renovate
44.206.2 · 2 Nov 2026AGPL-3.0-only559.5k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate From 16.2.0 to 16.13.10
57 releases in betweennotes for 56
Reading releases, release notes and advisories…
Security
1 advisory still affects 16.13.10
- Renovate vulnerable to leakage of temporary repository tokens into Pull Request commentsmoderate · GHSA-v7x3-7hw7-pcjg
Upgrading to 19.38.7 clears it.
Release by release
16.13.10no release note
- fixed
bazel: cast file to Buffer before calculating sha256
- fixed
gitlab: don’t warn if more than one MR assignee
- fixed
host-rules: try/catch updating from config
- fixed
logs: serialize migratedConfig, originalConfig, presetConfig
- fixed
- fixed
maven: handle xml with leading spaces
- fixed
- fixed
pip_setup: set fromVersion when extracting ==
- fixed
- fixed
maven: isVersion/isSingleVersion/isValid
- fixed
maven: use isValid, not isVersion
- fixed
pip_requirements: set lockedVersion for == deps
- fixed
- fixed
travis: don’t use setTimeout
- fixed
5 internal lines (docs, tests, tooling) left out.