Starstruk Logo MarkStarstruk

44.171.2

renovatebot/renovate44.171.2Oct 20, 2026by github-actions[bot]

Upgrading?

What changed from 44.171.1 → 44.171.2?What's new in 44.171.3 after 44.171.2?

AI Summary

This release prioritizes security and privacy by improving how credentials are handled in caching mechanisms and URLs.

Key Highlights

  • Fixed cache keys to hash URL credentials correctly
  • Resolved npmrc caching logic
  • Restricted HTTP cache headers to an allow-list
  • Prevented sensitive URL credentials from entering repository cache

Full Release Notes

## [44.171.2](https://github.com/renovatebot/renovate/compare/44.171.1...44.171.2) (2026-10-20)

### Bug Fixes

* **cache:** hash URL credentials in cache keys ([320f770](https://github.com/renovatebot/renovate/commit/320f770c36013d99ff64303a9026290dedba9a5b))
* **extract:** resolve npmrc again instead of caching it with package files ([061e9ba](https://github.com/renovatebot/renovate/commit/061e9bad5c30292c32f2cf6114c7806fbf7973c7))
* **http:** persist only an allow-list of response headers in the http caches ([9e46e31](https://github.com/renovatebot/renovate/commit/9e46e31f32bb12ec9b1e5906a887c6a486081e9c))
* **workers:** keep URL credentials of dependencies out of the repository cache and generated texts ([71d4f95](https://github.com/renovatebot/renovate/commit/71d4f95ecc584275b79262cab45417cd66efa8f2))

Related Repositories

openclaw/openclaw★ 392,696

The AI that really does things. Any OS. Any Platform. The lobster way. 🦞

nilbuild/developer-roadmap★ 370,068

Interactive roadmaps, guides and other educational content to help developers grow in their careers.

morluto/rea★ 357,772

Reverse engineer anything with agents, from app behavior down to native binaries.

anomalyco/opencode★ 219,680

The open source coding agent.

n8n-io/n8n★ 208,252

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.