Packages

renovate

44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed

Upgrading renovate from 39.174.3 to 44.190.0

2,802 releases in betweennotes for 2,799

Reading releases, release notes and advisories…

Other targets from 39.174.3Newest 39.x39.264.1Clears its 5 advisories42.68.5
60+
changes to make
5
advisories fixed
1033+
new
1757+
fixes

Counted from 2799 of 2802 release notes. Advisories are counted from the advisory database, in full.

Start here

Before you upgrade

Tick each one off as you go
  • breaking44.115.3
  • breaking44.44.0
  • breaking44.39.2
  • breaking43.278.4
  • breaking43.213.1
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0

Security

Fixes 5 advisories affecting 39.174.3

  • vulnerabilities: allow performing lockfile only transitive security updates (#46391) (4718945), closes #47478

    44.189.0

  • vulnerabilities: document that lockfile-only deps don't get vulnerability updates (#47478) (24e8b99), closes #46377

    44.188.3

  • vulnerabilities: apply vulnerabilityAlerts limits to packageRule alerts

    44.171.8

  • vulnerabilities: raise fixes for deps their manager disables by default

    44.134.3

  • workers/repository/extract: pass vulnerability alert state to managers

    44.107.1

  • vulnerabilities: scope Go stdlib OSV remediation to the toolchain directive

    44.38.0

  • vulnerabilities: match OSV Packagist sub-ecosystems

    44.22.0

  • workers/repository: correctly render schedule for vulnerability alerts

    43.209.3

  • vulnerability: use datasource default versioning instead of hardcoded map

    43.134.1

  • vulnerability: improve GitHub advisory PR body notes with summary, GHSA ID and references

    43.128.0

Release by release

  1. 44.190.0

    27 Oct 20261 new
    • new

      static-data: update Node.js release schedule

  2. 44.189.0nothing new or fixed in the note

  3. 44.188.4

    27 Oct 20261 fix
    • fixed

      deps: update renovate-base-image to v13.145.2 (main)

  4. 44.188.1 – 44.188.33 releases, nothing new or fixed in the notes

  5. 44.188.0

    27 Oct 20261 new
    • new

      deps: update renovate-base-image to v13.145.1 (main)

  6. 44.187.0

    27 Oct 20261 new
    • new

      deps: update renovate-base-image to v13.144.0 (main)

  7. 44.186.8

    27 Oct 20261 fix
    • fixed

      config: allow prerelease for bumpVersions.bumpType

  8. 44.186.7

    27 Oct 20261 fix
    • fixed

      deps: update renovate-base-image to v13.143.3 (main)

88 other lines we could not sort, mostly version bumps

  • actions/setup-docker: remove useless use of cat

    44.189.0

  • actions/setup-node: ignore SC2016 findings

    44.189.0

  • static-data: start on a new branch

    44.183.0

  • update-data: create PRs with the commit's title and body

    44.183.0

  • Fail tests that read the repository config.js

    44.167.7

  • Label pr size for forks via workflow_run

    44.128.2

  • Use github.token for the workflow token everywhere

    44.125.0

  • undesirable-code: print added lines on failure

    44.112.2

  • Ratchet the branch coverage threshold to 99.51

    44.93.6

  • Ratchet the branch coverage threshold

    44.91.0

4197 internal lines (docs, tests, tooling) left out.