<!-- Release notes generated using configuration in .github/release.yml at v2.9.11-canary.1 -->
What's Changed
Changelog
- fix: Use random temp path for repo downloads by @anthonyshew in https://github.com/vercel/turborepo/pull/12736
- release(turborepo): 2.9.10-canary.1 by @github-actions[bot] in https://github.com/vercel/turborepo/pull/12734
- fix: Reject OTel endpoints with userinfo by @anthonyshew in https://github.com/vercel/turborepo/pull/12737
- fix: Authenticate local devtools WebSocket by @anthonyshew in https://github.com/vercel/turborepo/pull/12738
- fix: Handle clipboard exec errors by @anthonyshew in https://github.com/vercel/turborepo/pull/12739
- fix: Restrict Vercel token reuse to trusted API origins by @anthonyshew in https://github.com/vercel/turborepo/pull/12740
- fix: Keep workspace config discovery inside root by @anthonyshew in https://github.com/vercel/turborepo/pull/12741
- fix: Hardening for daemon IPC endpoints by @anthonyshew in https://github.com/vercel/turborepo/pull/12742
- fix: Enforce cache filesystem boundaries by @anthonyshew in https://github.com/vercel/turborepo/pull/12743
- release(turborepo): 2.9.10 by @github-actions[bot] in https://github.com/vercel/turborepo/pull/12745
- ci: Publish VS Code extension on release by @anthonyshew in https://github.com/vercel/turborepo/pull/12747
Full Changelog: https://github.com/vercel/turborepo/compare/v2.9.10-canary.1...v2.9.11-canary.1
Fetched May 7, 2026
