renovate
44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 42.66.0 to 42.68.5
21 releases in betweennotes for 3
Reading releases, release notes and advisories…
Counted from 3 of 21 release notes. Advisories are counted from the advisory database, in full.
Before you upgrade
Tick each one off as you go- breaking42.67.0
Security
1 advisory still affects 42.68.5
- Child processes spawned by Renovate incorrectly have full access to environment variablesmoderate · GHSA-8wc6-vgrq-x6cf
Upgrading to 42.96.3 clears it.
Fixes 1 advisory affecting 42.66.0
- Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`moderate · GHSA-pfq2-hh62-7m96
Release by release
42.68.1 – 42.68.55 releases, no release note
- new
Add
exactversioning
- new
- new
typst: Update datasource to use official registry API
- new
42.66.3 – 42.66.1412 releases, no release note
- fixed
deps: update ghcr.io/renovatebot/base-image docker tag to v12.20.2 (main)
- fixed
42.66.1no release note
5 internal lines (docs, tests, tooling) left out.