renovate
44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 40.62.1 to 41.0.0
1 release in betweenevery note read
Reading releases, release notes and advisories…
- 5
- changes to make
- 0
- advisories fixed
- 4
- new
- 0
- fixes
Before you upgrade
Tick each one off as you go- breaking41.0.0
- breaking41.0.0
- breaking41.0.0
- breaking41.0.0
- breaking41.0.0
Security
1 advisory still affects 41.0.0
- Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`moderate · GHSA-pfq2-hh62-7m96
Upgrading to 42.68.5 clears it.
Release by release
- new
config: add mergeConfidence:age-confidence-badges to config:recommended
- new
config: add minor version to default branchTopic to support separateMultipleMinor
- new
deps: Update ghcr.io/renovatebot/base-image Docker tag to v10 (main)
- new
pixi: add feature to depType
- new
1 internal line (docs, tests, tooling) left out.