Update ghcr.io/actions/actions-runner Docker tag to v2.334.0

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/actions/actions-runner	minor	2.333.0 → 2.334.0

---

Release Notes

actions/runner (ghcr.io/actions/actions-runner)

v2.334.0

Compare Source

What's Changed

• Bump flatted from 3.2.7 to 3.4.2 in /src/Misc/expressionFunc/hashFiles by @​dependabot[bot] in #​4307
• Add DAP server by @​rentziass in #​4298
• Bump @​typescript-eslint/eslint-plugin from 8.57.1 to 8.57.2 in /src/Misc/expressionFunc/hashFiles by @​dependabot[bot] in #​4310
• Remove AllowCaseFunction feature flag by @​ericsciple in #​4316
• chore: update Node versions by @​github-actions[bot] in #​4319
• Batch and deduplicate action resolution across composite depths by @​stefanpenner in #​4296
• Add support for Bearer token in action archive downloads by @​TingluoHuang in #​4321
• Bump brace-expansion in /src/Misc/expressionFunc/hashFiles by @​dependabot[bot] in #​4318
• Add devtunnel connection for debugger jobs by @​rentziass in #​4317
• Update Docker to v29.3.1 and Buildx to v0.33.0 by @​github-actions[bot] in #​4324
• Bump @​typescript-eslint/eslint-plugin from 8.57.2 to 8.58.1 in /src/Misc/expressionFunc/hashFiles by @​dependabot[bot] in #​4327
• Bump actions/github-script from 8 to 9 by @​dependabot[bot] in #​4331
• Bump typescript from 5.9.3 to 6.0.2 in /src/Misc/expressionFunc/hashFiles by @​dependabot[bot] in #​4329
• fix: only show changed versions in node upgrade PR description by @​salmanmkc in #​4332
• Bump System.Formats.Asn1, Cryptography.Pkcs, ProtectedData, ServiceController, CodePages, Threading.Channels, @​actions/glob, @​typescript-eslint/parser, lint-staged, picomatch by @​Copilot in #​4333
• feat: add job.workflow_* typed accessors to JobContext by @​salmanmkc in #​4335
• Add WS bridge over DAP TCP server by @​rentziass in #​4328
• chore: update Node versions by @​github-actions[bot] in #​4355
• Bump Docker version to 29.4.0 by @​Copilot in #​4352
• Update dotnet sdk to latest version @​8.0.420 by @​github-actions[bot] in #​4356
• Bump @​typescript-eslint/parser from 8.58.1 to 8.59.0 in /src/Misc/expressionFunc/hashFiles by @​dependabot[bot] in #​4360
• Bump System.Formats.Asn1 and System.Security.Cryptography.Pkcs by @​dependabot[bot] in #​4362
• Add vulnerability-alerts permission by @​salmanmkc in #​4350
• Bump @​typescript-eslint/eslint-plugin from 8.58.1 to 8.59.0 in /src/Misc/expressionFunc/hashFiles by @​dependabot[bot] in #​4359
• Bump System.ServiceProcess.ServiceController from 10.0.3 to 10.0.6 by @​dependabot[bot] in #​4358
• Bump typescript from 6.0.2 to 6.0.3 in /src/Misc/expressionFunc/hashFiles by @​dependabot[bot] in #​4353
• Bump Microsoft.DevTunnels.Connections from 1.3.16 to 1.3.39 by @​dependabot[bot] in #​4339

New Contributors

• @​stefanpenner made their first contribution in #​4296

Full Changelog: actions/runner@v2.333.1...v2.334.0

Note: Actions Runner follows a progressive release policy, so the latest release might not be available to your enterprise, organization, or repository yet.
To confirm which version of the Actions Runner you should expect, please view the download instructions for your enterprise, organization, or repository.
See https://docs.github.com/en/enterprise-cloud@latest/actions/hosting-your-own-runners/adding-self-hosted-runners

Windows x64

We recommend configuring the runner in a root folder of the Windows drive (e.g. "C:\actions-runner"). This will help avoid issues related to service identity folder permissions and long file path restrictions on Windows.

The following snipped needs to be run on powershell:

# Create a folder under the drive root
mkdir \actions-runner ; cd \actions-runner

# Download the latest runner package
Invoke-WebRequest -Uri https://github.com/actions/runner/releases/download/v2.334.0/actions-runner-win-x64-2.334.0.zip -OutFile actions-runner-win-x64-2.334.0.zip

# Extract the installer
Add-Type -AssemblyName System.IO.Compression.FileSystem ;
[System.IO.Compression.ZipFile]::ExtractToDirectory("$PWD\actions-runner-win-x64-2.334.0.zip", "$PWD")

Windows arm64

We recommend configuring the runner in a root folder of the Windows drive (e.g. "C:\actions-runner"). This will help avoid issues related to service identity folder permissions and long file path restrictions on Windows.

