Packages

renovate

44.198.3 · 30 Oct 2026AGPL-3.0-only559.3k / weekRepositoryHomepagenpmAtom feed

Upgrading renovate from 32.121.0 to 42.68.5

4,649 releases in betweennotes for 4,646

Reading releases, release notes and advisories…

Other targets from 32.121.0Newest 32.x32.241.11Clears its advisory40.33.0Latest44.198.3
133+
changes to make
1
advisory fixed
1974+
new
2450+
fixes

Counted from 4646 of 4649 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking42.67.0
  • breaking42.0.0
  • breaking42.0.0
  • breaking42.0.0
  • breaking42.0.0
  • breaking42.0.0
  • breaking42.0.0
  • breaking42.0.0
  • breaking42.0.0
  • breaking42.0.0

Security

1 advisory still affects 42.68.5

Upgrading to 42.96.3 clears it.

Fixes 1 advisory affecting 32.121.0

  • dashboard: formatting for vulnerabilities section

    42.34.1

  • vulnerabilities: add support for CVSS 4.0 in OSV alerts

    41.107.0

  • CVSS4.0 vector parse exception - vulnerability severity fallback

    39.215.1

  • vulnerabilities: Add Hackage support

    39.87.0

  • vulnerabilities: correct range syntax for nuget

    38.96.1

  • vulnerabilities: set matchCurrentVersion for github alerts

    38.95.3

  • vulnerability-alerts: fix handling of first_patched_version: null

    38.85.2

  • vulnerabilities: do not force exact patch version for NuGet datasource

    38.59.2

  • config: sanitize special characters from branch names for vulnerability type PRs. This may cause Renovate to autoclose/replace existing PRs

    38.0.0

  • npm: for npm versions lower than 7, drop support for remediating vulnerabilities in transitive dependencies

    38.0.0

Release by release

  1. 42.68.5

    31 Dec 20252 fixes
    • fixed

      postUpgradeTasks: always run commands with shell mode

    • fixed

      util/exec: don't use shell by default

  2. 42.68.4

    30 Dec 20251 fix
    • fixed

      deps: update ghcr.io/renovatebot/base-image docker tag to v12.20.9 (main)

  3. 42.68.3

    30 Dec 20251 fix
    • fixed

      deps: update ghcr.io/renovatebot/base-image docker tag to v12.20.8 (main)

  4. 42.68.2

    30 Dec 20252 fixes
    • fixed

      deps: update ghcr.io/containerbase/sidecar docker tag to v13.25.19 (main)

    • fixed

      deps: update ghcr.io/renovatebot/base-image docker tag to v12.20.7 (main)

  5. 42.68.1

    30 Dec 20251 fix
    • fixed

      util/exec: migrate to execa for command execution

  6. 42.68.0

    30 Dec 20251 new
    • new

      Add exact versioning

  7. 42.67.0

    30 Dec 20251 new
    • new

      typst: Update datasource to use official registry API

  8. 42.66.14

    29 Dec 20251 fix
    • fixed

      deps: update ghcr.io/renovatebot/base-image docker tag to v12.20.6 (main)

106 other lines we could not sort, mostly version bumps

  • mend-slack: run on new Discussions

    42.34.2

  • mend-slack: remove extra parenthesis

    42.34.0

  • re-enable strict docs builds

    42.26.10

  • release: use context instead of environment variables for URL building

    42.19.1

  • Cancel stale merge queue workflows

    42.18.0

  • release: refactor release failure notifications

    42.17.0

  • release: notify to Slack on release pipeline failures

    42.14.3

  • close-answered-discussions: log pageNumber

    42.14.2

  • close-answered-discussions: reduce risk of secondary rate limits

    42.14.2

  • lock-threads: correctly set inactive days for discussions

    42.14.2

6542 internal lines (docs, tests, tooling) left out.