renovate

44.206.2 · 2 Nov 2026AGPL-3.0-only559.5k / weekRepository Homepage npm Atom feed

Your version

16.0.0

major16 Apr 2019Where it was published

16.13.10 is the newest release of 16.x.

In short

2 breaking1 new1 fixed1 internal

breaking
requireConfig is now enforced, if enabled. If a repository has no config but merged PRs, it will still be skipped.
breaking
If you run your own bot and wish to allow config-less repositories (e.g. no renovate.json) then override this value to false in your bot config.

Security

1 advisory affects 16.0.0; 19.38.7 fixes them

Moderate
Renovate vulnerable to leakage of temporary repository tokens into Pull Request commentsGHSA-v7x3-7hw7-pcjg · 21 Oct 2019
Fixed in 19.38.7

Release note

Bug Fixes

Nodejs 11 support (#3549) (05a46dd), closes /github.com/nodejs/node/pull/22754#issuecomment-423452575 #3445

Features

Default requireConfig to true (#3409) (e340fe5), closes #3337

Breaking changes

breaking
requireConfig is now enforced, if enabled. If a repository has no config but merged PRs, it will still be skipped.
breaking
If you run your own bot and wish to allow config-less repositories (e.g. no renovate.json) then override this value to false in your bot config.