Skip to content

Bump step-security/harden-runner from 2.20.1 to 2.21.0 - #2568

Merged
soumeh01 merged 1 commit into
mainfrom
dependabot/github_actions/step-security/harden-runner-2.21.0
Aug 20, 2026
Merged

Bump step-security/harden-runner from 2.20.1 to 2.21.0#2568
soumeh01 merged 1 commit into
mainfrom
dependabot/github_actions/step-security/harden-runner-2.21.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown
Contributor

Bumps step-security/harden-runner from 2.20.1 to 2.21.0.

Release notes

Sourced from step-security/harden-runner's releases.

v2.21.0

What's Changed

  • Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.
  • Improved Support for AWS CodeBuild GitHub Actions Runners.
  • Bug fixes.

Full Changelog: step-security/harden-runner@v2.20.1...v2.21.0

Commits
  • 05e3151 Merge pull request #684 from step-security/rc-42
  • 0f37afa fix: ignore denied-endpoints on non-enterprise tier
  • 93b58ee fix: resolve cache host read-first and never downgrade egress policy
  • e7399dd fix: align deny-list mode detection with agent and log when both endpoint inp...
  • c16689f test: add denied_endpoints to Configuration fixtures and cover deny-list merge
  • 40b99cf Merge pull request #682 from rohan-stepsecurity/rp/feat/codebuild-self-v2
  • fedec02 Merge branch 'rc-42' into rp/feat/codebuild-self-v2
  • 5361fb1 feat: add build artifacts
  • 286474f feat: Support Bravo agent install on CodeBuild runners
  • 051ec05 Merge pull request #683 from h0x0er/jatin/deny-list
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 19, 2026
@github-actions

github-actions Bot commented Aug 19, 2026

Copy link
Copy Markdown

Test Results

  2 files   -    41   14 suites   - 113   15m 0s ⏱️ - 3m 29s
479 tests  -   634  479 ✅  -   617  0 💤  - 17  0 ❌ ±0 
958 runs   - 1 407  958 ✅  - 1 349  0 💤  - 58  0 ❌ ±0 

Results for commit 1e39fff. ± Comparison against base commit 48d69f0.

This pull request removes 634 tests.
AuxCmdTests ‑ MkdirCmdTest
AuxCmdTests ‑ RmdirCmdTest
AuxCmdTests ‑ TouchCmdTest
BuildSystemGeneratorTests ‑ GenAuditFile
BuildSystemGeneratorTests ‑ GenAuditFile_WithOut_Existing_Audit_File
BuildSystemGeneratorTests ‑ GenAuditFile_With_Existing_Audit_File
BuildSystemGeneratorTests ‑ GetString
BuildSystemGeneratorTests ‑ StrConv
BuildSystemGeneratorTests ‑ StrNorm
CBuildGCCTests ‑ Asm
…

♻️ This comment has been updated with latest results.

@soumeh01

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@soumeh01

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.20.1 to 2.21.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@b09bb98...05e3151)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/step-security/harden-runner-2.21.0 branch from babeee4 to 1e39fff Compare August 20, 2026 07:36
@codecov

codecov Bot commented Aug 20, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.14%. Comparing base (48d69f0) to head (1e39fff).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2568   +/-   ##
=======================================
  Coverage   72.14%   72.14%           
=======================================
  Files         185      185           
  Lines       30126    30126           
  Branches    17784    17785    +1     
=======================================
  Hits        21735    21735           
  Misses       6090     6090           
  Partials     2301     2301           
Flag Coverage Δ
buildmgr-cov 79.87% <ø> (ø)
ctrace-cov 100.00% <ø> (ø)
packchk-cov 69.81% <ø> (ø)
packgen-cov 82.02% <ø> (ø)
projmgr-cov 88.08% <ø> (ø)
svdconv-cov 46.82% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@soumeh01
soumeh01 merged commit ff65562 into main Aug 20, 2026
113 checks passed
@soumeh01
soumeh01 deleted the dependabot/github_actions/step-security/harden-runner-2.21.0 branch August 20, 2026 08:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant