# renovate を npm でインストール

renovate のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install npm:renovate
```

追加のインストールコマンド:

### ポータブルおよび言語マネージャ

- npm (100%):

```sh
npm install -g renovate
```

  証拠: local npm package metadata

## パッケージ情報

- **パッケージキー:** npm:renovate
- **パッケージマネージャ:** npm
- **パッケージマネージャページ:** <https://www.npmjs.com/package/renovate>
- **バージョン:** 43.227.1
- **ソース概要:** Automated dependency updates. Flexible so you don't need to be.
- **ホームページ:** <https://renovatebot.com>
- **リポジトリ:** <https://github.com/renovatebot/renovate>
- **上流ドキュメント:** <https://renovatebot.com>
- **ライセンス:** AGPL-3.0-only
- **ソースアーカイブ:** <https://registry.npmjs.org/renovate/-/renovate-43.227.1.tgz>
- **課題トラッカー:** <https://github.com/renovatebot/renovate/issues>
- **公開日:** 2026-06-16T23:55:55.089Z
- **最終更新:** 2026-06-21T06:13:21.709Z
- **生成日時:** 2026-07-08T18:08:21+00:00

## 実行可能ファイル

- renovate (cli)
- renovate-config-validator (cli)

## 依存関係

- @aws-sdk/client-codecommit
- @aws-sdk/client-ec2
- @aws-sdk/client-ecr
- @aws-sdk/client-eks
- @aws-sdk/client-rds
- @aws-sdk/client-s3
- @aws-sdk/credential-providers
- @baszalmstra/rattler
- @breejs/later
- @cdktf/hcl2json
- @opentelemetry/api
- @opentelemetry/context-async-hooks
- @opentelemetry/exporter-trace-otlp-http
- @opentelemetry/instrumentation
- @opentelemetry/instrumentation-bunyan
- @opentelemetry/instrumentation-http
- @opentelemetry/instrumentation-redis
- @opentelemetry/resource-detector-aws
- @opentelemetry/resource-detector-azure
- @opentelemetry/resource-detector-gcp
- @opentelemetry/resource-detector-github
- @opentelemetry/resources
- @opentelemetry/sdk-trace-base
- @opentelemetry/sdk-trace-node
- @opentelemetry/semantic-conventions
- @pnpm/parse-overrides
- @qnighy/marshal
- @redis/client
- @renovatebot/detect-tools
- @renovatebot/good-enough-parser
- @renovatebot/osv-offline
- @renovatebot/pep440
- @renovatebot/pgp
- @renovatebot/ruby-semver
- @sindresorhus/is
- @yarnpkg/core
- @yarnpkg/parsers
- adm-zip
- ae-cvss-calculator
- agentkeepalive
- async-mutex
- aws4
- azure-devops-node-api
- bunyan
- cacache
- changelog-filename-regex
- clean-git-ref
- commander
- croner
- cronstrue
- deepmerge
- dequal
- detect-indent
- diff
- editorconfig
- email-addresses
- emoji-regex
- emojibase
- emojibase-regex
- execa
- find-packages
- find-up
- fs-extra
- git-url-parse
- github-url-from-git
- glob
- global-agent
- google-auth-library
- got
- graph-data-structure
- handlebars
- ignore
- ini
- json-dup-key-validator
- json-stringify-pretty-compact
- json5
- jsonata
- jsonc-weaver
- klona
- lru-cache
- luxon
- markdown-it
- markdown-table
- minimatch
- moo
- ms
- neotraverse
- node-html-parser
- p-all
- p-map
- p-queue
- p-throttle
- parse-link-header
- prettier
- protobufjs
- punycode
- remark
- remark-gfm
- remark-github
- safe-stable-stringify
- sax
- semver
- semver-stable
- semver-utils
- shlex
- simple-git
- slugify
- source-map-support
- strip-json-comments
- toml-eslint-parser
- tslib
- upath
- url-join
- validate-npm-package-name
- xmldoc
- yaml
- zod

## ビルド依存関係

- @biomejs/biome
- @commander-js/extra-typings
- @containerbase/istanbul-reports-html
- @containerbase/semantic-release-pnpm
- @hyrious/marshal
- @ls-lint/ls-lint
- @openpgp/web-stream-tools
- @semantic-release/exec
- @smithy/util-stream
- @types/adm-zip
- @types/aws4
- @types/breejs__later
