Runner certificate errors now mention a deny-list check
When the runner cannot write its certificate bundle or find system certificates, the error now mentions a deny-list check and suggests --log-level debug
You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Self-Hosted RunnerArea: what it touches
ImprovementsKind: in v2.1.307,
ImprovementsSection of the release
What
The runner builds a certificate bundle, a file listing the certificate authorities it trusts for secure connections. When writing that bundle fails, or no system certificates are found, the explanation now mentions a check against Claude Code's deny list. It also suggests running with --log-level debug, which prints the error for a failed deny-list check or a step that did not complete. Before, it only said to check the folder's permissions and free space.
Why
Certificates in the runner's bundle are now checked against a deny list, and --log-level debug shows when that check is what failed.
