Skip to content

ci(deps): update step-security/harden-runner action to v2.21.1 - #1518

Open
fro-bot[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions
Open

ci(deps): update step-security/harden-runner action to v2.21.1#1518
fro-bot[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions

Conversation

@fro-bot

@fro-bot fro-bot Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change OpenSSF
step-security/harden-runner action patch v2.21.0v2.21.1 OpenSSF Scorecard

Release Notes

step-security/harden-runner (step-security/harden-runner)

v2.21.1

Compare Source

What's Changed
  • Improved performance of the disable-sudo feature.
  • Fixed an issue in the Community tier where new endpoints required by the GitHub Actions runner were not being implicitly allowed in block mode.
  • Fixed the Harden-Runner post step failing on Linux distributions that do not have a merged /usr filesystem layout (for example Debian 11), where /usr/bin/echo does not exist. This mainly affected self-hosted runners.
  • Documentation updates: clarified which features are in the Community (free) vs Enterprise tier.

Full Changelog: step-security/harden-runner@v2.21.0...v2.21.1


Configuration

📅 Schedule: (in timezone America/Phoenix)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@fro-bot
fro-bot Bot requested review from fro-bot and marcusrbrown as code owners August 31, 2026 19:59
@fro-bot fro-bot Bot added automerge dependencies Dependency updates or security alerts patch renovate Universal dependency update tool <https://mend.io/renovate> action labels Aug 31, 2026
@fro-bot
fro-bot Bot enabled auto-merge (squash) August 31, 2026 19:59
@fro-bot fro-bot Bot mentioned this pull request Aug 31, 2026
72 tasks
@fro-bot fro-bot Bot removed action labels Sep 1, 2026
@fro-bot
fro-bot Bot force-pushed the renovate/github-actions branch from c0c9dac to 7965bf6 Compare September 2, 2026 06:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automerge dependencies Dependency updates or security alerts patch renovate Universal dependency update tool <https://mend.io/renovate>

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants