renovate
44.206.2 · 2 Nov 2026AGPL-3.0-only559.5k / weekRepositoryHomepagenpmAtom feed
25.77.0 is the newest release of 25.x.
In short
13 breaking14 new
- breaking
npm: Renovate will no longer read from ~/.npmrc. Configure
npmrcin config instead. - breaking
npm: ignoreNpmrcFile is no longer supported. Use an empty string for config.npmrc instead.
- breaking
dockerMapDotfiles is no longer supported (not needed now that .npmrc is not read from the home directory)
- breaking
docker: Major updates for docker will now be enabled by default.
- breaking
config: Removal of default
additionalBranchPrefixvalues will cause branch names to change for docker/helm/buildkite/cargo/homebrew. - breaking
Node images founds in Dockerfiles will no longer have hardcoded commitMessageTopic to ensure grouping. Add
group:Nodejsorconfig:basetoextendsfor backwards compatibility if you're not using them already. - breaking
config: Config presets will be resolved after platform initialization, so from now on platform credentials cannot be placed in presets.
- breaking
terraform: Values for extracted
depTypein terraform manager have changed, please see theterraformmanager readme for details.
Release note
Breaking changes
- breaking
npm: Renovate will no longer read from ~/.npmrc. Configure
npmrcin config instead. - breaking
npm: ignoreNpmrcFile is no longer supported. Use an empty string for config.npmrc instead.
- breaking
dockerMapDotfiles is no longer supported (not needed now that .npmrc is not read from the home directory)
- breaking
docker: Major updates for docker will now be enabled by default.
- breaking
config: Removal of default
additionalBranchPrefixvalues will cause branch names to change for docker/helm/buildkite/cargo/homebrew. - breaking
Node images founds in Dockerfiles will no longer have hardcoded commitMessageTopic to ensure grouping. Add
group:Nodejsorconfig:basetoextendsfor backwards compatibility if you're not using them already. - breaking
config: Config presets will be resolved after platform initialization, so from now on platform credentials cannot be placed in presets.
- breaking
terraform: Values for extracted
depTypein terraform manager have changed, please see theterraformmanager readme for details. - breaking
Patch updates are not considered updateType=minor by default so any rules you have for
minorneed to havepatchadded to them in order to take effect. It's now not necessary to configureseparateMinorPatchin order to applypatchrules. - breaking
trustLevelis no longer supported and instead broken intoallowCustomCrateRegistries,allowScripts, andexposeAllEnv. - breaking
You must now configure
LOG_LEVELin env and not in config or CLI usinglogLevelor--log-level - breaking
Do not use
NPM_TOKENin env to configure npm authentication. ConfigurehostRulesinstead. - breaking
RENOVATE_LEGACY_GIT_AUTHOR_EMAILis no longer supported. UseignoredAuthorsin config instead.
Features
docker: enable major updates by default
npm: retain npmrc lines without variables
Drop dockerMapDotFiles
group:Nodejs
config: delay preset resolution until after platform initialization
config: remove manager additionalBranchPrefix defaults
npm: remove ~/.npmrc support
npm: remove ignoreNpmrcFile support
Drop NPM_TOKEN support
Remove logLevel support in config (#9390) (95ac109), closes #8291
Remove RENOVATE_LEGACY_GIT_AUTHOR_EMAIL (#9389) (1a1ace9), closes #9111
Split trustLevel into separate options