chore(deps): update step-security/harden-runner action to v2.18.0 (stable/2026.1)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
step-security/harden-runner	action	minor	v2.15.1 → v2.18.0

---

Release Notes

step-security/harden-runner (step-security/harden-runner)

v2.18.0

Compare Source

What's Changed

Global Block List: During supply chain incidents like the recent axios and trivy compromises, StepSecurity will add known malicious domains and IP addresses (IOCs) to a global block list. These will be automatically blocked, even in audit mode, providing immediate protection without requiring any workflow changes.

Deploy on Self-Hosted VM: Added deploy-on-self-hosted-vm input that allows the Harden Runner agent to be installed directly on ephemeral self-hosted Linux runner VMs at workflow runtime. This is intended as an alternative when baking the agent into the VM image is not possible.

Full Changelog: step-security/harden-runner@v2.17.0...v2.18.0

v2.17.0

Compare Source

What's Changed

Policy Store Support

Added use-policy-store and api-key inputs to fetch security policies directly from the StepSecurity Policy Store. Policies can be defined and attached at the workflow, repo, org, or cluster (ARC) level, with the most granular policy taking precedence. This is the preferred method over the existing policy input which requires id-token: write permission. If no policy is found in the store, the action defaults to audit mode.

Full Changelog: step-security/harden-runner@v2.16.1...v2.17.0

v2.16.1

Compare Source

What's Changed

Enterprise tier: Added support for direct IP addresses in the allow list
Community tier: Migrated Harden Runner telemetry to a new endpoint

Full Changelog: step-security/harden-runner@v2.16.0...v2.16.1

v2.16.0

Compare Source

What's Changed

• Updated action.yml to use node24
• Security fix: Fixed a medium severity vulnerability where the egress block policy could be bypassed via DNS over HTTPS (DoH) by proxying DNS queries through a permitted resolver, allowing data exfiltration even with a restrictive allowed-endpoints list. This issue only affects the Community Tier; the Enterprise Tier is not affected. See GHSA-46g3-37rh-v698 for details.
• Security fix: Fixed a medium severity vulnerability where the egress block policy could be bypassed via DNS queries over TCP to external resolvers, allowing outbound network communication that evades configured network restrictions. This issue only affects the Community Tier; the Enterprise Tier is not affected. See GHSA-g699-3x6g-wm3g for details.

Full Changelog: step-security/harden-runner@v2.15.1...v2.16.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

renovate[bot]
This pull request has been included in the following image tags:

ghcr.io/vexxhost/python-base-ubuntu-cloud-archive:2026.1
ghcr.io/vexxhost/python-base-ubuntu-cloud-archive:stable-2026.1
ghcr.io/vexxhost/python-base-ubuntu-cloud-archive:d4aa41c
ghcr.io/vexxhost/python-base-ubuntu-cloud-archive:latest

Digest: ghcr.io/vexxhost/python-base-ubuntu-cloud-archive@sha256:773650ec70c6107bf6b10fb91fe1a7b6d47474cca4a6b0e9b276bcd6fc162475

[github-actions]

renovate[bot]
This pull request has been included in the following image tags:

ghcr.io/vexxhost/python-base-ubuntu:2026.1
ghcr.io/vexxhost/python-base-ubuntu:stable-2026.1
ghcr.io/vexxhost/python-base-ubuntu:d4aa41c
ghcr.io/vexxhost/python-base-ubuntu:latest

Digest: ghcr.io/vexxhost/python-base-ubuntu@sha256:a50da17c79dc329056cb05dcba786f95c08e3e1c6ab6eb0f5b4f99ab8d54ad76

[github-actions]

renovate[bot]
This pull request has been included in the following image tags:

ghcr.io/vexxhost/python-base:2026.1
ghcr.io/vexxhost/python-base:stable-2026.1
ghcr.io/vexxhost/python-base:d4aa41c
ghcr.io/vexxhost/python-base:latest

Digest: ghcr.io/vexxhost/python-base@sha256:1998ee9233f8a79ae6c2b516b6b26e7befda927c5b2e2fac0f59dd696b3e212a