Skip to content

build(deps): bump 1Password/load-secrets-action/configure from 4.1.1 to 5.0.1 - #853

Merged
Xuanwo merged 1 commit into
mainfrom
dependabot/github_actions/1Password/load-secrets-action/configure-5.0.1
Sep 7, 2026
Merged

Xuanwo merged 1 commit into
mainfrom
dependabot/github_actions/1Password/load-secrets-action/configure-5.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps 1Password/load-secrets-action/configure from 4.1.1 to 5.0.1.

Release notes

Sourced from 1Password/load-secrets-action/configure's releases.

v5.0.1

What's Changed

Fixes

  • Correct the authentication error message. It previously listed only the CLI methods (OP_SERVICE_ACCOUNT_TOKEN, or OP_CONNECT_HOST + OP_CONNECT_TOKEN), which misled anyone who meant to use Workload Identity but had one of those variables missing or misspelled. It now lists OP_WORKLOAD_ID + OP_ENVIRONMENT_ID + OP_INTEGRATION_KEY as a third valid option. (#187)

Dependencies

  • Bump @1password/sdk from 0.5.0-beta.1 to the stable 0.5.0, and rebuild dist/ (including core_bg.wasm). (#187)
  • Update the baked-in beta CLI fallback version: 2.38.1-beta.022.39.0-beta.02.

Security

  • Harden CI: add the StepSecurity harden-runner and pin GitHub Actions to commit SHAs across the E2E and fallback-version workflows, and restrict workflow permissions. (#182)

Full Changelog: 1Password/load-secrets-action@v5.0.0...v5.0.1

v5.0.0

What's Changed

Features

  • Add Workload Identity authentication using the GitHub Actions OIDC token (public preview). (#169)

Full Changelog: 1Password/load-secrets-action@v4.1.1...v5.0.0

v5.0.0-beta.1

What's Changed

Feature

  • Add Workload Identity authentication using the GitHub Actions OIDC token (private beta) (#169)

Full Changelog: 1Password/load-secrets-action@v4.0.0...v5.0.0-beta.1

Commits
  • 70062d7 Merge pull request #190 from 1Password/release/v5.0.1
  • 6f5bd0e Prepare Release 5.0.1
  • 846abe0 Merge pull request #187 from 1Password/jill/bump-to-stable-sdk
  • 557708f Bump sdk type
  • 2d8a25c Merge pull request #182 from 1Password/chore/GHA-211518-stepsecurity-remediation
  • e544b78 Prepare Release v5.0.0 (#185)
  • 631992c Apply GitHub Actions security best practices
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 25, 2026
Bumps [1Password/load-secrets-action/configure](https://github.com/1password/load-secrets-action) from 4.1.1 to 5.0.1.
- [Release notes](https://github.com/1password/load-secrets-action/releases)
- [Commits](1Password/load-secrets-action@eb2efd0...70062d7)

---
updated-dependencies:
- dependency-name: 1Password/load-secrets-action/configure
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/1Password/load-secrets-action/configure-5.0.1 branch from 4a75eaa to f24651f Compare September 3, 2026 12:12
@Xuanwo
Xuanwo merged commit 613813b into main Sep 7, 2026
55 checks passed
@Xuanwo
Xuanwo deleted the dependabot/github_actions/1Password/load-secrets-action/configure-5.0.1 branch September 7, 2026 08:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant