vercel/turborepo - CodSpeed

turborepo

Blog Docs Changelog

Performance History

No performance history available yetOnce you have some commits, you will be able to see the performance history of your primary branch.

Latest Results

fix: Format code

shew/clean-up-logs

3 days ago

fix: Add allowComments and allowTrailingCommas to schema generator The Rust schema generator now adds these JSONC properties so CI regeneration won't overwrite manually-added entries.

ddmoney420:fix/allow-comments-trailing-commas-in-schema

3 days ago

fix: Eliminate ts-rs serde attribute parse warnings during compilation

shew/clean-up-logs

3 days ago

Merge branch 'main' into fix/allow-comments-trailing-commas-in-schema

ddmoney420:fix/allow-comments-trailing-commas-in-schema

3 days ago

fix: Add allowComments and allowTrailingCommas to schema generator The Rust schema generator now adds these JSONC properties so CI regeneration won't overwrite manually-added entries.

ddmoney420:fix/allow-comments-trailing-commas-in-schema

3 days ago

fix: Validate turbo version from lockfile for all package managers Extends the semver validation fix from #11546 to Berry (Yarn 2+), Bun, pnpm, and Yarn 1 lockfiles. The original fix only covered npm, but the same vulnerability existed in all other package manager lockfile parsers. When TURBO_DOWNLOAD_LOCAL_ENABLED=1 is set, the turbo version extracted from lockfiles is passed to package manager commands. Without validation, malicious version strings could potentially be used for RCE. This change validates that the version is a valid semver string before returning it from turbo_version() for all lockfile types.

anthonyshew/fix-turbo-version-validation-all-lockfiles

3 days ago

fix: Validate turbo version from lockfile for all package managers Extends the semver validation fix from #11546 to Berry (Yarn 2+), Bun, pnpm, and Yarn 1 lockfiles. The original fix only covered npm, but the same vulnerability existed in all other package manager lockfile parsers. When TURBO_DOWNLOAD_LOCAL_ENABLED=1 is set, the turbo version extracted from lockfiles is passed to package manager commands. Without validation, malicious version strings could potentially be used for RCE. This change validates that the version is a valid semver string before returning it from turbo_version() for all lockfile types.

anthonyshew/fix-turbo-version-validation-all-lockfiles

3 days ago

shew/faster-compile-time

4 days ago

Active Branches

feat: Add experimentalObservability with an OTel backend

last run

12 days ago

N/A

perf: Optimize globwalk helper functions

last run

14 days ago

N/A

© 2026 CodSpeed Technology

Home Terms Privacy Docs