From 766cf70122b854e59acc74bb7da10b2132981309 Mon Sep 17 00:00:00 2001 From: Jonathan Peppers Date: Mon, 16 Mar 2026 09:04:30 -0500 Subject: [PATCH] Fix CI: update harden-runner v2.9.0 -> v2.15.1 and add dependabot The harden-runner action pinned to v2.9.0 (SHA 0d381219) is returning 401 Unauthorized on every build, breaking CI. Update to v2.15.1 (SHA 58077d3c) which is the same version used by dotnet/docs-maui. Also add a dependabot.yml config for github-actions to keep actions auto-updated weekly, matching docs-maui's setup. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .github/dependabot.yml | 8 ++++++++ .github/workflows/check-for-build-warnings.yml | 2 +- 2 files changed, 9 insertions(+), 1 deletion(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..ae10a2e --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,8 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + day: "wednesday" + open-pull-requests-limit: 10 diff --git a/.github/workflows/check-for-build-warnings.yml b/.github/workflows/check-for-build-warnings.yml index 4111aef..b7942dc 100644 --- a/.github/workflows/check-for-build-warnings.yml +++ b/.github/workflows/check-for-build-warnings.yml @@ -16,7 +16,7 @@ jobs: pull-requests: write steps: - name: Harden Runner - uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0 + uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 with: egress-policy: audit