renovate
44.206.2 · 2 Nov 2026AGPL-3.0-only559.5k / weekRepositoryHomepagenpmAtom feed
Your version
34.160.0 is the newest release of 34.x.
npm marks 34.151.0 as deprecated: Renovate versions older than the latest major version are unsupported
In short
1 new1 fixed2 internal
Security
3 advisories affect 34.151.0; 42.68.5 fixes them
- ModerateRenovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml fileGHSA-3f44-xw83-3pmg · 13 Jan 2026Fixed in 40.33.0
- ModerateRenovate vulnerable to arbitrary command injection via hermit manager and maliciously named dependenciesGHSA-36j9-mx87-2cff · 13 Jan 2026Fixed in 40.33.0
- ModerateRenovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`GHSA-pfq2-hh62-7m96 · 13 Jan 2026Fixed in 42.68.5
Release note
Features
platform/github: flag to control whether PRs can be edited by maintainers if
forkTokenis set
Bug Fixes
versioning/composer: support range versions normalization