Skip to content

Bump the github-actions group across 1 directory with 7 updates#215

Merged
steve-downey merged 1 commit intomainfrom
dependabot/github_actions/github-actions-5e74253f8f
Apr 26, 2026
Merged

Bump the github-actions group across 1 directory with 7 updates#215
steve-downey merged 1 commit intomainfrom
dependabot/github_actions/github-actions-5e74253f8f

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 26, 2026

Bumps the github-actions group with 7 updates in the / directory:

Package From To
step-security/harden-runner 2.18.0 2.19.0
bemanproject/infra-workflows/.github/workflows/reusable-beman-submodule-check.yml 1.5.0 1.5.3
bemanproject/infra-workflows/.github/workflows/reusable-beman-preset-test.yml 1.5.1 1.5.3
bemanproject/infra-workflows/.github/workflows/reusable-beman-build-and-test.yml 1.5.1 1.5.3
bemanproject/infra-workflows/.github/workflows/reusable-beman-create-issue-when-fault.yml 1.5.1 1.5.3
bemanproject/infra-workflows/.github/workflows/reusable-beman-pre-commit.yml 1.5.1 1.5.3
bemanproject/infra-workflows/.github/workflows/reusable-beman-update-pre-commit.yml 1.5.1 1.5.3

Updates step-security/harden-runner from 2.18.0 to 2.19.0

Release notes

Sourced from step-security/harden-runner's releases.

v2.19.0

What's Changed

New Runner Support

Harden-Runner now supports Depot, Blacksmith, Namespace, and WarpBuild runners with the same egress monitoring, runtime monitoring, and policy enforcement available on GitHub-hosted runners.

Automated Incident Response for Supply Chain Attacks

  • Global block list: Outbound connections to known malicious domains and IPs are now blocked even in audit mode.
  • System-defined detection rules: Harden-Runner will trigger lockdown mode when a high risk event is detected during an active supply chain attack (for example, a process reading the memory of the runner worker process, a common technique for stealing GitHub Actions secrets).

Bug Fixes

Windows and macOS: stability and reliability fixes

Full Changelog: step-security/harden-runner@v2.18.0...v2.19.0

Commits

Updates bemanproject/infra-workflows/.github/workflows/reusable-beman-submodule-check.yml from 1.5.0 to 1.5.3

Commits
  • 503ac65 Replace pre-commit/action with direct shell steps
  • b0c07a1 Bump actions/setup-python to v6
  • 70a6538 Bump TheMrMilchmann/setup-msvc-dev to v4
  • 4dff699 Bump to v6
  • a1071cf Update actions/checkout version
  • See full diff in compare view

Updates bemanproject/infra-workflows/.github/workflows/reusable-beman-preset-test.yml from 1.5.1 to 1.5.3

Commits
  • 503ac65 Replace pre-commit/action with direct shell steps
  • b0c07a1 Bump actions/setup-python to v6
  • 70a6538 Bump TheMrMilchmann/setup-msvc-dev to v4
  • See full diff in compare view

Updates bemanproject/infra-workflows/.github/workflows/reusable-beman-build-and-test.yml from 1.5.1 to 1.5.3

Commits
  • 503ac65 Replace pre-commit/action with direct shell steps
  • b0c07a1 Bump actions/setup-python to v6
  • 70a6538 Bump TheMrMilchmann/setup-msvc-dev to v4
  • See full diff in compare view

Updates bemanproject/infra-workflows/.github/workflows/reusable-beman-create-issue-when-fault.yml from 1.5.1 to 1.5.3

Commits
  • 503ac65 Replace pre-commit/action with direct shell steps
  • b0c07a1 Bump actions/setup-python to v6
  • 70a6538 Bump TheMrMilchmann/setup-msvc-dev to v4
  • See full diff in compare view

Updates bemanproject/infra-workflows/.github/workflows/reusable-beman-pre-commit.yml from 1.5.1 to 1.5.3

Commits
  • 503ac65 Replace pre-commit/action with direct shell steps
  • b0c07a1 Bump actions/setup-python to v6
  • 70a6538 Bump TheMrMilchmann/setup-msvc-dev to v4
  • See full diff in compare view

Updates bemanproject/infra-workflows/.github/workflows/reusable-beman-update-pre-commit.yml from 1.5.1 to 1.5.3

Commits
  • 503ac65 Replace pre-commit/action with direct shell steps
  • b0c07a1 Bump actions/setup-python to v6
  • 70a6538 Bump TheMrMilchmann/setup-msvc-dev to v4
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 26, 2026
@dependabot dependabot Bot requested a review from steve-downey as a code owner April 26, 2026 01:17
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Apr 26, 2026
@dependabot dependabot Bot requested review from camio and neatudarius as code owners April 26, 2026 01:17
@coveralls
Copy link
Copy Markdown

coveralls commented Apr 26, 2026

Coverage Report for CI Build 24947094464

Coverage increased (+0.1%) to 99.159%

Details

  • Coverage increased (+0.1%) from the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • 2 coverage regressions across 1 file.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

2 previously-covered lines in 1 file lost coverage.

