Turborepo embraces the new breed of package managers

Turborepo gets nub and aube support

The biggest story this week is Turborepo's rapid support for two emerging JavaScript package managers: nub and aube. After v2.10.1 landed support for the devEngines.packageManager field, the team spent the rest of the week extending that foundation into full package manager support across a series of canary releases and then the v2.10.3 stable release. Nub support arrived in v2.10.2 with native lockfile handling, and v2.10.2-canary.1 started wiring up devEngines support for workspaces. Aube support followed in v2.10.3-canary.3, alongside a performance boost from thin LTO and codegen-units=1 for release builds.

TUI interactivity and lockfile parsing improvements

Beyond package manager support, Turborepo's terminal UI gained meaningful interaction. The v2.10.3 stable release lets you click rows in the TUI task list to select tasks and automatically copies selections to the clipboard on mouse release — turning the TUI into something closer to a genuine interactive tool. The v2.10.4-canary.1 release overhauled pnpm lockfile parsing and dependency closure computation, moving to single-pass parsing for yarn v1 and Berry lockfiles. It also fixed watch mode recovery from slow initial hashes and Bun scoped package dependency resolution. A smaller but welcome fix in v2.10.3-canary.8 turned malformed JSON parse errors from panics into proper error messages.

pnpm 11.10: CI authentication and a path to Rust

pnpm 11.10 addressed a long-standing pain point: registry authentication in CI environments. The new _auth setting is a single structured value that sidesteps the variable naming constraints of shells and GitHub Actions, where characters like /, :, and . have historically made authentication configuration brittle. The release also ships new pnpm prefix and pnpm issues commands, and — significantly — pnpm self-update can now install pnpm v12, which is the Rust port. For teams evaluating the migration, this gives them a no-fuss upgrade path. Improved pnpm up accuracy and faster resolution against registries that ignore abbreviated metadata round out a release that feels focused on the sharp edges of daily package management.

Deno 2.9.1 and Vitest VS Code

Deno's v2.9.1 is a stabilization release with over 40 bug fixes across caching, bundling, and Node.js compatibility. The headline feature is a --desktop flag for type-checking Deno Desktop code, alongside deep-link URL scheme registration at bundle time. Away from the runtimes, the Vitest VS Code extension v1.50.7 fixed Windows drive letter normalization in test failure stacks — a small but welcome quality-of-life fix for developers on Windows.