- @types/bunyan
- @types/cacache
- @types/callsite
- @types/changelog-filename-regex
- @types/clean-git-ref
- @types/common-tags
- @types/eslint
- @types/estree
- @types/fs-extra
- @types/github-url-from-git
- @types/global-agent
- @types/ini
- @types/js-yaml
- @types/json-dup-key-validator
- @types/linkify-markdown
- @types/lodash
- @types/luxon
- @types/markdown-it
- @types/marshal
- @types/mdast
- @types/moo
- @types/ms
- @types/node
- @types/parse-link-header
- @types/punycode
- @types/sax
- @types/semver
- @types/semver-stable
- @types/semver-utils
- @types/tmp
- @types/validate-npm-package-name
- @vitest/coverage-v8
- ajv
- ajv-formats
- aws-sdk-client-mock
- callsite
- common-tags
- conventional-changelog-conventionalcommits
- emojibase-data
- esbuild
- expect-more-jest
- graphql
- husky
- jest-extended
- lint-staged
- markdownlint-cli2
- markdownlint-cli2-formatter-template
- memfs
- nock
- npm-run-all2
- nyc
- oxlint
- oxlint-tsgolint
- rimraf
- semantic-release
- tar
- tmp-promise
- tsdown
- type-fest
- typescript
- unified
- vite
- vitest
- vitest-mock-extended

## インストール挙動

- post-install フック: 未定義
- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-07-08
- マネージャ版: 43.227.1
- マネージャ更新日: 2026-06-21
- ローカルデータ: OK
- 上流リポジトリ: https://github.com/renovatebot/renovate
- 情報: No cached GitHub release or tag data was available.

## セキュリティノート

renovate に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、Nucleus パッケージメタデータはここに公開されています。


## ソースデータベース詳細

- **Source Database:** npm registry
- **Dist Tags:** Latest: 43.227.1, Maint/42.x: 42.99.0, Next: 44.0.0-next.3, Version24: 24.119.23, Version25: 25.77.0, Version35: 35.159.7, Version39: 39.264.1, Version39.238: 39.238.4
- **Version Count:** 6,270
- **Maintainers:** jamietanna, viceice
- **Publisher:** GitHub Actions
- **Engines:** Node: ^24.11.0, Pnpm: ^11.0.0
- **Optional Dependencies:** openpgp, re2
- **Integrity:** sha512-cF00N1X33lvSQzOccZqryDKeX0xobQRvJJDajpWNC/CfFq62ODJUo1ZywxU7hWJ51A/toAuinw3yKmQvVT5AWw==
- **Shasum:** f436fb996c48dea74b7ef756e8b16d9d2d6ba47b
- **Unpacked Size:** 11,878,901
- **File Count:** 0
- **Created At:** 2017-01-11T10:28:04.415Z
- **Latest Published At:** 2026-06-16T23:55:55.089Z
- **Modified At:** 2026-06-16T23:55:55.380Z

## 他のパッケージマネージャ記録

- Nix - renovate: normalized package name match | nixpkgs package indexes: pkgs/by-name/re/renovate/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1


## 関連リンク

- [Web development packages](https://www.automicvault.com/ja/pkg/web-dev-tools/) - Matched curated package taxonomy and local package facts.
- [renovate](https://www.automicvault.com/ja/pkg/brew/renovate/) - Same normalized package name appears in another local ecosystem. Shared terms: automated, be, cli, config, dependency.
- [momentic](https://www.automicvault.com/ja/pkg/npm/momentic/) - Local package facts share a topical domain. Shared terms: api, async, base, cli, context.
- [promptfoo](https://www.automicvault.com/ja/pkg/npm/promptfoo/) - Both packages touch the same language runtime or ecosystem. Shared terms: api, async, base, cli, client.
- [renovate](https://www.automicvault.com/ja/pkg/brew/renovate/) - Same normalized package name exists in another local package ecosystem.

## ソース

- Nucleus package database
- package-page enrichment
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph