Sourced from step-security/harden-runner's releases.

v2.12.1

What's Changed

• Detection capabilities have been upgraded to better recognize attempts at runner tampering. These improvements are informed by real-world incident learnings, including analysis of anomalous behaviors observed in the tj-actions and reviewdog supply chain attack.
• Resolved an issue where the block policy was not enforced correctly when the GitHub Actions job was running inside a container on a self-hosted VM runner.

Full Changelog: https://github.com/step-security/harden-runner/compare/v2...v2.12.1

• 002fdce Merge pull request #544 from step-security/rc-21
• 2489e3f Merge branch 'main' into rc-21
• 75dd441 Merge pull request #555 from step-security/dependabot/github_actions/step-sec...
• 4381ace Bump step-security/publish-unit-test-result-action from 2.19.0 to 2.20.0
• a9da90b Merge pull request #553 from h0x0er/feat/container-workflows
• a60ef21 update
• 4ad512f Merge branch 'rc-21' into feat/container-workflows
• 6b41a39 fixed test case
• fa70c45 update agent
• eb47845 self-hosted: refactored block-policy apply logic
• Additional commits viewable in compare view

• c50adf8 v12.2.0
• See full diff in compare view

Sourced from actions/attest's releases.

v2.4.0

What's Changed

• Bump @​actions/github from 6.0.0 to 6.0.1 in the npm-production group by @​dependabot in actions/attest#242
• Bump undici from 5.28.5 to 5.29.0 by @​dependabot in actions/attest#246
• Add path to created attestation in a well-known summary file by @​kommendorkapten in actions/attest#252

New Contributors

• @​kommendorkapten made their first contribution in actions/attest#252

Full Changelog: https://github.com/actions/attest/compare/v2...v2.4.0

• ce27ba3 bump package version to 2.4.0 (#253)
• 6a89e12 Add path to created attestation in a well-known summary file (#252)
• cbc14bb Bump the npm-development group with 3 updates (#250)
• b87aa13 Bump the npm-development group across 1 directory with 5 updates (#249)
• 5ae9aa2 Bump undici from 5.28.5 to 5.29.0 (#246)
• 4119d34 Bump the npm-development group across 1 directory with 6 updates (#245)
• 7e777b1 Bump @​actions/github from 6.0.0 to 6.0.1 in the npm-production group (#242)
• 4d8a13a Bump super-linter/super-linter in the actions-minor group (#244)
• 647f152 Bump the npm-development group with 4 updates (#240)
• 2055134 Bump the npm-development group with 4 updates (#239)
• Additional commits viewable in compare view

Sourced from tj-actions/changed-files's changelog.

Changelog

46.0.5 - (2025-04-09)

⚙️ Miscellaneous Tasks

• deps: Bump yaml from 2.7.0 to 2.7.1 (#2520) (ed68ef8) - (dependabot[bot])
• deps-dev: Bump typescript from 5.8.2 to 5.8.3 (#2516) (a7bc14b) - (dependabot[bot])
• deps-dev: Bump @​types/node from 22.13.11 to 22.14.0 (#2517) (3d751f6) - (dependabot[bot])
• deps-dev: Bump eslint-plugin-prettier from 5.2.3 to 5.2.6 (#2519) (e2fda4e) - (dependabot[bot])
• deps-dev: Bump ts-jest from 29.2.6 to 29.3.1 (#2518) (0bed1b1) - (dependabot[bot])
• deps: Bump github/codeql-action from 3.28.12 to 3.28.15 (#2530) (6802458) - (dependabot[bot])
• deps: Bump tj-actions/branch-names from 8.0.1 to 8.1.0 (#2521) (cf2e39e) - (dependabot[bot])
• deps: Bump tj-actions/verify-changed-files from 20.0.1 to 20.0.4 (#2523) (6abeaa5) - (dependabot[bot])

⬆️ Upgrades

• Upgraded to v46.0.4 (#2511)

Co-authored-by: github-actions[bot] (6f67ee9) - (github-actions[bot])

46.0.4 - (2025-04-03)

🐛 Bug Fixes

• Bug modified_keys and changed_key outputs not set when no changes detected (#2509) (6cb76d0) - (Tonye Jack)

📚 Documentation

• Update readme (#2508) (b74df86) - (Tonye Jack)

⬆️ Upgrades

• Upgraded to v46.0.3 (#2506)

Co-authored-by: github-actions[bot] Co-authored-by: Tonye Jack jtonye@ymail.com (27ae6b3) - (github-actions[bot])

46.0.3 - (2025-03-23)

🔄 Update

• Updated README.md (#2501)

Co-authored-by: github-actions[bot] (41e0de5) - (github-actions[bot])

• Updated README.md (#2499)

Co-authored-by: github-actions[bot] (9457878) - (github-actions[bot])

📚 Documentation

... (truncated)

• d52d20f chore(deps-dev): bump @​types/node from 22.15.26 to 24.0.1 (#2587)
• f1c0eb9 chore(deps-dev): bump eslint-plugin-prettier from 5.4.0 to 5.4.1 (#2578)
• 944a0f7 chore(deps-dev): bump eslint-plugin-jest from 28.13.0 to 28.13.3 (#2585)
• 3dbc1e1 Updated README.md (#2592)
• 7a7221b chore(deps): bump github/codeql-action from 3.28.18 to 3.29.0 (#2588)
• c260d49 feat: add any_added to outputs (#2567)
• b1ccff8 Updated README.md (#2591)
• a892f50 docs: update link to glob patterns (#2590)
• 5ca5422 chore(deps-dev): bump ts-jest from 29.3.4 to 29.4.0 (#2589)
• 4140eb9 chore(deps-dev): bump eslint-plugin-jest from 28.12.0 to 28.13.0 (#2583)
• See full diff in compare view

Sourced from github/codeql-action's releases.

v3.29.0

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.0 - 11 Jun 2025

• Update default CodeQL bundle version to 2.22.0. #2925
• Bump minimum CodeQL bundle version to 2.16.6. #2912

See the full CHANGELOG.md for more information.

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

3.29.0 - 11 Jun 2025

• Update default CodeQL bundle version to 2.22.0. #2925
• Bump minimum CodeQL bundle version to 2.16.6. #2912

3.28.19 - 03 Jun 2025

• The CodeQL Action no longer includes its own copy of the extractor for the actions language, which is currently in public preview. The actions extractor has been included in the CodeQL CLI since v2.20.6. If your workflow has enabled the actions language and you have pinned your tools: property to a specific version of the CodeQL CLI earlier than v2.20.6, you will need to update to at least CodeQL v2.20.6 or disable actions analysis.
• Update default CodeQL bundle version to 2.21.4. #2910

3.28.18 - 16 May 2025

• Update default CodeQL bundle version to 2.21.3. #2893
• Skip validating SARIF produced by CodeQL for improved performance. #2894
• The number of threads and amount of RAM used by CodeQL can now be set via the CODEQL_THREADS and CODEQL_RAM runner environment variables. If set, these environment variables override the threads and ram inputs respectively. #2891

3.28.17 - 02 May 2025

• Update default CodeQL bundle version to 2.21.2. #2872

3.28.16 - 23 Apr 2025

• Update default CodeQL bundle version to 2.21.1. #2863

3.28.15 - 07 Apr 2025

• Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. #2842

3.28.14 - 07 Apr 2025

• Update default CodeQL bundle version to 2.21.0. #2838

3.28.13 - 24 Mar 2025

No user facing changes.

3.28.12 - 19 Mar 2025

• Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.

... (truncated)

• ce28f5b Merge pull request #2926 from github/update-v3.29.0-e8799281c
• bc251b7 Update changelog for v3.29.0
• e879928 Merge pull request #2925 from github/update-bundle/codeql-bundle-v2.22.0
• efd43b3 Merge branch 'main' into update-bundle/codeql-bundle-v2.22.0
• 7cb9b16 Merge pull request #2912 from github/henrymercer/bump-minimum-codeql-2.16.6
• 3855117 Add changelog note
• f5d4e2a Update default bundle to codeql-bundle-v2.22.0
• 22deae8 Update package-lock.json
• df2a830 Merge branch 'main' into henrymercer/bump-minimum-codeql-2.16.6
• b1e4dc3 Merge pull request #2916 from github/dependabot/npm_and_yarn/npm-5cdccdc43f
• Additional commits viewable in compare view

Sourced from umbrelladocs/action-linkspector's releases.

Release v1.3.5

v1.3.5: PR #45 - Update linkspector version to 0.4.5

• e2ccef5 Merge pull request #45 from UmbrellaDocs/update-linkspector-version
• 6cc23b2 Update linkspector version to 0.4.5
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions