Packages

renovate

44.221.4 · 6 Nov 2026AGPL-3.0-only562.9k / weekRepositoryHomepagenpmAtom feed

Upgrading renovate From 8.37.0 to 44.221.4

12,157 releases in betweennotes for 11,204

Reading releases, release notes and advisories…

Other targets from 8.37.0Newest 8.x8.51.6
11.0.0, 10.0.0, 9.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below; the migration guide covers them.
  1. 8.37.0yours
  2. 44 releases
  3. 9.0.0major
  4. 372 releases
  5. 10.0.0major
  6. 262 releases
  7. 11.0.0major
  8. 393 releases
  9. 12.0.0major
  10. 384 releases
  11. 13.0.0major
  12. 145 releases
  13. 13.36.0security
  14. 670 releases
  15. 14.0.0major
  16. 181 releases
  17. 14.42.0security
  18. 9 releases
  19. 14.43.2security
  20. 87 releases
  21. 15.0.0major
  22. 55 releases
  23. 16.0.0major
  24. 69 releases
  25. 17.0.0major
  26. 49 releases
  27. 17.8.2security
  28. 29 releases
  29. 18.0.0major
  30. 159 releases
  31. 19.0.0major
  32. 214 releases
  33. 19.58.4security
  34. 561 releases
  35. 19.214.1security
  36. 116 releases
  37. 20.0.0major
  38. 66 releases
  39. 21.0.0major
  40. 218 releases
  41. 23.0.0major
  42. 54 releases
  43. 23.20.7security
  44. 229 releases
  45. 23.100.4security
  46. 1 release
  47. 24.0.0major
  48. 35 releases
  49. 24.10.3security
  50. 51 releases
  51. 24.27.3security
  52. 85 releases
  53. 24.57.0security
  54. 3 releases
  55. 24.60.0security
  56. 4 releases
  57. 24.60.5security
  58. 52 releases
  59. 24.76.1security
  60. 135 releases
  61. 25.0.0major
  62. 282 releases
  63. 26.0.0major
  64. 61 releases
  65. 27.0.0major
  66. 74 releases
  67. 28.0.0major
  68. 80 releases
  69. 29.0.0major
  70. 106 releases
  71. 30.0.0major
  72. 10 releases
  73. 31.0.0major
  74. 201 releases
  75. 31.89.1security
  76. 30 releases
  77. 32.0.0major
  78. 70 releases
  79. 32.20.0security
  80. 38 releases
  81. 32.32.7security
  82. 125 releases
  83. 32.82.1security
  84. 393 releases
  85. 33.0.0major
  86. 8 releases
  87. 34.0.0major
  88. 33 releases
  89. 34.14.0security
  90. 3 releases
  91. 34.17.0security
  92. 137 releases
  93. 34.72.3security
  94. 145 releases
  95. 34.129.0security
  96. 14 releases
  97. 34.136.0security
  98. 19 releases
  99. 34.146.2security
  100. 36 releases
  101. 35.0.0major
  102. 73 releases
  103. 35.31.5security
  104. 24 releases
  105. 35.46.1security
  106. 13 releases
  107. 35.53.0security
  108. 59 releases
  109. 35.80.0security
  110. 13 releases
  111. 35.88.0security
  112. 2 releases
  113. 35.90.0security
  114. 162 releases
  115. 36.0.0major
  116. 111 releases
  117. 36.35.0security
  118. 198 releases
  119. 37.0.0major
  120. 373 releases
  121. 37.140.1security
  122. 156 releases
  123. 37.192.4security
  124. 8 releases
  125. 37.194.6security
  126. 5 releases
  127. 37.198.2security
  128. 254 releases
  129. 37.316.1security
  130. 238 releases
  131. 37.401.5security
  132. 18 releases
  133. 37.408.2security
  134. 37.408.3security
  135. 1 release
  136. 37.409.1security
  137. 43 releases
  138. 37.422.1security
  139. 66 releases
  140. 38.0.0security
  141. 158 releases
  142. 38.59.2security
  143. 62 releases
  144. 38.85.2security
  145. 33 releases
  146. 38.95.3security
  147. 2 releases
  148. 38.96.1security
  149. 125 releases
  150. 39.0.0major
  151. 217 releases
  152. 39.87.0security
  153. 322 releases
  154. 39.215.1security
  155. 142 releases
  156. 40.0.0major
  157. 255 releases
  158. 41.0.0major
  159. 322 releases
  160. 41.107.0security
  161. 247 releases
  162. 42.0.0major
  163. 119 releases
  164. 42.34.1security
  165. 244 releases
  166. 43.0.0security
  167. 58 releases
  168. 43.11.1security
  169. 68 releases
  170. 43.34.0security
  171. 11 releases
  172. 43.40.0security
  173. 20 releases
  174. 43.46.7security
  175. 190 releases
  176. 43.109.4security
  177. 43.109.5security
  178. 3 releases
  179. 43.110.3security
  180. 6 releases
  181. 43.110.10security
  182. 25 releases
  183. 43.120.0security
  184. 1 release
  185. 43.120.2security
  186. 20 releases
  187. 43.128.0security
  188. 12 releases
  189. 43.134.1security
  190. 66 releases
  191. 43.209.3security
  192. 250 releases
  193. 44.0.0major
  194. 73 releases
  195. 44.22.0security
  196. 47 releases
  197. 44.38.0security
  198. 211 releases
  199. 44.107.1security
  200. 90 releases
  201. 44.134.3security
  202. 110 releases
  203. 44.171.8security
  204. 62 releases
  205. 44.188.3security
  206. 1 release
  207. 44.189.0security
  208. 7 releases
  209. 44.193.0security
  210. 3 releases
  211. 44.195.1security
  212. 12 releases
  213. 44.200.1security
  214. 8 releases
  215. 44.205.1security
  216. 7 releases
  217. 44.209.0security
  218. 24 releases
  219. 44.221.4target
253+
changes to make
0
advisories fixed
4077+
new
6068+
fixes

