Packages

renovate

44.221.4 · 6 Nov 2026AGPL-3.0-only562.9k / weekRepositoryHomepagenpmAtom feed

Upgrading renovate From 1.17.0 to 44.221.4

12,297 releases in betweennotes for 11,204

Reading releases, release notes and advisories…

11.0.0, 10.0.0, 9.0.0, 8.0.0, 7.0.0, 6.0.0, 5.0.0, 4.0.0, 3.0.0, 2.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below; the migration guide covers them.
  1. 1.17.0yours
  2. 2.0.0major
  3. 9 releases
  4. 3.0.0major
  5. 2 releases
  6. 4.0.0major
  7. 5.0.0major
  8. 5 releases
  9. 6.0.0major
  10. 6 releases
  11. 7.0.0major
  12. 14 releases
  13. 8.0.0major
  14. 141 releases
  15. 9.0.0major
  16. 372 releases
  17. 10.0.0major
  18. 262 releases
  19. 11.0.0major
  20. 393 releases
  21. 12.0.0major
  22. 384 releases
  23. 13.0.0major
  24. 145 releases
  25. 13.36.0security
  26. 670 releases
  27. 14.0.0major
  28. 181 releases
  29. 14.42.0security
  30. 9 releases
  31. 14.43.2security
  32. 87 releases
  33. 15.0.0major
  34. 55 releases
  35. 16.0.0major
  36. 69 releases
  37. 17.0.0major
  38. 49 releases
  39. 17.8.2security
  40. 29 releases
  41. 18.0.0major
  42. 159 releases
  43. 19.0.0major
  44. 214 releases
  45. 19.58.4security
  46. 561 releases
  47. 19.214.1security
  48. 116 releases
  49. 20.0.0major
  50. 66 releases
  51. 21.0.0major
  52. 218 releases
  53. 23.0.0major
  54. 54 releases
  55. 23.20.7security
  56. 229 releases
  57. 23.100.4security
  58. 1 release
  59. 24.0.0major
  60. 35 releases
  61. 24.10.3security
  62. 51 releases
  63. 24.27.3security
  64. 85 releases
  65. 24.57.0security
  66. 3 releases
  67. 24.60.0security
  68. 4 releases
  69. 24.60.5security
  70. 52 releases
  71. 24.76.1security
  72. 135 releases
  73. 25.0.0major
  74. 282 releases
  75. 26.0.0major
  76. 61 releases
  77. 27.0.0major
  78. 74 releases
  79. 28.0.0major
  80. 80 releases
  81. 29.0.0major
  82. 106 releases
  83. 30.0.0major
  84. 10 releases
  85. 31.0.0major
  86. 201 releases
  87. 31.89.1security
  88. 30 releases
  89. 32.0.0major
  90. 70 releases
  91. 32.20.0security
  92. 38 releases
  93. 32.32.7security
  94. 125 releases
  95. 32.82.1security
  96. 393 releases
  97. 33.0.0major
  98. 8 releases
  99. 34.0.0major
  100. 33 releases
  101. 34.14.0security
  102. 3 releases
  103. 34.17.0security
  104. 137 releases
  105. 34.72.3security
  106. 145 releases
  107. 34.129.0security
  108. 14 releases
  109. 34.136.0security
  110. 19 releases
  111. 34.146.2security
  112. 36 releases
  113. 35.0.0major
  114. 73 releases
  115. 35.31.5security
  116. 24 releases
  117. 35.46.1security
  118. 13 releases
  119. 35.53.0security
  120. 59 releases
  121. 35.80.0security
  122. 13 releases
  123. 35.88.0security
  124. 2 releases
  125. 35.90.0security
  126. 162 releases
  127. 36.0.0major
  128. 111 releases
  129. 36.35.0security
  130. 198 releases
  131. 37.0.0major
  132. 373 releases
  133. 37.140.1security
  134. 156 releases
  135. 37.192.4security
  136. 8 releases
  137. 37.194.6security
  138. 5 releases
  139. 37.198.2security
  140. 254 releases
  141. 37.316.1security
  142. 238 releases
  143. 37.401.5security
  144. 18 releases
  145. 37.408.2security
  146. 37.408.3security
  147. 1 release
  148. 37.409.1security
  149. 43 releases
  150. 37.422.1security
  151. 66 releases
  152. 38.0.0security
  153. 158 releases
  154. 38.59.2security
  155. 62 releases
  156. 38.85.2security
  157. 33 releases
  158. 38.95.3security
  159. 2 releases
  160. 38.96.1security
  161. 125 releases
  162. 39.0.0major
  163. 217 releases
  164. 39.87.0security
  165. 322 releases
  166. 39.215.1security
  167. 142 releases
  168. 40.0.0major
  169. 255 releases
  170. 41.0.0major
  171. 322 releases
  172. 41.107.0security
  173. 247 releases
  174. 42.0.0major
  175. 119 releases
  176. 42.34.1security
  177. 244 releases
  178. 43.0.0security
  179. 58 releases
  180. 43.11.1security
  181. 68 releases
  182. 43.34.0security
  183. 11 releases
  184. 43.40.0security
  185. 20 releases
  186. 43.46.7security
  187. 190 releases
  188. 43.109.4security
  189. 43.109.5security
  190. 3 releases
  191. 43.110.3security
  192. 6 releases
  193. 43.110.10security
  194. 25 releases
  195. 43.120.0security
  196. 1 release
  197. 43.120.2security
  198. 20 releases
  199. 43.128.0security
  200. 12 releases
  201. 43.134.1security
  202. 66 releases
  203. 43.209.3security
  204. 250 releases
  205. 44.0.0major
  206. 73 releases
  207. 44.22.0security
  208. 47 releases
  209. 44.38.0security
  210. 211 releases
  211. 44.107.1security
  212. 90 releases
  213. 44.134.3security
  214. 110 releases
  215. 44.171.8security
  216. 62 releases
  217. 44.188.3security
  218. 1 release
  219. 44.189.0security
  220. 7 releases
  221. 44.193.0security
  222. 3 releases
  223. 44.195.1security
  224. 12 releases
  225. 44.200.1security
  226. 8 releases
  227. 44.205.1security
  228. 7 releases
  229. 44.209.0security
  230. 24 releases
  231. 44.221.4target
253+
changes to make
0
advisories fixed
4077+
new
6068+
fixes

