Packages

renovate

44.206.2 · 2 Nov 2026AGPL-3.0-only559.5k / weekRepositoryHomepagenpmAtom feed

Upgrading renovate From 34.25.0 to 44.206.2

5,809 releases in betweennotes for 5,806

Reading releases, release notes and advisories…

Other targets from 34.25.0Newest 34.x34.160.0Clears its 3 advisories42.68.5
  1. 34.25.0yours
  2. 109 releases
  3. 34.72.3security
  4. 145 releases
  5. 34.129.0security
  6. 14 releases
  7. 34.136.0security
  8. 19 releases
  9. 34.146.2security
  10. 36 releases
  11. 35.0.0major
  12. 73 releases
  13. 35.31.5security
  14. 24 releases
  15. 35.46.1security
  16. 13 releases
  17. 35.53.0security
  18. 59 releases
  19. 35.80.0security
  20. 13 releases
  21. 35.88.0security
  22. 2 releases
  23. 35.90.0security
  24. 162 releases
  25. 36.0.0major
  26. 111 releases
  27. 36.35.0security
  28. 198 releases
  29. 37.0.0major
  30. 373 releases
  31. 37.140.1security
  32. 156 releases
  33. 37.192.4security
  34. 8 releases
  35. 37.194.6security
  36. 5 releases
  37. 37.198.2security
  38. 254 releases
  39. 37.316.1security
  40. 238 releases
  41. 37.401.5security
  42. 18 releases
  43. 37.408.2security
  44. 37.408.3security
  45. 1 release
  46. 37.409.1security
  47. 43 releases
  48. 37.422.1security
  49. 66 releases
  50. 38.0.0security
  51. 158 releases
  52. 38.59.2security
  53. 62 releases
  54. 38.85.2security
  55. 33 releases
  56. 38.95.3security
  57. 2 releases
  58. 38.96.1security
  59. 125 releases
  60. 39.0.0major
  61. 217 releases
  62. 39.87.0security
  63. 322 releases
  64. 39.215.1security
  65. 142 releases
  66. 40.0.0major
  67. 255 releases
  68. 41.0.0major
  69. 322 releases
  70. 41.107.0security
  71. 247 releases
  72. 42.0.0major
  73. 119 releases
  74. 42.34.1security
  75. 244 releases
  76. 43.0.0security
  77. 58 releases
  78. 43.11.1security
  79. 68 releases
  80. 43.34.0security
  81. 11 releases
  82. 43.40.0security
  83. 20 releases
  84. 43.46.7security
  85. 190 releases
  86. 43.109.4security
  87. 43.109.5security
  88. 3 releases
  89. 43.110.3security
  90. 6 releases
  91. 43.110.10security
  92. 25 releases
  93. 43.120.0security
  94. 1 release
  95. 43.120.2security
  96. 20 releases
  97. 43.128.0security
  98. 12 releases
  99. 43.134.1security
  100. 66 releases
  101. 43.209.3security
  102. 250 releases
  103. 44.0.0major
  104. 73 releases
  105. 44.22.0security
  106. 47 releases
  107. 44.38.0security
  108. 211 releases
  109. 44.107.1security
  110. 90 releases
  111. 44.134.3security
  112. 110 releases
  113. 44.171.8security
  114. 62 releases
  115. 44.188.3security
  116. 1 release
  117. 44.189.0security
  118. 7 releases
  119. 44.193.0security
  120. 3 releases
  121. 44.195.1security
  122. 12 releases
  123. 44.200.1security
  124. 8 releases
  125. 44.205.1security
  126. 3 releases
  127. 44.206.2target
147+
changes to make
3
advisories fixed
2397+
new
3294+
fixes

Counted from 5806 of 5809 release notes. Advisories are counted from the advisory database, in full.

Start here

Before you upgrade

Tick each one off as you go
  • breaking44.115.3
  • breaking44.44.0
  • breaking44.39.2
  • breaking43.278.4
  • breaking43.213.1
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0

Security

Fixes 3 advisories affecting 34.25.0

  • vulnerabilities: dispose the OSV databases when finishing

    44.205.1

  • vulnerability: keep the dependency's versioning when building OSV rules (#46868) (9eaae58), closes #43308

    44.200.1

  • vulnerabilities: use default import for ae-cvss-calculator

    44.195.1

  • types: add a type for Vulnerability Alerts' sources (#47504) (6bdc798), closes #44153 #45486 #46378

    44.193.0

  • vulnerabilities: allow performing lockfile only transitive security updates (#46391) (4718945), closes #47478

    44.189.0

  • vulnerabilities: document that lockfile-only deps don't get vulnerability updates (#47478) (24e8b99), closes #46377

    44.188.3

  • vulnerabilities: apply vulnerabilityAlerts limits to packageRule alerts

    44.171.8

  • vulnerabilities: raise fixes for deps their manager disables by default

    44.134.3

  • workers/repository/extract: pass vulnerability alert state to managers

    44.107.1

  • vulnerabilities: scope Go stdlib OSV remediation to the toolchain directive

    44.38.0

Release by release

  1. 44.206.1 – 44.206.22 releases, nothing new or fixed in the notes

  2. 44.206.0

    2 Nov 20261 new
    • new

      deps: update renovate-base-image to v13.154.0 (main)

  3. 44.205.2

    2 Nov 20261 fix
    • fixed

      util/exec: reinstall child tools when the parent tool version changes

  4. 44.205.1

    Security fix2 Nov 2026
    • security

      vulnerabilities: dispose the OSV databases when finishing

  5. 44.205.0

    2 Nov 20262 new
    • new

      manager/github-actions: extract the flux-mirror setup action version

    • new

      preset: @primer group preset

  6. 44.204.0

    2 Nov 20261 new
    • new

      datasource/go: derive Go env from host rules

  7. 44.203.0

    2 Nov 20261 new
    • new

      presets: add rumdl to packages:linters

  8. 44.202.1nothing new or fixed in the note

147 other lines we could not sort, mostly version bumps

  • actions/setup-docker: remove useless use of cat

    44.189.0

  • actions/setup-node: ignore SC2016 findings

    44.189.0

  • static-data: start on a new branch

    44.183.0

  • update-data: create PRs with the commit's title and body

    44.183.0

  • Fail tests that read the repository config.js

    44.167.7

  • Label pr size for forks via workflow_run

    44.128.2

  • Use github.token for the workflow token everywhere

    44.125.0

  • undesirable-code: print added lines on failure

    44.112.2

  • Ratchet the branch coverage threshold to 99.51

    44.93.6

  • Ratchet the branch coverage threshold

    44.91.0

8279 internal lines (docs, tests, tooling) left out.