Skip to content

build(deps-dev)(deps-dev): bump turbo from 2.9.6 to 2.9.14#18

Merged
reaatech merged 3 commits into
mainfrom
dependabot/npm_and_yarn/turbo-2.9.8
May 17, 2026
Merged

build(deps-dev)(deps-dev): bump turbo from 2.9.6 to 2.9.14#18
reaatech merged 3 commits into
mainfrom
dependabot/npm_and_yarn/turbo-2.9.8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps turbo from 2.9.6 to 2.9.14.

Release notes

Sourced from turbo's releases.

Turborepo v2.9.14

[!NOTE] This release contains important security fixes.

High:

Low:

What's Changed

Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.9.12...v2.9.14

Turborepo v2.9.13-canary.1

What's Changed

Changelog

... (truncated)

Commits

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 4, 2026

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps [turbo](https://github.com/vercel/turborepo) from 2.9.6 to 2.9.14.
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.9.6...v2.9.14)

---
updated-dependencies:
- dependency-name: turbo
  dependency-version: 2.9.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps-dev)(deps-dev): bump turbo from 2.9.6 to 2.9.8 build(deps-dev)(deps-dev): bump turbo from 2.9.6 to 2.9.14 May 17, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/turbo-2.9.8 branch from 9694602 to 052889c Compare May 17, 2026 03:20
reaatech added 2 commits May 17, 2026 04:00
- Add pnpm.overrides for fast-uri (>=3.1.2) and protobufjs (>=8.0.2)
- Bump @opentelemetry/sdk-node and related packages to >=0.217.0
- Adapt otel.ts: migrate new Resource() to resourceFromAttributes()
- Regenerate pnpm-lock.yaml
- Add pnpm.overrides for hono (>=4.12.18) and ip-address (>=10.1.1)
  to resolve remaining moderate security advisories
- Regenerate pnpm-lock.yaml with clean vulnerability report
- Audit now reports 0 vulnerabilities (down from 7)
@reaatech reaatech merged commit 77b9a0c into main May 17, 2026
@reaatech reaatech deleted the dependabot/npm_and_yarn/turbo-2.9.8 branch May 17, 2026 04:22
@reaatech
Copy link
Copy Markdown
Owner

✅ Dependabot PR Merged

  • Bump: turbo from 2.9.6 → 2.9.14
  • Attempts to fix CI: 2
  • Merge: 77b9a0c

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant