From 04a8902e98ee1de658241c4715cf1ea19c390a87 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 7 Sep 2026 04:04:38 +0000 Subject: [PATCH] deps: bump step-security/harden-runner from 2.21.0 to 2.21.1 Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.21.0 to 2.21.1. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/05e31511f85b41b11d1cf0ef85d0992719546e2c...e14015d583714f6e62063499dc959a02595150a1) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.21.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/actionlint.yml | 2 +- .github/workflows/actions-dependencies.yml | 2 +- .github/workflows/actions-example-checker.yml | 2 +- .github/workflows/approve-dependabot-pr.yml | 8 ++++---- .github/workflows/dependency-review.yml | 2 +- .github/workflows/issue-pr-tag.yml | 2 +- .github/workflows/openssf-scorecard-monitor.yml | 2 +- .github/workflows/rw-ossf-scorecard.yml | 2 +- .github/workflows/secure-inputs.yml | 2 +- .github/workflows/time-for-new-release.yml | 2 +- .github/workflows/update-scope.yml | 2 +- .github/workflows/validate-npm-token.yml | 2 +- 12 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml index cdd5fb5..fdf90cd 100644 --- a/.github/workflows/actionlint.yml +++ b/.github/workflows/actionlint.yml @@ -19,7 +19,7 @@ jobs: steps: # checkout the source code to analyze - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit diff --git a/.github/workflows/actions-dependencies.yml b/.github/workflows/actions-dependencies.yml index 385f604..61afab1 100644 --- a/.github/workflows/actions-dependencies.yml +++ b/.github/workflows/actions-dependencies.yml @@ -26,7 +26,7 @@ jobs: id-token: write # Required for dependency submission steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit diff --git a/.github/workflows/actions-example-checker.yml b/.github/workflows/actions-example-checker.yml index 0d0fa6a..dda626d 100644 --- a/.github/workflows/actions-example-checker.yml +++ b/.github/workflows/actions-example-checker.yml @@ -40,7 +40,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit diff --git a/.github/workflows/approve-dependabot-pr.yml b/.github/workflows/approve-dependabot-pr.yml index 05e0ea2..8a17c85 100644 --- a/.github/workflows/approve-dependabot-pr.yml +++ b/.github/workflows/approve-dependabot-pr.yml @@ -23,7 +23,7 @@ jobs: token: ${{ steps.get-token.outputs.token }} steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit @@ -91,7 +91,7 @@ jobs: actions: write #the updates for this ecosystem will push to the .github/workflows folder steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit @@ -124,7 +124,7 @@ jobs: actions: read #the updates for this ecosystem will NOT push to the .github/workflows folder steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit @@ -147,7 +147,7 @@ jobs: if: always() # this job needs to run because we use it as a required workflow steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 3a900d6..194027b 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -23,7 +23,7 @@ jobs: pull-requests: write steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit diff --git a/.github/workflows/issue-pr-tag.yml b/.github/workflows/issue-pr-tag.yml index e338c92..5f69ffe 100644 --- a/.github/workflows/issue-pr-tag.yml +++ b/.github/workflows/issue-pr-tag.yml @@ -31,7 +31,7 @@ jobs: pull-requests: write steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit diff --git a/.github/workflows/openssf-scorecard-monitor.yml b/.github/workflows/openssf-scorecard-monitor.yml index 6f46f10..98a3f77 100644 --- a/.github/workflows/openssf-scorecard-monitor.yml +++ b/.github/workflows/openssf-scorecard-monitor.yml @@ -20,7 +20,7 @@ jobs: issues: write steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit diff --git a/.github/workflows/rw-ossf-scorecard.yml b/.github/workflows/rw-ossf-scorecard.yml index 07378ad..6ce1a82 100644 --- a/.github/workflows/rw-ossf-scorecard.yml +++ b/.github/workflows/rw-ossf-scorecard.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit diff --git a/.github/workflows/secure-inputs.yml b/.github/workflows/secure-inputs.yml index a7b34af..1c3ec7f 100644 --- a/.github/workflows/secure-inputs.yml +++ b/.github/workflows/secure-inputs.yml @@ -29,7 +29,7 @@ jobs: contents: read steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit diff --git a/.github/workflows/time-for-new-release.yml b/.github/workflows/time-for-new-release.yml index aaedf11..74ad80d 100644 --- a/.github/workflows/time-for-new-release.yml +++ b/.github/workflows/time-for-new-release.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit diff --git a/.github/workflows/update-scope.yml b/.github/workflows/update-scope.yml index b14bc5f..8993da7 100644 --- a/.github/workflows/update-scope.yml +++ b/.github/workflows/update-scope.yml @@ -21,7 +21,7 @@ jobs: pull-requests: write # To create PR steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit diff --git a/.github/workflows/validate-npm-token.yml b/.github/workflows/validate-npm-token.yml index ba3eb94..5d55755 100644 --- a/.github/workflows/validate-npm-token.yml +++ b/.github/workflows/validate-npm-token.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0 + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 with: egress-policy: audit