Packages

renovate

44.198.3 · 30 Oct 2026AGPL-3.0-only559.3k / weekRepositoryHomepagenpmAtom feed

Upgrading renovate from 37.48.3 to 37.440.7

1,041 releases in betweenevery note read

Reading releases, release notes and advisories…

Other targets from 37.48.3Clears its 4 advisories42.68.5Latest44.198.3
3
changes to make
0
advisories fixed
440
new
548
fixes

Before you upgrade

Tick each one off as you go
  • deprecated37.391.0
  • deprecated37.280.1
  • deprecated37.139.4

Security

4 advisories still affect 37.440.7

Upgrading to 42.68.5 clears them.

  • Log release filtering caused by vulnerability alert

    37.422.1

  • vulnerabilities: do not force exact patch version in GitHub alerts

    37.409.1

  • vulnerabilities: strip equals for nuget in Github alerts

    37.408.3

  • vulnerabilities: do not force exact patch version in OSV alerts

    37.408.2

  • vulnerabilities: do not force exact patch version for PyPI datasource in GitHub alerts

    37.401.5

  • Add security advisory for self-hosted users

    37.316.1

  • jest: revert CVE-2023-46809 to allow openpgp tests to pass

    37.198.2

  • vulnerability-alerts: separate tests for readability

    37.194.6

  • vulnerabilities: describe last_affected version as ecosystem-specific version constraint

    37.192.4

  • scorecard: remove fixtures removals and fix found vulnerability

    37.140.1

Release by release

  1. 37.440.7

    24 Jul 20241 fix
    • fixed

      deps: update ghcr.io/renovatebot/base-image docker tag to v2.28.1

  2. 37.440.4 – 37.440.63 releases, nothing new or fixed in the notes

  3. 37.440.3

    23 Jul 20241 fix
    • fixed

      bitbucket-server: replace multiline html comments

  4. 37.440.1 – 37.440.22 releases, nothing new or fixed in the notes

  5. 37.440.0

    22 Jul 20241 new
    • new

      deps: update ghcr.io/renovatebot/base-image docker tag to v2.28.0

  6. 37.439.0

    22 Jul 20241 new · 1 fix
    • new

      http: Force default rate limits for some known hosts

    • fixed

      deps: update ghcr.io/containerbase/sidecar docker tag to v10.16.0

  7. 37.438.5

    22 Jul 20242 fixes
    • fixed

      bitbucket-server: Clarify error when both BB password and access token are set

    • fixed

      nuget: always coalesce sourceUrl and homepage if homepage available

  8. 37.438.3 – 37.438.42 releases, nothing new or fixed in the notes

16 other lines we could not sort, mostly version bumps

  • Use node v20 for most jobs

    37.421.6

  • Extend timeout for docker builds

    37.377.0

  • Use pnpm/action-setup action

    37.324.3

  • Skip codecov on merge group

    37.280.1

  • Revert "codecov-action" back to v3

    37.259.0

  • Shallow clone "codecov.yml" for coverage uploads

    37.252.1

  • Upgrade "codecov-action" to v4.1.0

    37.252.1

  • Revert "feat: Limit HTTP concurrency and frequency by default"

    37.231.0

  • Update artifact actions

    37.188.0

  • Refactor docker build

    37.177.0

1239 internal lines (docs, tests, tooling) left out.