renovate
44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 39.152.0 to 39.264.1
322 releases in betweennotes for 319
Reading releases, release notes and advisories…
- 2+
- changes to make
- 0
- advisories fixed
- 131+
- new
- 176+
- fixes
Counted from 319 of 322 release notes. Advisories are counted from the advisory database, in full.
Before you upgrade
Tick each one off as you go- breaking39.238.2
- deprecated39.248.0
Security
6 advisories still affect 39.264.1
- Renovate vulnerable to arbitrary command injection via hermit manager and maliciously named dependenciesmoderate · GHSA-36j9-mx87-2cff
- Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml filemoderate · GHSA-3f44-xw83-3pmg
- Renovate vulnerable to arbitrary command injection via kustomize manager and malicious helm repositorymoderate · GHSA-xv56-3wq5-9997
Upgrading to 42.68.5 clears them.
- 39.215.1
CVSS4.0 vector parse exception - vulnerability severity fallback
Release by release
39.264.1no release note
- new
deps: update ghcr.io/renovatebot/base-image docker tag to v9.64.1 (main)
- new
- fixed
deps: update ghcr.io/renovatebot/base-image docker tag to v9.63.1 (main)
- fixed
- new
deps: update ghcr.io/renovatebot/base-image docker tag to v9.63.0 (main)
- new
- fixed
pep621: make name for uv index optional
- fixed
- new
replacements: add replacements:gradle-wrapper-validation-action
- fixed
Do not update conflicting Onboarding MR comment in dry run
- new
39.261.4nothing new or fixed in the note
- fixed
Memory caching for presets fetching
- fixed
4 other lines we could not sort, mostly version bumps
- 39.191.3
Remove unused permissions
- 39.191.1
Extract
build-dockerjob - 39.181.1
Do dry-run
- 39.177.0
Run on
nextandmaint/**branches
486 internal lines (docs, tests, tooling) left out.