Skip to content

chore(deps): bump step-security/harden-runner from 2.17.0 to 2.18.0#2165

Merged
exploreriii merged 1 commit into
mainfrom
dependabot/github_actions/step-security/harden-runner-2.18.0
Apr 17, 2026
Merged

chore(deps): bump step-security/harden-runner from 2.17.0 to 2.18.0#2165
exploreriii merged 1 commit into
mainfrom
dependabot/github_actions/step-security/harden-runner-2.18.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps step-security/harden-runner from 2.17.0 to 2.18.0.

Release notes

Sourced from step-security/harden-runner's releases.

v2.18.0

What's Changed

Global Block List: During supply chain incidents like the recent axios and trivy compromises, StepSecurity will add known malicious domains and IP addresses (IOCs) to a global block list. These will be automatically blocked, even in audit mode, providing immediate protection without requiring any workflow changes.

Deploy on Self-Hosted VM: Added deploy-on-self-hosted-vm input that allows the Harden Runner agent to be installed directly on ephemeral self-hosted Linux runner VMs at workflow runtime. This is intended as an alternative when baking the agent into the VM image is not possible.

Full Changelog: step-security/harden-runner@v2.17.0...v2.18.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 17, 2026
@dependabot
dependabot Bot requested review from a team as code owners April 17, 2026 08:55
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 17, 2026
@dependabot
dependabot Bot requested a review from nadineloepfe April 17, 2026 08:55
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Apr 17, 2026
@dependabot
dependabot Bot requested a review from rbarker-dev April 17, 2026 08:55
@codacy-production

codacy-production Bot commented Apr 17, 2026 •
edited
Loading

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

TIP This summary will be updated as you push new changes. Give us feedback

@manishdait manishdait added the step: 2nd second stage of the review approval process label Apr 17, 2026
@exploreriii

exploreriii commented Apr 17, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@exploreriii exploreriii added step: merge ready PR is ready and waiting to merge and removed step: 2nd second stage of the review approval process labels Apr 17, 2026
@dependabot
chore(deps): bump step-security/harden-runner from 2.17.0 to 2.18.0
68c2f9b 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.17.0 to 2.18.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@v2.17.0...6c3c2f2)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/step-security/harden-runner-2.18.0 branch from 1a5ddce to 68c2f9b Compare April 17, 2026 10:09
@exploreriii
exploreriii merged commit 48ef977 into main Apr 17, 2026
13 checks passed
@exploreriii
exploreriii deleted the dependabot/github_actions/step-security/harden-runner-2.18.0 branch April 17, 2026 10:10
@exploreriii exploreriii added this to the v0.2.5 milestone Apr 17, 2026
Abhijeet2409 pushed a commit to Abhijeet2409/hiero-sdk-python that referenced this pull request Apr 22, 2026
@dependabot @Abhijeet2409
chore(deps): bump step-security/harden-runner from 2.17.0 to 2.18.0 (h…
04308b9 
…iero-ledger#2165)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AntonioCeppellini pushed a commit to AntonioCeppellini/hiero-sdk-python that referenced this pull request Apr 22, 2026
@dependabot @AntonioCeppellini
chore(deps): bump step-security/harden-runner from 2.17.0 to 2.18.0 (h…
7685e04 
…iero-ledger#2165)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
parvninama pushed a commit to parvninama/hiero-sdk-python that referenced this pull request Apr 25, 2026
@dependabot @parvninama
chore(deps): bump step-security/harden-runner from 2.17.0 to 2.18.0 (h…
164f217 
…iero-ledger#2165)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@manishdait manishdait manishdait approved these changes
@exploreriii exploreriii exploreriii approved these changes
@nadineloepfe nadineloepfe Awaiting requested review from nadineloepfe nadineloepfe is a code owner automatically assigned from hiero-ledger/hiero-sdk-python-maintainers
@rbarker-dev rbarker-dev Awaiting requested review from rbarker-dev rbarker-dev is a code owner automatically assigned from hiero-ledger/github-maintainers

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code step: merge ready PR is ready and waiting to merge

Projects

None yet

Milestone

v0.2.5

Development

Successfully merging this pull request may close these issues.

2 participants

@exploreriii @manishdait