The following snipped needs to be run on powershell:

# Create a folder under the drive root
mkdir \actions-runner ; cd \actions-runner

# Download the latest runner package
Invoke-WebRequest -Uri https://github.com/actions/runner/releases/download/v2.334.0/actions-runner-win-arm64-2.334.0.zip -OutFile actions-runner-win-arm64-2.334.0.zip

# Extract the installer
Add-Type -AssemblyName System.IO.Compression.FileSystem ;
[System.IO.Compression.ZipFile]::ExtractToDirectory("$PWD\actions-runner-win-arm64-2.334.0.zip", "$PWD")

OSX x64

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.334.0/actions-runner-osx-x64-2.334.0.tar.gz

# Extract the installer
tar xzf ./actions-runner-osx-x64-2.334.0.tar.gz

OSX arm64 (Apple silicon)

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.334.0/actions-runner-osx-arm64-2.334.0.tar.gz

# Extract the installer
tar xzf ./actions-runner-osx-arm64-2.334.0.tar.gz

Linux x64

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.334.0/actions-runner-linux-x64-2.334.0.tar.gz

# Extract the installer
tar xzf ./actions-runner-linux-x64-2.334.0.tar.gz

Linux arm64

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.334.0/actions-runner-linux-arm64-2.334.0.tar.gz

# Extract the installer
tar xzf ./actions-runner-linux-arm64-2.334.0.tar.gz

Linux arm

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.334.0/actions-runner-linux-arm-2.334.0.tar.gz

# Extract the installer
tar xzf ./actions-runner-linux-arm-2.334.0.tar.gz

Using your self hosted runner

For additional details about configuring, running, or shutting down the runner please check out our product docs.

SHA-256 Checksums

The SHA-256 checksums for the packages included in this build are shown below:

• actions-runner-win-x64-2.334.0.zip a0c896f3acf37841cc17f392a38111d39501e56f2990434567f027ee89cf8981
• actions-runner-win-arm64-2.334.0.zip 904ae95a96c6a596bd0f6abccebe715f0825f775a84842439a122e63b33dd1bc
• actions-runner-osx-x64-2.334.0.tar.gz 73a979ff7e9ce8a70244f3a959d896870be486fac92bb08ed90684f961474e0d
• actions-runner-osx-arm64-2.334.0.tar.gz 760899b29fd4e942076bcd1160a662bf83c15d9ce8a8cc466763aec7e582b21b
• actions-runner-linux-x64-2.334.0.tar.gz 048024cd2c848eb6f14d5646d56c13a4def2ae7ee3ad12122bee960c56f3d271
• actions-runner-linux-arm64-2.334.0.tar.gz f44255bd3e80160eb25f71bc83d06ea025f6908748807a584687b3184759f7e4
• actions-runner-linux-arm-2.334.0.tar.gz 84a25196caf971d0c634e32864731e773e1668235f799666fc0ec40ac666a0ab

v2.333.1

Compare Source

What's Changed

• Remove AllowCaseFunction feature flag by @​ericsciple in #​4316

Full Changelog: actions/runner@v2.333.0...v2.333.1

Note: Actions Runner follows a progressive release policy, so the latest release might not be available to your enterprise, organization, or repository yet.
To confirm which version of the Actions Runner you should expect, please view the download instructions for your enterprise, organization, or repository.
See https://docs.github.com/en/enterprise-cloud@latest/actions/hosting-your-own-runners/adding-self-hosted-runners

Windows x64

We recommend configuring the runner in a root folder of the Windows drive (e.g. "C:\actions-runner"). This will help avoid issues related to service identity folder permissions and long file path restrictions on Windows.

The following snipped needs to be run on powershell:

# Create a folder under the drive root
mkdir \actions-runner ; cd \actions-runner

# Download the latest runner package
Invoke-WebRequest -Uri https://github.com/actions/runner/releases/download/v2.333.1/actions-runner-win-x64-2.333.1.zip -OutFile actions-runner-win-x64-2.333.1.zip

# Extract the installer
Add-Type -AssemblyName System.IO.Compression.FileSystem ;
[System.IO.Compression.ZipFile]::ExtractToDirectory("$PWD\actions-runner-win-x64-2.333.1.zip", "$PWD")

Windows arm64

We recommend configuring the runner in a root folder of the Windows drive (e.g. "C:\actions-runner"). This will help avoid issues related to service identity folder permissions and long file path restrictions on Windows.

