Skip to content

ci: bump step-security/harden-runner from 2.21.0 to 2.22.0 - #128

Merged
ryuapp merged 1 commit into
mainfrom
dependabot/github_actions/step-security/harden-runner-2.22.0
Oct 19, 2026
Merged

ryuapp merged 1 commit into
mainfrom
dependabot/github_actions/step-security/harden-runner-2.22.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 18, 2026 •

Copy link
Copy Markdown
Contributor

Bumps step-security/harden-runner from 2.21.0 to 2.22.0.

Release notes

Sourced from step-security/harden-runner's releases.

v2.22.0

What's Changed

  • Linux ARM64 support for community tier
  • GHES support for self-hosted VMs (enterprise tier)
  • MacOS and Windows runner deny list support for block policy (enterprise tier).

Full Changelog: step-security/harden-runner@v2.21.1...v2.22.0

v2.21.1

What's Changed

  • Improved performance of the disable-sudo feature.
  • Fixed an issue in the Community tier where new endpoints required by the GitHub Actions runner were not being implicitly allowed in block mode.
  • Fixed the Harden-Runner post step failing on Linux distributions that do not have a merged /usr filesystem layout (for example Debian 11), where /usr/bin/echo does not exist. This mainly affected self-hosted runners.
  • Documentation updates: clarified which features are in the Community (free) vs Enterprise tier.

Full Changelog: step-security/harden-runner@v2.21.0...v2.21.1

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 18, 2026
@codecov

codecov Bot commented Oct 18, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@ryuapp

ryuapp commented Oct 19, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.21.0 to 2.22.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@v2.21.0...v2.22.0)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/step-security/harden-runner-2.22.0 branch from 08e1165 to c24e5ce Compare October 19, 2026 13:26
@ryuapp
ryuapp merged commit 5c4065a into main Oct 19, 2026
9 checks passed
@ryuapp
ryuapp deleted the dependabot/github_actions/step-security/harden-runner-2.22.0 branch October 19, 2026 13:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant