Skip to content

chore(deps): update step-security/harden-runner action to v2.13.1#97

Merged
renovate[bot] merged 1 commit intomasterfrom
renovate/step-security-harden-runner-2.x
Sep 10, 2025
Merged

chore(deps): update step-security/harden-runner action to v2.13.1#97
renovate[bot] merged 1 commit intomasterfrom
renovate/step-security-harden-runner-2.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Sep 9, 2025

This PR contains the following updates:

Package Type Update Change
step-security/harden-runner action patch v2.13.0 -> v2.13.1

Release Notes

step-security/harden-runner (step-security/harden-runner)

v2.13.1

Compare Source

What's Changed
  • Graceful handling of HTTP errors: Improved error handling when fetching Harden Runner policies from the StepSecurity Policy Store API, ensuring more reliable execution even in case of temporary network/API issues.

  • Security updates for npm dependencies: Updated vulnerable npm package dependencies to the latest secure versions.

  • Faster enterprise agent downloads: The enterprise agent is now downloaded from GitHub Releases instead of packages.stepsecurity.io, improving download speed and reliability.

Full Changelog: step-security/harden-runner@v2.13.0...v2.13.1


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Sep 9, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Sep 9, 2025

@codecov
Copy link
Copy Markdown

codecov bot commented Sep 9, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.66%. Comparing base (7bba8d9) to head (e667991).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master      #97   +/-   ##
=======================================
  Coverage   86.66%   86.66%           
=======================================
  Files           5        5           
  Lines         270      270           
  Branches       53       53           
=======================================
  Hits          234      234           
  Misses          1        1           
  Partials       35       35           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@github-actions
Copy link
Copy Markdown

github-actions bot commented Sep 9, 2025

Test Results

  5 files    5 suites   1m 2s ⏱️
 71 tests  71 ✅ 0 💤 0 ❌
355 runs  355 ✅ 0 💤 0 ❌

Results for commit e667991.

@renovate renovate bot merged commit a526bb9 into master Sep 10, 2025
33 checks passed
@renovate renovate bot deleted the renovate/step-security-harden-runner-2.x branch September 10, 2025 03:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants