Skip to content

chore(deps): update dependency step-security/harden-runner to v2.21.1 - #1516

Open
fro-bot[bot] wants to merge 1 commit into
mainfrom
renovate/step-security-harden-runner-2.x
Open

chore(deps): update dependency step-security/harden-runner to v2.21.1#1516
fro-bot[bot] wants to merge 1 commit into
mainfrom
renovate/step-security-harden-runner-2.x

Conversation

@fro-bot

@fro-bot fro-bot Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change OpenSSF
step-security/harden-runner patch v2.21.0v2.21.1 OpenSSF Scorecard

Release Notes

step-security/harden-runner (step-security/harden-runner)

v2.21.1

Compare Source

What's Changed
  • Improved performance of the disable-sudo feature.
  • Fixed an issue in the Community tier where new endpoints required by the GitHub Actions runner were not being implicitly allowed in block mode.
  • Fixed the Harden-Runner post step failing on Linux distributions that do not have a merged /usr filesystem layout (for example Debian 11), where /usr/bin/echo does not exist. This mainly affected self-hosted runners.
  • Documentation updates: clarified which features are in the Community (free) vs Enterprise tier.

Full Changelog: step-security/harden-runner@v2.21.0...v2.21.1


Configuration

📅 Schedule: (in timezone America/Phoenix)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@fro-bot fro-bot Bot added automerge dependencies Dependency updates or security alerts patch labels Aug 31, 2026
@fro-bot
fro-bot Bot requested a review from fro-bot as a code owner August 31, 2026 18:16
@fro-bot fro-bot Bot added the renovate Universal dependency update tool <https://mend.io/renovate> label Aug 31, 2026
@fro-bot
fro-bot Bot requested a review from marcusrbrown as a code owner August 31, 2026 18:16
@fro-bot
fro-bot Bot enabled auto-merge (squash) August 31, 2026 18:16
@fro-bot
fro-bot Bot force-pushed the renovate/step-security-harden-runner-2.x branch from 57d6651 to 06a920a Compare August 31, 2026 19:58
@fro-bot fro-bot Bot mentioned this pull request Aug 31, 2026
72 tasks
@fro-bot
fro-bot Bot force-pushed the renovate/step-security-harden-runner-2.x branch from 06a920a to ee68f6f Compare September 2, 2026 06:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automerge dependencies Dependency updates or security alerts patch renovate Universal dependency update tool <https://mend.io/renovate>

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants