chore: update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
step-security/action-semantic-pull-request	action	patch	v6.1.1 → v6.1.2
step-security/harden-runner	action	minor	v2.16.1 → v2.17.0	v2.19.0 (+1)

---

Release Notes

step-security/action-semantic-pull-request (step-security/action-semantic-pull-request)

v6.1.2

Compare Source

What's Changed

• build(deps): bump js-yaml from 4.1.0 to 4.1.1 by @​dependabot[bot] in #​147
• ci: update audit_package.yml by @​Raj-StepSecurity in #​149
• fix: Security updates by @​github-actions[bot] in #​150
• ci: Update audit_package.yml by @​Raj-StepSecurity in #​151
• fix: build(deps): bump axios from 1.12.2 to 1.13.5 by @​dependabot[bot] in #​152
• fix: upgrade packages and fix vulnerabilities by @​Raj-StepSecurity in #​153
• ci: Update audit_package.yml by @​Raj-StepSecurity in #​154
• ci: Update audit_package.yml by @​Raj-StepSecurity in #​155
• fix: Security updates by @​github-actions[bot] in #​156
• fix: Security updates by @​github-actions[bot] in #​157
• fix: upgrade packages to fix vulnerabilities by @​Raj-StepSecurity in #​158
• ci: made node version input to default at 24 by @​amanstep in #​133
• fix: Security updates by @​github-actions[bot] in #​159
• feat: added banner and update subscription check to make maintained actions free for public repos by @​Raj-StepSecurity in #​160
• fix: Security updates by @​github-actions[bot] in #​161
• ci: update actions_release.yml by @​Raj-StepSecurity in #​162

Full Changelog: step-security/action-semantic-pull-request@v6...v6.1.2

step-security/harden-runner (step-security/harden-runner)

v2.17.0

Compare Source

What's Changed

Policy Store Support

Added use-policy-store and api-key inputs to fetch security policies directly from the StepSecurity Policy Store. Policies can be defined and attached at the workflow, repo, org, or cluster (ARC) level, with the most granular policy taking precedence. This is the preferred method over the existing policy input which requires id-token: write permission. If no policy is found in the store, the action defaults to audit mode.

Full Changelog: step-security/harden-runner@v2.16.1...v2.17.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 4am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.