From e64d32a4e7aca0f9807f24515c75ba15bf945a77 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 3 Nov 2026 16:35:16 +0000 Subject: [PATCH] chore(github-actions): bump the github-actions group with 2 updates Bumps the github-actions group with 2 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner) and [eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml](https://github.com/eclipse-score/cicd-workflows). Updates `step-security/harden-runner` from 2.22.2 to 2.22.3 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/v2.22.2...v2.22.3) Updates `eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml` from 3f61217cfa69b1d40b366049ace7fc63932e63c2 to 4c70b38c9cb40c96ec63320190b9db9091648968 - [Release notes](https://github.com/eclipse-score/cicd-workflows/releases) - [Commits](https://github.com/eclipse-score/cicd-workflows/compare/3f61217cfa69b1d40b366049ace7fc63932e63c2...4c70b38c9cb40c96ec63320190b9db9091648968) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.22.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml dependency-version: 4c70b38c9cb40c96ec63320190b9db9091648968 dependency-type: direct:production dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/_test.yml | 4 ++-- .github/workflows/docs-publish.yml | 2 +- .github/workflows/downstream_compatibility.yml | 2 +- .github/workflows/link_check.yml | 2 +- .github/workflows/test_links.yml | 2 +- 5 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml index 5f86e9724..e9431da17 100644 --- a/.github/workflows/_test.yml +++ b/.github/workflows/_test.yml @@ -31,7 +31,7 @@ jobs: steps: - name: 🛡️ Harden Runner if: github.repository_owner == 'eclipse-score' - uses: step-security/harden-runner@v2.22.2 + uses: step-security/harden-runner@v2.22.3 with: egress-policy: audit @@ -88,7 +88,7 @@ jobs: steps: - name: 🛡️ Harden Runner if: github.repository_owner == 'eclipse-score' - uses: step-security/harden-runner@v2.22.2 + uses: step-security/harden-runner@v2.22.3 with: egress-policy: audit diff --git a/.github/workflows/docs-publish.yml b/.github/workflows/docs-publish.yml index e7d382022..302cc8b00 100644 --- a/.github/workflows/docs-publish.yml +++ b/.github/workflows/docs-publish.yml @@ -21,7 +21,7 @@ on: jobs: docs-deploy: if: github.event.workflow_run.conclusion == 'success' - uses: eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml@3f61217cfa69b1d40b366049ace7fc63932e63c2 # main 08/10/2026 + uses: eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml@4c70b38c9cb40c96ec63320190b9db9091648968 # main 08/10/2026 permissions: actions: read contents: write diff --git a/.github/workflows/downstream_compatibility.yml b/.github/workflows/downstream_compatibility.yml index ea3afe9f8..5408c3050 100644 --- a/.github/workflows/downstream_compatibility.yml +++ b/.github/workflows/downstream_compatibility.yml @@ -73,7 +73,7 @@ jobs: steps: - name: 🛡️ Harden Runner if: github.repository_owner == 'eclipse-score' - uses: step-security/harden-runner@v2.22.2 + uses: step-security/harden-runner@v2.22.3 with: egress-policy: audit diff --git a/.github/workflows/link_check.yml b/.github/workflows/link_check.yml index e1670b20d..adf1a80f1 100644 --- a/.github/workflows/link_check.yml +++ b/.github/workflows/link_check.yml @@ -28,7 +28,7 @@ jobs: steps: - name: 🛡️ Harden Runner if: github.repository_owner == 'eclipse-score' - uses: step-security/harden-runner@v2.22.2 + uses: step-security/harden-runner@v2.22.3 with: egress-policy: audit - name: Checkout repo diff --git a/.github/workflows/test_links.yml b/.github/workflows/test_links.yml index d83e71ad6..f1c9c139e 100644 --- a/.github/workflows/test_links.yml +++ b/.github/workflows/test_links.yml @@ -23,7 +23,7 @@ jobs: steps: - name: 🛡️ Harden Runner if: github.repository_owner == 'eclipse-score' - uses: step-security/harden-runner@v2.22.2 + uses: step-security/harden-runner@v2.22.3 with: egress-policy: audit