From 66c934395c4ed2a3ce18577140660394d4c661e9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 9 Oct 2026 05:15:59 +0000
Subject: [PATCH] build(deps): bump step-security/harden-runner

Bumps the github-actions group with 1 update: [step-security/harden-runner](https://github.com/step-security/harden-runner).


Updates `step-security/harden-runner` from 2.21.1 to 2.22.0
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](https://github.com/step-security/harden-runner/compare/e14015d583714f6e62063499dc959a02595150a1...351661ca32ac09a36dc5ee2d536e3128f2a3c8ed)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql.yml                | 2 +-
 .github/workflows/dependency-review.yml     | 2 +-
 .github/workflows/lf-build-linux-x86_64.yml | 4 ++--
 .github/workflows/lf-check-upstream.yml     | 2 +-
 .github/workflows/lf-pre-commit.yml         | 2 +-
 .github/workflows/scorecard.yml             | 2 +-
 6 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 68ae858..a0e5f89 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: 'Harden Runner'
-        uses: 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1' # v2.21.1
+        uses: 'step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed' # v2.22.0
         with:
           egress-policy: 'audit'
 
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index e9a12c1..723d9d5 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
+        uses: step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed # v2.22.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/lf-build-linux-x86_64.yml b/.github/workflows/lf-build-linux-x86_64.yml
index 7950829..562f017 100644
--- a/.github/workflows/lf-build-linux-x86_64.yml
+++ b/.github/workflows/lf-build-linux-x86_64.yml
@@ -39,7 +39,7 @@ jobs:
       distro_list: '${{ steps.set-matrix.outputs.distro_list }}'
     steps:
       - name: 'Harden the runner (Audit all outbound calls)'
-        uses: 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1' # v2.21.1
+        uses: 'step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed' # v2.22.0
         with:
           egress-policy: 'audit'
 
@@ -72,7 +72,7 @@ jobs:
         distro: '${{ fromJson(needs.prepare-matrix.outputs.distro_list) }}'
     steps:
       - name: 'Harden the runner (Audit all outbound calls)'
-        uses: 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1' # v2.21.1
+        uses: 'step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed' # v2.22.0
         with:
           egress-policy: 'audit'
 
diff --git a/.github/workflows/lf-check-upstream.yml b/.github/workflows/lf-check-upstream.yml
index ac2ebae..aecb966 100644
--- a/.github/workflows/lf-check-upstream.yml
+++ b/.github/workflows/lf-check-upstream.yml
@@ -18,7 +18,7 @@ jobs:
       pull-requests: 'write'
     steps:
       - name: 'Harden the runner (Audit all outbound calls)'
-        uses: 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1' # v2.21.1
+        uses: 'step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed' # v2.22.0
         with:
           egress-policy: 'audit'
 
diff --git a/.github/workflows/lf-pre-commit.yml b/.github/workflows/lf-pre-commit.yml
index fb7c4bf..c18d429 100644
--- a/.github/workflows/lf-pre-commit.yml
+++ b/.github/workflows/lf-pre-commit.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: 'ubuntu-latest'
     steps:
       - name: 'Harden the runner (Audit all outbound calls)'
-        uses: 'step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1' # v2.21.1
+        uses: 'step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed' # v2.22.0
         with:
           egress-policy: 'audit'
 
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index ba348c9..1de9b30 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -31,7 +31,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1
+        uses: step-security/harden-runner@351661ca32ac09a36dc5ee2d536e3128f2a3c8ed # v2.22.0
         with:
           egress-policy: audit