Skip to content

chore(deps): bump the actions group across 1 directory with 2 updates#206

Merged
hibare merged 1 commit intomainfrom
dependabot/github_actions/main/actions-dc205ac2e0
Apr 11, 2026
Merged

chore(deps): bump the actions group across 1 directory with 2 updates#206
hibare merged 1 commit intomainfrom
dependabot/github_actions/main/actions-dc205ac2e0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 10, 2026

Bumps the actions group with 2 updates in the / directory: step-security/harden-runner and release-drafter/release-drafter.

Updates step-security/harden-runner from 2.16.1 to 2.17.0

Release notes

Sourced from step-security/harden-runner's releases.

v2.17.0

What's Changed

Policy Store Support

Added use-policy-store and api-key inputs to fetch security policies directly from the StepSecurity Policy Store. Policies can be defined and attached at the workflow, repo, org, or cluster (ARC) level, with the most granular policy taking precedence. This is the preferred method over the existing policy input which requires id-token: write permission. If no policy is found in the store, the action defaults to audit mode.

Full Changelog: step-security/harden-runner@v2.16.1...v2.17.0

Commits

Updates release-drafter/release-drafter from 7.1.1 to 7.2.0

Release notes

Sourced from release-drafter/release-drafter's releases.

v7.2.0

What's Changed

New

Bug Fixes

Maintenance

Documentation

Dependency Updates

Full Changelog: release-drafter/release-drafter@v7.1.1...v7.2.0

Commits
  • 5de9358 7.2.0
  • e50d61c chore: rebuild dist
  • d3a61d3 chore: fix npm audit vulnerabilities
  • 8bfa279 build(deps): bump lodash and @​graphql-codegen/plugin-helpers (#1589)
  • c2a8a67 chore: remove engine-strict from .npmrc to fix Dependabot resolution
  • e51e4ad chore(deps): update dependency typescript to 6.0.2 (#1587)
  • 0e7bd54 fix(deps): update dependency @​actions/github to 9.1.0 (#1586)
  • 9c0b0a8 chore(deps): update dependency yaml to 2.8.3 (#1580)
  • b27f820 chore(deps): update vitest to 4.1.4 (#1585)
  • eb90534 ci(deps): update peter-evans/create-pull-request action to v8 (#1588)
  • Additional commits viewable in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 10, 2026
@hibare
Copy link
Copy Markdown
Owner

hibare commented Apr 11, 2026

@dependabot rebase

Bumps the actions group with 2 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner) and [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter).


Updates `step-security/harden-runner` from 2.16.1 to 2.17.0
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@fe10465...f808768)

Updates `release-drafter/release-drafter` from 7.1.1 to 7.2.0
- [Release notes](https://github.com/release-drafter/release-drafter/releases)
- [Commits](release-drafter/release-drafter@139054a...5de9358)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: release-drafter/release-drafter
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot changed the title chore(deps): bump the actions group with 2 updates chore(deps): bump the actions group across 1 directory with 2 updates Apr 11, 2026
@dependabot dependabot bot force-pushed the dependabot/github_actions/main/actions-dc205ac2e0 branch from 25446a7 to 20cfadf Compare April 11, 2026 07:51
@hibare hibare merged commit f776771 into main Apr 11, 2026
6 checks passed
@dependabot dependabot bot deleted the dependabot/github_actions/main/actions-dc205ac2e0 branch April 11, 2026 07:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant