renovate
44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 42.66.4 to 42.68.5
17 releases in betweennotes for 2
Reading releases, release notes and advisories…
Counted from 2 of 17 release notes. Advisories are counted from the advisory database, in full.
Before you upgrade
Tick each one off as you go- breaking42.67.0
Security
1 advisory still affects 42.68.5
- Child processes spawned by Renovate incorrectly have full access to environment variablesmoderate · GHSA-8wc6-vgrq-x6cf
Upgrading to 42.96.3 clears it.
Fixes 1 advisory affecting 42.66.4
- Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`moderate · GHSA-pfq2-hh62-7m96
Release by release
42.68.1 – 42.68.55 releases, no release note
- new
Add
exactversioning
- new
- new
typst: Update datasource to use official registry API
- new
42.66.5 – 42.66.1410 releases, no release note
3 internal lines (docs, tests, tooling) left out.