chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
turbo (source)	^2.8.20 → ^2.8.21
vitest (source)	^4.1.1 → ^4.1.2

---

Release Notes

vercel/turborepo (turbo)

v2.8.21: Turborepo v2.8.21

Compare Source

What's Changed

Docs

• fix: Strip JSX components from heading anchors and TOC entries by @​anthonyshew in #​12404

eslint

• fix(eslint-plugin-turbo): Guard against missing tasks/pipeline in forEachTaskDef by @​sleitor in #​12411

@​turbo/repository

• feat: Add packagesFromLockfile() NAPI binding to @turbo/repository by @​anthonyshew in #​12454
• release(library): 0.0.1-canary.21 by @​github-actions[bot] in #​12455

Examples

• fix(examples): Update of with-svelte example by @​floriansalihovic in #​11952
• fix: Use script-shell=bash for cross-platform with-shell-commands example by @​Goldyvaiiii in #​12436

Changelog

• docs: Add link to Docker guide in prune --docker flag section by @​styfle in #​12401
• feat: Add global configuration key behind futureFlags.globalConfiguration by @​anthonyshew in #​12399
• chore: Update CODEOWNERS to remove /docs owner by @​anthonyshew in #​12402
• fix: Move docs app icons into app/ directory by @​anthonyshew in #​12403
• feat: Add experimental structured logging with --json and --log-file flags by @​anthonyshew in #​12405
• docs: Downgrade Next.js by @​anthonyshew in #​12408
• chore: Deprecate the turbo scan command by @​anthonyshew in #​12406
• chore: Upgrade Next.js by @​anthonyshew in #​12415
• Revert "fix: Flush stale mouse tracking events from stdin during TUI cleanup" by @​anthonyshew in #​12416
• fix: Add NixOS environment variables to default passthroughs by @​anthonyshew in #​12417
• fix: Resolve security vulnerabilities in tar and rustls-webpki by @​anthonyshew in #​12418
• docs: Promote turbo query from experimental to stable by @​anthonyshew in #​12421
• docs: Clarify turbo-ignore's future by @​anthonyshew in #​12422
• feat: Rework turbo ls to use query internals and add turbo query ls shorthand by @​anthonyshew in #​12424
• docs: Clarify environment variables across packages dependency behavior by @​ramanverse in #​12390
• docs: Expand subpath imports example by @​lilianakatrina684-a11y in #​12412
• fix: Preserve source dependencies when adding workspace deps in turbo-gen by @​sleitor in #​11935
• docs: Add Git history requirements to turbo query affected docs by @​anthonyshew in #​12426
• fix: Prevent horizontal overflow from long inline code on narrow viewports by @​anthonyshew in #​12428
• feat: Send git SHA and dirty hash to remote cache by @​mehulkar in #​12427
• fix: Upgrade tokio to 1.47.1+ to fix pidfd_reaper panic by @​anthonyshew in #​12431
• docs: Add AI guide to sidebar navigation by @​anthonyshew in #​12438
• docs: Move experimentalObservability into futureFlags section by @​anthonyshew in #​12439
• fix: Skip Unix domain sockets and other special files during file hashing by @​anthonyshew in #​12445
• fix: Preserve dedupePeers and unknown pnpm lockfile settings by @​attehuhtakangas in #​12443
• fix: Align dry run cache status with normal run by checking caching guards by @​anthonyshew in #​12448
• fix: Resolve turbo watch hang with mixed interruptible persistent tasks by @​anthonyshew in #​12449
• fix: Avoid setsid() in PTY spawn to prevent macOS Gatekeeper CPU spikes by @​anthonyshew in #​12452
• refactor: Move cache hit SHA context to verbose logging by @​mehulkar in #​12435
• docs: Add missing --force flag documentation by @​Goldyvaiiii in #​12440
• fix: Prevent panic in turbo watch with persistent tasks by @​anthonyshew in #​12459
• fix: Support turbo watch in single-package workspaces by @​anthonyshew in #​12460
• fix: Missing deps after npm lockfile parsing by @​anthonyshew in #​12464
• docs: Add AI agent detection and automatic markdown rewrites by @​molebox in #​12462
• fix: Resolve generator name conflicts across workspaces by @​anthonyshew in #​12467
• fix: Remove root package.json from --affected global triggers by @​anthonyshew in #​12469
• fix: Show run summary after TUI exits by @​anthonyshew in #​12471

New Contributors

• @​ramanverse made their first contribution in #​12390
• @​lilianakatrina684-a11y made their first contribution in #​12412
• @​floriansalihovic made their first contribution in #​11952
• @​Goldyvaiiii made their first contribution in #​12436
• @​attehuhtakangas made their first contribution in #​12443

Full Changelog: vercel/turborepo@v2.8.20...v2.8.21

vitest-dev/vitest (vitest)

v4.1.2

Compare Source

This release bumps Vitest's flatted version and removes version pinning to resolve flatted's CVE related issues (#​9975).

   🐞 Bug Fixes

• Don't resolve setupFiles from parent directory  -  by @​hi-ogawa in #​9960 (7aa93)
• Ensure sequential mock/unmock resolution  -  by @​hi-ogawa and Claude Opus 4.6 in #​9830 (7c065)
• browser: Take failure screenshot if toMatchScreenshot can't capture a stable screenshot  -  by @​macarie in #​9847 (faace)
• coverage: Correct coverageConfigDefaults values and types  -  by @​Arthie in #​9940 (b3c99)
• pretty-format: Fix output limit over counting  -  by @​hi-ogawa in #​9965 (d3b7a)
• Disable colors if agent is detected  -  by @​sheremet-va and @​AriPerkkio in #​9851 (6f97b)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - "on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.