Skip to content

build(deps): bump 1password/load-secrets-action from 4 to 5 in the major-deps group - #711

Merged
rfay merged 1 commit into
mainfrom
dependabot/github_actions/major-deps-8d66a9e421
Aug 3, 2026
Merged

build(deps): bump 1password/load-secrets-action from 4 to 5 in the major-deps group#711
rfay merged 1 commit into
mainfrom
dependabot/github_actions/major-deps-8d66a9e421

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the major-deps group with 1 update: 1password/load-secrets-action.

Updates 1password/load-secrets-action from 4 to 5

Release notes

Sourced from 1password/load-secrets-action's releases.

v5.0.0

What's Changed

Features

  • Add Workload Identity authentication using the GitHub Actions OIDC token (public preview). (#169)

Full Changelog: 1Password/load-secrets-action@v4.1.1...v5.0.0

v5.0.0-beta.1

What's Changed

Feature

  • Add Workload Identity authentication using the GitHub Actions OIDC token (private beta) (#169)

Full Changelog: 1Password/load-secrets-action@v4.0.0...v5.0.0-beta.1

v4.1.1

What's Changed

Features

  • Add fallback version resolution so if app-updates.agilebits.com is unavailable, the action now falls back to Docker Hub and then a baked-in pinned version. (#173 )

Security

  • Harden CI security: add StepSecurity harden runner and pin GitHub Actions to commit SHAs across workflows, restrict workflow permissions, and add Dependabot config. (#174 )

Full Changelog: 1Password/load-secrets-action@v4.0.1...v4.1.1

v4.0.1

What's Changed

Fix

  • Fixed a Windows specific issue where 1Password CLI installation could fail because the downloaded archive lacked a .zip extension required by PowerShell’s archive extraction fallback. (#154)
  • Bump actions/checkout from v5 to v6 in CI workflows. (#156)

Security

  • Harden GitHub Actions workflows by pinning external actions to immutable commit SHAs. (#157)

Docs

  • Add 1Password API Terms of Service notice to the README (#166)

New Contributors

Full Changelog: 1Password/load-secrets-action@v4.0.0...v4.0.1

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the major-deps group with 1 update: [1password/load-secrets-action](https://github.com/1password/load-secrets-action).


Updates `1password/load-secrets-action` from 4 to 5
- [Release notes](https://github.com/1password/load-secrets-action/releases)
- [Commits](1Password/load-secrets-action@v4...v5)

---
updated-dependencies:
- dependency-name: 1password/load-secrets-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 3, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Aug 3, 2026

Copy link
Copy Markdown

Deploying ddev-com-front-end with  Cloudflare Pages  Cloudflare Pages

Latest commit: 6e046ec
Status: ✅  Deploy successful!
Preview URL: https://a005ca9e.ddev-com-front-end.pages.dev
Branch Preview URL: https://dependabot-github-actions-ma-197s.ddev-com-front-end.pages.dev

View logs

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 3, 2026
@rfay
rfay merged commit e5fdc25 into main Aug 3, 2026
3 checks passed
@rfay
rfay deleted the dependabot/github_actions/major-deps-8d66a9e421 branch August 3, 2026 12:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant