renovate
44.221.4 · 6 Nov 2026AGPL-3.0-only562.9k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate From 14.3.7 to 44.221.4
9,864 releases in betweennotes for 9,851
Counted from 9851 of 9864 release notes. Advisories are counted from the advisory database, in full.
Start here
Before you upgrade
Tick each one off as you go- breaking44.115.3
- breaking44.44.0
- breaking44.39.2
- breaking43.278.4
- breaking43.213.1
- breaking43.0.0
- breaking43.0.0
- breaking43.0.0
- breaking43.0.0
- breaking43.0.0
Security
Fixes 1 advisory affecting 14.3.7
- Renovate vulnerable to leakage of temporary repository tokens into Pull Request commentsmoderate · GHSA-v7x3-7hw7-pcjg
- 44.209.0
vulnerabilities: store the osv-offline database in cacheDir
- 44.205.1
vulnerabilities: dispose the OSV databases when finishing
- 44.200.1
- 44.195.1
vulnerabilities: use default import for ae-cvss-calculator
- 44.193.0
- 44.189.0
- 44.188.3
- 44.171.8
vulnerabilities: apply vulnerabilityAlerts limits to packageRule alerts
- 44.134.3
vulnerabilities: raise fixes for deps their manager disables by default
- 44.107.1
workers/repository/extract: pass vulnerability alert state to managers
Release by release
- fixed
deps: update renovate-base-image to v13.160.9 (main)
- fixed
- fixed
deps: update renovate-base-image to v13.160.8 (main)
- fixed
- fixed
deps: update renovate-base-image to v13.160.7 (main)
- fixed
- fixed
deps: update renovate-base-image to v13.160.6 (main)
- fixed
- new
config: add
useBaseBranchConfig=merge-if-presentwhen missing config on base branches - fixed
dashboard: name the dependency and file in repository problems
- fixed
datasource/maven: fail only the dependency on temporary Maven Central errors
- fixed
deps: update renovate-base-image to v13.160.5 (main)
- new
- new
Support Node.js 26
- new
- new
manager/mise: use tool versions as constraints for other managers
- new
manager/rust-toolchain: share the pinned Rust version with cargo
- fixed
pr: link to "how to add a GitHub.com token for changelogs"
- fixed
workers/repository: report parse errors in base branch config file
- new
253 other lines we could not sort, mostly version bumps
- 44.219.0
Test the secondary Node version on Linux
- 44.214.0
setup-docker: free disk space when less than 40 GB are available
- 44.189.0
actions/setup-docker: remove useless use of
cat - 44.189.0
actions/setup-node: ignore
SC2016findings - 44.183.0
static-data: start on a new branch
- 44.183.0
update-data: create PRs with the commit's title and body
- 44.167.7
Fail tests that read the repository config.js
- 44.128.2
Label pr size for forks via workflow_run
- 44.125.0
Use github.token for the workflow token everywhere
- 44.112.2
undesirable-code: print added lines on failure
12444 internal lines (docs, tests, tooling) left out.