renovate
44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed
41.173.1 is the newest release of 41.x.
In short
5 breaking4 new1 internal
- breaking
config: support
jsoncin existing config + preset files - breaking
pixi: pixi manager will no longer have a hardcoded
depType: 'dependencies'and instead have values likedepType: 'feature-lint'. - breaking
config: This will be a breaking change for any users that have customized their branchTopic and use separateMultipleMinor=true. In those cases, the minor version version will no longer be included in the branch names until they make a similar modification to their branchTopic. For all other users (who haven't set branchTopic or separateMultipleMinor) the behavior should be unchanged.
- breaking
deps: Versions of some languages/managers in the Renovate -full image have had major upgrades.
- breaking
config: Merge Confidence badges will now be included by default with the
config:recommendedpreset.
Security
1 advisory affects 41.0.0; 42.68.5 fixes them
- ModerateRenovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`GHSA-pfq2-hh62-7m96 · 13 Jan 2026Fixed in 42.68.5
Release note
Breaking changes
- breaking
config: support
jsoncin existing config + preset files - breaking
pixi: pixi manager will no longer have a hardcoded
depType: 'dependencies'and instead have values likedepType: 'feature-lint'. - breaking
config: This will be a breaking change for any users that have customized their branchTopic and use separateMultipleMinor=true. In those cases, the minor version version will no longer be included in the branch names until they make a similar modification to their branchTopic. For all other users (who haven't set branchTopic or separateMultipleMinor) the behavior should be unchanged.
- breaking
deps: Versions of some languages/managers in the Renovate -full image have had major upgrades.
- breaking
config: Merge Confidence badges will now be included by default with the
config:recommendedpreset.
Features
config: add mergeConfidence:age-confidence-badges to config:recommended
config: add minor version to default branchTopic to support separateMultipleMinor
config: support
jsoncin existing config + preset filesdeps: Update ghcr.io/renovatebot/base-image Docker tag to v10 (main)
pixi: add feature to depType