Skip to content

build(deps): bump step-security/harden-runner from 2.20.1 to 2.21.0 - #148

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/step-security/harden-runner-2.21.0
Open

build(deps): bump step-security/harden-runner from 2.20.1 to 2.21.0#148
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/step-security/harden-runner-2.21.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 23, 2026

Copy link
Copy Markdown
Contributor

Bumps step-security/harden-runner from 2.20.1 to 2.21.0.

Release notes

Sourced from step-security/harden-runner's releases.

v2.21.0

What's Changed

  • Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.
  • Improved Support for AWS CodeBuild GitHub Actions Runners.
  • Bug fixes.

Full Changelog: step-security/harden-runner@v2.20.1...v2.21.0

Commits
  • 05e3151 Merge pull request #684 from step-security/rc-42
  • 0f37afa fix: ignore denied-endpoints on non-enterprise tier
  • 93b58ee fix: resolve cache host read-first and never downgrade egress policy
  • e7399dd fix: align deny-list mode detection with agent and log when both endpoint inp...
  • c16689f test: add denied_endpoints to Configuration fixtures and cover deny-list merge
  • 40b99cf Merge pull request #682 from rohan-stepsecurity/rp/feat/codebuild-self-v2
  • fedec02 Merge branch 'rc-42' into rp/feat/codebuild-self-v2
  • 5361fb1 feat: add build artifacts
  • 286474f feat: Support Bravo agent install on CodeBuild runners
  • 051ec05 Merge pull request #683 from h0x0er/jatin/deny-list
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 23, 2026
@dependabot
dependabot Bot requested a review from arttet as a code owner August 23, 2026 11:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 23, 2026
@github-actions

github-actions Bot commented Aug 23, 2026

Copy link
Copy Markdown
Contributor

Performance report

Passed with a regression threshold of 20%.

bash

Command Mean [ms] Min [ms] Max [ms] Relative
bash.raw 3.1 ± 0.4 2.8 3.9 1.00
bash.configured 25.1 ± 1.2 23.8 28.2 7.98 ± 1.09

nu

Command Mean [ms] Min [ms] Max [ms] Relative
nu.raw 6.1 ± 0.3 5.7 6.4 1.00
nu.configured 94.9 ± 11.5 83.2 115.6 15.62 ± 2.00

pwsh

Command Mean [ms] Min [ms] Max [ms] Relative
pwsh.raw 164.1 ± 4.9 158.2 171.1 1.00
pwsh.configured 1622.4 ± 36.4 1554.5 1663.6 9.89 ± 0.37

tmux

Command Mean [ms] Min [ms] Max [ms] Relative
tmux.raw 18.9 ± 0.5 18.4 20.0 1.00
tmux.configured 355.6 ± 10.7 341.6 377.3 18.83 ± 0.73

zsh

Command Mean [ms] Min [ms] Max [ms] Relative
zsh.raw 5.1 ± 2.4 3.1 10.6 1.00
zsh.configured 32.6 ± 3.9 27.0 39.1 6.44 ± 3.18

Regression comparison

Target Baseline ratio Current ratio Change Result
bash 8.506x 8.259x -2.89% Pass
nu 13.271x 14.824x 11.71% Pass
pwsh 11.883x 10.1x -15% Pass
tmux 22.377x 18.735x -16.27% Pass
zsh 10.288x 7.959x -22.64% Pass

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.20.1 to 2.21.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@b09bb98...05e3151)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/step-security/harden-runner-2.21.0 branch from 0290d01 to 678ed83 Compare August 23, 2026 12:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants