From cbdf4d5585ba964a2d8f3985521b909bc0bf6e37 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 22 May 2026 00:28:33 +0000 Subject: [PATCH] build(deps): Bump step-security/harden-runner from 2.19.2 to 2.19.4 Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.19.2 to 2.19.4. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/9ca718d3bf646d6534007c269a635b3e54cadf99...9af89fc71515a100421586dfdb3dc9c984fbf411) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.19.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/flow-pull-request-checks.yaml | 2 +- .github/workflows/on-comment.yaml | 2 +- .github/workflows/on-pr-close.yaml | 4 ++-- .github/workflows/on-pr-review-labels.yaml | 2 +- .github/workflows/on-pr-review.yaml | 2 +- .github/workflows/on-pr-update.yaml | 2 +- .github/workflows/on-pr.yaml | 2 +- .github/workflows/on-schedule-inactivity.yaml | 2 +- .github/workflows/zxc-build-library.yaml | 8 ++++---- .github/workflows/zxc-lint-workflows.yaml | 2 +- .github/workflows/zxc-test-bot-scripts.yaml | 2 +- 11 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/flow-pull-request-checks.yaml b/.github/workflows/flow-pull-request-checks.yaml index 1a76e7cd1..f90ee0940 100644 --- a/.github/workflows/flow-pull-request-checks.yaml +++ b/.github/workflows/flow-pull-request-checks.yaml @@ -32,7 +32,7 @@ jobs: runs-on: hiero-client-sdk-linux-large steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/on-comment.yaml b/.github/workflows/on-comment.yaml index 43ff07a05..d9c474fee 100644 --- a/.github/workflows/on-comment.yaml +++ b/.github/workflows/on-comment.yaml @@ -55,7 +55,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/on-pr-close.yaml b/.github/workflows/on-pr-close.yaml index 5fd961cbf..21ff2f9a7 100644 --- a/.github/workflows/on-pr-close.yaml +++ b/.github/workflows/on-pr-close.yaml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit @@ -44,7 +44,7 @@ jobs: if: github.event.pull_request.merged == true steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/on-pr-review-labels.yaml b/.github/workflows/on-pr-review-labels.yaml index d5548fed0..4b75d557b 100644 --- a/.github/workflows/on-pr-review-labels.yaml +++ b/.github/workflows/on-pr-review-labels.yaml @@ -19,7 +19,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/on-pr-review.yaml b/.github/workflows/on-pr-review.yaml index 8e711c1bd..35cf8aa6e 100644 --- a/.github/workflows/on-pr-review.yaml +++ b/.github/workflows/on-pr-review.yaml @@ -19,7 +19,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/on-pr-update.yaml b/.github/workflows/on-pr-update.yaml index 682718d78..3a6aae429 100644 --- a/.github/workflows/on-pr-update.yaml +++ b/.github/workflows/on-pr-update.yaml @@ -26,7 +26,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/on-pr.yaml b/.github/workflows/on-pr.yaml index bf66dec50..b59a19e2a 100644 --- a/.github/workflows/on-pr.yaml +++ b/.github/workflows/on-pr.yaml @@ -28,7 +28,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/on-schedule-inactivity.yaml b/.github/workflows/on-schedule-inactivity.yaml index 9bdcc7b96..dc0166dd6 100644 --- a/.github/workflows/on-schedule-inactivity.yaml +++ b/.github/workflows/on-schedule-inactivity.yaml @@ -49,7 +49,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/zxc-build-library.yaml b/.github/workflows/zxc-build-library.yaml index 5e8ee0b79..f3d8004a2 100644 --- a/.github/workflows/zxc-build-library.yaml +++ b/.github/workflows/zxc-build-library.yaml @@ -63,7 +63,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit @@ -90,7 +90,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit @@ -240,7 +240,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit @@ -302,7 +302,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/zxc-lint-workflows.yaml b/.github/workflows/zxc-lint-workflows.yaml index 6989bf71e..8b20b3a13 100644 --- a/.github/workflows/zxc-lint-workflows.yaml +++ b/.github/workflows/zxc-lint-workflows.yaml @@ -28,7 +28,7 @@ jobs: runs-on: hiero-client-sdk-linux-large steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit diff --git a/.github/workflows/zxc-test-bot-scripts.yaml b/.github/workflows/zxc-test-bot-scripts.yaml index bb1b54c79..8614a66e6 100644 --- a/.github/workflows/zxc-test-bot-scripts.yaml +++ b/.github/workflows/zxc-test-bot-scripts.yaml @@ -28,7 +28,7 @@ jobs: runs-on: hiero-client-sdk-linux-large steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit