@stackflag.bsky.socialCVE-2026-110867 - renovate
Self‑hosted Renovate instances (including the community and enterprise editions) can be tricked into using a shared preset that modifies restricted environment settings such as PATH…
Too many irrelevant or confusing CVEs? Use stackflag.com
@michael.mstdn.thms.uk.ap.brid.gyI do have to say that the combination of #Renovate, #Docker, a good test suite, and some AI is amazing for a sole maintainer of a minor project:
I get automated PRs for all dependencies, and if tests fail I can ask Claude to help me figure out the cause and suggest solutions.
This means that […]
@fgraf.hachyderm.io.ap.brid.gy
@frankel.wsocial.euWhy I recommend #Renovate over any other dependency update tools
@frankel.chWhy I recommend #Renovate over any other dependency update tools
@fgraf.hachyderm.io.ap.brid.gyhttps://github.com/kunde21/forgejo-mcp enabled for #mistralVibe and my local #forgejo ... now curious to try if this works ... but not today
but the next #renovate PR update will appear soon.
@hugovalters.bsky.socialA Sunday Kubernetes rebuild taught me Renovate's group:all will bite you. Real configs and security-first strategies for automated dependency https://www.valtersit.com/guides/automation/renovate-bot-configuration-automated-dependency-updates-without-the-pain/ #renovate #devsecops #automation
@fgraf.hachyderm.io.ap.brid.gyAfter having #renovate set up, I now allow one application after the other to auto-update certain changes ...
One step after the other. I don't want to wake up and some service "arbitrarily" doesnt work any more until I remember that it might have been an auto-update.
@fgraf.hachyderm.io.ap.brid.gyjust great finally have #renovate up and running to inform about updates once a week on my homeserver on which I do all my #selfhosting
Next step: allow updates of minor patches automatically. reducing operations wherever possible
@hugovalters.bsky.socialRenovate Bot Configuration: Automated Dependency Updates Without the Pain — hands-on guide for sysadmins. #renovate #dependency-management #devsecops
@stackflag.bsky.socialCVE-2026-88887 - renovate
The Renovate tool that updates software packages can unintentionally give the login details it uses for a container repository to a malicious site. This happens when the tool…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-88882 - renovate
Versions of Renovate before the latest update can follow pagination links from a NuGet package source without checking if the link points to the same server. If a malicious or…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-88881 - renovate
Renovate, the tool that updates software components, can mistakenly forward the login information it uses for GitHub to a different web address if a malicious GitHub server…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-88880 - renovate
Renovate, a tool that updates software, can be fooled by a compromised GitLab server into sending its login information to an attacker. This happens because Renovate trusts a…
Too many irrelevant or confusing CVEs? Use stackflag.com
@bdiary.bsky.socialGaming room renovation progress. Trying to renovate my brother old room into a nicer looking gaming room with my limited budget lol. Sofa still pending for now.
╮(. ❛ ᴗ ❛.)╭ 💭
Renovation in progress. Planning to make a cute gaming room.. For me!
@ivichoc.bsky.social#SimonClark 👍 =D
-> #Reduce -> #Reuse -> #Repair -> #Repurpose -> #Renovate -> ecyc e!
#SimonClark 👍 =D
-> #Reduce -> #Reuse -> #Repair -> #Repurpose -> #Renovate -> ecyc e!