⬆️upgrade(ci): Bump step-security/harden-runner from 2.2.0 to 2.6.1 in /.github/workflows

[dependabot[bot]]

Bumps step-security/harden-runner from 2.2.0 to 2.6.1.

Release notes

Sourced from step-security/harden-runner's releases.

v2.6.1

What's Changed

Release v2.6.1 by @​varunsh-coder and @​h0x0er in step-security/harden-runner#356 This release:

1. Improves the job summary markdown written by the Harden-Runner Action
2. Improves detection of cache endpoint used by the job
3. Detects use of Kubernetes mode in Actions Runner Controller (ARC) based runners
4. Updates dependencies

Full Changelog: https://github.com/step-security/harden-runner/compare/v2...v2.6.1

v2.6.0

What's Changed

Release v2.6.0 by @​varunsh-coder in step-security/harden-runner#346

This release adds support for self-hosted Virtual Machine runners (e.g. on EC2).

• Both ephemeral and persistent self-hosted VM runners are supported
• Documentation: https://docs.stepsecurity.io/harden-runner/how-tos/enable-runtime-security-vm

Full Changelog: https://github.com/step-security/harden-runner/compare/v2...v2.6.0

v2.5.1

What's Changed

• Updated default allowed endpoints to include *.actions.githubusercontent.com. GitHub Actions recently started making calls to additional sub-domains for this domain. Please update to this latest version of harden-runner to allow these new endpoints.
• Update README.md by @​varunsh-coder in step-security/harden-runner#326
• Bump step-security/harden-runner from 2.4.1 to 2.5.0 by @​dependabot in step-security/harden-runner#327

Full Changelog: https://github.com/step-security/harden-runner/compare/v2...v2.5.1

v2.5.0

What's Changed

Release v2.5.0 by @​h0x0er and @​varunsh-coder in step-security/harden-runner#325

This release:

1. Adds support for Actions Runner Controller (ARC) environment
2. Improves the job summary markdown

Full Changelog: https://github.com/step-security/harden-runner/compare/v2...v2.5.0

v2.4.1

What's Changed

Release v2.4.1 by @​varunsh-coder and @​Devils-Knight in step-security/harden-runner#309

This release

1. Shows a preview of the network events in the job summary markdown
2. Uses a fallback DNS service from Cloudflare in addition to Google DNS to improve reliability

... (truncated)

Commits

• eb238b5 Release v2.6.1 (#356)
• 2579b52 Merge pull request #350 from step-security/dependabot/github_actions/actions/...
• c11b220 Merge pull request #352 from step-security/dependabot/github_actions/ossf/sco...
• 3338abc Bump ossf/scorecard-action from 2.3.0 to 2.3.1
• 7523e86 Bump actions/checkout from 4.1.0 to 4.1.1
• bf4cac9 Merge pull request #349 from step-security/dependabot/github_actions/ossf/sco...
• ab35e30 Bump ossf/scorecard-action from 2.2.0 to 2.3.0
• 02adcd6 Merge pull request #348 from step-security/dependabot/github_actions/step-sec...
• cddb4d2 Bump step-security/harden-runner from 2.5.1 to 2.6.0
• d7f96b7 Merge pull request #347 from step-security/varunsh-coder-patch-1
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot[bot]]

The following labels could not be found: source:💚github_actions, source:🤖bot.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[github-actions[bot]]

The Pull Request has been marked as stale due to inactivity. Please show activity within 8 days or it will be automatically closed.

[github-actions[bot]]

The Pull Request has been marked as stale due to inactivity. Please show activity within 8 days or it will be automatically closed.

[github-actions[bot]]

The Pull Request has been automatically closed.

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.