Packages

renovate

44.198.3 · 30 Oct 2026AGPL-3.0-only559.3k / weekRepositoryHomepagenpmAtom feed

Your version

33.0.0

major23 Oct 2022Where it was published

33.2.4 is the newest release of 33.x.

npm marks 33.0.0 as deprecated: Renovate versions older than the latest major version are unsupported

In short

11 breaking1 deprecated9 new3 fixed6 changed2 internal

  • breaking

    Node 16 is the required runtime for Renovate.

  • breaking

    [NOTE: This was reverted in v34] config: branchNameStrict default value is now true

  • breaking

    config: internalChecksFilter default value is now "strict"

  • breaking

    config: ignoreScripts default value is now true. If allowScripts=true in global config, ignoreScripts must be set to false in repo config if you want all repos to run scripts.

  • breaking

    config: autodiscover filters can no longer include commas

  • breaking

    config: boolean variables must be true or false when configured in environment variables, and errors will be thrown for invalid values. Previously invalided values were ignored and treated as false.

  • breaking

    datasource/go: git-tags datasource will be used as the fallback instead of github-tags if a go package's host type is unknown.

  • breaking

    jsonnet-bundler: depName now uses the "absolute import" format (e.g. bar → github.com/foo/bar/baz-wow)

Security

Release note

This release contains some changes of default values/behavior:

  • internalChecksFilter will now default to strict, meaning that updates will be withheld by default when internal status checks are pending. This should reduce the number of "non-actionable" Pull Requests you get.

  • azure-pipelines manager is disabled by default, because its primary datasource can unfortunately suggest updates which aren't yet installable. Users should opt into this manager once they know the risks.

  • binarySource=install will now be used instead of global whenever Renovate is run within a "containerbase" image. This means dynamic installation of most package managers and languages

  • Dependencies will no longer be pinned by default if rangeStrategy=auto. While we recommend pinning dependencies, we decided users should opt into this more explicitly.

And two major features!

  • AWS CodeCommit platform support

  • OpenTelemetry support

Both the above are considered "experimental". Please test them out and let us know your feedback - both positive or negative - so that we can progress them to fully available.

Breaking changes

  • breaking

    Node 16 is the required runtime for Renovate.

  • breaking

    [NOTE: This was reverted in v34] config: branchNameStrict default value is now true

  • breaking

    config: internalChecksFilter default value is now "strict"

  • breaking

    config: ignoreScripts default value is now true. If allowScripts=true in global config, ignoreScripts must be set to false in repo config if you want all repos to run scripts.

  • breaking

    config: autodiscover filters can no longer include commas

  • breaking

    config: boolean variables must be true or false when configured in environment variables, and errors will be thrown for invalid values. Previously invalided values were ignored and treated as false.

  • breaking

    datasource/go: git-tags datasource will be used as the fallback instead of github-tags if a go package's host type is unknown.

  • breaking

    jsonnet-bundler: depName now uses the "absolute import" format (e.g. bar → github.com/foo/bar/baz-wow)

  • breaking

    azure-pipelines: azure-pipelines manager is now disabled by default.

  • breaking

    Users of containerbase images (such as official Renovate images) will now have dynamic package manager installs enabled by default.

  • breaking

    Dependencies are no longer automatically pinned if rangeStrategy=auto, pinning must be opted into using rangeStrategy=pin

Features

  • azure-pipelines: disable by default (#18142) (deea750), closes #15818

  • config: default branchNameStrict=true

  • config: move autodiscovery filter from string to array (#16525) (0a6d97f), closes #8763

  • Default internalChecksFilter to strict

  • Default to binarySource=install (#18027) (0be74f3), closes #14531

  • deprecated

    Deprecate node v14

  • Do not auto pin rangeStrategy (#18309) (cbca54d), closes #18304

  • jsonnet-bundler: Use absolute import format for depName (#14525) (5e7844f), closes #13568

  • Support AWS Code Commit platform

  • telemetry: add OpenTelemetry tracing MVC

Bug Fixes