renovate

44.198.3 · 30 Oct 2026AGPL-3.0-only559.3k / weekRepository Homepage npm Atom feed

Your version

34.152.0

22 Feb 2023Where it was published

34.160.0 is the newest release of 34.x.

npm marks 34.152.0 as deprecated: Renovate versions older than the latest major version are unsupported

In short

2 new1 fixed2 internal

Security

3 advisories affect 34.152.0; 42.68.5 fixes them

Moderate
Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml fileGHSA-3f44-xw83-3pmg · 13 Jan 2026
Fixed in 40.33.0
Moderate
Renovate vulnerable to arbitrary command injection via hermit manager and maliciously named dependenciesGHSA-36j9-mx87-2cff · 13 Jan 2026
Fixed in 40.33.0
Moderate
Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`GHSA-pfq2-hh62-7m96 · 13 Jan 2026
Fixed in 42.68.5

Release note

Features

platform/bitbucket: consolidate types
schema: Add looseValue and looseObject helpers

Bug Fixes

Remove rebase-all-open-prs checkbox from read only issue bodies