{"collection":{"slug":"js-toolchain","name":"JavaScript Runtimes & Tooling"},"digest":{"id":"cwd_eJ5LvfENdQ0tpd-hZGo50","weekStart":"2026-06-29","title":"Turborepo embraces the new breed of package managers","intro":"Turborepo shipped full support for nub and aube package managers across 2.10.x, while pnpm 11.10 made the week's other splash with a CI-friendly authentication overhaul and a path toward its Rust rewrite.","body":"### Turborepo gets nub and aube support\n\nThe biggest story this week is Turborepo's rapid support for two emerging JavaScript package managers: nub and aube. After [v2.10.1](/release/rel_WjvCneJtGIoyXWtB9D0Ff-turborepo-v2-10-1-supports-devengines-packagemanager-and-fixes-corepack-hashes) landed support for the `devEngines.packageManager` field, the team spent the rest of the week extending that foundation into full package manager support across a series of canary releases and then the [v2.10.3 stable](/release/rel_-pynWZc5iKqgruujyikwp-turborepo-v2-10-3-adds-nub-and-aube-package-manager-support) release. Nub support arrived in [v2.10.2](/release/rel_tcz8D5Mdtz2fOAbyuISNW-turborepo-v2-10-2-adds-nub-package-manager-support-and-fixes-bun-lockfile) with native lockfile handling, and [v2.10.2-canary.1](/release/rel_L8vPhslk-6EXW_1T54i91-turborepo-v2-10-2-canary-1-adds-devengines-and-nub-package-manager-support) started wiring up `devEngines` support for workspaces. Aube support followed in [v2.10.3-canary.3](/release/rel_X7LJRycU6xtQQ0qIXRJX1-turborepo-v2-10-3-canary-3-adds-aube-package-manager-support), alongside a performance boost from thin LTO and `codegen-units=1` for release builds.\n\n### TUI interactivity and lockfile parsing improvements\n\nBeyond package manager support, Turborepo's terminal UI gained meaningful interaction. The [v2.10.3 stable](/release/rel_-pynWZc5iKqgruujyikwp-turborepo-v2-10-3-adds-nub-and-aube-package-manager-support) release lets you click rows in the TUI task list to select tasks and automatically copies selections to the clipboard on mouse release — turning the TUI into something closer to a genuine interactive tool. The [v2.10.4-canary.1](/release/rel_QRJLluEdzTTrlmv-7AlJ7-turborepo-v2-10-4-canary-1-adds-tui-task-selection-and-optimizes-lockfile) release overhauled pnpm lockfile parsing and dependency closure computation, moving to single-pass parsing for yarn v1 and Berry lockfiles. It also fixed watch mode recovery from slow initial hashes and Bun scoped package dependency resolution. A smaller but welcome fix in [v2.10.3-canary.8](/release/rel_-W4IUYbP9IUCytVqZtPR6-turborepo-v2-10-3-canary-8-adds-mcp-servers-example-fixes-json-parse-panic) turned malformed JSON parse errors from panics into proper error messages.\n\n### pnpm 11.10: CI authentication and a path to Rust\n\n[pnpm 11.10](/release/rel_kl1lQb9yKPrD7uTyiz9wb-pnpm-11-10-adds-ci-friendly-auth-setting-and-pnpm-prefix-command) addressed a long-standing pain point: registry authentication in CI environments. The new `_auth` setting is a single structured value that sidesteps the variable naming constraints of shells and GitHub Actions, where characters like `/`, `:`, and `.` have historically made authentication configuration brittle. The release also ships new `pnpm prefix` and `pnpm issues` commands, and — significantly — `pnpm self-update` can now install pnpm v12, which is the Rust port. For teams evaluating the migration, this gives them a no-fuss upgrade path. Improved `pnpm up` accuracy and faster resolution against registries that ignore abbreviated metadata round out a release that feels focused on the sharp edges of daily package management.