Merge branch 'main' into only_friendly_deps

Author: bmos

.github/workflows/coverage.yml

@@ -31,7 +31,7 @@ jobs:
         steps:
             # DO NOT run actions/checkout here, for security reasons
             # For details, refer to https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
-            - uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
+            - uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b
               with:
                 disable-sudo: false
                 egress-policy: audit

.github/workflows/dependency-review.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
+      - uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b
         with:
           disable-sudo: true
           egress-policy: block