renovate
44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 40.53.1 to 40.62.1
30 releases in betweenevery note read
Reading releases, release notes and advisories…
- 1
- change to make
- 0
- advisories fixed
- 12
- new
- 13
- fixes
Before you upgrade
Tick each one off as you go- deprecated40.61.3
Security
1 advisory still affects 40.62.1
- Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`moderate · GHSA-pfq2-hh62-7m96
Upgrading to 42.68.5 clears it.
Release by release
40.62.1nothing new or fixed in the note
- new
changelog-urls: add urls for scalar packages
- new
- fixed
changelogs: support bitbucket-server URLs in subfolder installations
- fixed
deps: update ghcr.io/renovatebot/base-image docker tag to v9.72.9 (main)
- fixed
gitea: automerge of repos with only fast forward only merge
- fixed
40.61.1 – 40.61.33 releases, nothing new or fixed in the notes
- new
nuget: add deprecation message for NuGet packages
- fixed
npm: set
hasPackageManager:trueifdevEnginesdetected
- new
- fixed
deps: update ghcr.io/renovatebot/base-image docker tag to v9.72.8 (main)
- fixed
- fixed
deps: update ghcr.io/renovatebot/base-image docker tag to v9.72.7 (main)
- fixed
40.60.1 – 40.60.33 releases, nothing new or fixed in the notes
35 internal lines (docs, tests, tooling) left out.