renovate
44.198.3 · 30 Oct 2026AGPL-3.0-only559.3k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 32.206.0 to 32.207.0
1 release in betweenevery note read
Reading releases, release notes and advisories…
Security
3 advisories still affect 32.207.0
- Renovate vulnerable to arbitrary command injection via hermit manager and maliciously named dependenciesmoderate · GHSA-36j9-mx87-2cff
- Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml filemoderate · GHSA-3f44-xw83-3pmg
- Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`moderate · GHSA-pfq2-hh62-7m96
Upgrading to 42.68.5 clears them.
Release by release
- new
go: Continue processing if an error occurs trying to get sourceUrl
- fixed
docker: reduce ECR Public max results to 1000
- fixed
pr: include uncompiled pr body note if failing
- new
1 internal line (docs, tests, tooling) left out.