The following snipped needs to be run on powershell:

# Create a folder under the drive root
mkdir \actions-runner ; cd \actions-runner

# Download the latest runner package
Invoke-WebRequest -Uri https://github.com/actions/runner/releases/download/v2.333.1/actions-runner-win-arm64-2.333.1.zip -OutFile actions-runner-win-arm64-2.333.1.zip

# Extract the installer
Add-Type -AssemblyName System.IO.Compression.FileSystem ;
[System.IO.Compression.ZipFile]::ExtractToDirectory("$PWD\actions-runner-win-arm64-2.333.1.zip", "$PWD")

OSX x64

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.333.1/actions-runner-osx-x64-2.333.1.tar.gz

# Extract the installer
tar xzf ./actions-runner-osx-x64-2.333.1.tar.gz

OSX arm64 (Apple silicon)

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.333.1/actions-runner-osx-arm64-2.333.1.tar.gz

# Extract the installer
tar xzf ./actions-runner-osx-arm64-2.333.1.tar.gz

Linux x64

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.333.1/actions-runner-linux-x64-2.333.1.tar.gz

# Extract the installer
tar xzf ./actions-runner-linux-x64-2.333.1.tar.gz

Linux arm64

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.333.1/actions-runner-linux-arm64-2.333.1.tar.gz

# Extract the installer
tar xzf ./actions-runner-linux-arm64-2.333.1.tar.gz

Linux arm

# Create a folder
mkdir actions-runner && cd actions-runner

# Download the latest runner package
curl -O -L https://github.com/actions/runner/releases/download/v2.333.1/actions-runner-linux-arm-2.333.1.tar.gz

# Extract the installer
tar xzf ./actions-runner-linux-arm-2.333.1.tar.gz

Using your self hosted runner

For additional details about configuring, running, or shutting down the runner please check out our product docs.

SHA-256 Checksums

The SHA-256 checksums for the packages included in this build are shown below:

• actions-runner-win-x64-2.333.1.zip d0c4fcb91f8f0754d478db5d61db533bba14cad6c4676a9b93c0b7c2a3969aa0
• actions-runner-win-arm64-2.333.1.zip c665c4ce2bf1d79e1ce49051d91a9e84822a19891ceb442bdaae9fb0d82eb642
• actions-runner-osx-x64-2.333.1.tar.gz e3be55b41452befae65ae032c10df4d8cc6a1926514ef837c45a04f18d11d9d9
• actions-runner-osx-arm64-2.333.1.tar.gz 69d8c30aff69592fd0e3da6db1a477506ae5942cd438967f098bbdbc4e954c90
• actions-runner-linux-x64-2.333.1.tar.gz 18f8f68ed1892854ff2ab1bab4fcaa2f5abeedc98093b6cb13638991725cab74
• actions-runner-linux-arm64-2.333.1.tar.gz 69ac7e5692f877189e7dddf4a1bb16cbbd6425568cd69a0359895fac48b9ad3b
• actions-runner-linux-arm-2.333.1.tar.gz 26d89c7b08685ab6aa9155e062ad60a3f63cb571b7510eadbc723b2f7e4c9f8b

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • "after 2am and before 8am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

ghcr.io/actions/actions-runner (docker) 2.333.0 -> 2.334.0

Risk: 🟡 Caution

The Deep Dive

Update Scope

Updates the ARC runner image in kubernetes/codex-runners values and rendered AutoscalingRunnerSet from ghcr.io/actions/actions-runner:2.333.0@sha256:1ad983536759ceec39ed75a2c8f007ca8c37b66eee35ed86f13623b29a4db97d to ghcr.io/actions/actions-runner:2.334.0@sha256:b6614fce332517f74d0a76e7c762fb08e4f2ff13dcf333183397c8a5725b6e8e. The gha-runner-scale-set chart remains 0.14.1, so this is a runner-container runtime change for future codex ARC jobs, not a controller/chart upgrade.

Performance & Stability

• actions/runner PR 4296 batches and deduplicates action resolution across composite action depth. That is relevant because this repo runs the Renovate evaluator as a composite action on the self-hosted codex path in renovate-eval.yaml, so nested/composite action setup should make fewer resolver API calls without a config change.

Key Fixes

• actions/runner PR 4321 adds Bearer-token support for action archive downloads. This is relevant to the configured self-hosted workflows because renovate-eval.yaml and issue-triage.yaml download pinned remote actions before running local evaluation or triage logic.

Newer Versions

No newer runner release is available: the actions/runner release list shows v2.334.0 as the latest release, so there is no later patch to prefer for this version range.

Hazards & Risks

No breaking change was identified for the configured Linux ARC scale set, but validate one post-merge codex job before treating it as routine. The deployment relies on the job-started hook and runner PVC setup plus ACTIONS_RUNNER_HOOK_JOB_STARTED in values.yaml, and this PR changes the underlying actions/runner image.

Sources

• PR #2228 files
• actions/runner v2.334.0 release
• actions/runner releases
• Batch and deduplicate action resolution
• Bearer token support for action archive downloads
• Codex runner documentation

---

🟡 Verdict: Caution

renovate:caution: deploy after the current GitHub-hosted checkout failure is cleared, then run one self-hosted codex ARC workflow as a smoke check. I found no newer actions/runner patch, no deployment-relevant CVE introduced or resolved by this PR, and no configured Docker job-container path affected by the Docker/Buildx bump.