chore(deps): update dependency turbo to v2.6.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
turbo (source)	devDependencies	minor	2.5.8 -> 2.6.0

---

Release Notes

vercel/turborepo (turbo)

v2.6.0: Turborepo v2.6.0

Compare Source

What's Changed

Docs

• docs: clarification on Transit Nodes docs by @​maschwenk in #​9181
• docs: add GitHub Actions reusable workflow documentation for remote caching by @​anthonyshew in #​10923
• docs: generate blog release OG images by @​anthonyshew in #​10936
• docs: fix correct package name from eslint-config-turbo to eslint-plugin-turbo by @​tetzng in #​10954
• docs: align tailwindcss 4 guide to the with-tailwind example by @​esauri in #​10963
• docs: fix typos and formatting issues in Playwright guide by @​yamcodes in #​10980
• docs: adjust compute hours saved component initial value by @​anthonyshew in #​10958
• docs: clarify passthrough args comparison by @​emilbjorklund in #​10990
• docs: fix profile images on home page by @​anthonyshew in #​10993
• feat: microfrontends by @​anthonyshew in #​10982
• docs: Clarify passtrhough args cache miss by @​eug-vs in #​11026
• fix: path validation in microfrontends.json by @​anthonyshew in #​11006
• feat(microfrontends): schema.json for microfrontends.json by @​anthonyshew in #​11008

create-turbo

• feat: update create-turbo Bun prompt text by @​anthonyshew in #​10918

eslint

• fix(eslint-config-turbo): use module.exports for ESLint v8 compatibility by @​anthonyshew in #​10902
• perf: ~8.6x faster ESLint rule by @​anthonyshew in #​10943

Examples

• Update package.json by @​Satheeshsk369 in #​10892
• docs: fix JSDoc type for ESLint config in basic example by @​victor-code19 in #​10727
• refactor(examples): enhance with-nestjs (#​8131) by @​Neosoulink in #​10964
• examples: Upgrade core-team-maintained examples to Next.js 16 by @​anthonyshew in #​11014

Changelog

• chore: remove missing turbow.js references by @​pauloZion1 in #​10893
• fix(turborepo-lockfiles): handle missing optional dependencies in Bun lockfiles by @​anthonyshew in #​10909
• fix: update ui suggested value in error message for turbo.json by @​hugomassing in #​10896
• chore: remove unused origin field from auth structs by @​anthonyshew in #​10910
• feat: new OAuth flow for Turborepo CLI with Vercel by @​anthonyshew in #​10911
• fix(lockfiles): include bundled dependencies in Bun lockfile subgraphs by @​anthonyshew in #​10915
• test: increase coverage for lockfiles by @​anthonyshew in #​10633
• fix: update remote cache OAuth refresh flow by @​anthonyshew in #​10916
• feat(tui): task list search with / by @​anthonyshew in #​10908
• fix: --graph=foo.dot should not require graphviz installed by @​blast-hardcheese in #​10942
• chore: update devcontainer configuration by @​anthonyshew in #​10955
• fix: injectWorkspacePackages for turbo prune with pnpm by @​anthonyshew in #​10945
• fix: adjust binary call for microfrontends proxy on Windows by @​mknichel in #​10962
• Add worktrees.json configuration to .cursor directory by @​Copilot in #​10986
• fix: windows symlinking bug by @​anthonyshew in #​10992
• fix: added Linux env vars to global passthroughs by @​aviramha in #​10984
• fix: recursive transitive closure analysis in npm lockfile parser by @​anthonyshew in #​10988
• ci(fix): dynamically set ports in proxy integration tests by @​anthonyshew in #​11009
• feat: Add support for custom microfrontends.json naming by @​kitfoster in #​11022

New Contributors

• @​Satheeshsk369 made their first contribution in #​10892
• @​robobun made their first contribution in #​10729
• @​hugomassing made their first contribution in #​10896
• @​victor-code19 made their first contribution in #​10727
• @​blast-hardcheese made their first contribution in #​10942
• @​tetzng made their first contribution in #​10954
• @​esauri made their first contribution in #​10963
• @​Copilot made their first contribution in #​10986
• @​emilbjorklund made their first contribution in #​10990
• @​aviramha made their first contribution in #​10984
• @​eug-vs made their first contribution in #​11026
• @​kitfoster made their first contribution in #​11022

Full Changelog: vercel/turborepo@v2.5.8...v2.6.0

---

Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Summary by cubic

Upgraded Turborepo from 2.5.8 to 2.6.0 to pick up reliability fixes (remote cache OAuth, lockfile parsing) and cross-platform improvements. Updated the devDependency in package.json and synced bun.lock; no application code changes.

^{Written for commit 64c53b0. Summary will update automatically on new commits.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	turbo@​2.5.8 ⏵ 2.6.0				+2

View full report

[github-actions]

📦 Packages

Package	NPM	Docker
SDK Cli	@settlemint/sdk-cli@2.6.2-pre3a907e0
SDK The Graph	@settlemint/sdk-thegraph@2.6.2-pre3a907e0
SDK Portal	@settlemint/sdk-portal@2.6.2-pre3a907e0
SDK Hasura	@settlemint/sdk-hasura@2.6.2-pre3a907e0
SDK JS	@settlemint/sdk-js@2.6.2-pre3a907e0
SDK Utils	@settlemint/sdk-utils@2.6.2-pre3a907e0
SDK Next	@settlemint/sdk-next@2.6.2-pre3a907e0
SDK Minio	@settlemint/sdk-minio@2.6.2-pre3a907e0
SDK IPFS	@settlemint/sdk-ipfs@2.6.2-pre3a907e0
SDK Blockscout	@settlemint/sdk-blockscout@2.6.2-pre3a907e0
SDK MCP	@settlemint/sdk-mcp@2.6.2-pre3a907e0
SDK Viem	@settlemint/sdk-viem@2.6.2-pre3a907e0
SDK EAS	@settlemint/sdk-eas@2.6.2-pre3a907e0

[cubic-dev-ai]

No issues found across 2 files