From d951d57a6aff6a8a4497cc8cba6b417b85d5384e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 8 Jul 2026 00:23:03 +0000 Subject: [PATCH] build(deps): Bump step-security/harden-runner from 2.19.2 to 2.20.0 Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.19.2 to 2.20.0. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/9ca718d3bf646d6534007c269a635b3e54cadf99...bf7454d06d71f1098171f2acdf0cd4708d7b5920) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/flow-pull-request-checks.yaml | 2 +- .github/workflows/on-comment.yaml | 2 +- .github/workflows/on-pr-close.yaml | 4 ++-- .github/workflows/on-pr-review-labels.yaml | 2 +- .github/workflows/on-pr-review.yaml | 2 +- .github/workflows/on-pr-update.yaml | 2 +- .github/workflows/on-pr.yaml | 2 +- .github/workflows/on-schedule-inactivity.yaml | 2 +- .github/workflows/zxc-build-library.yaml | 8 ++++---- .github/workflows/zxc-lint-workflows.yaml | 2 +- .github/workflows/zxc-test-bot-scripts.yaml | 2 +- 11 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/flow-pull-request-checks.yaml b/.github/workflows/flow-pull-request-checks.yaml index 1a76e7cd1..a5929322d 100644 --- a/.github/workflows/flow-pull-request-checks.yaml +++ b/.github/workflows/flow-pull-request-checks.yaml @@ -32,7 +32,7 @@ jobs: runs-on: hiero-client-sdk-linux-large steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit diff --git a/.github/workflows/on-comment.yaml b/.github/workflows/on-comment.yaml index 43ff07a05..39acdb559 100644 --- a/.github/workflows/on-comment.yaml +++ b/.github/workflows/on-comment.yaml @@ -55,7 +55,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit diff --git a/.github/workflows/on-pr-close.yaml b/.github/workflows/on-pr-close.yaml index 5fd961cbf..39b62a3c8 100644 --- a/.github/workflows/on-pr-close.yaml +++ b/.github/workflows/on-pr-close.yaml @@ -23,7 +23,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit @@ -44,7 +44,7 @@ jobs: if: github.event.pull_request.merged == true steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit diff --git a/.github/workflows/on-pr-review-labels.yaml b/.github/workflows/on-pr-review-labels.yaml index d5548fed0..660fefa25 100644 --- a/.github/workflows/on-pr-review-labels.yaml +++ b/.github/workflows/on-pr-review-labels.yaml @@ -19,7 +19,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit diff --git a/.github/workflows/on-pr-review.yaml b/.github/workflows/on-pr-review.yaml index 8e711c1bd..8f72ebf0f 100644 --- a/.github/workflows/on-pr-review.yaml +++ b/.github/workflows/on-pr-review.yaml @@ -19,7 +19,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit diff --git a/.github/workflows/on-pr-update.yaml b/.github/workflows/on-pr-update.yaml index 682718d78..4874a1313 100644 --- a/.github/workflows/on-pr-update.yaml +++ b/.github/workflows/on-pr-update.yaml @@ -26,7 +26,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit diff --git a/.github/workflows/on-pr.yaml b/.github/workflows/on-pr.yaml index bf66dec50..6ab045456 100644 --- a/.github/workflows/on-pr.yaml +++ b/.github/workflows/on-pr.yaml @@ -28,7 +28,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit diff --git a/.github/workflows/on-schedule-inactivity.yaml b/.github/workflows/on-schedule-inactivity.yaml index 9bdcc7b96..198c731fe 100644 --- a/.github/workflows/on-schedule-inactivity.yaml +++ b/.github/workflows/on-schedule-inactivity.yaml @@ -49,7 +49,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit diff --git a/.github/workflows/zxc-build-library.yaml b/.github/workflows/zxc-build-library.yaml index 5e8ee0b79..d1f03c293 100644 --- a/.github/workflows/zxc-build-library.yaml +++ b/.github/workflows/zxc-build-library.yaml @@ -63,7 +63,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit @@ -90,7 +90,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit @@ -240,7 +240,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit @@ -302,7 +302,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit diff --git a/.github/workflows/zxc-lint-workflows.yaml b/.github/workflows/zxc-lint-workflows.yaml index 6989bf71e..7fd3710e8 100644 --- a/.github/workflows/zxc-lint-workflows.yaml +++ b/.github/workflows/zxc-lint-workflows.yaml @@ -28,7 +28,7 @@ jobs: runs-on: hiero-client-sdk-linux-large steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit diff --git a/.github/workflows/zxc-test-bot-scripts.yaml b/.github/workflows/zxc-test-bot-scripts.yaml index bb1b54c79..2cd9a1267 100644 --- a/.github/workflows/zxc-test-bot-scripts.yaml +++ b/.github/workflows/zxc-test-bot-scripts.yaml @@ -28,7 +28,7 @@ jobs: runs-on: hiero-client-sdk-linux-large steps: - name: Harden Runner - uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2 + uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit