`@changesets/cli@2`.27.10

`@apollo/server-integration-testsuite@4`.11.3

`@apollo/server@4`.11.3

`@apollo/server-integration-testsuite@4`.11.2

`@apollo/server@4`.11.2

`@apollo/server-integration-testsuite@4`.11.1

`@apollo/server@4`.11.1

`@turbo/repository`