ci: update action step-security/harden-runner from cb605e5 to 4d991eb… #30

	name: Release

	on:
	push:
	branches:
	- main

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	publish:
	name: Publish release
	if: github.repository_owner == 'codeismyid'
	runs-on: ubuntu-24.04
	permissions:
	contents: write
	issues: write
	pull-requests: write
	id-token: write
	steps:
	- name: Harden runner
	uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
	with:
	disable-sudo: true
	egress-policy: block
	allowed-endpoints: >
	api.github.com:443
	bun.sh:443
	fulcio.sigstore.dev:443
	github.com:443
	objects.githubusercontent.com:443
	registry.npmjs.org:443
	rekor.sigstore.dev:443
	tuf-repo-cdn.sigstore.dev:443
	uploads.github.com:443

	- name: Git checkout (full-history)
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	fetch-depth: 0
	persist-credentials: true

	- name: Set up bun@latest
	uses: oven-sh/setup-bun@4bc047ad259df6fc24a6c9b0f9a0cb08cf17fbe5 # v2.0.1

	- name: Install dependencies
	run: bun ci

	- name: Run check
	env:
	FORCE_COLOR: 3
	run: bun check

	- name: Audit signatures
	run: npm audit signatures

	- name: Build dist
	run: bun dist

	- name: Publish
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
	run: bun release

Provide feedback