[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
knu/lockfile-maintenance-action	action	patch	v2.1.1 → v2.1.2
rust-lang/crates-io-auth-action	action	patch	v1.0.5 → v1.0.6
step-security/harden-runner	action	patch	v2.22.1 → v2.22.2	v2.22.3

---

Release Notes

knu/lockfile-maintenance-action

v2.1.2

Compare Source

• Update sanitize-html to 2.18.1 to fix a denial of service when processing discarded iframe fallback content (GHSA-c9rx-x947-fp3h).
• Update runtime dependencies, including marked 18.1.1, smol-toml 1.9.1, and ignore 7.0.12.
• Update pinned setup Actions and package managers used by maintenance workflows.
• Inherit namespace dependency-queue defaults, with batches of up to five PRs and a maximum one-minute fill window.

Use knu/lockfile-maintenance-action@v2.1.2 for the composite Action or knu/lockfile-maintenance-action/.github/workflows/maintenance.yml@v2.1.2 for the reusable workflow. The floating @v2 branch already points to this tested commit.

Full changelog

rust-lang/crates-io-auth-action

v1.0.6

Compare Source

What's Changed

update dependencies

Full Changelog: rust-lang/crates-io-auth-action@v1.0.5...v1.0.6

step-security/harden-runner

v2.22.2

Compare Source

What's Changed

• Fixed inbound (ingress) network traffic being incorrectly classified as outbound (egress) traffic on macOS
• Fixed implicit endpoints intended for self-hosted runners being applied to custom VM environments on Linux (enterprise tier)
• Improved network and DNS tracing, enforcement logic, and process information correlation on Linux (enterprise tier)

Full Changelog: step-security/harden-runner@v2.22.1...v2.22.2

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • "after 9am on friday,before 6pm on friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[mergify]

✅ Merged into main as ee71871 at 05:13 UTC

Merged together with #74. 5 min in the queue, less than a minute of it CI.

So far

• ✅ Entered the queue Fri 30 Oct, 05:07 · rule dependency-updates · triggered by merge protections
• ✅ Passed · draft merge queue: merged #74, #72: Lockfile maintenance (+1 more) #75
• ✅ Merged 05:13 · ee71871 · fast-forward

Merge conditions: 3 of 3 met

This pull request

	Condition	Required by
✅	#approved-reviews-by >= 1	—
✅	github-review-approved	GitHub repository ruleset rule main

The batch, tested on draft #75

	Condition	Required by
✅	any of: check-success = @github-actions/Test, check-neutral = @github-actions/Test, check-skipped = @github-actions/Test	GitHub repository ruleset rule main

_{Times in UTC · dashboard · how the merge queue works}