Skip to content

chore(deps): bump the github-actions-dependencies group across 1 directory with 2 updates - #1100

Merged
mbevc1 merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-d3e3df5fa5
Aug 18, 2026
Merged

chore(deps): bump the github-actions-dependencies group across 1 directory with 2 updates#1100
mbevc1 merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-d3e3df5fa5

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubAug 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions-dependencies group with 2 updates in the / directory: step-security/harden-runner and anthropics/claude-code-action.

Updates step-security/harden-runner from 2.20.1 to 2.21.0

Release notes

Sourced from step-security/harden-runner's releases.

v2.21.0

What's Changed

  • Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.
  • Improved Support for AWS CodeBuild GitHub Actions Runners.
  • Bug fixes.

Full Changelog: step-security/harden-runner@v2.20.1...v2.21.0

Commits
  • 05e3151 Merge pull request #684 from step-security/rc-42
  • 0f37afa fix: ignore denied-endpoints on non-enterprise tier
  • 93b58ee fix: resolve cache host read-first and never downgrade egress policy
  • e7399dd fix: align deny-list mode detection with agent and log when both endpoint inp...
  • c16689f test: add denied_endpoints to Configuration fixtures and cover deny-list merge
  • 40b99cf Merge pull request #682 from rohan-stepsecurity/rp/feat/codebuild-self-v2
  • fedec02 Merge branch 'rc-42' into rp/feat/codebuild-self-v2
  • 5361fb1 feat: add build artifacts
  • 286474f feat: Support Bravo agent install on CodeBuild runners
  • 051ec05 Merge pull request #683 from h0x0er/jatin/deny-list
  • Additional commits viewable in compare view

Updates anthropics/claude-code-action from 1.0.191 to 1.0.193

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.193

Full Changelog: anthropics/claude-code-action@v1.0.192...v1.0.193

v1.0.192

What's Changed

New Contributors

Full Changelog: anthropics/claude-code-action@v1.0.191...v1.0.192

Commits
  • 9d7150b chore: bump Claude Code to 2.1.233 and Agent SDK to 0.3.233
  • e63208c chore: bump Claude Code to 2.1.232 and Agent SDK to 0.3.232
  • dc33e8a chore: bump Claude Code to 2.1.231 and Agent SDK to 0.3.231
  • c58ad32 chore: bump Claude Code to 2.1.229 and Agent SDK to 0.3.229
  • dfb8fc7 fix(mcp): detect binary files by content instead of extension allowlist (#1633)
  • a2489ef fix(summary): keep every text block in structured tool results (#1619)
  • 8b87458 fix: paginate GitHub Actions MCP responses (#1629)
  • See full diff in compare view

@dependabotdependabotBot added dependencies Pull requests that update a dependency file github-actions labels Aug 18, 2026
@mbevc1

Copy link
Copy Markdown
Contributor

@dependabot rebase

…ctory with 2 updates
Bumps the github-actions-dependencies group with 2 updates in the / directory: [step-security/harden-runner](https://github.com/step-security/harden-runner) and [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action).
Updates `step-security/harden-runner` from 2.20.1 to 2.21.0
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@b09bb98...05e3151)
Updates `anthropics/claude-code-action` from 1.0.191 to 1.0.193
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@v1.0.191...v1.0.193)
---
updated-dependencies:
- dependency-name: anthropics/claude-code-action
dependency-version: 1.0.193
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-dependencies
- dependency-name: step-security/harden-runner
dependency-version: 2.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot changed the title chore(deps): bump the github-actions-dependencies group with 2 updateschore(deps): bump the github-actions-dependencies group across 1 directory with 2 updatesAug 18, 2026
@dependabot
dependabotBotforce-pushed the dependabot/github_actions/github-actions-dependencies-d3e3df5fa5 branch from cf818d3 to 1e9d5a4CompareAugust 18, 2026 15:29
@mbevc1
mbevc1 enabled auto-merge (squash) August 18, 2026 15:30
@mbevc1
mbevc1 merged commit 3008fe2 into mainAug 18, 2026
29 checks passed
@mbevc1
mbevc1 deleted the dependabot/github_actions/github-actions-dependencies-d3e3df5fa5 branch August 18, 2026 15:37
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filegithub-actions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@mbevc1