Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 11, 2025

This PR contains the following updates:

Package Type Update Change
github/codeql-action action minor v4.31.11v4.32.0
step-security/harden-runner action minor v2.13.3v2.14.1

Release Notes

github/codeql-action (github/codeql-action)

v4.32.0

Compare Source

step-security/harden-runner (step-security/harden-runner)

v2.14.1

Compare Source

What's Changed
  1. In some self-hosted environments, the agent could briefly fall back to public DNS resolvers during startup if the system DNS was not yet available. This behavior was unintended for GitHub-hosted runners and has now been fixed to prevent any use of public DNS resolvers.

  2. Fixed npm audit vulnerabilities

Full Changelog: step-security/harden-runner@v2.14.0...v2.14.1

v2.14.0

Compare Source

What's Changed
  • Selective installation: Harden-Runner now skips installation on GitHub-hosted runners when the repository has a custom property skip_harden_runner, allowing organizations to opt out specific repos.
  • Avoid double install: The action no longer installs Harden-Runner if it’s already present on a GitHub-hosted runner, which could happen when a composite action also installs it.

Full Changelog: step-security/harden-runner@v2.13.3...v2.14.0


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/release-v0.6-github-actions branch from 043a4b0 to 3cf34ad Compare December 12, 2025 15:10
@renovate renovate bot force-pushed the renovate/release-v0.6-github-actions branch from 3cf34ad to 6c75be6 Compare December 31, 2025 13:55
@renovate renovate bot changed the title Update step-security/harden-runner action to v2.14.0 (release-v0.6) Update step-security/harden-runner action to v2.14.1 (release-v0.6) Jan 26, 2026
@renovate renovate bot force-pushed the renovate/release-v0.6-github-actions branch from 6c75be6 to f51df00 Compare January 26, 2026 06:38
@renovate renovate bot force-pushed the renovate/release-v0.6-github-actions branch from f51df00 to 67591b1 Compare January 26, 2026 21:49
@renovate renovate bot changed the title Update step-security/harden-runner action to v2.14.1 (release-v0.6) Update github actions (release-v0.6) (minor) Jan 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants