renovate
44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 40.42.2 to 40.42.3
1 release in betweenevery note read
Reading releases, release notes and advisories…
- 0
- changes to make
- 0
- advisories fixed
- 0
- new
- 1
- fix
Security
1 advisory still affects 40.42.3
- Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`moderate · GHSA-pfq2-hh62-7m96
Upgrading to 42.68.5 clears it.
Release by release
- fixed
workers/auto-replace: Correctly replace with digest and without replaceString
- fixed
2 internal lines (docs, tests, tooling) left out.