Skip to content

chore(deps): bump step-security/harden-runner from 2.12.0 to 2.21.1 - #126

Merged
anurag-stepsecurity merged 1 commit into
mainfrom
dependabot/github_actions/step-security/harden-runner-2.19.4
Sep 8, 2026
Merged

anurag-stepsecurity merged 1 commit into
mainfrom
dependabot/github_actions/step-security/harden-runner-2.19.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps step-security/harden-runner from 2.12.0 to 2.21.1.

Release notes

Sourced from step-security/harden-runner's releases.

v2.21.1

What's Changed

  • Improved performance of the disable-sudo feature.
  • Fixed an issue in the Community tier where new endpoints required by the GitHub Actions runner were not being implicitly allowed in block mode.
  • Fixed the Harden-Runner post step failing on Linux distributions that do not have a merged /usr filesystem layout (for example Debian 11), where /usr/bin/echo does not exist. This mainly affected self-hosted runners.
  • Documentation updates: clarified which features are in the Community (free) vs Enterprise tier.

Full Changelog: step-security/harden-runner@v2.21.0...v2.21.1

v2.21.0

What's Changed

  • Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.
  • Improved Support for AWS CodeBuild GitHub Actions Runners.
  • Bug fixes.

Full Changelog: step-security/harden-runner@v2.20.1...v2.21.0

v2.20.1

What's Changed

  • AWS CodeBuild-hosted runner support
  • Implicitly allow single-labeled (internal) domains in block-mode

Full Changelog: step-security/harden-runner@v2.20.0...v2.20.1

v2.20.0

What's Changed

  • Support for block policy for MacOS and Windows GitHub-hosted runners
  • Support for Bitrise MacOS GitHub Actions runners
  • HTTPS monitoring support for Bun for Linux runners (enterprise tier)

Full Changelog: step-security/harden-runner@v2.19.4...v2.20.0

v2.19.4

What's Changed

  • Improvements for HTTPS Monitoring for the Enterprise tier of Harden Runner

Full Changelog: step-security/harden-runner@v2.19.3...v2.19.4

v2.19.3

What's Changed

Full Changelog: step-security/harden-runner@v2.19.2...v2.19.3

v2.19.2

What's Changed

  • Update the Harden Runner agent for enterprise tier to use go 1.26 and fix minor bugs.

... (truncated)

Commits
  • e14015d Merge pull request #690 from step-security/rc-43
  • 9001249 docs: update harden-runner version pin to v2.21.0 in getting started example
  • a447fba docs: expand enterprise feature list and document custom VM and ubuntu-slim l...
  • b0eaf8d docs: clarify community vs enterprise tiers and add maintained actions section
  • 063e8e3 Merge pull request #687 from rohan-stepsecurity/rp/fix/bin-echo-fallback
  • f46bdc1 chore: bump agent-ebpf to v1.9.1 and agent to v0.16.3
  • 42e6daa fix: fall back to /bin/echo for non-usr-merged distros
  • 05e3151 Merge pull request #684 from step-security/rc-42
  • 0f37afa fix: ignore denied-endpoints on non-enterprise tier
  • 93b58ee fix: resolve cache host read-first and never downgrade egress policy
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/step-security/harden-runner-2.19.4 branch from c7a9f3a to 19e5a58 Compare June 26, 2026 17:03
@dependabot dependabot Bot changed the title chore(deps): bump step-security/harden-runner from 2.12.0 to 2.19.4 chore(deps): bump step-security/harden-runner from 2.12.0 to 2.20.0 Jul 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/step-security/harden-runner-2.19.4 branch from 19e5a58 to 039e593 Compare July 9, 2026 08:24
@anurag-stepsecurity

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.12.0 to 2.21.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@v2.12.0...e14015d)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.19.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump step-security/harden-runner from 2.12.0 to 2.20.0 chore(deps): bump step-security/harden-runner from 2.12.0 to 2.21.1 Sep 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/step-security/harden-runner-2.19.4 branch from 039e593 to f8bee13 Compare September 8, 2026 09:36
@anurag-stepsecurity
anurag-stepsecurity merged commit f6cc061 into main Sep 8, 2026
11 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/step-security/harden-runner-2.19.4 branch September 8, 2026 09:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant