renovate
44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed
Upgrading renovate from 42.67.0 to 42.68.5
6 releases in betweennotes for 1
Reading releases, release notes and advisories…
- ?
- changes to make
- 1
- advisory fixed
- 1+
- new
- ?
- fixes
Counted from 1 of 6 release notes. Advisories are counted from the advisory database, in full.
Security
1 advisory still affects 42.68.5
- Child processes spawned by Renovate incorrectly have full access to environment variablesmoderate · GHSA-8wc6-vgrq-x6cf
Upgrading to 42.96.3 clears it.
Fixes 1 advisory affecting 42.67.0
- Renovate vulnerable to arbitrary command injection via Gradle Wrapper and malicious `distributionUrl`moderate · GHSA-pfq2-hh62-7m96
Release by release
42.68.1 – 42.68.55 releases, no release note
- new
Add
exactversioning
- new
1 internal line (docs, tests, tooling) left out.