Skip to content

Bump step-security/harden-runner from 2.20.1 to 2.21.0 in the ci-dependencies group across 1 directory - #6264

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/ci-dependencies-bbf0ab0fb3
Open

Bump step-security/harden-runner from 2.20.1 to 2.21.0 in the ci-dependencies group across 1 directory#6264
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/ci-dependencies-bbf0ab0fb3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the ci-dependencies group with 1 update in the / directory: step-security/harden-runner.

Updates step-security/harden-runner from 2.20.1 to 2.21.0

Release notes

Sourced from step-security/harden-runner's releases.

v2.21.0

What's Changed

  • Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.
  • Improved Support for AWS CodeBuild GitHub Actions Runners.
  • Bug fixes.

Full Changelog: step-security/harden-runner@v2.20.1...v2.21.0

Commits
  • 05e3151 Merge pull request #684 from step-security/rc-42
  • 0f37afa fix: ignore denied-endpoints on non-enterprise tier
  • 93b58ee fix: resolve cache host read-first and never downgrade egress policy
  • e7399dd fix: align deny-list mode detection with agent and log when both endpoint inp...
  • c16689f test: add denied_endpoints to Configuration fixtures and cover deny-list merge
  • 40b99cf Merge pull request #682 from rohan-stepsecurity/rp/feat/codebuild-self-v2
  • fedec02 Merge branch 'rc-42' into rp/feat/codebuild-self-v2
  • 5361fb1 feat: add build artifacts
  • 286474f feat: Support Bravo agent install on CodeBuild runners
  • 051ec05 Merge pull request #683 from h0x0er/jatin/deny-list
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 17, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 17, 2026 11:54
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 17, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 17, 2026 11:54
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Aug 17, 2026
@github-actions github-actions Bot added the ok-to-skip-smokes Changes are not hit by smoke tests (doc updates for example) label Aug 17, 2026
@codecov

codecov Bot commented Aug 17, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.4%. Comparing base (ddbcac3) to head (04ae71f).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##            main   #6264     +/-   ##
=======================================
- Coverage   94.4%   94.4%   -0.0%     
=======================================
  Files        369     369             
  Lines      33578   33578             
  Branches    3755    3755             
=======================================
- Hits       31708   31706      -2     
- Misses      1210    1213      +3     
+ Partials     660     659      -1     
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Bumps the ci-dependencies group with 1 update in the / directory: [step-security/harden-runner](https://github.com/step-security/harden-runner).


Updates `step-security/harden-runner` from 2.20.1 to 2.21.0
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@b09bb98...05e3151)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump step-security/harden-runner from 2.20.1 to 2.21.0 in the ci-dependencies group Bump step-security/harden-runner from 2.20.1 to 2.21.0 in the ci-dependencies group across 1 directory Aug 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ci-dependencies-bbf0ab0fb3 branch from dc2f053 to 04ae71f Compare August 24, 2026 11:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code ok-to-skip-smokes Changes are not hit by smoke tests (doc updates for example)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants