Skip to content

chore(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0#2180

Merged
exploreriii merged 1 commit into
mainfrom
dependabot/github_actions/step-security/harden-runner-2.19.0
Apr 21, 2026
Merged

chore(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0#2180
exploreriii merged 1 commit into
mainfrom
dependabot/github_actions/step-security/harden-runner-2.19.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps step-security/harden-runner from 2.18.0 to 2.19.0.

Release notes

Sourced from step-security/harden-runner's releases.

v2.19.0

What's Changed

New Runner Support

Harden-Runner now supports Depot, Blacksmith, Namespace, and WarpBuild runners with the same egress monitoring, runtime monitoring, and policy enforcement available on GitHub-hosted runners.

Automated Incident Response for Supply Chain Attacks

  • Global block list: Outbound connections to known malicious domains and IPs are now blocked even in audit mode.
  • System-defined detection rules: Harden-Runner will trigger lockdown mode when a high risk event is detected during an active supply chain attack (for example, a process reading the memory of the runner worker process, a common technique for stealing GitHub Actions secrets).

Bug Fixes

Windows and macOS: stability and reliability fixes

Full Changelog: step-security/harden-runner@v2.18.0...v2.19.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 20, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner April 20, 2026 09:38
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Apr 20, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner April 20, 2026 09:38
@codacy-production

codacy-production Bot commented Apr 20, 2026 •
edited
Loading

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

TIP This summary will be updated as you push new changes. Give us feedback

@manishdait manishdait added step: 2nd second stage of the review approval process reviewer: maintainer PR needs a review from the maintainer team labels Apr 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/step-security/harden-runner-2.19.0 branch from e6dfbc4 to 47328ef Compare April 20, 2026 18:47
@exploreriii

exploreriii commented Apr 21, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
chore(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0
8f5faf0 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.18.0 to 2.19.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@6c3c2f2...8d3c67d)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/step-security/harden-runner-2.19.0 branch from 47328ef to 8f5faf0 Compare April 21, 2026 07:41
@exploreriii
exploreriii merged commit b8c2195 into main Apr 21, 2026
24 checks passed
@exploreriii
exploreriii deleted the dependabot/github_actions/step-security/harden-runner-2.19.0 branch April 21, 2026 07:46
Abhijeet2409 pushed a commit to Abhijeet2409/hiero-sdk-python that referenced this pull request Apr 22, 2026
@dependabot @Abhijeet2409
chore(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 (h…
63b035d 
…iero-ledger#2180)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AntonioCeppellini pushed a commit to AntonioCeppellini/hiero-sdk-python that referenced this pull request Apr 22, 2026
@dependabot @AntonioCeppellini
chore(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 (h…
8269f89 
…iero-ledger#2180)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
parvninama pushed a commit to parvninama/hiero-sdk-python that referenced this pull request Apr 25, 2026
@dependabot @parvninama
chore(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 (h…
0a326dc 
…iero-ledger#2180)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@manishdait manishdait added this to the v0.2.6 milestone May 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@MonaaEid MonaaEid MonaaEid approved these changes
@manishdait manishdait manishdait approved these changes
@exploreriii exploreriii Awaiting requested review from exploreriii exploreriii is a code owner automatically assigned from hiero-ledger/hiero-sdk-python-maintainers
@jeromy-cannon jeromy-cannon Awaiting requested review from jeromy-cannon jeromy-cannon is a code owner automatically assigned from hiero-ledger/github-maintainers

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code reviewer: maintainer PR needs a review from the maintainer team step: 2nd second stage of the review approval process

Projects

None yet

Milestone

v0.2.6

Development

Successfully merging this pull request may close these issues.

3 participants

@exploreriii @MonaaEid @manishdait