Skip to content
This repository was archived by the owner on Jul 24, 2026. It is now read-only.

ci: bump 1password/load-secrets-action from 3.2.1 to 4.0.1 - #3

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/1password/load-secrets-action-4.0.1
Closed

ci: bump 1password/load-secrets-action from 3.2.1 to 4.0.1#3
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/1password/load-secrets-action-4.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown

Bumps 1password/load-secrets-action from 3.2.1 to 4.0.1.

Release notes

Sourced from 1password/load-secrets-action's releases.

v4.0.1

What's Changed

Fix

  • Fixed a Windows specific issue where 1Password CLI installation could fail because the downloaded archive lacked a .zip extension required by PowerShell’s archive extraction fallback. (#154)
  • Bump actions/checkout from v5 to v6 in CI workflows. (#156)

Security

  • Harden GitHub Actions workflows by pinning external actions to immutable commit SHAs. (#157)

Docs

  • Add 1Password API Terms of Service notice to the README (#166)

New Contributors

Full Changelog: 1Password/load-secrets-action@v4.0.0...v4.0.1

v4.0.0

What's Changed

  • Clear npm audit / Dependabot findings via npm audit fix where safe (e.g. ajv, flatted, undici, and other resolvable minimatch updates). #151
  • Action runtime updated from Node 20 to Node 24 for GitHub Actions compatibility (deprecation notice). #148.

New Contributors

Full Changelog: 1Password/load-secrets-action@v3...v4.0.0

Commits
  • 3a12b0a Merge pull request #167 from 1Password/release/v4.0.1
  • 0f0cd1b create new build
  • be2f36b Add Terms of Service to README (#166)
  • 908aabf Merge pull request #154 from superteppo/main
  • cc166c6 Merge pull request #157 from dagecko/runner-guard/fix-ci-security
  • 080cd2d Merge branch '1Password:main' into main
  • 2a321c3 fix: pin 4 unpinned action(s),extract 3 unsafe expression(s) to env vars
  • 2a9101f Merge pull request #156 from 1Password/jill/bump-actions
  • 5b18565 bump actions
  • a763b8d fix installer error on windows
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/1password/load-secrets-action-4.0.1 branch from f1630ec to cde632d Compare July 22, 2026 13:25
@rubicon

rubicon commented Jul 22, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@rubicon

rubicon commented Jul 23, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [1password/load-secrets-action](https://github.com/1password/load-secrets-action) from 3.2.1 to 4.0.1.
- [Release notes](https://github.com/1password/load-secrets-action/releases)
- [Commits](1Password/load-secrets-action@dafbe7c...3a12b0a)

---
updated-dependencies:
- dependency-name: 1password/load-secrets-action
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/1password/load-secrets-action-4.0.1 branch from cde632d to 2614427 Compare July 23, 2026 10:45
@rubicon

rubicon commented Jul 24, 2026

Copy link
Copy Markdown
Owner

Closing: this repository is superseded by the fork at https://github.com/rubicon/diviops and is being archived.

@rubicon rubicon closed this Jul 24, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/1password/load-secrets-action-4.0.1 branch July 24, 2026 01:14
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant