renovate
44.198.3 · 30 Oct 2026AGPL-3.0-only559.3k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 32.102.2 to 32.102.3
1 release in betweenevery note read
Reading releases, release notes and advisories…
- 1
- change to make
- 0
- advisories fixed
- 0
- new
- 3
- fixes
Before you upgrade
Tick each one off as you go- breaking32.102.3
Security
1 advisory still affects 32.102.3
- Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml filemoderate · GHSA-3f44-xw83-3pmg
Upgrading to 40.33.0 clears it.
Release by release
- fixed
config: don't skip migration PR if closed PR found
- fixed
config: preserve packageRules order when migrating
- fixed
Log migration err properly
- fixed
2 other lines we could not sort, mostly version bumps
- 32.102.3
Increase build permissions
- 32.102.3
Set permissions for all workflows
3 internal lines (docs, tests, tooling) left out.