chore(deps): Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
npm (source)	11.10.1 → 11.11.0			packageManager	minor
supabase/postgres	15.14.1.088 → 15.14.1.091				patch
turbo (source)	2.8.10 → 2.8.12			devDependencies	patch

---

Release Notes

npm/cli (npm)

v11.11.0

Compare Source

Features

• 4fcd352 #​9017 add :type(registry) to query selector syntax (#​9017) (@​wraithgar)
• e1b21f0 #​8909 adds circleci to trust command (#​8909) (@​owlstronaut)
• 9a33ad0 #​8925 adds circleci to oidc (#​8925) (@​owlstronaut)

Bug Fixes

• 4426411 #​9026 npm audit signatures for keyless attestation registries (#​9026) (@​ajayk)
• 658b323 #​9010 handle legacy licenses array in sbom output (#​9010) (@​JNC4)

Documentation

• 143f8cd #​9007 docs shouldn't wrap yaml description (#​9007) (@​owlstronaut)

Dependencies

• 7798b6e #​9027 @gar/promise-retry@1.0.2
• 4838864 #​9027 balanced-match@4.0.4
• 0c200dd #​9027 brace-expansion@5.0.3
• f0606bb #​9027 spdx-license-ids@3.0.23
• d43f350 #​9027 make-fetch-happen@15.0.4
• 4d0918a #​9027 @npmcli/git@7.0.2
• 8912ca7 #​9027 minipass-fetch@5.0.2
• 450ff35 #​9027 npm-packlist@10.0.4
• 20ef5a5 #​9027 pacote@21.4.0
• 60f332c #​9008 remove promise-retry
• cb8b9c7 #​9008 add @gar/promise-retry@1.0.0
• workspace: @npmcli/arborist@9.4.0
• workspace: libnpmdiff@8.1.3
• workspace: libnpmexec@10.2.3
• workspace: libnpmfund@7.0.17
• workspace: libnpmpack@9.1.3

vercel/turborepo (turbo)

v2.8.12: Turborepo v2.8.12

Compare Source

What's Changed

Changelog

• chore: Reduce compile times by deduplicating thiserror and itertools by @​anthonyshew in #​12000
• chore: Upgrade axum 0.7 to 0.8, deduplicate tower/tower-http by @​anthonyshew in #​12003
• fix: Prevent peerDependencies from overwriting concrete dependency specifiers by @​anthonyshew in #​12004
• fix: Resolve correct nested package version in bun lockfile pruning by @​anthonyshew in #​12008
• fix: Resolve all lockfile pruning test failures by @​anthonyshew in #​12009
• perf: Extract query module into turborepo-query crate by @​anthonyshew in #​12007
• refactor: Migrate dry-json prysk tests to Rust + insta snapshots by @​anthonyshew in #​12010
• perf: Deduplicate petgraph, fixedbitset, and dashmap by @​anthonyshew in #​12011
• refactor: Migrate persistent-dependencies and task-dependencies to Rust + insta by @​anthonyshew in #​12012
• test: Add lockfile-tests fixture for issue #​12013 by @​anthonyshew in #​12014
• perf: Remove libgit2/git2 dependency, replace with gix-object by @​anthonyshew in #​12015
• refactor: Migrate daemon, jsonc, query, edit-turbo-json tests to Rust by @​anthonyshew in #​12016
• perf: Remove async-graphql from turborepo-lib by @​anthonyshew in #​12017
• refactor: Migrate inference and run-logging tests to Rust by @​anthonyshew in #​12018
• refactor: Migrate run-caching and strict-env-vars tests to Rust by @​anthonyshew in #​12020
• fix: Mark lockfile-aware-caching/bun prysk test as flaky by @​anthonyshew in #​12021
• fix: Add nextest retries for flaky tests by @​anthonyshew in #​12027
• refactor: Migrate prune and run-summary tests to Rust by @​anthonyshew in #​12022
• fix: Add nextest retries for flaky prysk tests by @​anthonyshew in #​12030
• fix: Add nextest retries for flaky prune_test::test_prune_composable_config by @​anthonyshew in #​12032
• fix: Suppress npm upgrade notices in Rust integration tests by @​anthonyshew in #​12033

Full Changelog: vercel/turborepo@v2.8.11...v2.8.12

v2.8.11: Turborepo v2.8.11

Compare Source

What's Changed

Docs

• chore: Migrate to Ultracite by @​haydenbleasel in #​11948

@​turbo/repository

• perf: Defer TLS initialization to a background thread by @​anthonyshew in #​11967
• fix: Add repository field to @​turbo/repository package.json by @​anthonyshew in #​11982
• release(library): 0.0.1-canary.19 by @​github-actions[bot] in #​11983

Changelog

• fix: Get all pnpm lockfile pruning tests passing by @​anthonyshew in #​11897
• perf: Optimize pnpm lockfile transitive closure resolution by @​anthonyshew in #​11898
• fix: Resolve npm packages in @​turbo/gen compiled binary by @​anthonyshew in #​11900
• perf: Deduplicate file hashing and parallelize globwalks by @​anthonyshew in #​11902
• perf: Improve transitive dependency resolution cache sharing across workspaces by @​anthonyshew in #​11903
• perf: Reduce filesystem syscalls in globwalk, SCM hashing, and task scheduling by @​anthonyshew in #​11907
• feat: Remove daemon from turbo run, deprecate daemon flags and config by @​anthonyshew in #​11910
• test: Replace help text integration tests with insta snapshots by @​anthonyshew in #​11911
• perf: Reduce allocations in SCM hashing, glob preprocessing, and cache lookups by @​anthonyshew in #​11916
• perf: Parallelize package.json loading and reduce builder allocations by @​anthonyshew in #​11918
• perf: Cache compiled env wildcard regexes for builtin pass-through patterns by @​anthonyshew in #​11920
• perf: Replace O(N) workspace path lookup with HashMap index in DependencySplitter by @​anthonyshew in #​11922
• perf: Parallelize lockfile parsing with workspace discovery by @​anthonyshew in #​11927
• perf: Optimize turbo run hotpath with parallelization and reduced allocations by @​anthonyshew in #​11928
• perf: Share HTTP client and improve profile instrumentation by @​anthonyshew in #​11929
• perf: Share HTTP client and improve profile instrumentation by @​anthonyshew in #​11932
• perf: Reduce git subprocess calls on startup by @​anthonyshew in #​11934
• chore: Upgrade zstd 0.12.3 to 0.13.3 by @​anthonyshew in #​11936
• perf: Replace git subprocesses with libgit2 and skip unnecessary summary work by @​anthonyshew in #​11938
• perf: Reduce per-package hashing overhead and eliminate SCM subprocesses by @​anthonyshew in #​11942
• perf: Reduce CPU overhead in turbo run hot path by @​anthonyshew in #​11947
• perf: Replace libgit2 git status with gix-index for faster file hashing by @​anthonyshew in #​11950
• perf: Resolve literal input paths via stat instead of glob walk by @​anthonyshew in #​11955
• perf: Optimize engine builder, task visitor, and untracked file discovery by @​anthonyshew in #​11956
• perf: Parallelize turbo run pre-execution hot path by @​anthonyshew in #​11958
• chore: Add tracing spans to uninstrumented hot path functions by @​anthonyshew in #​11959
• perf: Use Arc<str> for task dependency hashes to avoid heap clones by @​anthonyshew in #​11962
• perf: Add more tracing spans into startup path by @​anthonyshew in #​11965
• perf: Parallelize task hash computation across topological waves by @​anthonyshew in #​11969
• perf: Send engine callback before tracker bookkeeping and add tracing spans by @​anthonyshew in #​11970
• fix: Resolve git_root to worktree root in linked worktrees by @​anthonyshew in #​11974
• perf: Fast path for shallow wildcard glob patterns in workspace discovery by @​anthonyshew in #​11972
• chore: Move git hooks from pre-commit to pre-push and match CI lint checks by @​anthonyshew in #​11977
• chore: Update AGENTS.md by @​anthonyshew in #​11978
• perf: Replace heap-allocated String with stack-allocated OidHash for git OIDs by @​anthonyshew in #​11984
• perf: Eliminate redundant syscalls in FSCache fetch and exists by @​anthonyshew in #​11985
• perf: Reduce per-task allocations in visitor dispatch loop by @​anthonyshew in #​11986
• docs: Fix same-page anchor links that don't scroll to target by @​anthonyshew in #​11989
• docs: Mention inputs key in package hash inputs table by @​anthonyshew in #​11990
• fix(docs): update sitemap.md to single-line pipe-delimited format by @​molebox in #​11976
• fix: Disable husky pre-push hook during release staging by @​anthonyshew in #​11991
• fix: Use versioned schema URLs in Turborepo skill files by @​anthonyshew in #​11994
• fix: Restore daemon client in RunCache for turbo watch by @​anthonyshew in #​11995

Full Changelog: vercel/turborepo@v2.8.10...v2.8.11

---

Configuration

📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🎉 This PR is included in version 1.14.13 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