From 7f8ee244268b19ff147af5904a7a72279c5c59e6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 Dec 2025 20:20:16 +0000 Subject: [PATCH] Chore: Bump step-security/harden-runner from 2.13.2 to 2.13.3 Bumps step-security/harden-runner from 2.13.2 to 2.13.3. ## Release notes Sourced from step-security/harden-runner's releases. v2.13.3 What's Changed Fixed an issue where process events were not uploaded in certain edge cases. Full Changelog: https://github.com/step-security/harden-runner/compare/v2.13.2...v2.13.3 ## Commits df199fb Merge pull request #620 from step-security/rc-29 03d096a update agent 4090107 fix: update agent See full diff in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] Signed-off-by: oran.gh2gerrit Change-Id: I47ae9a8fde850c6570ebed565b3508dd05419a65 GitHub-PR: https://github.com/o-ran-sc/it-dep/pull/24 GitHub-Hash: 0b246d0fcaea1d10 --- .github/workflows/gerrit-merge-itdep.yaml | 2 +- .github/workflows/gerrit-merge-release-itdep.yaml | 2 +- .github/workflows/gerrit-verify-itdep.yaml | 2 +- .github/workflows/github2gerrit.yaml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/gerrit-merge-itdep.yaml b/.github/workflows/gerrit-merge-itdep.yaml index 21179ac7..e14472ca 100644 --- a/.github/workflows/gerrit-merge-itdep.yaml +++ b/.github/workflows/gerrit-merge-itdep.yaml @@ -92,7 +92,7 @@ jobs: timeout-minutes: 20 steps: # yamllint disable-line rule:line-length - - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2 + - uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3 with: egress-policy: audit diff --git a/.github/workflows/gerrit-merge-release-itdep.yaml b/.github/workflows/gerrit-merge-release-itdep.yaml index 3b1bc115..c3e2944e 100644 --- a/.github/workflows/gerrit-merge-release-itdep.yaml +++ b/.github/workflows/gerrit-merge-release-itdep.yaml @@ -115,7 +115,7 @@ jobs: timeout-minutes: 20 steps: # yamllint disable-line rule:line-length - - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2 + - uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3 with: egress-policy: audit diff --git a/.github/workflows/gerrit-verify-itdep.yaml b/.github/workflows/gerrit-verify-itdep.yaml index 7d7f898c..c851ccd6 100644 --- a/.github/workflows/gerrit-verify-itdep.yaml +++ b/.github/workflows/gerrit-verify-itdep.yaml @@ -104,7 +104,7 @@ jobs: timeout-minutes: 15 steps: # yamllint disable-line rule:line-length - - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2 + - uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3 with: egress-policy: audit diff --git a/.github/workflows/github2gerrit.yaml b/.github/workflows/github2gerrit.yaml index b58b72d7..7b01b8aa 100644 --- a/.github/workflows/github2gerrit.yaml +++ b/.github/workflows/github2gerrit.yaml @@ -41,7 +41,7 @@ jobs: steps: # Harden the runner used by this workflow # yamllint disable-line rule:line-length - - uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2 + - uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3 name: 'Harden runner' with: egress-policy: audit -- 2.16.6