What's Changed
- Updated default allowed endpoints to include
*.actions.githubusercontent.com
. GitHub Actions recently started making calls to additional sub-domains for this domain. Please update to this latest version of harden-runner to allow these new endpoints. - Update README.md by @varunsh-coder in #326
- Bump step-security/harden-runner from 2.4.1 to 2.5.0 by @dependabot in #327
Full Changelog: v2...v2.5.1