renovate
44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 40.35.3 to 40.62.1
107 releases in betweenevery note read
Reading releases, release notes and advisories…
- 1
- change to make
- 0
- advisories fixed
- 32
- new
- 37
- fixes
Before you upgrade
Tick each one off as you go- deprecated40.61.3
Security
1 advisory still affects 40.62.1
- Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`moderate · GHSA-pfq2-hh62-7m96
Upgrading to 42.68.5 clears it.
Release by release
40.62.1nothing new or fixed in the note
- new
changelog-urls: add urls for scalar packages
- new
- fixed
changelogs: support bitbucket-server URLs in subfolder installations
- fixed
deps: update ghcr.io/renovatebot/base-image docker tag to v9.72.9 (main)
- fixed
gitea: automerge of repos with only fast forward only merge
- fixed
40.61.1 – 40.61.33 releases, nothing new or fixed in the notes
- new
nuget: add deprecation message for NuGet packages
- fixed
npm: set
hasPackageManager:trueifdevEnginesdetected
- new
- fixed
deps: update ghcr.io/renovatebot/base-image docker tag to v9.72.8 (main)
- fixed
- fixed
deps: update ghcr.io/renovatebot/base-image docker tag to v9.72.7 (main)
- fixed
40.60.1 – 40.60.33 releases, nothing new or fixed in the notes
2 other lines we could not sort, mostly version bumps
- 40.49.6
Use pnpm for e2e
- 40.49.1
Skip docker build for PRs
156 internal lines (docs, tests, tooling) left out.