Counted from 11204 of 12297 release notes. Advisories are counted from the advisory database, in full.

Start here

Before you upgrade

Tick each one off as you go
  • breaking44.115.3
  • breaking44.44.0
  • breaking44.39.2
  • breaking43.278.4
  • breaking43.213.1
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0

Security

  • vulnerabilities: store the osv-offline database in cacheDir

    44.209.0

  • vulnerabilities: dispose the OSV databases when finishing

    44.205.1

  • vulnerability: keep the dependency's versioning when building OSV rules (#46868) (9eaae58), closes #43308

    44.200.1

  • vulnerabilities: use default import for ae-cvss-calculator

    44.195.1

  • types: add a type for Vulnerability Alerts' sources (#47504) (6bdc798), closes #44153 #45486 #46378

    44.193.0

  • vulnerabilities: allow performing lockfile only transitive security updates (#46391) (4718945), closes #47478

    44.189.0

  • vulnerabilities: document that lockfile-only deps don't get vulnerability updates (#47478) (24e8b99), closes #46377

    44.188.3

  • vulnerabilities: apply vulnerabilityAlerts limits to packageRule alerts

    44.171.8

  • vulnerabilities: raise fixes for deps their manager disables by default

    44.134.3

  • workers/repository/extract: pass vulnerability alert state to managers

    44.107.1

Release by release

  1. 44.221.4

    6 Nov 20261 fix
    • fixed

      deps: update renovate-base-image to v13.160.9 (main)

  2. 44.221.3

    6 Nov 20261 fix
    • fixed

      deps: update renovate-base-image to v13.160.8 (main)

  3. 44.221.2

    6 Nov 20261 fix
    • fixed

      deps: update renovate-base-image to v13.160.7 (main)

  4. 44.221.1

    5 Nov 20261 fix
    • fixed

      deps: update renovate-base-image to v13.160.6 (main)

  5. 44.221.0

    5 Nov 20262 new · 1 fix
    • new

      manager/pep621: surface uv.lock transitive deps for security updates (#47482) (11a4409), closes #47505

    • new

      manager: add julia manager

    • fixed

      workers: keep group branches unchanged after failed lookups

  6. 44.220.0

    5 Nov 20261 new · 3 fixes
    • new

      config: add useBaseBranchConfig=merge-if-present when missing config on base branches

    • fixed

      dashboard: name the dependency and file in repository problems

    • fixed

      datasource/maven: fail only the dependency on temporary Maven Central errors

    • fixed

      deps: update renovate-base-image to v13.160.5 (main)

  7. 44.219.0

    5 Nov 20261 new
    • new

      Support Node.js 26

  8. 44.218.0

    5 Nov 20262 new · 2 fixes
    • new

      manager/mise: use tool versions as constraints for other managers

    • new

      manager/rust-toolchain: share the pinned Rust version with cargo

    • fixed

      pr: link to "how to add a GitHub.com token for changelogs"

    • fixed

      workers/repository: report parse errors in base branch config file

262 other lines we could not sort, mostly version bumps

  • Test the secondary Node version on Linux

    44.219.0

  • setup-docker: free disk space when less than 40 GB are available

    44.214.0

  • actions/setup-docker: remove useless use of cat

    44.189.0

  • actions/setup-node: ignore SC2016 findings

    44.189.0

  • static-data: start on a new branch

    44.183.0

  • update-data: create PRs with the commit's title and body

    44.183.0

  • Fail tests that read the repository config.js

    44.167.7

  • Label pr size for forks via workflow_run

    44.128.2

  • Use github.token for the workflow token everywhere

    44.125.0

  • undesirable-code: print added lines on failure

    44.112.2

12667 internal lines (docs, tests, tooling) left out.