chore(deps): update step-security/harden-runner action to v2.19.0 (#1015)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [step-security/harden-runner](https://redirect.github.com/step-security/harden-runner) | action | minor | `v2.18.0` → `v2.19.0` | --- ### Release Notes <details> <summary>step-security/harden-runner (step-security/harden-runner)</summary> ### [`v2.19.0`](https://redirect.github.com/step-security/harden-runner/releases/tag/v2.19.0) [Compare Source](https://redirect.github.com/step-security/harden-runner/compare/v2.18.0...v2.19.0) ##### What's Changed ##### New Runner Support Harden-Runner now supports Depot, Blacksmith, Namespace, and WarpBuild runners with the same egress monitoring, runtime monitoring, and policy enforcement available on GitHub-hosted runners. ##### Automated Incident Response for Supply Chain Attacks - Global block list: Outbound connections to known malicious domains and IPs are now blocked even in audit mode. - System-defined detection rules: Harden-Runner will trigger lockdown mode when a high risk event is detected during an active supply chain attack (for example, a process reading the memory of the runner worker process, a common technique for stealing GitHub Actions secrets). ##### Bug Fixes Windows and macOS: stability and reliability fixes **Full Changelog**: <https://github.com/step-security/harden-runner/compare/v2.18.0...v2.19.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/xmldom/xmldom). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjMuOCIsInVwZGF0ZWRJblZlciI6IjQzLjEzOC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
R
renovate[bot] committed
ee0804580b343e1276f8bb949a028ec26c56fce4
Parent: a283ee9
Committed by GitHub <noreply@github.com>
on 4/22/2026, 5:37:29 AM