File Lines Losing Coverage Coverage
include/beman/optional/optional.hpp 2 99.0%

Coverage Stats

Coverage Status
Relevant Lines: 2496
Covered Lines: 2475
Line Coverage: 99.16%
Coverage Strength: 24236.29 hits per line

💛 - Coveralls

@steve-downey
Copy link
Copy Markdown
Member

@dependabot rebase

Bumps the github-actions group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.18.0` | `2.19.0` |
| [bemanproject/infra-workflows/.github/workflows/reusable-beman-submodule-check.yml](https://github.com/bemanproject/infra-workflows) | `1.5.0` | `1.5.3` |
| [bemanproject/infra-workflows/.github/workflows/reusable-beman-preset-test.yml](https://github.com/bemanproject/infra-workflows) | `1.5.1` | `1.5.3` |
| [bemanproject/infra-workflows/.github/workflows/reusable-beman-build-and-test.yml](https://github.com/bemanproject/infra-workflows) | `1.5.1` | `1.5.3` |
| [bemanproject/infra-workflows/.github/workflows/reusable-beman-create-issue-when-fault.yml](https://github.com/bemanproject/infra-workflows) | `1.5.1` | `1.5.3` |
| [bemanproject/infra-workflows/.github/workflows/reusable-beman-pre-commit.yml](https://github.com/bemanproject/infra-workflows) | `1.5.1` | `1.5.3` |
| [bemanproject/infra-workflows/.github/workflows/reusable-beman-update-pre-commit.yml](https://github.com/bemanproject/infra-workflows) | `1.5.1` | `1.5.3` |



Updates `step-security/harden-runner` from 2.18.0 to 2.19.0
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@6c3c2f2...8d3c67d)

Updates `bemanproject/infra-workflows/.github/workflows/reusable-beman-submodule-check.yml` from 1.5.0 to 1.5.3
- [Commits](bemanproject/infra-workflows@82c1c6c...503ac65)

Updates `bemanproject/infra-workflows/.github/workflows/reusable-beman-preset-test.yml` from 1.5.1 to 1.5.3
- [Commits](bemanproject/infra-workflows@4dff699...503ac65)

Updates `bemanproject/infra-workflows/.github/workflows/reusable-beman-build-and-test.yml` from 1.5.1 to 1.5.3
- [Commits](bemanproject/infra-workflows@4dff699...503ac65)

Updates `bemanproject/infra-workflows/.github/workflows/reusable-beman-create-issue-when-fault.yml` from 1.5.1 to 1.5.3
- [Commits](bemanproject/infra-workflows@4dff699...503ac65)

Updates `bemanproject/infra-workflows/.github/workflows/reusable-beman-pre-commit.yml` from 1.5.1 to 1.5.3
- [Commits](bemanproject/infra-workflows@4dff699...503ac65)

Updates `bemanproject/infra-workflows/.github/workflows/reusable-beman-update-pre-commit.yml` from 1.5.1 to 1.5.3
- [Commits](bemanproject/infra-workflows@4dff699...503ac65)

---
updated-dependencies:
- dependency-name: bemanproject/infra-workflows/.github/workflows/reusable-beman-build-and-test.yml
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: bemanproject/infra-workflows/.github/workflows/reusable-beman-create-issue-when-fault.yml
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: bemanproject/infra-workflows/.github/workflows/reusable-beman-pre-commit.yml
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: bemanproject/infra-workflows/.github/workflows/reusable-beman-preset-test.yml
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: bemanproject/infra-workflows/.github/workflows/reusable-beman-submodule-check.yml
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: bemanproject/infra-workflows/.github/workflows/reusable-beman-update-pre-commit.yml
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: step-security/harden-runner
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the github-actions group with 7 updates Bump the github-actions group across 1 directory with 7 updates Apr 26, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/github-actions-5e74253f8f branch from 2eafe5d to 9291e86 Compare April 26, 2026 03:17
@steve-downey steve-downey merged commit 16621c9 into main Apr 26, 2026
99 checks passed
@steve-downey steve-downey deleted the dependabot/github_actions/github-actions-5e74253f8f branch April 26, 2026 03:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants