Update Dependencies (all updates)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/setup-python	action	minor	v6.2.0 → v6.3.0
aws-actions/configure-aws-credentials	action	minor	v6.1.0 → v6.2.1	v6.2.2
hashicorp/setup-terraform (changelog)	action	digest	5e8dbf3 → dfe3c3f
step-security/harden-runner	action	patch	v2.19.1 → v2.19.4	v2.20.0

---

Release Notes

actions/setup-python (actions/setup-python)

v6.3.0

Compare Source

What's Changed

Enhancement

• Add RHEL support and include Linux distro in cache keys by @​priyagupta108 in #​1323
• Fix pip cache error handling on Windows by @​priyagupta108 in #​1040

Dependency update

• Upgrade minimatch from 3.1.2 to 3.1.5 by @​dependabot in #​1281
• Upgrade actions dependencies by @​gowridurgad with @​Copilot in #​1303
• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in #​1324
• Upgrade dependency versions and test workflow configuration by @​HarithaVattikuti in #​1322

Documentation

• Update advanced-usage.md by @​Dunky-Z in #​811

New Contributors

• @​gowridurgad with @​Copilot made their first contribution in #​1303
• @​jasongin made their first contribution in #​1324
• @​Dunky-Z made their first contribution in #​811

Full Changelog: actions/setup-python@v6...v6.3.0

aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)

v6.2.1

Compare Source

Bug Fixes

• enforce allowed-account-ids on all auth paths (#​1847) (4d281fb)

v6.2.0

Compare Source

Features

• add additional session tags by default (#​1775) (e0ba768)
• add more retry logic and better logging (#​1764) (540d0c1)
• add regex validation to role-session-name (#​1765) (e354499)
• Allow custom session tags to be passed when assuming a role (#​1759) (61f50f6)
• expose run id in STS client user-agent (#​1774) (29d1be3)
• support custom STS endpoints (#​1762) (8d52d05)

Bug Fixes

• skip credential check on output-env-credentials: false (#​1778) (58e7c47)
• assumeRole failing from session tag size too large (#​1808) (d6f5dc3)

v6.1.3

Compare Source

Bug Fixes

• fix: allow kubelet token symlink in #​1805

v6.1.2

Compare Source

Bug Fixes

• additional filesystem checks (#​1799) (c39f282)

v6.1.1

Compare Source

What's Changed

• chore(deps-dev): bump esbuild from 0.27.4 to 0.28.0 by @​dependabot[bot] in #​1722
• chore(deps-dev): bump @​types/node from 25.5.0 to 25.5.2 by @​dependabot[bot] in #​1723
• chore(deps-dev): bump @​smithy/property-provider from 4.2.12 to 4.2.13 by @​dependabot[bot] in #​1724
• chore(deps): bump proxy-agent from 8.0.0 to 8.0.1 by @​dependabot[bot] in #​1726
• chore(deps): bump @​smithy/node-http-handler from 4.5.1 to 4.5.2 by @​dependabot[bot] in #​1725
• chore(deps): bump @​aws-sdk/client-sts from 3.1020.0 to 3.1025.0 by @​dependabot[bot] in #​1727
• chore(deps): bump basic-ftp from 5.2.0 to 5.2.1 by @​dependabot[bot] in #​1728
• chore(deps): bump basic-ftp from 5.2.1 to 5.2.2 by @​dependabot[bot] in #​1729
• chore(deps-dev): bump @​types/node from 25.5.2 to 25.6.0 by @​dependabot[bot] in #​1730
• chore(deps-dev): bump @​aws-sdk/credential-provider-env from 3.972.24 to 3.972.25 by @​dependabot[bot] in #​1733
• chore(deps): bump @​aws-sdk/client-sts from 3.1025.0 to 3.1030.0 by @​dependabot[bot] in #​1732
• chore(deps-dev): bump @​biomejs/biome from 2.4.10 to 2.4.11 by @​dependabot[bot] in #​1734
• chore(deps): bump basic-ftp from 5.2.2 to 5.3.0 by @​dependabot[bot] in #​1736
• chore(deps-dev): bump memfs from 4.57.1 to 4.57.2 by @​dependabot[bot] in #​1737
• chore(deps-dev): bump typescript from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​1740
• chore(deps-dev): bump @​smithy/property-provider from 4.2.13 to 4.2.14 by @​dependabot[bot] in #​1741
• chore(deps-dev): bump @​aws-sdk/credential-provider-env from 3.972.25 to 3.972.28 by @​dependabot[bot] in #​1742
• chore(deps): bump @​aws-sdk/client-sts from 3.1030.0 to 3.1033.0 by @​dependabot[bot] in #​1743
• chore(deps-dev): bump @​biomejs/biome from 2.4.11 to 2.4.12 by @​dependabot[bot] in #​1739
• chore(deps-dev): bump @​biomejs/biome from 2.4.12 to 2.4.13 by @​dependabot[bot] in #​1747
• chore(deps): bump postcss from 8.5.6 to 8.5.12 by @​dependabot[bot] in #​1752
• chore(deps): bump @​smithy/node-http-handler from 4.6.0 to 4.6.1 by @​dependabot[bot] in #​1750
• chore(deps-dev): bump @​aws-sdk/credential-provider-env from 3.972.28 to 3.972.32 by @​dependabot[bot] in #​1751
• chore(deps): bump @​aws-sdk/client-sts from 3.1033.0 to 3.1038.0 by @​dependabot[bot] in #​1749
• chore: release 6.1.1 by @​lehmanmj in #​1757

Full Changelog: aws-actions/configure-aws-credentials@v6...v6.1.1

step-security/harden-runner (step-security/harden-runner)

v2.19.4

Compare Source

What's Changed

• Improvements for HTTPS Monitoring for the Enterprise tier of Harden Runner

Full Changelog: step-security/harden-runner@v2.19.3...v2.19.4

v2.19.3

Compare Source

What's Changed

• Default to audit mode when api-key missing with use-policy-store by @​varunsh-coder in #​665

Full Changelog: step-security/harden-runner@v2.19.2...v2.19.3

v2.19.2

Compare Source

What's Changed

• Update the Harden Runner agent for enterprise tier to use go 1.26 and fix minor bugs.

Full Changelog: step-security/harden-runner@v2.19.1...v2.19.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Monday (* * * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.