Skip to content

Update step-security/harden-runner action to v2.14.2#1639

Merged
JamieMagee merged 1 commit intomainfrom
renovate/step-security-harden-runner-2.x
Feb 18, 2026
Merged

Update step-security/harden-runner action to v2.14.2#1639
JamieMagee merged 1 commit intomainfrom
renovate/step-security-harden-runner-2.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 18, 2026

This PR contains the following updates:

Package Type Update Change
step-security/harden-runner action patch v2.14.0v2.14.2

Release Notes

step-security/harden-runner (step-security/harden-runner)

v2.14.2

Compare Source

What's Changed

Security fix: Fixed a medium severity vulnerability where outbound network connections using sendto, sendmsg, and sendmmsg socket system calls could bypass audit logging when using egress-policy: audit. This issue only affects the Community Tier in audit mode; block mode and Enterprise Tier were not affected. See GHSA-cpmj-h4f6-r6pq for details.

Full Changelog: step-security/harden-runner@v2.14.1...v2.14.2

v2.14.1

Compare Source

What's Changed

  1. In some self-hosted environments, the agent could briefly fall back to public DNS resolvers during startup if the system DNS was not yet available. This behavior was unintended for GitHub-hosted runners and has now been fixed to prevent any use of public DNS resolvers.

  2. Fixed npm audit vulnerabilities

Full Changelog: step-security/harden-runner@v2.14.0...v2.14.1


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner February 18, 2026 05:44
@renovate renovate bot requested a review from pauld-msft February 18, 2026 05:44
@JamieMagee JamieMagee enabled auto-merge (squash) February 18, 2026 05:46
@codecov
Copy link

codecov bot commented Feb 18, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.7%. Comparing base (813f548) to head (f05ad7f).
⚠️ Report is 12 commits behind head on main.

Additional details and impacted files
@@          Coverage Diff          @@
##            main   #1639   +/-   ##
=====================================
  Coverage   90.7%   90.7%           
=====================================
  Files        444     444           
  Lines      39710   39710           
  Branches    2418    2418           
=====================================
+ Hits       36029   36030    +1     
  Misses      3187    3187           
+ Partials     494     493    -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@JamieMagee JamieMagee merged commit da0e99f into main Feb 18, 2026
26 checks passed
@JamieMagee JamieMagee deleted the renovate/step-security-harden-runner-2.x branch February 18, 2026 07:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant