CLEANSTART-2026-ZK21652 Security fixes in renovate 43.123.6-r0

Package renovate version 43.123.6-r0 fixes 14 vulnerabilities: ghsa-3v7f-55p6-f55p, ghsa-c2c7-rcm5-vvqj, CVE-2026-33671, CVE-2026-33672, ghsa-r5fr-rjxr-66jc...

CLEANSTART-2026-OA08474 Security fixes in renovate 43.123.8-r2

Package renovate version 43.123.8-r2 fixes 4 vulnerabilities: CVE-2026-6951, ghsa-hffm-xvc3-vprc, CVE-2026-42338, ghsa-v2v4-37r5-5v8g...

Renovate affected by remote code execution was possible using the bazel-module or bazelisk managers, when using lockFileMaintenance

When using lockFileMaintenance using the bazel-module or bazelisk managers between Renovate 43.65.0 2026-03-12 and 43.102.11 2026-04-02, there was the opportunity for remote code execution from a malicious dependency, if the Bazel module executes code that relies on a dependency. As this is an...