Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commit4cbba17

Browse files
ci: bump the github-actions group with 3 updates (#20703)
Bumps the github-actions group with 3 updates:[step-security/harden-runner](https://github.com/step-security/harden-runner),[tj-actions/changed-files](https://github.com/tj-actions/changed-files)and[Mattraks/delete-workflow-runs](https://github.com/mattraks/delete-workflow-runs).Updates `step-security/harden-runner` from 2.13.1 to 2.13.2<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/step-security/harden-runner/releases">step-security/harden-runner'sreleases</a>.</em></p><blockquote><h2>v2.13.2</h2><h2>What's Changed</h2><ul><li>Fixed an issue where there was a limit of 512 allowed endpoints whenusing block egress policy. This restriction has been removed, allowingfor an unlimited number of endpoints to be configured.</li><li>Harden Runner now automatically detects if the agent is alreadypre-installed on a custom VM image used by a GitHub-hosted runner. Whendetected, the action will skip reinstallation and use the existingagent.</li></ul><p><strong>Full Changelog</strong>: <ahref="https://github.com/step-security/harden-runner/compare/v2.13.1...v2.13.2">https://github.com/step-security/harden-runner/compare/v2.13.1...v2.13.2</a></p></blockquote></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/step-security/harden-runner/commit/95d9a5deda9de15063e7595e9719c11c38c90ae2"><code>95d9a5d</code></a>Merge pull request <ahref="https://redirect.github.com/step-security/harden-runner/issues/606">#606</a>from step-security/rc-28</li><li><ahref="https://github.com/step-security/harden-runner/commit/87e429d3fb470bcc827f338e5cce1155ff99c6eb"><code>87e429d</code></a>Update limitations.md</li><li><ahref="https://github.com/step-security/harden-runner/commit/ef891c3a30c3c15c2287ce04b33ec28b6d90a447"><code>ef891c3</code></a>feat: add support for custom vm image</li><li><ahref="https://github.com/step-security/harden-runner/commit/1fa8c8a8b1b523829fe596bfc665d2bc4c0ef835"><code>1fa8c8a</code></a>update agent</li><li><ahref="https://github.com/step-security/harden-runner/commit/92c522aaa6f53af082553dedc1596c80b71aba33"><code>92c522a</code></a>Merge pull request <ahref="https://redirect.github.com/step-security/harden-runner/issues/593">#593</a>from step-security/ak-readme-updates</li><li><ahref="https://github.com/step-security/harden-runner/commit/4719ad5578c61961f4f70f833580278dea5544de"><code>4719ad5</code></a>README updates</li><li><ahref="https://github.com/step-security/harden-runner/commit/4fde639ab437b75bf4ecb52bbddb23ab0ac00259"><code>4fde639</code></a>Merge pull request <ahref="https://redirect.github.com/step-security/harden-runner/issues/591">#591</a>from eromosele-stepsecurity/Upd</li><li><ahref="https://github.com/step-security/harden-runner/commit/f682f2f2d06275b6ab30c2a973c1de2fa120e134"><code>f682f2f</code></a>Update README.md</li><li>See full diff in <ahref="https://github.com/step-security/harden-runner/compare/f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a...95d9a5deda9de15063e7595e9719c11c38c90ae2">compareview</a></li></ul></details><br />Updates `tj-actions/changed-files` from0ff001de0805038ff3f118de4875002200057732 to70069877f29101175ed2b055d210fe8b1d54d7d7<details><summary>Changelog</summary><p><em>Sourced from <ahref="https://github.com/tj-actions/changed-files/blob/main/HISTORY.md">tj-actions/changed-files'schangelog</a>.</em></p><blockquote><h1>Changelog</h1><h1><ahref="https://github.com/tj-actions/changed-files/compare/v46.0.5...v47.0.0">47.0.0</a>- (2025-09-13)</h1><h2><!-- raw HTML omitted -->🚀 Features</h2><ul><li>Add any_added to outputs (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2567">#2567</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/c260d49a827b5eb266673bed7871c5d3ee9b5aef">c260d49</a>)- (Jellyfrog)</li></ul><h2><!-- raw HTML omitted -->➖ Remove</h2><ul><li>Commit and push step from build job (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2538">#2538</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/be393a90381e27c9fec2c8c2e02b00f005710145">be393a9</a>)- (Tonye Jack)</li></ul><h2><!