renovate
44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 40.61.3 to 40.62.1
3 releases in betweenevery note read
Reading releases, release notes and advisories…
Security
1 advisory still affects 40.62.1
- Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`moderate · GHSA-pfq2-hh62-7m96
Upgrading to 42.68.5 clears it.
Release by release
40.62.1nothing new or fixed in the note
- new
changelog-urls: add urls for scalar packages
- new
- fixed
changelogs: support bitbucket-server URLs in subfolder installations
- fixed
deps: update ghcr.io/renovatebot/base-image docker tag to v9.72.9 (main)
- fixed
gitea: automerge of repos with only fast forward only merge
- fixed
2 internal lines (docs, tests, tooling) left out.