renovate
44.206.2 · 2 Nov 2026AGPL-3.0-only559.5k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 31.63.1 to 31.97.3
100 releases in betweenevery note read
- 1
- change to make
- 0
- advisories fixed
- 40
- new
- 56
- fixes
Before you upgrade
Tick each one off as you go- deprecated31.95.0
Security
1 advisory still affects 31.97.3
- Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml filemoderate · GHSA-3f44-xw83-3pmg
Upgrading to 40.33.0 clears it.
- 31.89.1
composer: add support for github vulnerability alerts
Release by release
- new
pep440: added support for widen & replace rangeStrategies
- new
31.97.2nothing new or fixed in the note
- fixed
config/preset: Update dotNetCore Docker Group
- fixed
Union types for ensurePR
- fixed
- fixed
npm): Revert "refactor(npm: migrate from fs.readFile to fs.readLocalFile"
- fixed
31.96.1nothing new or fixed in the note
- new
platform: Cache created comments
- fixed
hostRules: sort by matchHost length
- new
- fixed
manager/sbt: group PRs by variable instead of variable+groupid together
- fixed
pr: pr table for digests
- fixed
Sanitize base64 of all secrets
- fixed
1 other line we could not sort, mostly version bumps
- 31.64.1
Only scan for javascript with codeql
171 internal lines (docs, tests, tooling) left out.