[renovate]

This PR contains the following updates:

Package	Type	Update	Change
knu/lockfile-maintenance-action	workflow	patch	v2.1.1 → v2.1.2
step-security/harden-runner	action	patch	v2.22.1 → v2.22.2

---

Release Notes

knu/lockfile-maintenance-action

v2.1.2

Compare Source

• Update sanitize-html to 2.18.1 to fix a denial of service when processing discarded iframe fallback content (GHSA-c9rx-x947-fp3h).
• Update runtime dependencies, including marked 18.1.1, smol-toml 1.9.1, and ignore 7.0.12.
• Update pinned setup Actions and package managers used by maintenance workflows.
• Inherit namespace dependency-queue defaults, with batches of up to five PRs and a maximum one-minute fill window.

Use knu/lockfile-maintenance-action@v2.1.2 for the composite Action or knu/lockfile-maintenance-action/.github/workflows/maintenance.yml@v2.1.2 for the reusable workflow. The floating @v2 branch already points to this tested commit.

Full changelog

step-security/harden-runner

v2.22.2

Compare Source

What's Changed

• Fixed inbound (ingress) network traffic being incorrectly classified as outbound (egress) traffic on macOS
• Fixed implicit endpoints intended for self-hosted runners being applied to custom VM environments on Linux (enterprise tier)
• Improved network and DNS tracing, enforcement logic, and process information correlation on Linux (enterprise tier)

Full Changelog: step-security/harden-runner@v2.22.1...v2.22.2

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • "after 9am on friday,before 6pm on friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-10-24 02:04 UTC · Rule: dependency-updates · triggered by merge protections
• ✅ Checks passed · on draft merge queue: checking #85 + #84 together on main (6a4857b) #87
• ✅ Merged — 2026-10-24 02:06 UTC · at 70e4574d1702b94ffb4ed975e93f18f831ea9bc8 · merge

This pull request spent 2 minutes 26 seconds in the queue, including 33 seconds running CI.

Required conditions to merge

• #approved-reviews-by >= 1
  • Update github actions #84
  • Update pnpm to v12.15.0 #85
• github-review-approved [🛡 GitHub repository ruleset rule main]
  • Update github actions #84
  • Update pnpm to v12.15.0 #85
• any of [🛡 GitHub repository ruleset rule main]:
  • check-success = @github-actions/Test
  • check-neutral = @github-actions/Test
  • check-skipped = @github-actions/Test