-- raw HTML omitted -->🔄 Update</h2><ul><li>Updated README.md (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2592">#2592</a>)</li></ul><p>Co-authored-by: github-actions[bot]&lt;41898282+github-actions[bot]<ahref="https://github.com/users"><code>@​users</code></a>.noreply.github.com&gt;(<ahref="https://github.com/tj-actions/changed-files/commit/3dbc1e181273d808ccff822a6e00cf18b6628ef0">3dbc1e1</a>)- (github-actions[bot])</p><ul><li>Updated README.md (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2591">#2591</a>)</li></ul><p>Co-authored-by: github-actions[bot]&lt;41898282+github-actions[bot]<ahref="https://github.com/users"><code>@​users</code></a>.noreply.github.com&gt;(<ahref="https://github.com/tj-actions/changed-files/commit/b1ccff8c0892ad141d7d2de6f31e526a9dad931f">b1ccff8</a>)- (github-actions[bot])</p><ul><li>Updated README.md (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2574">#2574</a>)</li></ul><p>Co-authored-by: github-actions[bot]&lt;41898282+github-actions[bot]<ahref="https://github.com/users"><code>@​users</code></a>.noreply.github.com&gt;(<ahref="https://github.com/tj-actions/changed-files/commit/050a3d3360d29711ee9d8210fc639d902d23ad07">050a3d3</a>)- (github-actions[bot])</p><h2><!-- raw HTML omitted -->📚 Documentation</h2><ul><li>Update link to glob patterns (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2590">#2590</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/a892f50f7a7187bc288633c09230b09ce7ad8fd0">a892f50</a>)- (Tonye Jack)</li><li>Add Jellyfrog as a contributor for code, and doc (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2573">#2573</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/f000a9b97f254f9590ff26f651cccde827ad36da">f000a9b</a>)- (allcontributors[bot])</li></ul><h2><!-- raw HTML omitted -->🧪 Testing</h2><ul><li>Manual triggered workflows (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2637">#2637</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/c2ca2493190021783138cb8aac49bcee14b4bb89">c2ca249</a>)- (Tonye Jack)</li></ul><h2><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h2><ul><li><strong>deps-dev:</strong> Bump jest from 30.0.5 to 30.1.3 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2655">#2655</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/9a6755550a331fdcc8ec45443738933f8fa22eea">9a67555</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump tj-actions/git-cliff from 2.1.0 to 2.2.0(<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2660">#2660</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/b67e30df88f43e244f4e83775e5ad8335114fb95">b67e30d</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump github/codeql-action from 3.30.2 to3.30.3 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2661">#2661</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/62aef422ffa195474d80d73387535cf4622b2824">62aef42</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump github/codeql-action from 3.29.11 to3.30.2 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2659">#2659</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/e874f3cddd0f54ae776e6995ae6dae4cf40fd3d3">e874f3c</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump actions/setup-node from 4.4.0 to 5.0.0(<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2656">#2656</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/8c14441336bb3d84fd6b7fa83b6d7201c740baf5">8c14441</a>)- (dependabot[bot])</li><li><strong>deps-dev:</strong> Bump <code>@​types/node</code> from24.3.0 to 24.3.1 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2657">#2657</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/e995ac4be5be2bcb6e29556edc51fb63aca6b49b">e995ac4</a>)- (dependabot[bot])</li><li><strong>deps-dev:</strong> Bump <code>@​types/node</code> from24.2.1 to 24.3.0 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2649">#2649</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/3b04099b21072562f07469c10deb182b24236ca9">3b04099</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump github/codeql-action from 3.29.9 to3.29.11 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2651">#2651</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/e7b6c977e51984988e3cc1d6b18abe2a3ba8daaa">e7b6c97</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump tj-actions/git-cliff from 2.0.2 to 2.1.0(<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2648">#2648</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/765d62bc041415a5b494ef13d02d566128b25973">765d62b</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump github/codeql-action from 3.29.8 to3.29.9 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2647">#2647</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/2036da178f85576f1940fedb74bb93a36cd89ab7">2036da1</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump github/codeql-action from 3.29.7 to3.29.8 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2644">#2644</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/239aef84a5502c79a1cea96e495d17588c66c659">239aef8</a>)- (dependabot[bot])</li><li><strong>deps-dev:</strong> Bump <code>@​types/node</code> from24.2.0 to 24.2.1 