Skip to content

action-allowlist-review: bump 1Password/load-secrets-action from 5.0.0 to 5.0.1 in /.github/actions/for-dependabot-triggered-reviews - #1195

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/1Password/load-secrets-action-5.0.1
Open

action-allowlist-review: bump 1Password/load-secrets-action from 5.0.0 to 5.0.1 in /.github/actions/for-dependabot-triggered-reviews#1195
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/1Password/load-secrets-action-5.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor

Bumps 1Password/load-secrets-action from 5.0.0 to 5.0.1.

Release notes

Sourced from 1Password/load-secrets-action's releases.

v5.0.1

What's Changed

Fixes

  • Correct the authentication error message. It previously listed only the CLI methods (OP_SERVICE_ACCOUNT_TOKEN, or OP_CONNECT_HOST + OP_CONNECT_TOKEN), which misled anyone who meant to use Workload Identity but had one of those variables missing or misspelled. It now lists OP_WORKLOAD_ID + OP_ENVIRONMENT_ID + OP_INTEGRATION_KEY as a third valid option. (#187)

Dependencies

  • Bump @1password/sdk from 0.5.0-beta.1 to the stable 0.5.0, and rebuild dist/ (including core_bg.wasm). (#187)
  • Update the baked-in beta CLI fallback version: 2.38.1-beta.022.39.0-beta.02.

Security

  • Harden CI: add the StepSecurity harden-runner and pin GitHub Actions to commit SHAs across the E2E and fallback-version workflows, and restrict workflow permissions. (#182)

Full Changelog: 1Password/load-secrets-action@v5.0.0...v5.0.1

Commits
  • 70062d7 Merge pull request #190 from 1Password/release/v5.0.1
  • 6f5bd0e Prepare Release 5.0.1
  • 846abe0 Merge pull request #187 from 1Password/jill/bump-to-stable-sdk
  • 557708f Bump sdk type
  • 2d8a25c Merge pull request #182 from 1Password/chore/GHA-211518-stepsecurity-remediation
  • 631992c Apply GitHub Actions security best practices
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 21, 2026
@dependabot
dependabot Bot requested a review from dfoulks1 as a code owner August 21, 2026 13:21
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 21, 2026
@dependabot
dependabot Bot requested review from potiuk and ppkarwasz as code owners August 21, 2026 13:21
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Aug 21, 2026
Bumps [1Password/load-secrets-action](https://github.com/1password/load-secrets-action) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/1password/load-secrets-action/releases)
- [Commits](1Password/load-secrets-action@e544b78...70062d7)

---
updated-dependencies:
- dependency-name: 1Password/load-secrets-action
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/1Password/load-secrets-action-5.0.1 branch from 017e476 to 378bcfc Compare August 27, 2026 18:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants