Skip to content

Bump step-security/harden-runner from 2.16.0 to 2.16.1 #920

Bump step-security/harden-runner from 2.16.0 to 2.16.1

Bump step-security/harden-runner from 2.16.0 to 2.16.1 #920

Triggered via pull request April 5, 2026 14:23
Status Success
Total duration 7m 32s
Artifacts 17

build.yml

on: pull_request
Matrix: Build
Complete
5s
Complete
Fit to window
Zoom out
Zoom in

Annotations

60 errors and 13 warnings
Build (windows, x86, quictls, static)
Use of uninitialized value in join or string
Build (windows, x86, quictls, static)
Use of uninitialized value in join or string
Build (windows, x86, quictls, static)
Use of uninitialized value in join or string
Build (windows, x86, quictls, static)
Use of uninitialized value in join or string
Build (windows, x86, quictls, static)
Use of uninitialized value in join or string
Build (windows, x86, quictls, static)
Use of uninitialized value in join or string
Build (windows, x86, quictls, static)
Use of uninitialized value in join or string
Build (windows, x86, quictls, static)
Use of uninitialized value in join or string
Build (windows, x86, quictls, static)
Use of uninitialized value in join or string
Build (windows, x86, quictls, static)
Use of uninitialized value in join or string
Build (windows, x86, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x86, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x86, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x86, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x86, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x86, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x86, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x86, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x86, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x86, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x64, quictls, static)
Use of uninitialized value in join or string
Build (windows, x64, quictls, static)
Use of uninitialized value in join or string
Build (windows, x64, quictls, static)
Use of uninitialized value in join or string
Build (windows, x64, quictls, static)
Use of uninitialized value in join or string
Build (windows, x64, quictls, static)
Use of uninitialized value in join or string
Build (windows, x64, quictls, static)
Use of uninitialized value in join or string
Build (windows, x64, quictls, static)
Use of uninitialized value in join or string
Build (windows, x64, quictls, static)
Use of uninitialized value in join or string
Build (windows, x64, quictls, static)
Use of uninitialized value in join or string
Build (windows, x64, quictls, static)
Use of uninitialized value in join or string
Build (windows, x64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, x64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, shared)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, static)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, static)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, static)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, static)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, static)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, static)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, static)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, static)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, static)
Use of uninitialized value in join or string
Build (windows, arm64, quictls, static)
Use of uninitialized value in join or string
Build (windows, arm64, schannel, shared)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: ilammy/setup-nasm@72793074d3c8cdda771dba85f6deafe00623038b. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (windows, x86, schannel, static)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: ilammy/setup-nasm@72793074d3c8cdda771dba85f6deafe00623038b. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (windows, x86, schannel, shared)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: ilammy/setup-nasm@72793074d3c8cdda771dba85f6deafe00623038b. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (windows, x64, schannel, static)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: ilammy/setup-nasm@72793074d3c8cdda771dba85f6deafe00623038b. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (windows, x64, schannel, shared)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: ilammy/setup-nasm@72793074d3c8cdda771dba85f6deafe00623038b. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (windows, x86, quictls, static)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: ilammy/setup-nasm@72793074d3c8cdda771dba85f6deafe00623038b. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (windows, x86, quictls, shared)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: ilammy/setup-nasm@72793074d3c8cdda771dba85f6deafe00623038b. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (windows, arm64, schannel, static)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: ilammy/setup-nasm@72793074d3c8cdda771dba85f6deafe00623038b. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (windows, x64, quictls, static)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: ilammy/setup-nasm@72793074d3c8cdda771dba85f6deafe00623038b. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (ubuntu, x64, quictls, shared)
Starting April 2026, the CodeQL Action will skip computing file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. To opt out of this change, set the `CODEQL_ACTION_FILE_COVERAGE_ON_PRS` environment variable to `true`. Alternatively, create a custom repository property with the name `github-codeql-file-coverage-on-prs` and the type "True/false", then set this property to `true` in the repository's settings.
Build (windows, x64, quictls, shared)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: ilammy/setup-nasm@72793074d3c8cdda771dba85f6deafe00623038b. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (windows, arm64, quictls, shared)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: ilammy/setup-nasm@72793074d3c8cdda771dba85f6deafe00623038b. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Build (windows, arm64, quictls, static)
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: ilammy/setup-nasm@72793074d3c8cdda771dba85f6deafe00623038b. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
bin-ubuntu-arm64-quictls-shared
68.3 KB
sha256:992c6f2f709672207a7f4b9ea589a76a3e1eed378a0f1052ce495d82d97367be
bin-ubuntu-arm64-quictls-static
2.12 MB
sha256:a77b16f835c5d8db4a515ff8cc4cae5802c9b81f5b7e4c6f4f6890db9b5aac8f
bin-ubuntu-x64-quictls-shared
68.3 KB
sha256:541d1063afb373c22e63fc8a6d02bc248be2cc0bfb7a89452372c8dcd8e53b14
bin-ubuntu-x64-quictls-static
2.12 MB
sha256:5784eb75388fbde77adad3cf7e48cdcec966a709d15e388af1d9698d120b9bcf
bin-windows-arm64-quictls-shared
259 KB
sha256:3a08893c64829fe4eef6347ea879d9eed8590fcf55eaabff144dd7d96dc86fc7
bin-windows-arm64-quictls-static
2.69 MB
sha256:c50cdb38152bb7f502421f8a705a2ca43d8c558574ab4f93738e5d66fb9b8dc6
bin-windows-arm64-schannel-shared
259 KB
sha256:cd64b9c04ab60017472d41d4080a1387f9dcf7f197b0862494a4249f08b15799
bin-windows-arm64-schannel-static
710 KB
sha256:24c08462f24868ac3dbb5fcb6678f373a18271a6df676daacfba13eb5b23e468
bin-windows-x64-quictls-shared
294 KB
sha256:b8c94f8020b49d2c59adef811239e76f0333c225987bfc7fa86488aa196b08ff
bin-windows-x64-quictls-static
3.59 MB
sha256:04588f21e4061af9aafa8f15c336f29c28ae597b4409c53b8ad6d4d8c2489910
bin-windows-x64-schannel-shared
294 KB
sha256:c87eeaa2563871b63472bd95e05f61aef9ad1bcaa91d868d0bc8fe1ed4a0d773
bin-windows-x64-schannel-static
834 KB
sha256:5ade3ef4800f4af26077cd1f91419ed9852562a00b73d192f7a37fb0679f0351
bin-windows-x86-quictls-shared
267 KB
sha256:0cdaed0ab4d82464f153fa2fbf1b4ee4f212c1d19369770923cf61a20896e2d2
bin-windows-x86-quictls-static
2.87 MB
sha256:99f2be3221b60ca0efa3126a16306f4545d4e507afda0f8316ec762b72c1f754
bin-windows-x86-schannel-shared
267 KB
sha256:57fafa3e0963c2858fe851ecc7c46a91313da2210580edd5be71609b8c14ad2d
bin-windows-x86-schannel-static
749 KB
sha256:7125bcfc432f0c6c933024c4ce378007666858bddc99f1bebacccebc4dc205bd
sarif-results
141 KB
sha256:964dbfb8e8a2d84583b20c26143c11badc4f8de25e2d3f7a5a269b88016a1979