From 3a4be66eb2d52ca1f937e8d2e224b73b211863f3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 18 May 2026 01:27:36 +0000 Subject: [PATCH] chore: Bump step-security/harden-runner from 2.14.2 to 2.19.3 Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.14.2 to 2.19.3. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/5ef0c079ce82195b2a36a210272d6b661572d83e...ab7a9404c0f3da075243ca237b5fac12c98deaa5) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.19.3 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/000-user-release.yaml | 10 +++++----- .github/workflows/800-call-run-e2e-tests.yaml | 2 +- .github/workflows/800-call-run-integration-tests.yaml | 2 +- .github/workflows/800-call-run-unit-tests.yaml | 2 +- .github/workflows/flow-pull-request-formatting.yaml | 4 ++-- 5 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/000-user-release.yaml b/.github/workflows/000-user-release.yaml index 18b0dd4d3..046951661 100644 --- a/.github/workflows/000-user-release.yaml +++ b/.github/workflows/000-user-release.yaml @@ -56,7 +56,7 @@ jobs: tag: ${{ steps.prepare.outputs.tag }} steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 + uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3 with: egress-policy: audit @@ -165,7 +165,7 @@ jobs: if: needs.prepare-release.outputs.hasPublishWork == 'true' steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 + uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3 with: egress-policy: audit @@ -204,7 +204,7 @@ jobs: matrix: ${{ fromJson(needs.prepare-release.outputs.publishMatrix) }} steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 + uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3 with: egress-policy: audit @@ -255,7 +255,7 @@ jobs: && inputs.dry-run-enabled != true steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 + uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3 with: egress-policy: audit @@ -298,7 +298,7 @@ jobs: matrix: ${{ fromJson(needs.prepare-release.outputs.publishMatrix) }} steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 + uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3 with: egress-policy: audit diff --git a/.github/workflows/800-call-run-e2e-tests.yaml b/.github/workflows/800-call-run-e2e-tests.yaml index 6108cacd5..a3e00185b 100644 --- a/.github/workflows/800-call-run-e2e-tests.yaml +++ b/.github/workflows/800-call-run-e2e-tests.yaml @@ -26,7 +26,7 @@ jobs: E2E_LLM_PROVIDER: ${{ vars.E2E_LLM_PROVIDER }} steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 + uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3 with: egress-policy: audit diff --git a/.github/workflows/800-call-run-integration-tests.yaml b/.github/workflows/800-call-run-integration-tests.yaml index b41973b88..57ffce4f8 100644 --- a/.github/workflows/800-call-run-integration-tests.yaml +++ b/.github/workflows/800-call-run-integration-tests.yaml @@ -26,7 +26,7 @@ jobs: E2E_LLM_PROVIDER: ${{ vars.E2E_LLM_PROVIDER }} steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 + uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3 with: egress-policy: audit diff --git a/.github/workflows/800-call-run-unit-tests.yaml b/.github/workflows/800-call-run-unit-tests.yaml index 024397fb9..a22287de0 100644 --- a/.github/workflows/800-call-run-unit-tests.yaml +++ b/.github/workflows/800-call-run-unit-tests.yaml @@ -17,7 +17,7 @@ jobs: runs-on: hedera-agent-linux-medium steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 + uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3 with: egress-policy: audit diff --git a/.github/workflows/flow-pull-request-formatting.yaml b/.github/workflows/flow-pull-request-formatting.yaml index e4d4e37f5..6422ce23b 100644 --- a/.github/workflows/flow-pull-request-formatting.yaml +++ b/.github/workflows/flow-pull-request-formatting.yaml @@ -31,7 +31,7 @@ jobs: runs-on: hedera-agent-linux-medium steps: - name: Harden Runner - uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 + uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3 with: egress-policy: audit @@ -45,7 +45,7 @@ jobs: runs-on: hedera-agent-linux-medium steps: - name: Harden Runner - uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 + uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3 with: egress-policy: audit