\n\n### Deno 2.9.1 and Vitest VS Code\n\nDeno's [v2.9.1](/release/rel_kBig2L4oeEUy1EheT5cnq-deno-v2-9-1-adds-desktop-type-checking-flag-and-fixes-cache-bundling-and-desktop) is a stabilization release with over 40 bug fixes across caching, bundling, and Node.js compatibility. The headline feature is a `--desktop` flag for type-checking Deno Desktop code, alongside deep-link URL scheme registration at bundle time. Away from the runtimes, the [Vitest VS Code extension v1.50.7](/release/rel_DMPJhQbdvsV5p2TiHCQaa-v1-50-7) fixed Windows drive letter normalization in test failure stacks — a small but welcome quality-of-life fix for developers on Windows.","releaseIds":["rel_WjvCneJtGIoyXWtB9D0Ff","rel_-pynWZc5iKqgruujyikwp","rel_tcz8D5Mdtz2fOAbyuISNW","rel_L8vPhslk-6EXW_1T54i91","rel_X7LJRycU6xtQQ0qIXRJX1","rel_QRJLluEdzTTrlmv-7AlJ7","rel_-W4IUYbP9IUCytVqZtPR6","rel_kl1lQb9yKPrD7uTyiz9wb","rel_kBig2L4oeEUy1EheT5cnq","rel_DMPJhQbdvsV5p2TiHCQaa"],"releaseCount":17,"generatedAt":"2026-07-11T16:49:25.987Z","releases":[{"id":"rel_WjvCneJtGIoyXWtB9D0Ff","title":"Turborepo v2.10.1 supports devEngines.packageManager and fixes Corepack hashes","path":"/release/rel_WjvCneJtGIoyXWtB9D0Ff-devengines-packagemanager-now-supported-corepack-integrity-hashes-fixed","org":{"slug":"vercel","name":"Vercel"},"importance":null},{"id":"rel_-pynWZc5iKqgruujyikwp","title":"Turborepo v2.10.3 adds nub and aube package manager support","path":"/release/rel_-pynWZc5iKqgruujyikwp-nub-and-aube-package-managers-now-supported-tui-gains-task-selection","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_tcz8D5Mdtz2fOAbyuISNW","title":"Turborepo v2.10.2 adds nub package manager support and fixes Bun lockfile pruning","path":"/release/rel_tcz8D5Mdtz2fOAbyuISNW-nub-package-manager-supported-bun-lockfile-pruning-fixed","org":{"slug":"vercel","name":"Vercel"},"importance":null},{"id":"rel_L8vPhslk-6EXW_1T54i91","title":"Turborepo v2.10.2-canary.1 adds devEngines and nub package manager support","path":"/release/rel_L8vPhslk-6EXW_1T54i91-devengines-support-nub-recognized-as-package-manager","org":{"slug":"vercel","name":"Vercel"},"importance":null},{"id":"rel_X7LJRycU6xtQQ0qIXRJX1","title":"Turborepo v2.10.3-canary.3 adds Aube package manager support","path":"/release/rel_X7LJRycU6xtQQ0qIXRJX1-aube-package-manager-supported-in-pipelines","org":{"slug":"vercel","name":"Vercel"},"importance":null},{"id":"rel_QRJLluEdzTTrlmv-7AlJ7","title":"Turborepo v2.10.4-canary.1 adds TUI task selection and optimizes lockfile parsing","path":"/release/rel_QRJLluEdzTTrlmv-7AlJ7-tui-task-selection-by-row-click-lockfile-parsing-overhauled","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_-W4IUYbP9IUCytVqZtPR6","title":"Turborepo v2.10.3-canary.8 adds MCP servers example, fixes JSON parse panic","path":"/release/rel_-W4IUYbP9IUCytVqZtPR6-mcp-servers-example-added-json-parse-panics-become-errors","org":{"slug":"vercel","name":"Vercel"},"importance":null},{"id":"rel_kl1lQb9yKPrD7uTyiz9wb","title":"pnpm 11.10 adds CI-friendly _auth setting and pnpm prefix command","path":"/release/rel_kl1lQb9yKPrD7uTyiz9wb-auth-setting-for-ci-pnpm-prefix-and-issues-commands-ship","org":{"slug":"pnpm","name":"pnpm"},"importance":3},{"id":"rel_kBig2L4oeEUy1EheT5cnq","title":"Deno v2.9.1 adds desktop type-checking flag and fixes cache, bundling, and desktop bugs","path":"/release/rel_kBig2L4oeEUy1EheT5cnq-desktop-type-checking-flag-cache-amp-desktop-fixes","org":{"slug":"deno","name":"Deno"},"importance":null},{"id":"rel_DMPJhQbdvsV5p2TiHCQaa","title":"v1.50.7","path":"/release/rel_DMPJhQbdvsV5p2TiHCQaa-v1-50-7","org":{"slug":"vitest","name":"Vitest"},"importance":null}]}}