renovate
44.221.4 · 6 Nov 2026AGPL-3.0-only562.9k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate From 14.54.7 to 44.221.4
9,635 releases in betweennotes for 9,622
Counted from 9622 of 9635 release notes. Advisories are counted from the advisory database, in full.
Start here
Before you upgrade
Tick each one off as you go- breaking44.115.3
- breaking44.44.0
- breaking44.39.2
- breaking43.278.4
- breaking43.213.1
- breaking43.0.0
- breaking43.0.0
- breaking43.0.0
- breaking43.0.0
- breaking43.0.0
Security
Fixes 1 advisory affecting 14.54.7
- Renovate vulnerable to leakage of temporary repository tokens into Pull Request commentsmoderate · GHSA-v7x3-7hw7-pcjg
- 44.209.0
vulnerabilities: store the osv-offline database in cacheDir
- 44.205.1
vulnerabilities: dispose the OSV databases when finishing
- 44.200.1
- 44.195.1
vulnerabilities: use default import for ae-cvss-calculator
- 44.193.0
- 44.189.0
- 44.188.3
- 44.171.8
vulnerabilities: apply vulnerabilityAlerts limits to packageRule alerts
- 44.134.3
vulnerabilities: raise fixes for deps their manager disables by default
- 44.107.1
workers/repository/extract: pass vulnerability alert state to managers
Release by release
- fixed
deps: update renovate-base-image to v13.160.9 (main)
- fixed
- fixed
deps: update renovate-base-image to v13.160.8 (main)
- fixed
- fixed
deps: update renovate-base-image to v13.160.7 (main)
- fixed
- fixed
deps: update renovate-base-image to v13.160.6 (main)
- fixed
- new
config: add
useBaseBranchConfig=merge-if-presentwhen missing config on base branches - fixed
dashboard: name the dependency and file in repository problems
- fixed
datasource/maven: fail only the dependency on temporary Maven Central errors
- fixed
deps: update renovate-base-image to v13.160.5 (main)
- new
- new
Support Node.js 26
- new
- new
manager/mise: use tool versions as constraints for other managers
- new
manager/rust-toolchain: share the pinned Rust version with cargo
- fixed
pr: link to "how to add a GitHub.com token for changelogs"
- fixed
workers/repository: report parse errors in base branch config file
- new
252 other lines we could not sort, mostly version bumps
- 44.219.0
Test the secondary Node version on Linux
- 44.214.0
setup-docker: free disk space when less than 40 GB are available
- 44.189.0
actions/setup-docker: remove useless use of
cat - 44.189.0
actions/setup-node: ignore
SC2016findings - 44.183.0
static-data: start on a new branch
- 44.183.0
update-data: create PRs with the commit's title and body
- 44.167.7
Fail tests that read the repository config.js
- 44.128.2
Label pr size for forks via workflow_run
- 44.125.0
Use github.token for the workflow token everywhere
- 44.112.2
undesirable-code: print added lines on failure
12429 internal lines (docs, tests, tooling) left out.