chore(deps): bump step-security/harden-runner from 2.19.2 to 2.19.4#86
chore(deps): bump step-security/harden-runner from 2.19.2 to 2.19.4#86dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.19.2 to 2.19.4. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@9ca718d...9af89fc) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.19.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
🤖 Hi @dependabot[bot], I've received your request, and I'm working on it now! You can track my progress in the logs for more details. |
|
Note
|
| Layer / File(s) | Summary |
|---|---|
Harden-runner action version bump .github/workflows/on-schedule-inactivity.yaml |
The step-security/harden-runner action reference is pinned to a newer commit version (v2.19.2 → v2.19.4) without changes to workflow logic or permissions. |
Estimated code review effort
🎯 1 (Trivial) | ⏱️ ~3 minutes
Poem
🔒 A patch bump here, security grows,
Runner hardened, the inactivity flows,
One line changed, the workflow stays true,
Dependencies fresh—and so do you! ✨
🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
| Check name | Status | Explanation |
|---|---|---|
| Description Check | ✅ Passed | Check skipped - CodeRabbit’s high-level summary is enabled. |
| Title check | ✅ Passed | The title accurately and specifically describes the main change: a dependency bump of step-security/harden-runner from v2.19.2 to v2.19.4. |
| Docstring Coverage | ✅ Passed | No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. |
| Linked Issues check | ✅ Passed | Check skipped because no linked issues were found for this pull request. |
| Out of Scope Changes check | ✅ Passed | Check skipped because no linked issues were found for this pull request. |
✏️ Tip: You can configure your own custom pre-merge checks in the settings.
✨ Finishing Touches
🧪 Generate unit tests (beta)
- Create PR with unit tests
- Commit unit tests in branch
dependabot/github_actions/step-security/harden-runner-2.19.4
Comment @coderabbitai help to get the list of available commands and usage tips.
|
🤖 I'm sorry @dependabot[bot], but I was unable to process your request. Please see the logs for more details. |
Bumps step-security/harden-runner from 2.19.2 to 2.19.4.
Release notes
Sourced from step-security/harden-runner's releases.
Commits
9af89fcMerge pull request #667 from step-security/update-agent-v1.8.6485dce8Update agent to v1.8.6ab7a940Merge pull request #665 from step-security/fix/use-policy-store-default-auditec41b78Default to audit mode when api-key missing with use-policy-storeDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by CodeRabbit