Commit 6f22627
authored
chore(deps): update step-security/harden-runner action to v2.14.2 (#23)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[step-security/harden-runner](https://redirect.github.com/step-security/harden-runner)
| action | patch | `v2.14.1` → `v2.14.2` |
---
### Release Notes
<details>
<summary>step-security/harden-runner
(step-security/harden-runner)</summary>
###
[`v2.14.2`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.14.2)
[Compare
Source](https://redirect.github.com/step-security/harden-runner/compare/v2.14.1...v2.14.2)
##### What's Changed
Security fix: Fixed a medium severity vulnerability where outbound
network connections using sendto, sendmsg, and sendmmsg socket system
calls could bypass audit logging when using egress-policy: audit. This
issue only affects the Community Tier in audit mode; block mode and
Enterprise Tier were not affected. See
[GHSA-cpmj-h4f6-r6pq](https://redirect.github.com/step-security/harden-runner/security/advisories/GHSA-cpmj-h4f6-r6pq)
for details.
**Full Changelog**:
<step-security/harden-runner@v2.14.1...v2.14.2>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/netresearch/composer-agent-skill-plugin).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45NS4yIiwidXBkYXRlZEluVmVyIjoiNDIuOTUuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
20 | 20 | | |
21 | 21 | | |
22 | 22 | | |
23 | | - | |
| 23 | + | |
24 | 24 | | |
25 | 25 | | |
26 | 26 | | |
| |||
0 commit comments