Skip to content

build(deps): Bump step-security/harden-runner from 2.20.1 to 2.21.0 - #374

Merged
ihub-bot[bot] merged 1 commit into
mainfrom
dependabot/github_actions/step-security/harden-runner-2.21.0
Aug 17, 2026
Merged

build(deps): Bump step-security/harden-runner from 2.20.1 to 2.21.0#374
ihub-bot[bot] merged 1 commit into
mainfrom
dependabot/github_actions/step-security/harden-runner-2.21.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps step-security/harden-runner from 2.20.1 to 2.21.0.

Commits
  • 05e3151 Merge pull request #684 from step-security/rc-42
  • 0f37afa fix: ignore denied-endpoints on non-enterprise tier
  • 93b58ee fix: resolve cache host read-first and never downgrade egress policy
  • e7399dd fix: align deny-list mode detection with agent and log when both endpoint inp...
  • c16689f test: add denied_endpoints to Configuration fixtures and cover deny-list merge
  • 40b99cf Merge pull request #682 from rohan-stepsecurity/rp/feat/codebuild-self-v2
  • fedec02 Merge branch 'rc-42' into rp/feat/codebuild-self-v2
  • 5361fb1 feat: add build artifacts
  • 286474f feat: Support Bravo agent install on CodeBuild runners
  • 051ec05 Merge pull request #683 from h0x0er/jatin/deny-list
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor Author

Assignees

The following users could not be added as assignees: ihub-bot. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added dependencies A dependency upgrade github_actions Pull requests that update GitHub Actions code minor Minor version labels Aug 17, 2026
@ihub-bot ihub-bot Bot added this to the 0.2.3 milestone Aug 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/step-security/harden-runner-2.21.0 branch from 4944048 to a62bb08 Compare August 17, 2026 14:16
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.20.1 to 2.21.0.
- [Commits](step-security/harden-runner@b09bb98...05e3151)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/step-security/harden-runner-2.21.0 branch from a62bb08 to bb8603d Compare August 17, 2026 14:20

@ihub-bot ihub-bot Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

IHub Bot: PR is approved by IHub Bot

@ihub-bot
ihub-bot Bot merged commit ffcedf1 into main Aug 17, 2026
4 of 5 checks passed
@ihub-bot
ihub-bot Bot deleted the dependabot/github_actions/step-security/harden-runner-2.21.0 branch August 17, 2026 14:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies A dependency upgrade github_actions Pull requests that update GitHub Actions code minor Minor version

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants