chore(deps): update dependency turbo to v2 - autoclosed #432

chore: remove legacy filter flags by @chris-olszewski in https://github.com/vercel/turbo/pull/8294/
chore(turborepo): adjust error message for pipeline by @NicholasLYang in https://github.com/vercel/turbo/pull/8264
chore(turbo)!: remove check for legacy turbo config in package.json by @mehulkar in https://github.com/vercel/turbo/pull/8023
chore(turbo)! hard error on env vars in task and global dependencies by @mehulkar in #8026
feat: require packageManager in package.json by @chris-olszewski in #8017
feat(filter): no longer infer scope in filters by @chris-olszewski in #8137
chore!(create-turbo): remove old pm arg by @tknickman in #8150
feat: error on empty package name by @chris-olszewski #8152
feat(filter): error on invalid filters by @chris-olszewski #8142
Move fs cache location. by @anthonyshew in #8126
refactor(turborepo): Rename outputMode to outputLogs in turbo.json by @NicholasLYang in #8149
feat: --only now applies to package dependencies by @chris-olszewski in #8163
Rename pipeline to tasks. by @anthonyshew in #8157
feat: add doublestar to exact dir paths by @chris-olszewski in #8180
chore: remove globalDotEnv and dotEnv fields by @chris-olszewski in #8181
chore: make env mode strict by default by @chris-olszewski in #8182

Other

feat: allow for negative globs in globalDeps by @chris-olszewski in #8190
chore: change turborepo licenses to MIT by @chris-olszewski in #8197
feat: all dependencies of root package contribute to global hash by @chris-olszewski in #8202
fix(turborepo): non-determinism with root internal deps hash. by @NicholasLYang in https://github.com/vercel/turbo/pull/8277
fix: update integration test to expect correct output by @chris-olszewski in https://github.com/vercel/turbo/pull/8285
chore: remove cpuprofile flag by @chris-olszewski in https://github.com/vercel/turbo/pull/8282
fix(ui): disable UI on all dry runs by @chris-olszewski in https://github.com/vercel/turbo/pull/8269
fix(turborepo): stderr log by @NicholasLYang in https://github.com/vercel/turbo/pull/8267
chore(turborepo): adjust error message for pipeline by @NicholasLYang in https://github.com/vercel/turbo/pull/8264
fix(ui): ensure prelude gets printed before ui starts by @chris-olszewski in https://github.com/vercel/turbo/pull/8265
chore(@turbo/benchmark): fix lint warnings by @mehulkar in https://github.com/vercel/turbo/pull/8233
chore(turborepo): Feature flagged off file hashing by @NicholasLYang in https://github.com/vercel/turbo/pull/8229
chore: downgrade curl to fix Windows rust tests by @chris-olszewski in https://github.com/vercel/turbo/pull/8242
fix(turborepo): Remove optional git locks by @NicholasLYang in https://github.com/vercel/turbo/pull/8244
fix(turborepo): Optional lock with env var by @NicholasLYang in https://github.com/vercel/turbo/pull/8247
add two retry strategies to allow requests to timeout gracefully by @arlyon in https://github.com/vercel/turbo/pull/8080
add support for upload speed / remaining in the cache upload step by @arlyon in https://github.com/vercel/turbo/pull/8081
chore: remove --ignore flag by @chris-olszewski in https://github.com/vercel/turbo/pull/8201
feat: factor engines into global cache key by @chris-olszewski in #8173

Full Changelog: vercel/turborepo@v1.13.4...v2.0.0

Configuration

📅 Schedule: Branch creation - "before 4am on Monday,before 4am on Thursday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

New Features
- Upgraded the turbo package to version 2.0.12, which may introduce new functionalities and performance enhancements.
Impact
- The update could affect the overall behavior of the application, requiring users to review any changes in functionality.

vercel · 2024-06-06T16:18:15Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
transmascfutures	❌ Failed (Inspect)			Aug 13, 2024 7:06pm

deepsource-io · 2024-06-06T16:18:30Z

Here's the code health analysis summary for commits 82ba42d..a50defd. View details on DeepSource ↗.

Analysis Summary

Analyzer	Status	Summary	Link
Secrets	✅ Success		View Check ↗
JavaScript	✅ Success		View Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

coderabbitai · 2024-06-06T16:22:39Z

Walkthrough

The primary change involves upgrading the turbo package in the package.json file from version 1.13.4 to 2.0.12. This major version update could introduce new features, enhancements, or breaking changes that may affect project functionality. It is advisable to review the release notes for detailed insights into the specific modifications and potential impacts on the project.

Changes

Files	Change Summary
package.json	Updated `turbo` version from `1.13.4` to `2.0.12`

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share

Tips

Chat

There are 3 ways to chat with CodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>.
- Generate unit testing code for this file.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
- @coderabbitai generate unit testing code for this file.
- @coderabbitai modularize this function.
PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai generate interesting stats about this repository and render them as a table.
- @coderabbitai show all the console.log statements in this repository.
- @coderabbitai read src/utils.ts and generate unit testing code.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
- @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (invoked as PR comments)

@coderabbitai pause to pause the reviews on a PR.
@coderabbitai resume to resume the paused reviews.
@coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
@coderabbitai full review to do a full review from scratch and review all the files again.
@coderabbitai summary to regenerate the summary of the PR.
@coderabbitai resolve resolve all the CodeRabbit review comments.
@coderabbitai configuration to show the current CodeRabbit configuration for the repository.
@coderabbitai help to get help.

Additionally, you can add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Configuration File (`.coderabbit.yaml`)

You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
Please see the configuration documentation for more information.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

Visit our Documentation for detailed information on how to use CodeRabbit.
Join our Discord Community to get help, request features, and share feedback.
Follow us on X/Twitter for updates and announcements.

socket-security · 2024-06-13T16:23:06Z

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source	CI
Install scripts	npm/core-js-pure@3.37.1	Install script: postinstall Source: `node -e "try{require('./postinstall')}catch(e){}"`	`package.json` `pnpm-lock.yaml`	🚫
Install scripts	npm/@vercel/speed-insights@1.0.12	Install script: postinstall Source: `node scripts/postinstall.mjs`	`package.json` `pnpm-lock.yaml`	🚫
Install scripts	npm/core-js@3.38.0	Install script: postinstall Source: `node -e "try{require('./postinstall')}catch(e){}"`	`package.json` `pnpm-lock.yaml`	🚫

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

@SocketSecurity ignore npm/core-js-pure@3.37.1
@SocketSecurity ignore npm/@vercel/speed-insights@1.0.12
@SocketSecurity ignore npm/core-js@3.38.0

kodiakhq · 2024-06-14T19:34:08Z

This PR currently has a merge conflict. Please resolve this and then re-add the automerge label.

coderabbitai

Actionable comments posted: 0

Review details

Configuration used: CodeRabbit UI
Review profile: CHILL

Commits

Files that changed from the base of the PR and between b8598cc and 0f4eb48.

Files ignored due to path filters (1)

pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

Files selected for processing (1)

package.json (1 hunks)

Additional comments not posted (1)

package.json (1)

126-126: Verify compatibility and test the updated package.

The turbo package has been updated from version 1.13.4 to 2.0.12. This major version update could introduce breaking changes or new features. Ensure to review the release notes and thoroughly test the updated package to confirm compatibility with the project.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

sonarcloud · 2024-08-13T19:06:38Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

socket-security · 2024-08-13T19:06:49Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@vercel/analytics@1.3.1	None	`0`	199 kB	vercel-release-bot
npm/@vercel/speed-insights@1.0.12	None	`0`	282 kB	vercel-release-bot
npm/boxen@7.1.1	None	`+4`	93.9 kB	sindresorhus
npm/chromatic@11.7.0	None	`0`	4.28 MB	ghengeveld
npm/dotenv-cli@7.4.2	Transitive: environment, filesystem, shell	`+2`	44.7 kB	entropitor
npm/embla-carousel-auto-height@7.1.0	None	`+1`	407 kB	davidjerleke
npm/embla-carousel-react@7.1.0	None	`+1`	409 kB	davidjerleke
npm/eslint-config-next@14.2.5	unsafe Transitive: environment, eval, filesystem, shell	`+97`	12.8 MB	vercel-release-bot
npm/eslint-formatter-github@1.1.4	environment Transitive: filesystem, network, shell	`+45`	6.37 MB	alisowski
npm/eslint-import-resolver-typescript@3.6.1	Transitive: environment, filesystem, unsafe	`+16`	789 kB	jounqin
npm/eslint-plugin-codegen@0.28.0	environment, filesystem, shell Transitive: eval, unsafe	`+88`	20.5 MB	mmkale
npm/eslint-plugin-i@2.29.1	filesystem, unsafe Transitive: environment	`+11`	1.66 MB	jounqin
npm/eslint-plugin-i18next@6.0.9	None	`0`	25.9 kB	edvardchen
npm/eslint-plugin-n@16.6.2	filesystem Transitive: unsafe	`+14`	1.95 MB	weiran.zsd
npm/eslint-plugin-react@7.35.0	filesystem Transitive: eval	`+51`	4.66 MB	ljharb
npm/eslint-plugin-storybook@0.8.0	Transitive: environment, filesystem	`+27`	2.97 MB	yannbf
npm/eslint-plugin-turbo@1.13.4	environment, eval, filesystem, shell	`+1`	490 kB	turbobot
npm/eslint@8.57.0	environment, filesystem Transitive: eval, shell, unsafe	`+48`	9.55 MB	eslintbot
npm/husky@9.1.4	environment, filesystem, shell	`0`	4.01 kB	typicode
npm/i18next-browser-languagedetector@8.0.0	None	`+1`	327 kB	adrai
npm/i18next-hmr@3.1.2	None	`0`	43.9 kB	felixmosh
npm/i18next-http-backend@2.5.2	network	`+1`	201 kB	adrai
npm/i18next@23.12.3	None	`+1`	878 kB	adrai

