renovate
44.206.2 · 2 Nov 2026AGPL-3.0-only559.5k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 31.2.0 to 31.97.3
230 releases in betweenevery note read
- 3
- changes to make
- 0
- advisories fixed
- 113
- new
- 106
- fixes
Before you upgrade
Tick each one off as you go- breaking31.25.1
- deprecated31.95.0
- deprecated31.23.3
Security
1 advisory still affects 31.97.3
- Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml filemoderate · GHSA-3f44-xw83-3pmg
Upgrading to 40.33.0 clears it.
- 31.89.1
composer: add support for github vulnerability alerts
Release by release
- new
pep440: added support for widen & replace rangeStrategies
- new
31.97.2nothing new or fixed in the note
- fixed
config/preset: Update dotNetCore Docker Group
- fixed
Union types for ensurePR
- fixed
- fixed
npm): Revert "refactor(npm: migrate from fs.readFile to fs.readLocalFile"
- fixed
31.96.1nothing new or fixed in the note
- new
platform: Cache created comments
- fixed
hostRules: sort by matchHost length
- new
- fixed
manager/sbt: group PRs by variable instead of variable+groupid together
- fixed
pr: pr table for digests
- fixed
Sanitize base64 of all secrets
- fixed
2 other lines we could not sort, mostly version bumps
- 31.64.1
Only scan for javascript with codeql
- 31.58.0
Revert "feat(git): use git fetching for forkMode (#13808)"
413 internal lines (docs, tests, tooling) left out.