[dependabot]

Bumps step-security/harden-runner from 2.22.3 to 2.22.4.

Release notes

Sourced from step-security/harden-runner's releases.

v2.22.4

What's Changed

• Fixed a Linux agent memory leak that could cause runners to run out of memory during jobs with heavy process or network activity.
• The workaround for GitHub’s DNS resolver and outbound proxy experiment on GitHub-hosted Linux runners now defaults to enabled when feature flags can’t be fetched.
• Improved HTTP/2 TLS interception on Linux (enterprise tier).
• Added retries for failed monitoring API requests, improving reliability of monitoring initialization and raw-event uploads.

Full Changelog: step-security/harden-runner@v2.22.3...v2.22.4

Commits

• 1d88384 Merge pull request #716 from step-security/rc-48
• 26249c0 Merge pull request #712 from Prateek-stepsecurity/pn/monitor-retry
• b5a70cf Treat 409 from /monitor as terminal and add retry tests
• 0a48cce Retry /monitor call up to 3 times on failure
• 967c33e Merge pull request #715 from step-security/rc-47
• 4fa77e8 Merge pull request #714 from h0x0er/jatin/agent-v1.9.6-v0.18.1
• dd2b975 bump agent versions
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[tekton-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To complete the pull request process, please assign anithapriyanatarajan after the PR has been reviewed.
You can assign the PR to them by writing /assign @anithapriyanatarajan in a comment when ready.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 55.67%. Comparing base (e90f5a9) to head (02ae53c).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #492   +/-   ##
=======================================
  Coverage   55.67%   55.67%           
=======================================
  Files          19       19           
  Lines        1886     1886           
=======================================
  Hits         1050     1050           
  Misses        836      836           

Flag	Coverage Δ
unit-tests	55.67% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.