🚮 Removed packages: npm/nanoid@5.0.7, npm/prettier@3.3.3, npm/prisma@5.18.0, npm/tsx@4.17.0, npm/typescript@5.5.4

View full report↗︎

coderabbitai

Actionable comments posted: 0

Review details

Configuration used: CodeRabbit UI
Review profile: CHILL

Commits

Files that changed from the base of the PR and between 0f4eb48 and ee64179.

Files ignored due to path filters (1)

pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

Files selected for processing (1)

package.json (1 hunks)

Additional comments not posted (1)

package.json (1)

126-126: Verify compatibility with the new turbo version.

The update from turbo version 1.13.4 to 2.0.12 is a major version change and may introduce breaking changes. Ensure that the project's scripts and dependencies are compatible with the new version. Review the release notes for any breaking changes or new features that might affect your project.

renovate bot requested a review from JoeKarow as a code owner June 6, 2024 16:18

renovate bot added automerge Enable Kodiak auto-merge dependencies Change in project dependencies. labels Jun 6, 2024

vercel bot had a problem deploying to Preview June 6, 2024 16:18 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from 7c06407 to 88d17cf Compare June 6, 2024 16:24

vercel bot had a problem deploying to Preview June 6, 2024 16:25 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from 88d17cf to 86b34e8 Compare June 6, 2024 21:38

vercel bot had a problem deploying to Preview June 6, 2024 21:38 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from 86b34e8 to 4a1c37c Compare June 7, 2024 01:48

vercel bot had a problem deploying to Preview June 7, 2024 01:49 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from 4a1c37c to 02f836e Compare June 13, 2024 16:17

vercel bot had a problem deploying to Preview June 13, 2024 16:17 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from 02f836e to 6afeb92 Compare June 13, 2024 16:22

vercel bot had a problem deploying to Preview June 13, 2024 16:23 Failure

kodiakhq bot removed the automerge Enable Kodiak auto-merge label Jun 14, 2024

renovate bot force-pushed the renovate/major-turbo-monorepo branch from 6afeb92 to e122132 Compare June 14, 2024 19:36

vercel bot had a problem deploying to Preview June 14, 2024 19:37 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from e122132 to 505730e Compare June 18, 2024 18:32

vercel bot had a problem deploying to Preview June 18, 2024 18:33 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from 505730e to e478e50 Compare June 25, 2024 02:10

vercel bot had a problem deploying to Preview June 25, 2024 02:11 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from e478e50 to 9c21c85 Compare June 25, 2024 17:54

vercel bot had a problem deploying to Preview June 25, 2024 17:55 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from 9c21c85 to ac8e6ea Compare June 28, 2024 20:06

vercel bot had a problem deploying to Preview June 28, 2024 20:07 Failure

vercel bot had a problem deploying to Preview July 19, 2024 17:57 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from d4525e0 to 29dd926 Compare July 19, 2024 18:00

vercel bot had a problem deploying to Preview July 19, 2024 18:01 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from 29dd926 to e69a659 Compare July 20, 2024 02:14

vercel bot had a problem deploying to Preview July 20, 2024 02:15 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from e69a659 to 3c02618 Compare July 30, 2024 22:34

vercel bot had a problem deploying to Preview July 30, 2024 22:35 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from 3c02618 to aa21ae3 Compare July 31, 2024 14:52

vercel bot had a problem deploying to Preview July 31, 2024 14:54 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from aa21ae3 to 1315ffb Compare July 31, 2024 14:55

vercel bot had a problem deploying to Preview July 31, 2024 14:56 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from 1315ffb to bb533c0 Compare July 31, 2024 22:51

vercel bot had a problem deploying to Preview July 31, 2024 22:51 Failure

renovate bot changed the title ~~chore(deps): update turbo monorepo to v2 (major)~~ chore(deps): update dependency turbo to v2 Aug 1, 2024

renovate bot force-pushed the renovate/major-turbo-monorepo branch from bb533c0 to 0f4eb48 Compare August 6, 2024 17:53

vercel bot had a problem deploying to Preview August 6, 2024 17:53 Failure

coderabbitai bot reviewed Aug 6, 2024

View reviewed changes

renovate bot force-pushed the renovate/major-turbo-monorepo branch from 0f4eb48 to cacc091 Compare August 8, 2024 17:51

