renovate

44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepository Homepage npm Atom feed

Your version

39.45.0

2 Dec 2024Where it was published

39.264.1 is the newest release of 39.x.

In short

2 new1 fixed

Security

4 advisories affect 39.45.0; 42.68.5 fixes them

Moderate
Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml fileGHSA-3f44-xw83-3pmg · 13 Jan 2026
Fixed in 40.33.0
Moderate
Renovate vulnerable to arbitrary command injection via hermit manager and maliciously named dependenciesGHSA-36j9-mx87-2cff · 13 Jan 2026
Fixed in 40.33.0
Moderate
Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configurationGHSA-fr4j-65pv-gjjj · 13 Jan 2026
Fixed in 40.33.0
Moderate
Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`GHSA-pfq2-hh62-7m96 · 13 Jan 2026
Fixed in 42.68.5

Release note

Features

Apply ignorePresets when resolving the globalExtends array
presets: add vaddin/hilla monorepo

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v9.11.5