Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 9, 2025

This PR contains the following updates:

Package Type Update Change
step-security/harden-runner action minor v2.13.3 -> v2.14.0

Release Notes

step-security/harden-runner (step-security/harden-runner)

v2.14.0

Compare Source

What's Changed
  • Selective installation: Harden-Runner now skips installation on GitHub-hosted runners when the repository has a custom property skip_harden_runner, allowing organizations to opt out specific repos.
  • Avoid double install: The action no longer installs Harden-Runner if it’s already present on a GitHub-hosted runner, which could happen when a composite action also installs it.

Full Changelog: step-security/harden-runner@v2.13.3...v2.14.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Dec 9, 2025
@github-actions github-actions bot added automation Changes to workflows size/s labels Dec 9, 2025
@renovate renovate bot merged commit 82ddfeb into master Dec 10, 2025
26 checks passed
@renovate renovate bot deleted the renovate/step-security-harden-runner-2.x branch December 10, 2025 04:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automation Changes to workflows dependencies Pull requests that update a dependency file size/M size/s

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant