renovate
44.198.3 · 30 Oct 2026AGPL-3.0-only559.3k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 37.176.0 to 37.176.1
1 release in betweenevery note read
Reading releases, release notes and advisories…
Security
5 advisories still affect 37.176.1
- Renovate vulnerable to arbitrary command injection via hermit manager and maliciously named dependenciesmoderate · GHSA-36j9-mx87-2cff
- Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml filemoderate · GHSA-3f44-xw83-3pmg
- Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configurationmoderate · GHSA-fr4j-65pv-gjjj
Upgrading to 42.68.5 clears them.
Release by release
- new
Add
package.jsonto cache key - new
release: add mutex to serialize npm and docker releases
- fixed
Don't cancel on main
- new
2 other lines we could not sort, mostly version bumps
- 37.176.1
Read default branch from event
- 37.176.1
Retry docker build
2 internal lines (docs, tests, tooling) left out.