vercel bot had a problem deploying to Preview August 8, 2024 17:52 Failure

renovate bot force-pushed the renovate/major-turbo-monorepo branch from cacc091 to 6b0c2cc Compare August 8, 2024 17:56

vercel bot had a problem deploying to Preview August 8, 2024 17:56 Failure

chore(deps): update dependency turbo to v2

ee64179

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/major-turbo-monorepo branch from 6b0c2cc to ee64179 Compare August 13, 2024 19:06

vercel bot had a problem deploying to Preview August 13, 2024 19:06 Failure

coderabbitai bot reviewed Aug 13, 2024

View reviewed changes

renovate bot changed the title ~~chore(deps): update dependency turbo to v2~~ chore(deps): update dependency turbo to v2 - autoclosed Aug 14, 2024

renovate bot closed this Aug 14, 2024

renovate bot deleted the renovate/major-turbo-monorepo branch August 14, 2024 18:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependency turbo to v2 - autoclosed #432

chore(deps): update dependency turbo to v2 - autoclosed #432

renovate bot commented Jun 6, 2024 •

edited by coderabbitai bot

Loading

vercel bot commented Jun 6, 2024 •

edited

Loading

deepsource-io bot commented Jun 6, 2024 •

edited

Loading

Analysis Summary

coderabbitai bot commented Jun 6, 2024 •

edited

Loading

Chat

CodeRabbit Commands (invoked as PR comments)

CodeRabbit Configuration File (`.coderabbit.yaml`)

Documentation and Community

socket-security bot commented Jun 13, 2024 •

edited

Loading

kodiakhq bot commented Jun 14, 2024

coderabbitai bot left a comment

sonarcloud bot commented Aug 13, 2024

socket-security bot commented Aug 13, 2024

coderabbitai bot left a comment

chore(deps): update dependency turbo to v2 - autoclosed #432

chore(deps): update dependency turbo to v2 - autoclosed #432

Conversation

renovate bot commented Jun 6, 2024 • edited by coderabbitai bot Loading

Release Notes

v2.0.12

v2.0.11

v2.0.10: Turborepo v2.0.10

What's Changed

Examples

Changelog

New Contributors

v2.0.9

v2.0.8: Turborepo v2.0.8

What's Changed

Examples

Changelog

v2.0.7: Turborepo v2.0.7

What's Changed

Examples

Changelog

New Contributors

v2.0.6: Turborepo v2.0.6

What's Changed

Examples

Changelog

New Contributors

v2.0.5

v2.0.4: Turborepo v2.0.4

What's Changed

create-turbo

@​turbo/codemod

Examples

Changelog

New Contributors

v2.0.3: Turborepo v2.0.3

What's Changed

turbo-ignore

Changelog

v2.0.2: Turborepo v2.0.2

What's Changed

@​turbo/codemod

Examples

Changelog

New Contributors

v2.0.1: Turborepo v2.0.1

v2.0.0: Turborepo v2.0.0

What's Changed

@​turbo/codemod

Changelog

Breaking

Other

Configuration

Summary by CodeRabbit

vercel bot commented Jun 6, 2024 • edited Loading

deepsource-io bot commented Jun 6, 2024 • edited Loading

Analysis Summary

coderabbitai bot commented Jun 6, 2024 • edited Loading

Walkthrough

Changes

Chat

CodeRabbit Commands (invoked as PR comments)

CodeRabbit Configuration File (.coderabbit.yaml)

Documentation and Community

socket-security bot commented Jun 13, 2024 • edited Loading

Next steps

kodiakhq bot commented Jun 14, 2024

coderabbitai bot left a comment

Choose a reason for hiding this comment

sonarcloud bot commented Aug 13, 2024

Quality Gate passed

socket-security bot commented Aug 13, 2024

coderabbitai bot left a comment

Choose a reason for hiding this comment

renovate bot commented Jun 6, 2024 •

edited by coderabbitai bot

Loading

`v2.0.12`

`v2.0.11`

`v2.0.10`: Turborepo v2.0.10

`v2.0.9`

`v2.0.8`: Turborepo v2.0.8

`v2.0.7`: Turborepo v2.0.7

`v2.0.6`: Turborepo v2.0.6

`v2.0.5`

`v2.0.4`: Turborepo v2.0.4

@turbo/codemod

`v2.0.3`: Turborepo v2.0.3

`v2.0.2`: Turborepo v2.0.2

@turbo/codemod

`v2.0.1`: Turborepo v2.0.1

`v2.0.0`: Turborepo v2.0.0

@turbo/codemod

vercel bot commented Jun 6, 2024 •

edited

Loading

deepsource-io bot commented Jun 6, 2024 •

edited

Loading

coderabbitai bot commented Jun 6, 2024 •

edited

Loading

CodeRabbit Configuration File (`.coderabbit.yaml`)

socket-security bot commented Jun 13, 2024 •

edited

Loading