From 818626d7f2887c660529057295f28d824948b31d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 24 Aug 2026 00:17:34 +0000
Subject: [PATCH] chore(deps): bump step-security/harden-runner from 2.20.0 to
 2.21.0

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.20.0 to 2.21.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](https://github.com/step-security/harden-runner/compare/bf7454d06d71f1098171f2acdf0cd4708d7b5920...05e31511f85b41b11d1cf0ef85d0992719546e2c)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/fossify-event-dispatcher.yml | 2 +-
 .github/workflows/merge-pull-requests.yml      | 2 +-
 .github/workflows/merge-weblate-prs.yml        | 2 +-
 .github/workflows/prepare-release-pr.yml       | 2 +-
 .github/workflows/release.yml                  | 4 ++--
 .github/workflows/update-commons.yml           | 2 +-
 6 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/fossify-event-dispatcher.yml b/.github/workflows/fossify-event-dispatcher.yml
index cb1e25f..1cf315f 100644
--- a/.github/workflows/fossify-event-dispatcher.yml
+++ b/.github/workflows/fossify-event-dispatcher.yml
@@ -54,7 +54,7 @@ jobs:
   dispatch:
     runs-on: ubuntu-latest
     steps:
-      - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920
+      - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/merge-pull-requests.yml b/.github/workflows/merge-pull-requests.yml
index bc6fa6c..6643e9f 100644
--- a/.github/workflows/merge-pull-requests.yml
+++ b/.github/workflows/merge-pull-requests.yml
@@ -64,7 +64,7 @@ jobs:
 
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/merge-weblate-prs.yml b/.github/workflows/merge-weblate-prs.yml
index 57fec09..f248cf5 100644
--- a/.github/workflows/merge-weblate-prs.yml
+++ b/.github/workflows/merge-weblate-prs.yml
@@ -39,7 +39,7 @@ jobs:
       GH_TOKEN: ${{ secrets.PERSONAL_TOKEN }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/prepare-release-pr.yml b/.github/workflows/prepare-release-pr.yml
index 2239e97..71ef514 100644
--- a/.github/workflows/prepare-release-pr.yml
+++ b/.github/workflows/prepare-release-pr.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 84d7618..b3a109f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -55,7 +55,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c
         with:
           egress-policy: audit
 
@@ -126,7 +126,7 @@ jobs:
     timeout-minutes: 20
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/update-commons.yml b/.github/workflows/update-commons.yml
index f2679e2..a737ecd 100644
--- a/.github/workflows/update-commons.yml
+++ b/.github/workflows/update-commons.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c
         with:
           egress-policy: audit