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2645">#2645</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/a7d5f5f4919b6dbc6d3a3689887964361e8dd88f">a7d5f5f</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump actions/checkout from 4.2.2 to 5.0.0 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2646">#2646</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/5107f3abcc0c3737db51e2949f181e2c197d4d5b">5107f3a</a>)- (dependabot[bot])</li><li><strong>deps-dev:</strong> Bump <code>@​types/node</code> from24.1.0 to 24.2.0 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2640">#2640</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/f963b3f3562b00b6d2dd25efc390eb04e51ef6c6">f963b3f</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump actions/download-artifact from 4.3.0 to5.0.0 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2641">#2641</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/f956744105e18d78bba3844a1199ce43d6503017">f956744</a>)- (dependabot[bot])</li></ul><!-- raw HTML omitted --></blockquote><p>... (truncated)</p></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/tj-actions/changed-files/commit/70069877f29101175ed2b055d210fe8b1d54d7d7"><code>7006987</code></a>chore(deps): bump <code>@​octokit/rest</code> from 22.0.0 to 22.0.1 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2705">#2705</a>)</li><li><ahref="https://github.com/tj-actions/changed-files/commit/5df1bad3a527ede089326306d1296297ab0d58d2"><code>5df1bad</code></a>chore(deps-dev): bump <code>@​types/node</code> from 24.9.2 to 24.10.0(<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2707">#2707</a>)</li><li>See full diff in <ahref="https://github.com/tj-actions/changed-files/compare/0ff001de0805038ff3f118de4875002200057732...70069877f29101175ed2b055d210fe8b1d54d7d7">compareview</a></li></ul></details><br />Updates `Mattraks/delete-workflow-runs` from86d29a75093353c4c509a876c176234037c2025b to5bf9a1dac5c4d041c029f0a8370ddf0c5cb5aeb7<details><summary>Commits</summary><ul><li><ahref="https://github.com/Mattraks/delete-workflow-runs/commit/5bf9a1dac5c4d041c029f0a8370ddf0c5cb5aeb7"><code>5bf9a1d</code></a>Bug Fixes</li><li><ahref="https://github.com/Mattraks/delete-workflow-runs/commit/63b223f231f2f5bbea217100ec6d29ab24faa7a1"><code>63b223f</code></a>Supports daily retention keep a minimum number of runs per day</li><li>See full diff in <ahref="https://github.com/mattraks/delete-workflow-runs/compare/86d29a75093353c4c509a876c176234037c2025b...5bf9a1dac5c4d041c029f0a8370ddf0c5cb5aeb7">compareview</a></li></ul></details><br />Dependabot will resolve any conflicts with this PR as long as you don'talter it yourself. You can also trigger a rebase manually by commenting`@dependabot rebase`.[//]: # (dependabot-automerge-start)[//]: # (dependabot-automerge-end)---<details><summary>Dependabot commands and options</summary><br />You can trigger Dependabot actions by commenting on this PR:- `@dependabot rebase` will rebase this PR- `@dependabot recreate` will recreate this PR, overwriting any editsthat have been made to it- `@dependabot merge` will merge this PR after your CI passes on it- `@dependabot squash and merge` will squash and merge this PR afteryour CI passes on it- `@dependabot cancel merge` will cancel a previously requested mergeand block automerging- `@dependabot reopen` will reopen this PR if it is closed- `@dependabot close` will close this PR and stop Dependabot recreatingit. You can achieve the same result by closing it manually- `@dependabot show <dependency name> ignore conditions` will show allof the ignore conditions of the specified dependency- `@dependabot ignore <dependency name> major version` will close thisgroup update PR and stop Dependabot creating any more for the specificdependency's major version (unless you unignore this specificdependency's major version or upgrade to it yourself)- `@dependabot ignore <dependency name> minor version` will close thisgroup update PR and stop Dependabot creating any more for the specificdependency's minor version (unless you unignore this specificdependency's minor version or upgrade to it yourself)- `@dependabot ignore <dependency name>` will close this group update PRand stop Dependabot creating any more for the specific dependency(unless you unignore this specific dependency or upgrade to it yourself)- `@dependabot unignore <dependency name>` will remove all of the ignoreconditions of the specified dependency- `@dependabot unignore <dependency name> <ignore condition>` willremove the ignore condition of the specified dependency and ignoreconditions</details>Signed-off-by: dependabot[bot] <support@github.com>Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent5587dbc commit4cbba17

15 files changed

+45
-45
lines changed

‎.github/workflows/ci.yaml‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
tailnet-integration:${{ steps.filter.outputs.tailnet-integration }}
3636
steps:
3737
-name:Harden Runner
38-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
38+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
3939
with:
4040
egress-policy:audit
4141

@@ -157,7 +157,7 @@ jobs:
157157
runs-on:${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
158158
steps:
159159
-name:Harden Runner
160-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
160+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
161161
with:
162162
egress-policy:audit
163163

@@ -235,7 +235,7 @@ jobs:
235235
if:${{ !cancelled() }}
236236
steps:
237237
-name:Harden Runner
238-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
238+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
239239
with:
240240
egress-policy:audit
241241

@@ -292,7 +292,7 @@ jobs:
292292
timeout-minutes:20
293293
steps:
294294
-name:Harden Runner
295-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
295+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
296296
with:
297297
egress-policy:audit
298298

@@ -343,7 +343,7 @@ jobs:
343343
-windows-2022
344344
steps:
345345
-name:Harden Runner
346-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
346+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
347347
with:
348348
egress-policy:audit
349349

@@ -532,7 +532,7 @@ jobs:
532532
timeout-minutes:25
533533
steps:
534534
-name:Harden Runner
535-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
535+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
536536
with:
537537
egress-policy:audit
538538

@@ -581,7 +581,7 @@ jobs:
581581
timeout-minutes:25
582582
steps:
583583
-name:Harden Runner
584-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
584+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
585585
with:
586586
egress-policy:audit
587587

@@ -641,7 +641,7 @@ jobs:
641641
timeout-minutes:20
642642
steps:
643643
-name:Harden Runner
644-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
644+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
645645
with:
646646
egress-policy:audit
647647

@@ -668,7 +668,7 @@ jobs:
668668
timeout-minutes:20
669669
steps:
670670
-name:Harden Runner
671-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
671+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
672672
with:
673673
egress-policy:audit
674674

@@ -701,7 +701,7 @@ jobs:
701701
name:${{ matrix.variant.name }}
702702
steps:
703703
-name:Harden Runner
704-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
704+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
705705
with:
706706
egress-policy:audit
707707

@@ -773,7 +773,7 @@ jobs:
773773
if:needs.changes.outputs.site == 'true' || needs.changes.outputs.ci == 'true'
774774
steps:
775775
-name:Harden Runner
776-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
776+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
777777
with:
778778
egress-policy:audit
779779

@@ -854,7 +854,7 @@ jobs:
854854

855855
steps:
856856
-name:Harden Runner
857-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
857+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
858858
with:
859859
egress-policy:audit
860860

@@ -925,7 +925,7 @@ jobs:
925925
if:always()
926926
steps:
927927
-name:Harden Runner
928-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
928+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
929929
with:
930930
egress-policy:audit
931931

@@ -1045,7 +1045,7 @@ jobs:
10451045
runs-on:${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
10461046
steps:
10471047
-name:Harden Runner
1048-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
1048+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
10491049
with:
10501050
egress-policy:audit
10511051

@@ -1100,7 +1100,7 @@ jobs:
11001100
IMAGE:ghcr.io/coder/coder-preview:${{ steps.build-docker.outputs.tag }}
11011101
steps:
11021102
-name:Harden Runner
1103-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
1103+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
11041104
with:
11051105
egress-policy:audit
11061106

@@ -1497,7 +1497,7 @@ jobs:
14971497
if:needs.changes.outputs.db == 'true' || needs.changes.outputs.ci == 'true' || github.ref == 'refs/heads/main'
14981498
steps:
14991499
-name:Harden Runner
1500-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
1500+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
15011501
with:
15021502
egress-policy:audit
15031503

‎.github/workflows/deploy.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
verdict:${{ steps.check.outputs.verdict }}# DEPLOY or NOOP
3737
steps:
3838
-name:Harden Runner
39-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
39+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
4040
with:
4141
egress-policy:audit
4242

@@ -65,7 +65,7 @@ jobs:
6565
packages:write# to retag image as dogfood
6666
steps:
6767
-name:Harden Runner
68-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
68+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
6969
with:
7070
egress-policy:audit
7171

@@ -146,7 +146,7 @@ jobs:
146146
needs:deploy
147147
steps:
148148
-name:Harden Runner
149-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
149+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
150150
with:
151151
egress-policy:audit
152152

‎.github/workflows/docker-base.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
if:github.repository_owner == 'coder'
3939
steps:
4040
-name:Harden Runner
41-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
41+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
4242
with:
4343
egress-policy:audit
4444

‎.github/workflows/docs-ci.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
-name:Setup Node
3131
uses:./.github/actions/setup-node
3232

33-
-uses:tj-actions/changed-files@0ff001de0805038ff3f118de4875002200057732# v45.0.7
33+
-uses:tj-actions/changed-files@70069877f29101175ed2b055d210fe8b1d54d7d7# v45.0.7
3434
id:changed-files
3535
with:
3636
files:|

‎.github/workflows/dogfood.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
runs-on:${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-4' || 'ubuntu-latest' }}
2727
steps:
2828
-name:Harden Runner
29-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
29+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
3030
with:
3131
egress-policy:audit
3232

@@ -125,7 +125,7 @@ jobs:
125125
id-token:write
126126
steps:
127127
-name:Harden Runner
128-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
128+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
129129
with:
130130
egress-policy:audit
131131

‎.github/workflows/nightly-gauntlet.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
-windows-2022
2828
steps:
2929
-name:Harden Runner
30-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
30+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
3131
with:
3232
egress-policy:audit
3333

‎.github/workflows/pr-auto-assign.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
runs-on:ubuntu-latest
1616
steps:
1717
-name:Harden Runner
18-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
18+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
1919
with:
2020
egress-policy:audit
2121

‎.github/workflows/pr-cleanup.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
packages:write
2020
steps:
2121
-name:Harden Runner
22-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
22+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
2323
with:
2424
egress-policy:audit
2525

‎.github/workflows/pr-deploy.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
PR_OPEN:${{ steps.check_pr.outputs.pr_open }}
4040
steps:
4141
-name:Harden Runner
42-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
42+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
4343
with:
4444
egress-policy:audit
4545

@@ -76,7 +76,7 @@ jobs:
7676
runs-on:"ubuntu-latest"
7777
steps:
7878
-name:Harden Runner
79-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
79+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
8080
with:
8181
egress-policy:audit
8282

@@ -184,7 +184,7 @@ jobs:
184184
pull-requests:write# needed for commenting on PRs
185185
steps:
186186
-name:Harden Runner
187-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
187+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
188188
with:
189189
egress-policy:audit
190190

@@ -228,7 +228,7 @@ jobs:
228228
CODER_IMAGE_TAG:${{ needs.get_info.outputs.CODER_IMAGE_TAG }}
229229
steps:
230230
-name:Harden Runner
231-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
231+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
232232
with:
233233
egress-policy:audit
234234

@@ -288,7 +288,7 @@ jobs:
288288
PR_HOSTNAME:"pr${{ needs.get_info.outputs.PR_NUMBER }}.${{ secrets.PR_DEPLOYMENTS_DOMAIN }}"
289289
steps:
290290
-name:Harden Runner
291-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
291+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
292292
with:
293293
egress-policy:audit
294294

‎.github/workflows/release-validation.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414

1515
steps:
1616
-name:Harden Runner
17-
uses:step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a# v2.13.1
17+
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
1818
with:
1919
egress-policy:audit
2020

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp