From 6a630fff10d015a47908c7dce309d01e4dd64b7c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 5 Nov 2026 09:07:20 +0000 Subject: [PATCH] build(deps): bump the github-actions group across 1 directory with 2 updates Bumps the github-actions group with 2 updates in the / directory: [step-security/harden-runner](https://github.com/step-security/harden-runner) and [crate-ci/typos](https://github.com/crate-ci/typos). Updates `step-security/harden-runner` from 2.22.2 to 2.22.3 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/dc2769abcc0fcfbadfc1df54081c1608579ef6b2...46b06cea07f9e64621fdf066ba77ac6915163d43) Updates `crate-ci/typos` from 1.51.1 to 1.52.0 - [Release notes](https://github.com/crate-ci/typos/releases) - [Changelog](https://github.com/crate-ci/typos/blob/main/CHANGELOG.md) - [Commits](https://github.com/crate-ci/typos/compare/7f9d0819ca1c008ade73f4b41fa9d258d48f605b...4c8b7f51ca60df14e3c5ca82770dfbbe6c3dae85) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.22.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: crate-ci/typos dependency-version: 1.52.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/apply-rulesets.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/reusable-test-and-build.yml | 22 +++++++++---------- .github/workflows/sync-agent-instructions.yml | 6 ++--- .../workflows/test-and-build-on-merged.yml | 4 ++-- .github/workflows/test-and-build-on-pr.yml | 4 ++-- .github/workflows/test-and-build-on-push.yml | 6 ++--- .github/workflows/verify-superpowers.yml | 4 ++-- .github/workflows/web-ci.yml | 4 ++-- 9 files changed, 27 insertions(+), 27 deletions(-) diff --git a/.github/workflows/apply-rulesets.yml b/.github/workflows/apply-rulesets.yml index 7aa7f07e..0da92197 100644 --- a/.github/workflows/apply-rulesets.yml +++ b/.github/workflows/apply-rulesets.yml @@ -72,7 +72,7 @@ jobs: fi - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: block disable-sudo: true diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3f1032ca..7206ddfc 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -28,7 +28,7 @@ jobs: timeout-minutes: 10 steps: - name: Harden runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit diff --git a/.github/workflows/reusable-test-and-build.yml b/.github/workflows/reusable-test-and-build.yml index 3e0fa2aa..63d6b50d 100644 --- a/.github/workflows/reusable-test-and-build.yml +++ b/.github/workflows/reusable-test-and-build.yml @@ -132,7 +132,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true @@ -157,7 +157,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true @@ -183,7 +183,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true @@ -256,7 +256,7 @@ jobs: run: actionlint -color - name: Check typos - uses: crate-ci/typos@7f9d0819ca1c008ade73f4b41fa9d258d48f605b # v1.51.1 + uses: crate-ci/typos@4c8b7f51ca60df14e3c5ca82770dfbbe6c3dae85 # v1.52.0 guard-api-key: name: Guard API Key @@ -269,7 +269,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true @@ -313,7 +313,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true @@ -386,7 +386,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true @@ -493,7 +493,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true @@ -534,7 +534,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true @@ -603,7 +603,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true @@ -669,7 +669,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true diff --git a/.github/workflows/sync-agent-instructions.yml b/.github/workflows/sync-agent-instructions.yml index 9c0241d8..509e9f48 100644 --- a/.github/workflows/sync-agent-instructions.yml +++ b/.github/workflows/sync-agent-instructions.yml @@ -84,7 +84,7 @@ jobs: pull-requests: write steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit @@ -148,7 +148,7 @@ jobs: APM_SHA256: a0b896e8cbdd10441125e989aa19d180c62052eda7c8aa850feb367805d1256f steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit @@ -259,7 +259,7 @@ jobs: pull-requests: write steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit diff --git a/.github/workflows/test-and-build-on-merged.yml b/.github/workflows/test-and-build-on-merged.yml index 0c113a9f..ed71df98 100644 --- a/.github/workflows/test-and-build-on-merged.yml +++ b/.github/workflows/test-and-build-on-merged.yml @@ -94,7 +94,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true @@ -127,7 +127,7 @@ jobs: steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true diff --git a/.github/workflows/test-and-build-on-pr.yml b/.github/workflows/test-and-build-on-pr.yml index e2b0c1e9..110f8084 100644 --- a/.github/workflows/test-and-build-on-pr.yml +++ b/.github/workflows/test-and-build-on-pr.yml @@ -98,7 +98,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true @@ -135,7 +135,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true diff --git a/.github/workflows/test-and-build-on-push.yml b/.github/workflows/test-and-build-on-push.yml index 2240ca45..d7afa3bf 100644 --- a/.github/workflows/test-and-build-on-push.yml +++ b/.github/workflows/test-and-build-on-push.yml @@ -98,7 +98,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true @@ -131,7 +131,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true @@ -167,7 +167,7 @@ jobs: steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} disable-sudo: true diff --git a/.github/workflows/verify-superpowers.yml b/.github/workflows/verify-superpowers.yml index 67dafdb0..060c5098 100644 --- a/.github/workflows/verify-superpowers.yml +++ b/.github/workflows/verify-superpowers.yml @@ -73,7 +73,7 @@ jobs: timeout-minutes: 5 steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} @@ -96,7 +96,7 @@ jobs: timeout-minutes: 10 steps: - name: Harden Runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ env.HARDEN_RUNNER_EGRESS_POLICY }} diff --git a/.github/workflows/web-ci.yml b/.github/workflows/web-ci.yml index 5fbbb6a6..3e2eec6e 100644 --- a/.github/workflows/web-ci.yml +++ b/.github/workflows/web-ci.yml @@ -50,7 +50,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit - name: Checkout @@ -81,7 +81,7 @@ jobs: continue-on-error: true steps: - name: Harden runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit - name: Checkout