Closed dependabot[bot] closed 1 month ago
The following labels could not be found: Type: Security Patch
.
[!IMPORTANT]
Review skipped
Ignore keyword(s) in the title.
Ignored keywords (1)
* chore(deps):Please check the settings in the CodeRabbit UI or the
.coderabbit.yaml
file in this repository. To trigger a single review, invoke the@coderabbitai review
command.You can disable this status message by setting the
reviews.review_status
tofalse
in the CodeRabbit configuration file.
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?
Name | Link |
---|---|
Latest commit | 9f726ced9bf7a6552381af45ebba926a57f6acbc |
Latest deploy log | https://app.netlify.com/sites/veascan/deploys/66b06e484adf2b0008fd84c2 |
Superseded by #303.
Bumps step-security/harden-runner from 2.4.0 to 2.9.0.
Release notes
Sourced from step-security/harden-runner's releases.
... (truncated)
Commits
0d38121
Release v2.9.0 (#435)29e9ae1
Merge pull request #436 from step-security/dependabot/github_actions/actions/...9d596cf
Bump actions/upload-artifact from 3.1.3 to 4.3.46d3c2fe
Merge pull request #410 from step-security/dependabot/github_actions/ossf/sco...c2e63d3
Bump ossf/scorecard-action from 2.3.1 to 2.3.3547a5cc
Merge pull request #427 from step-security/dependabot/github_actions/step-sec...a5e1dca
Bump step-security/harden-runner from 2.8.0 to 2.8.13d32f8d
Merge pull request #426 from step-security/varunsh-coder-patch-1891104c
Update README.md17d0e2b
Merge pull request #425 from step-security/rc-9Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
PR-Codex overview
This PR updates the version of
step-security/harden-runner
tov2.9.0
in multiple workflows for enhanced security.Detailed summary
step-security/harden-runner
tov2.9.0
in various workflowsaudit
for improved security measures