renovate
44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed
41.173.1 is the newest release of 41.x.
In short
4 new9 fixed36 internal
Security
1 advisory affects 41.18.0; 42.68.5 fixes them
- ModerateRenovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`GHSA-pfq2-hh62-7m96 · 13 Jan 2026Fixed in 42.68.5
Release note
Features
deps: update ghcr.io/renovatebot/base-image docker tag to v10.15.0 (main)
manager/ocb: add support for providers
presets: substitute entire parameter string for
{{args}}
Bug Fixes
deps: update ghcr.io/renovatebot/base-image docker tag to v10.14.6 (main)
deps: update ghcr.io/renovatebot/base-image docker tag to v10.15.1 (main)
deps: update ghcr.io/renovatebot/base-image docker tag to v10.15.2 (main)
deps: update ghcr.io/renovatebot/base-image docker tag to v10.15.3 (main)
deps: update ghcr.io/renovatebot/base-image docker tag to v10.15.4 (main)
deps: update ghcr.io/renovatebot/base-image docker tag to v10.15.5 (main)
deps: update ghcr.io/renovatebot/base-image docker tag to v10.15.6 (main)
gitea: prefer default merge method
npm: set pnpm store location for corepack command
presets: Add percentage to regex, to allow for URL encoded repo names