Counted from 11204 of 12157 release notes. Advisories are counted from the advisory database, in full.

Start here

Before you upgrade

Tick each one off as you go
  • breaking44.115.3
  • breaking44.44.0
  • breaking44.39.2
  • breaking43.278.4
  • breaking43.213.1
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0
  • breaking43.0.0

Security

  • vulnerabilities: store the osv-offline database in cacheDir

    44.209.0

  • vulnerabilities: dispose the OSV databases when finishing

    44.205.1

  • vulnerability: keep the dependency's versioning when building OSV rules (#46868) (9eaae58), closes #43308

    44.200.1

  • vulnerabilities: use default import for ae-cvss-calculator

    44.195.1

  • types: add a type for Vulnerability Alerts' sources (#47504) (6bdc798), closes #44153 #45486 #46378

    44.193.0

  • vulnerabilities: allow performing lockfile only transitive security updates (#46391) (4718945), closes #47478

    44.189.0

  • vulnerabilities: document that lockfile-only deps don't get vulnerability updates (#47478) (24e8b99), closes #46377

    44.188.3

  • vulnerabilities: apply vulnerabilityAlerts limits to packageRule alerts

    44.171.8

  • vulnerabilities: raise fixes for deps their manager disables by default

    44.134.3

  • workers/repository/extract: pass vulnerability alert state to managers

    44.107.1

Release by release

  1. 44.221.4

    6 Nov 20261 fix
    • fixed

      deps: update renovate-base-image to v13.160.9 (main)

  2. 44.221.3

    6 Nov 20261 fix
    • fixed

      deps: update renovate-base-image to v13.160.8 (main)

  3. 44.221.2

    6 Nov 20261 fix
    • fixed

      deps: update renovate-base-image to v13.160.7 (main)

  4. 44.221.1

    5 Nov 20261 fix
    • fixed

      deps: update renovate-base-image to v13.160.6 (main)

  5. 44.221.0

    5 Nov 20262 new · 1 fix
    • new

      manager/pep621: surface uv.lock transitive deps for security updates (#47482) (11a4409), closes #47505

    • new

      manager: add julia manager

    • fixed

      workers: keep group branches unchanged after failed lookups

  6. 44.220.0

    5 Nov 20261 new · 3 fixes
    • new

      config: add useBaseBranchConfig=merge-if-present when missing config on base branches

    • fixed

      dashboard: name the dependency and file in repository problems

    • fixed

      datasource/maven: fail only the dependency on temporary Maven Central errors

    • fixed

      deps: update renovate-base-image to v13.160.5 (main)

  7. 44.219.0

    5 Nov 20261 new
    • new

      Support Node.js 26

  8. 44.218.0

    5 Nov 20262 new · 2 fixes
    • new

      manager/mise: use tool versions as constraints for other managers

    • new

      manager/rust-toolchain: share the pinned Rust version with cargo

    • fixed

      pr: link to "how to add a GitHub.com token for changelogs"

    • fixed

      workers/repository: report parse errors in base branch config file

262 other lines we could not sort, mostly version bumps

  • Test the secondary Node version on Linux

    44.219.0

  • setup-docker: free disk space when less than 40 GB are available

    44.214.0

  • actions/setup-docker: remove useless use of cat

    44.189.0

  • actions/setup-node: ignore SC2016 findings

    44.189.0

  • static-data: start on a new branch

    44.183.0

  • update-data: create PRs with the commit's title and body

    44.183.0

  • Fail tests that read the repository config.js

    44.167.7

  • Label pr size for forks via workflow_run

    44.128.2

  • Use github.token for the workflow token everywhere

    44.125.0

  • undesirable-code: print added lines on failure

    44.112.2

12667 internal lines (docs, tests, tooling) left out.