Skip to content

chore(deps): update step-security/harden-runner action to v2.14.0#26

Merged
mergify[bot] merged 1 commit into
mainfrom
renovate/step-security-harden-runner-2.x
Jan 9, 2026
Merged

chore(deps): update step-security/harden-runner action to v2.14.0#26
mergify[bot] merged 1 commit into
mainfrom
renovate/step-security-harden-runner-2.x

Conversation

@renovate

@renovate renovate Bot commented Jan 9, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
step-security/harden-runner action minor v2.13.2v2.14.0

Release Notes

step-security/harden-runner (step-security/harden-runner)

v2.14.0

Compare Source

What's Changed
  • Selective installation: Harden-Runner now skips installation on GitHub-hosted runners when the repository has a custom property skip_harden_runner, allowing organizations to opt out specific repos.
  • Avoid double install: The action no longer installs Harden-Runner if it’s already present on a GitHub-hosted runner, which could happen when a composite action also installs it.

Full Changelog: step-security/harden-runner@v2.13.3...v2.14.0

v2.13.3

Compare Source

What's Changed
  • Fixed an issue where process events were not uploaded in certain edge cases.

Full Changelog: step-security/harden-runner@v2.13.2...v2.13.3


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@semanticdiff-com

semanticdiff-com Bot commented Jan 9, 2026

Copy link
Copy Markdown

Review changes with  SemanticDiff

Changed Files
File Status
  .github/workflows/ci.yml  14% smaller

@gitnotebooks

gitnotebooks Bot commented Jan 9, 2026

Copy link
Copy Markdown

@coderabbitai

coderabbitai Bot commented Jan 9, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@deepsource-io

deepsource-io Bot commented Jan 9, 2026

Copy link
Copy Markdown
Contributor

Here's the code health analysis summary for commits 6648d03..fefd7df. View details on DeepSource ↗.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource Secrets LogoSecrets✅ SuccessView Check ↗
DeepSource Python LogoPython✅ SuccessView Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

@sonarqubecloud

sonarqubecloud Bot commented Jan 9, 2026

Copy link
Copy Markdown

@mergify mergify Bot merged commit fefd7df into main Jan 9, 2026
19 of 21 checks passed
@mergify

mergify Bot commented Jan 9, 2026

Copy link
Copy Markdown
Contributor

Merge Queue Status

✅ The pull request has been merged at fefd7df

This pull request spent 15 seconds in the queue, including 1 second running CI.
The checks were run in-place.

Required conditions to merge

@mergify mergify Bot deleted the renovate/step-security-harden-runner-2.x branch January 9, 2026 20:39
@mergify mergify Bot removed the queued label Jan 9, 2026
@mergify mergify Bot temporarily deployed to code_quality January 9, 2026 20:39 Inactive
@mergify mergify Bot temporarily deployed to code_quality January 9, 2026 20:39 Inactive
@mergify

mergify Bot commented Jan 9, 2026

Copy link
Copy Markdown
Contributor

🧪 CI Insights

Here's what we observed from your CI run for fefd7df.

🟢 All jobs passed!

But CI Insights is watching 👀

@mergify

mergify Bot commented Jan 9, 2026

Copy link
Copy Markdown
Contributor

Thank you for your contribution @renovate[bot]! Your pull request has been merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants