chore(deps): update step-security/harden-runner action to v2.8.1 #69
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
prisis
approved these changes
Jun 14, 2024
prisis
pushed a commit
that referenced
this pull request
Aug 7, 2024
…-08-07) ### Bug Fixes * update dev deps, removed dependencyDashboardApproval ([ac8079c](ac8079c)) ### Miscellaneous Chores * **deps:** lock file maintenance ([#62](#62)) ([ba725f2](ba725f2)) * **deps:** lock file maintenance ([#72](#72)) ([048ea2c](048ea2c)) * **deps:** lock file maintenance ([#82](#82)) ([8d47cd8](8d47cd8)) * **deps:** update actions/checkout action to v4.1.7 ([#70](#70)) ([5bf4790](5bf4790)) * **deps:** update actions/dependency-review-action action to v4.3.4 ([#73](#73)) ([8d9ad25](8d9ad25)) * **deps:** update actions/setup-node action to v4.0.3 ([#74](#74)) ([f04ed5d](f04ed5d)) * **deps:** update actions/upload-artifact action to v4.3.4 ([#75](#75)) ([2f521d3](2f521d3)) * **deps:** update amannn/action-semantic-pull-request action to v5.5.3 ([#76](#76)) ([b91c130](b91c130)) * **deps:** update dependency lint-staged to ^15.2.7 ([#68](#68)) ([c4883a0](c4883a0)) * **deps:** update dependency prettier to ^3.3.3 ([#77](#77)) ([ea2119c](ea2119c)) * **deps:** update dependency taze to ^0.13.9 ([#78](#78)) ([fa34460](fa34460)) * **deps:** update github/codeql-action action to v3.25.10 ([#71](#71)) ([13723ea](13723ea)) * **deps:** update github/codeql-action action to v3.25.13 ([#79](#79)) ([4ab41c5](4ab41c5)) * **deps:** update minor updates ([#80](#80)) ([05c274d](05c274d)) * **deps:** update step-security/harden-runner action to v2.8.1 ([#69](#69)) ([fb493fd](fb493fd)) * moved conventional-changelog-conventionalcommits into dev deps ([883cf86](883cf86)) ### Continuous Integration * removed Verify the integrity..., now its inside the anolilab/workflows/step/setup ([6c3361e](6c3361e))
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v2.7.1->v2.8.1Release Notes
step-security/harden-runner (step-security/harden-runner)
v2.8.1Compare Source
What's Changed
The previous implementation incorrectly identified large GitHub-hosted runners as self-hosted runners. As a result, harden-runner was not executing on these large GitHub-hosted runners.
Full Changelog: step-security/harden-runner@v2...v2.8.1
v2.8.0Compare Source
What's Changed
Release v2.8.0 by @h0x0er and @varunsh-coder in https://github.com/step-security/harden-runner/pull/416
This release includes:
These enhancements are based on insights from the XZ Utils incident, aimed at improving observability and detections during the build process.
Full Changelog: step-security/harden-runner@v2...v2.8.0
Configuration
📅 Schedule: Branch creation - "after 10:00 before 19:00 every weekday except after 13:00 before 14:00" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.