Bump the github-actions group with 4 updates

[dependabot]

Bumps the github-actions group with 4 updates: step-security/harden-runner, ruby/setup-ruby, actions/setup-node and aws-actions/configure-aws-credentials.

Updates step-security/harden-runner from 2.13.0 to 2.13.1

Release notes

Sourced from step-security/harden-runner's releases.

v2.13.1

What's Changed

• Graceful handling of HTTP errors: Improved error handling when fetching Harden Runner policies from the StepSecurity Policy Store API, ensuring more reliable execution even in case of temporary network/API issues.

• Security updates for npm dependencies: Updated vulnerable npm package dependencies to the latest secure versions.

• Faster enterprise agent downloads: The enterprise agent is now downloaded from GitHub Releases instead of packages.stepsecurity.io, improving download speed and reliability.

Full Changelog: step-security/harden-runner@v2.13.0...v2.13.1

Commits

• f4a75cf Merge pull request #588 from step-security/rc-26
• 95503d0 ci: remove code-review workflow
• 4b250a0 ci: add job to confirm dist is as expected
• 5b0ab6a update dependencies
• d11f2c1 fix bug where status code was not being preserved
• b3fc98e improve error handling for policy store sceanrio
• 92fc5d4 update error message
• b61b0a4 policy store improvements
• e3d3f2b use GitHub release instead of packages
• 646ac01 update agent
• Additional commits viewable in compare view

Updates ruby/setup-ruby from 1.257.0 to 1.263.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.263.0

What's Changed

• Print lockfile contents earlier by @​Earlopain in ruby/setup-ruby#811

New Contributors

• @​Earlopain made their first contribution in ruby/setup-ruby#811

Full Changelog: ruby/setup-ruby@v1.262.0...v1.263.0

v1.262.0

Full Changelog: ruby/setup-ruby@v1.261.0...v1.262.0

v1.261.0

What's Changed

• Update CRuby releases on Windows by @​ruby-builder-bot in ruby/setup-ruby#809

Full Changelog: ruby/setup-ruby@v1.260.0...v1.261.0

v1.260.0

What's Changed

• Revert "feat: upgrade to node 24" by @​eregon in ruby/setup-ruby#808
• Reinstate testing against jruby 9.4 and head by @​chadlwilson in ruby/setup-ruby#807

New Contributors

• @​chadlwilson made their first contribution in ruby/setup-ruby#807

Full Changelog: ruby/setup-ruby@v1.259.0...v1.260.0

v1.259.0

What's Changed

• feat: upgrade to node 24 by @​chenrui333 in ruby/setup-ruby#804

Full Changelog: ruby/setup-ruby@v1.258.0...v1.259.0

v1.258.0

What's Changed

• Add ruby-3.4.6 by @​ruby-builder-bot in ruby/setup-ruby#802
• Add truffleruby-25.0.0,truffleruby+graalvm-25.0.0 by @​ruby-builder-bot in ruby/setup-ruby#803

Full Changelog: ruby/setup-ruby@v1.257.0...v1.258.0

Commits

• 0481980 Print lockfile contents earlier
• cf7216d Use new releases of ruby-builder per engine-version
• 1c58d16 Update CRuby releases on Windows
• 1dc7956 Test on JRuby 9.4 as well as 10.0
• b8714f7 Revert "Skip test failing on JRuby on Windows"
• d3e13b3 Revert "feat: upgrade to node 24"
• 4df093a Revert "chore: add setup-node for lint job"
• 866b91c chore: add setup-node for lint job
• c4cd38d feat: upgrade to node 24
• 3fee676 Add truffleruby-25.0.0,truffleruby+graalvm-25.0.0
• Additional commits viewable in compare view

Updates actions/setup-node from 4.4.0 to 5.0.0

Release notes

Sourced from actions/setup-node's releases.

v5.0.0

What's Changed

Breaking Changes

• Enhance caching in setup-node with automatic package manager detection by @​priya-kinthali in actions/setup-node#1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

• Upgrade action to use node24 by @​salmanmkc in actions/setup-node#1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

• Upgrade @​octokit/request-error and @​actions/github by @​dependabot[bot] in actions/setup-node#1227
• Upgrade uuid from 9.0.1 to 11.1.0 by @​dependabot[bot] in actions/setup-node#1273
• Upgrade undici from 5.28.5 to 5.29.0 by @​dependabot[bot] in actions/setup-node#1295
• Upgrade form-data to bring in fix for critical vulnerability by @​gowridurgad in actions/setup-node#1332
• Upgrade actions/checkout from 4 to 5 by @​dependabot[bot] in actions/setup-node#1345

New Contributors

• @​priya-kinthali made their first contribution in actions/setup-node#1348
• @​salmanmkc made their first contribution in actions/setup-node#1325

Full Changelog: actions/setup-node@v4...v5.0.0

Commits

• a0853c2 Bump actions/checkout from 4 to 5 (#1345)
• b7234cc Upgrade action to use node24 (#1325)
• d7a1131 Enhance caching in setup-node with automatic package manager detection (#1348)
• 5e2628c Bumps form-data (#1332)
• 65becef Bump undici from 5.28.5 to 5.29.0 (#1295)
• 7e24a65 Bump uuid from 9.0.1 to 11.1.0 (#1273)
• 08f58d1 Bump @​octokit/request-error and @​actions/github (#1227)
• See full diff in compare view

Updates aws-actions/configure-aws-credentials from 4.3.1 to 5.0.0

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v5.0.0

5.0.0 (2025-09-03)

⚠ BREAKING CHANGES

• Cleanup input handling. Changes invalid boolean input behavior (see #1445)

Features

• add skip OIDC option (#1458) (8c45f6b)
• Cleanup input handling. Changes invalid boolean input behavior (see #1445) (74b3e27)
• support account id allowlist (#1456) (c4be498)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.0.0 (2025-09-03)

⚠ BREAKING CHANGES

• Cleanup input handling. Changes invalid boolean input behavior (see #1445)

Features

• add skip OIDC option (#1458) (8c45f6b)
• Cleanup input handling. Changes invalid boolean input behavior (see #1445) (74b3e27)
• support account id allowlist (#1456) (c4be498)

4.3.1 (2025-08-04)

Bug Fixes

• update readme to 4.3.1 (#1424) (be2e7ad)

4.3.0 (2025-08-04)

Features

• depenency update and feature cleanup (#1414) (59489ba), closes #1062 #1191
• Optional environment variable output (c3b3ce6)

Bug Fixes

• docs: readme samples versioning (5b3c895)
• the wrong example region for China partition in README (37fe9a7)
• properly set proxy environment variable (cbea708)

Miscellaneous Chores

• release 4.3.0 (3f7c218)

4.2.1 (2025-05-14)

Bug Fixes

• ensure explicit inputs take precedence over environment variables (e56e6c4)

... (truncated)

Commits

• a03048d chore(main): release 5.0.0 (#1451)
• 337f510 chore: Fix markdown link formatting in README.md (#1466)
• f001d79 chore: update README with versioning (#1465)
• cf5f2ac chore: Update dist
• b394bdd chore(deps-dev): bump @​aws-sdk/credential-provider-env (#1463)
• b632c0b chore(deps-dev): bump memfs from 4.38.1 to 4.38.2 (#1462)
• 978e44a chore: Update dist
• c4be498 feat: support account id allowlist (#1456)
• c5a43c3 chore: Update dist
• 8c45f6b feat: add skip OIDC option (#1458)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions