Packages

renovate

44.190.0 · 27 Oct 2026AGPL-3.0-only382.7k / weekRepositoryHomepagenpmAtom feed

Upgrading renovate from 43.89.5 to 43.288.0

463 releases in betweennotes for 455

Reading releases, release notes and advisories…

Other targets from 43.89.5Clears its advisory43.102.11Latest44.190.0
3+
changes to make
1
advisory fixed
160+
new
290+
fixes

Counted from 455 of 463 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking43.278.4
  • breaking43.213.1
  • deprecated43.230.0

Security

Fixes 1 advisory affecting 43.89.5

  • workers/repository: correctly render schedule for vulnerability alerts

    43.209.3

  • vulnerability: use datasource default versioning instead of hardcoded map

    43.134.1

  • vulnerability: improve GitHub advisory PR body notes with summary, GHSA ID and references

    43.128.0

  • vulnerability: remove matchFileNames restriction from GitHub vulnerability alerts

    43.120.2

  • vulnerability: add severity and CVSS details to GitHub Dependabot alerts

    43.120.0

  • github/vulnerability: use Zod-inferred types as single source of truth

    43.110.10

  • vulnerability: extract ecosystem<->datasource translation

    43.110.3

  • vulnerability: check in case-insensitive manner

    43.109.5

  • vulnerability: extract shared functionality into util functions

    43.109.4

Release by release

  1. 43.288.0

    29 Jul 20262 new
    • new

      exec: support custom stream output writers

    • new

      manager/pixi: gate pixi.lock updates behind allowedUnsafeExecutions

  2. 43.287.0

    29 Jul 20261 new
    • new

      copier: convert ssh _src_path to https URL for datasource lookup (#44552) (932b7b2), closes #44528

  3. 43.286.1

    29 Jul 20261 fix
    • fixed

      deps: update ghcr.io/renovatebot/base-image docker tag to v13.78.1 (main)

  4. 43.286.0

    28 Jul 20261 new
    • new

      deps: update ghcr.io/renovatebot/base-image docker tag to v13.78.0 (main)

  5. 43.285.7

    28 Jul 20261 fix
    • fixed

      packagist: Throw on transient errors

  6. 43.285.6

    28 Jul 20261 fix
    • fixed

      deps: update ghcr.io/renovatebot/base-image docker tag to v13.77.9 (main)

  7. 43.285.5

    28 Jul 20261 fix
    • fixed

      datasource/go: resolve sourceUrl from GOPROXY Origin

  8. 43.285.3 – 43.285.42 releases, nothing new or fixed in the notes

18 other lines we could not sort, mostly version bumps

  • Periodically check for "too many releases" (#44734) (c7be6f1), closes #42965

    43.272.5

  • agent-hooks: run checks only on file changes

    43.265.0

  • Extend old vm workaround to build-docker job

    43.265.0

  • Clean some disk space

    43.249.6

  • Reorder release steps

    43.249.6

  • Require build-docs as part of test-success

    43.238.0

  • Use mnt for docker for older gh runners

    43.232.1

  • close-answered: use .cjs for script

    43.231.3

  • Exercise arm64 in build-docker job

    43.222.1

  • Centralize docker setup

    43.221.0

739 internal lines (docs, tests, tooling) left out.