renovate
44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 42.59.0 to 42.68.5
32 releases in betweennotes for 11
Reading releases, release notes and advisories…
Counted from 11 of 32 release notes. Advisories are counted from the advisory database, in full.
Before you upgrade
Tick each one off as you go- breaking42.67.0
Security
1 advisory still affects 42.68.5
- Child processes spawned by Renovate incorrectly have full access to environment variablesmoderate · GHSA-8wc6-vgrq-x6cf
Upgrading to 42.96.3 clears it.
Fixes 1 advisory affecting 42.59.0
- Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`moderate · GHSA-pfq2-hh62-7m96
Release by release
42.68.1 – 42.68.55 releases, no release note
- new
Add
exactversioning
- new
- new
typst: Update datasource to use official registry API
- new
42.66.3 – 42.66.1412 releases, no release note
- fixed
deps: update ghcr.io/renovatebot/base-image docker tag to v12.20.2 (main)
- fixed
42.66.1no release note
- new
deps: update ghcr.io/renovatebot/base-image docker tag to v12.20.1 (main)
- new
- fixed
deps: update ghcr.io/containerbase/sidecar docker tag to v13.25.18 (main)
- fixed
30 internal lines (docs, tests, tooling) left out.