renovate
44.198.3 · 30 Oct 2026AGPL-3.0-only559.3k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 35.147.0 to 35.159.7
21 releases in betweenevery note read
Reading releases, release notes and advisories…
Security
4 advisories still affect 35.159.7
- Renovate vulnerable to arbitrary command injection via hermit manager and maliciously named dependenciesmoderate · GHSA-36j9-mx87-2cff
- Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml filemoderate · GHSA-3f44-xw83-3pmg
- Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configurationmoderate · GHSA-fr4j-65pv-gjjj
- Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`moderate · GHSA-pfq2-hh62-7m96
Upgrading to 42.68.5 clears them.
Release by release
- fixed
changelog/gitlab: custom endpoint and repository length validation
- fixed
- fixed
markdown: don't remove char before
#
- fixed
- fixed
platform: compare target refs before updating
- fixed
35.159.4nothing new or fixed in the note
- fixed
changelog: remove urls from md heading url
- fixed
presets: Update @aws-lambda-powertools monorepo url
- fixed
- fixed
datasource/packagist: Use serializable type for
availablePackages
- fixed
35.159.1nothing new or fixed in the note
- new
platform/bitbucket: add support for fetching release notes
- new
26 internal lines (docs, tests, tooling) left out.