Packages

renovate

44.206.2 · 2 Nov 2026AGPL-3.0-only559.5k / weekRepositoryHomepagenpmAtom feed

Upgrading renovate From 32.37.2 to 44.206.2

6,392 releases in betweennotes for 6,389

Reading releases, release notes and advisories…

Other targets from 32.37.2Newest 32.x32.241.11Clears its advisory40.33.0
  1. 32.37.2yours
  2. 113 releases
  3. 32.82.1security
  4. 393 releases
  5. 33.0.0major
  6. 8 releases
  7. 34.0.0major
  8. 33 releases
  9. 34.14.0security
  10. 3 releases
  11. 34.17.0security
  12. 137 releases
  13. 34.72.3security
  14. 145 releases
  15. 34.129.0security
  16. 14 releases
  17. 34.136.0security
  18. 19 releases
  19. 34.146.2security
  20. 36 releases
  21. 35.0.0major
  22. 73 releases
  23. 35.31.5security
  24. 24 releases
  25. 35.46.1security
  26. 13 releases
  27. 35.53.0security
  28. 59 releases
  29. 35.80.0security
  30. 13 releases
  31. 35.88.0security
  32. 2 releases
  33. 35.90.0security
  34. 162 releases
  35. 36.0.0major
  36. 111 releases
  37. 36.35.0security
  38. 198 releases
  39. 37.0.0major
  40. 373 releases
  41. 37.140.1security
  42. 156 releases
  43. 37.192.4security
  44. 8 releases
  45. 37.194.6security
  46. 5 releases
  47. 37.198.2security
  48. 254 releases
  49. 37.316.1security
  50. 238 releases
  51. 37.401.5security
  52. 18 releases
  53. 37.408.2security
  54. 37.408.3security
  55. 1 release
  56. 37.409.1security
  57. 43 releases
  58. 37.422.1security
  59. 66 releases
  60. 38.0.0security
  61. 158 releases
  62. 38.59.2security
  63. 62 releases
  64. 38.85.2security
  65. 33 releases
  66. 38.95.3security
  67. 2 releases
  68. 38.96.1security
  69. 125 releases
  70. 39.0.0major
  71. 217 releases
  72. 39.87.0security
  73. 322 releases
  74. 39.215.1security
  75. 142 releases
  76. 40.0.0major
  77. 255 releases
  78. 41.0.0major
  79. 322 releases
  80. 41.107.0security
  81. 247 releases
  82. 42.0.0major
  83. 119 releases
  84. 42.34.1security
  85. 244 releases
  86. 43.0.0security
  87. 58 releases
  88. 43.11.1security
  89. 68 releases
  90. 43.34.0security
  91. 11 releases
  92. 43.40.0security
  93. 20 releases
  94. 43.46.7security
  95. 190 releases
  96. 43.109.4security
  97. 43.109.5security
  98. 3 releases
  99. 43.110.3security
  100. 6 releases
  101. 43.110.10security
  102. 25 releases
  103. 43.120.0security
  104. 1 release
  105. 43.120.2security
  106. 20 releases
  107. 43.128.0security
  108. 12 releases
  109. 43.134.1security
  110. 66 releases
  111. 43.209.3security
  112. 250 releases
  113. 44.0.0major
  114. 73 releases
  115. 44.22.0security
  116. 47 releases
  117. 44.38.0security
  118. 211 releases
  119. 44.107.1security
  120. 90 releases
  121. 44.134.3security
  122. 110 releases
  123. 44.171.8security
  124. 62 releases
  125. 44.188.3security
  126. 1 release
  127. 44.189.0security
  128. 7 releases
  129. 44.193.0security
  130. 3 releases
  131. 44.195.1security
  132. 12 releases
  133. 44.200.1security
  134. 8 releases
  135. 44.205.1security
  136. 3 releases
  137. 44.206.2target
165+
changes to make
1
advisory fixed
2651+
new
3574+
fixes

Counted from 6389 of 6392 release notes. Advisories are counted from the advisory database, in full.

Start here

Before you upgrade

Tick each one off as you go
  • breaking44.115.3
  • breaking44.44.0
  • breaking44.39.2
  • breaking43.278.4
  • breaking43.213.1
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0

Security

  • vulnerabilities: dispose the OSV databases when finishing

    44.205.1
  • vulnerability: keep the dependency's versioning when building OSV rules (#46868) (9eaae58), closes #43308

    44.200.1
  • vulnerabilities: use default import for ae-cvss-calculator

    44.195.1
  • types: add a type for Vulnerability Alerts' sources (#47504) (6bdc798), closes #44153 #45486 #46378

    44.193.0
  • vulnerabilities: allow performing lockfile only transitive security updates (#46391) (4718945), closes #47478

    44.189.0
  • vulnerabilities: document that lockfile-only deps don't get vulnerability updates (#47478) (24e8b99), closes #46377

    44.188.3
  • vulnerabilities: apply vulnerabilityAlerts limits to packageRule alerts

    44.171.8
  • vulnerabilities: raise fixes for deps their manager disables by default

    44.134.3
  • workers/repository/extract: pass vulnerability alert state to managers

    44.107.1
  • vulnerabilities: scope Go stdlib OSV remediation to the toolchain directive

    44.38.0

Release by release

  1. 44.206.1 – 44.206.22 releases, nothing new or fixed in the notes

  2. 44.206.0

    2 Nov 20261 new
    • new

      deps: update renovate-base-image to v13.154.0 (main)

  3. 44.205.2

    2 Nov 20261 fix
    • fixed

      util/exec: reinstall child tools when the parent tool version changes

  4. 44.205.1

    Security fix2 Nov 2026
    • security

      vulnerabilities: dispose the OSV databases when finishing

  5. 44.205.0

    2 Nov 20262 new
    • new

      manager/github-actions: extract the flux-mirror setup action version

    • new

      preset: @primer group preset

  6. 44.204.0

    2 Nov 20261 new
    • new

      datasource/go: derive Go env from host rules

  7. 44.203.0

    2 Nov 20261 new
    • new

      presets: add rumdl to packages:linters

  8. 44.202.1nothing new or fixed in the note

172 other lines we could not sort, mostly version bumps
  • actions/setup-docker: remove useless use of cat

    44.189.0
  • actions/setup-node: ignore SC2016 findings

    44.189.0
  • static-data: start on a new branch

    44.183.0
  • update-data: create PRs with the commit's title and body

    44.183.0
  • Fail tests that read the repository config.js

    44.167.7
  • Label pr size for forks via workflow_run

    44.128.2
  • Use github.token for the workflow token everywhere

    44.125.0
  • undesirable-code: print added lines on failure

    44.112.2
  • Ratchet the branch coverage threshold to 99.51

    44.93.6
  • Ratchet the branch coverage threshold

    44.91.0

9208 internal lines (docs, tests, tooling) left out.