Skip to content

Conversation

@renovate-coveo
Copy link
Contributor

@renovate-coveo renovate-coveo bot commented Dec 15, 2025

This PR contains the following updates:

Package Type Update Change
ruby (source) uses-with minor 3.2.0 -> 3.4.8
step-security/harden-runner action minor v2.13.3 -> v2.14.0

[skip release]


Release Notes

step-security/harden-runner (step-security/harden-runner)

v2.14.0

Compare Source

What's Changed

  • Selective installation: Harden-Runner now skips installation on GitHub-hosted runners when the repository has a custom property skip_harden_runner, allowing organizations to opt out specific repos.
  • Avoid double install: The action no longer installs Harden-Runner if it’s already present on a GitHub-hosted runner, which could happen when a composite action also installs it.

Full Changelog: step-security/harden-runner@v2.13.3...v2.14.0


Configuration

📅 Schedule: Branch creation - "before 4:00am on Tuesday" in timezone America/Toronto, Automerge - "after 9:00am and before 12:00pm on tuesday, wednesday, thursday" in timezone America/Toronto.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@renovate-coveo renovate-coveo bot requested a review from a team as a code owner December 15, 2025 20:23
@renovate-coveo renovate-coveo bot requested review from jpmarceau, lavoiesl and npushkarskii and removed request for a team December 15, 2025 20:23
@renovate-coveo renovate-coveo bot changed the title chore(deps): update step-security/harden-runner action to v2.14.0 chore(deps): update non-major github actions Dec 18, 2025
@renovate-coveo renovate-coveo bot force-pushed the renovate/github-actions-non-major branch from 22e937c to c7040a9 Compare December 24, 2025 00:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant