renovate
44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 39.264.1 to 42.96.3
1,179 releases in betweennotes for 0
42.0.0, 41.0.0, 40.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
- ?
- changes to make
- 6
- advisories fixed
- ?
- new
- ?
- fixes
Counted from 0 of 1179 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 6 advisories affecting 39.264.1
- Renovate vulnerable to arbitrary command injection via hermit manager and maliciously named dependenciesmoderate · GHSA-36j9-mx87-2cff
- Renovate vulnerable to arbitrary command injection via helmv3 manager and malicious Chart.yaml filemoderate · GHSA-3f44-xw83-3pmg
- Renovate vulnerable to arbitrary command injection via kustomize manager and malicious helm repositorymoderate · GHSA-xv56-3wq5-9997
- Renovate vulnerable to arbitrary command injection via npm manager and malicious Renovate configurationmoderate · GHSA-fr4j-65pv-gjjj
- Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`moderate · GHSA-pfq2-hh62-7m96
- Renovate vulnerable to arbitrary command injection via gleam manager and malicious gleam.toml filemoderate · GHSA-xjr7-3c3g-m763