[PR #312] [MERGED] build(deps): Bump step-security/harden-runner from 2.14.2 to 2.15.0 #304

Closed
opened 2026-02-26 18:34:11 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/decke/smtprelay/pull/312
Author: @dependabot[bot]
Created: 2/25/2026
Status: Merged
Merged: 2/26/2026
Merged by: @decke

Base: masterHead: dependabot/github_actions/step-security/harden-runner-2.15.0


📝 Commits (1)

  • 210dd72 build(deps): Bump step-security/harden-runner from 2.14.2 to 2.15.0

📊 Changes

5 files changed (+5 additions, -5 deletions)

View changed files

📝 .github/workflows/codeql-analysis.yml (+1 -1)
📝 .github/workflows/dependency-review.yml (+1 -1)
📝 .github/workflows/go.yml (+1 -1)
📝 .github/workflows/release.yaml (+1 -1)
📝 .github/workflows/scorecards.yml (+1 -1)

📄 Description

Bumps step-security/harden-runner from 2.14.2 to 2.15.0.

Release notes

Sourced from step-security/harden-runner's releases.

v2.15.0

What's Changed

Windows and macOS runner support

We are excited to announce that Harden Runner now supports Windows and macOS runners, extending runtime security beyond Linux for the first time.

Insights for Windows and macOS runners will be displayed in the same consistent format you are already familiar with from Linux runners, giving you a unified view of runtime activity across all platforms.

Full Changelog: https://github.com/step-security/harden-runner/compare/v2.14.2...v2.15.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/decke/smtprelay/pull/312 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/25/2026 **Status:** ✅ Merged **Merged:** 2/26/2026 **Merged by:** [@decke](https://github.com/decke) **Base:** `master` ← **Head:** `dependabot/github_actions/step-security/harden-runner-2.15.0` --- ### 📝 Commits (1) - [`210dd72`](https://github.com/decke/smtprelay/commit/210dd729be3ebf0a2be865bd0563b3fa44b33a24) build(deps): Bump step-security/harden-runner from 2.14.2 to 2.15.0 ### 📊 Changes **5 files changed** (+5 additions, -5 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/codeql-analysis.yml` (+1 -1) 📝 `.github/workflows/dependency-review.yml` (+1 -1) 📝 `.github/workflows/go.yml` (+1 -1) 📝 `.github/workflows/release.yaml` (+1 -1) 📝 `.github/workflows/scorecards.yml` (+1 -1) </details> ### 📄 Description Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.14.2 to 2.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/step-security/harden-runner/releases">step-security/harden-runner's releases</a>.</em></p> <blockquote> <h2>v2.15.0</h2> <h2>What's Changed</h2> <h3>Windows and macOS runner support</h3> <p>We are excited to announce that Harden Runner now supports <strong>Windows and macOS runners</strong>, extending runtime security beyond Linux for the first time.</p> <p>Insights for Windows and macOS runners will be displayed in the same consistent format you are already familiar with from Linux runners, giving you a unified view of runtime activity across all platforms.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/step-security/harden-runner/compare/v2.14.2...v2.15.0">https://github.com/step-security/harden-runner/compare/v2.14.2...v2.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/step-security/harden-runner/commit/a90bcbc6539c36a85cdfeb73f7e2f433735f215b"><code>a90bcbc</code></a> Update readme (<a href="https://redirect.github.com/step-security/harden-runner/issues/637">#637</a>)</li> <li><a href="https://github.com/step-security/harden-runner/commit/f0a59d88538059e010b6ebd90b74e2740a6d05fc"><code>f0a59d8</code></a> Release v2.15.0 (<a href="https://redirect.github.com/step-security/harden-runner/issues/639">#639</a>)</li> <li>See full diff in <a href="https://github.com/step-security/harden-runner/compare/5ef0c079ce82195b2a36a210272d6b661572d83e...a90bcbc6539c36a85cdfeb73f7e2f433735f215b">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=step-security/harden-runner&package-manager=github_actions&previous-version=2.14.2&new-version=2.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-02-26 18:34:11 +03:00
Sign in to join this conversation.
No labels
bug
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/smtprelay#304
No description provided.