Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Bump 1password/load-secrets-action from 4.0.0 to 4.0.1#10

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/1password/load-secrets-action-4.0.1
Closed

Bump 1password/load-secrets-action from 4.0.0 to 4.0.1#10
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/1password/load-secrets-action-4.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps 1password/load-secrets-action from 4.0.0 to 4.0.1.

Release notes

Sourced from 1password/load-secrets-action's releases.

v4.0.1

What's Changed

Fix

  • Fixed a Windows specific issue where 1Password CLI installation could fail because the downloaded archive lacked a .zip extension required by PowerShell’s archive extraction fallback. (#154)
  • Bump actions/checkout from v5 to v6 in CI workflows. (#156)

Security

  • Harden GitHub Actions workflows by pinning external actions to immutable commit SHAs. (#157)

Docs

  • Add 1Password API Terms of Service notice to the README (#166)

New Contributors

Full Changelog: 1Password/load-secrets-action@v4.0.0...v4.0.1

Commits
  • 3a12b0a Merge pull request #167 from 1Password/release/v4.0.1
  • 0f0cd1b create new build
  • be2f36b Add Terms of Service to README (#166)
  • 908aabf Merge pull request #154 from superteppo/main
  • cc166c6 Merge pull request #157 from dagecko/runner-guard/fix-ci-security
  • 080cd2d Merge branch '1Password:main' into main
  • 2a321c3 fix: pin 4 unpinned action(s),extract 3 unsafe expression(s) to env vars
  • 2a9101f Merge pull request #156 from 1Password/jill/bump-actions
  • 5b18565 bump actions
  • a763b8d fix installer error on windows
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [1password/load-secrets-action](https://github.com/1password/load-secrets-action) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/1password/load-secrets-action/releases)
- [Commits](1Password/load-secrets-action@92467eb...3a12b0a)

---
updated-dependencies:
- dependency-name: 1password/load-secrets-action
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 22, 2026
@github-actions

Copy link
Copy Markdown

PR: #10
Mode: squash
Topic: GH-policy-api-10
Change-Ids:
I43300f2ca3ed4e1abb569b72681f550c9415bd50
Digest: 027137f14c15
GitHub-Hash: 1f121d43f80838eb

Note: This metadata is also included in the Gerrit commit message for reconciliation.

@github-actions

Copy link
Copy Markdown

Change raised in Gerrit by GitHub2Gerrit: https://gerrit.onap.org/r/c/policy/api/+/145367

onap-github pushed a commit that referenced this pull request Jun 22, 2026
## Release notes

Sourced from 1password/load-secrets-action's releases.

v4.0.1
What's Changed
Fix

Fixed a Windows specific issue where 1Password CLI installation could fail because the downloaded archive lacked a .zip extension required by PowerShell’s archive extraction fallback. (#154)
Bump actions/checkout from v5 to v6 in CI workflows. (#156)

Security

Harden GitHub Actions workflows by pinning external actions to immutable commit SHAs. (#157)

Docs

Add 1Password API Terms of Service notice to the README (#166)

New Contributors

@​dagecko made their first contribution in 1Password/load-secrets-action#157
@​superteppo made their first contribution in 1Password/load-secrets-action#154
@​libutcher made their first contribution in 1Password/load-secrets-action#166

Full Changelog: 1Password/load-secrets-action@v4.0.0...v4.0.1

## Commits

3a12b0a Merge pull request #167 from 1Password/release/v4.0.1
0f0cd1b create new build
be2f36b Add Terms of Service to README (#166)
908aabf Merge pull request #154 from superteppo/main
cc166c6 Merge pull request #157 from dagecko/runner-guard/fix-ci-security
080cd2d Merge branch '1Password:main' into main
2a321c3 fix: pin 4 unpinned action(s),extract 3 unsafe expression(s) to env vars
2a9101f Merge pull request #156 from 1Password/jill/bump-actions
5b18565 bump actions
a763b8d fix installer error on windows
See full diff in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <[email protected]>
Change-Id: I43300f2ca3ed4e1abb569b72681f550c9415bd50
GitHub-PR: #10
GitHub-Hash: 1f121d43f80838eb
Signed-off-by: onap.gh2gerrit <[email protected]>
@dependabot @github

dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like 1password/load-secrets-action is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 22, 2026
@dependabot dependabot Bot deleted the dependabot/github_actions/1password/load-secrets-action-4.0.1 branch June 22, 2026 11:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

0 participants