You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@opendal.apache.org by xu...@apache.org on 2026/07/31 06:58:07 UTC
(opendal-reqsign) branch main updated: build(deps): bump 1Password/load-secrets-action from 4.0.1 to 4.1.1 (#810)
This is an automated email from the ASF dual-hosted git repository.
Xuanwo pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/opendal-reqsign.git
The following commit(s) were added to refs/heads/main by this push:
new 18d4043 build(deps): bump 1Password/load-secrets-action from 4.0.1 to 4.1.1 (#810)
18d4043 is described below
commit 18d4043f0fb96c0cc59e7f68d009c6e42991f0c9
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Fri Jul 31 14:58:02 2026 +0800
build(deps): bump 1Password/load-secrets-action from 4.0.1 to 4.1.1 (#810)
Bumps
[1Password/load-secrets-action](https://github.com/1password/load-secrets-action)
from 4.0.1 to 4.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/1password/load-secrets-action/releases">1Password/load-secrets-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.1</h2>
<h2>What's Changed</h2>
<h3>Features</h3>
<ul>
<li>Add fallback version resolution so if app-updates.agilebits.com is
unavailable, the action now falls back to Docker Hub and then a baked-in
pinned version. (<a
href="https://redirect.github.com/1password/load-secrets-action/issues/173">#173</a>
)</li>
</ul>
<h3>Security</h3>
<ul>
<li>Harden CI security: add <code>StepSecurity</code> harden runner and
pin GitHub Actions to commit SHAs across workflows, restrict workflow
permissions, and add Dependabot config. (<a
href="https://redirect.github.com/1password/load-secrets-action/issues/174">#174</a>
)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/1Password/load-secrets-action/compare/v4.0.1...v4.1.1">https://github.com/1Password/load-secrets-action/compare/v4.0.1...v4.1.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/1Password/load-secrets-action/commit/eb2efd0703da22a93c467f2d1ffbb6826c11e19c"><code>eb2efd0</code></a>
Merge pull request <a
href="https://redirect.github.com/1password/load-secrets-action/issues/183">#183</a>
from 1Password/release/v4.1.1</li>
<li><a
href="https://github.com/1Password/load-secrets-action/commit/22158bd3a3712a4b6532a333bed309e230e9e3d2"><code>22158bd</code></a>
Prepare release</li>
<li><a
href="https://github.com/1Password/load-secrets-action/commit/19a016fe1a9f5c9f7c9d3a8662416e73b2c89a30"><code>19a016f</code></a>
Merge pull request <a
href="https://redirect.github.com/1password/load-secrets-action/issues/174">#174</a>
from 1Password/chore/GHA-151735-stepsecurity-remediation</li>
<li><a
href="https://github.com/1Password/load-secrets-action/commit/01723ec64cd4c3735bb612662465ca5171aa6a56"><code>01723ec</code></a>
Merge pull request <a
href="https://redirect.github.com/1password/load-secrets-action/issues/173">#173</a>
from 1Password/jill/add-docker-hub-fallback-for-cli-i...</li>
<li><a
href="https://github.com/1Password/load-secrets-action/commit/4eec4d1de6b8751e23d50619f57889919e3342c3"><code>4eec4d1</code></a>
Rebuild</li>
<li><a
href="https://github.com/1Password/load-secrets-action/commit/2f9fe6862d5c77faca3c7d0e915b187ee88d65b4"><code>2f9fe68</code></a>
Add CI release check for op version</li>
<li><a
href="https://github.com/1Password/load-secrets-action/commit/c63b840e91ef76d1185a40fdeaf6e07ed02f5a6b"><code>c63b840</code></a>
Apply GitHub Actions security best practices</li>
<li><a
href="https://github.com/1Password/load-secrets-action/commit/d97149e3c782082e3e40b48c033a29b7aef12ee3"><code>d97149e</code></a>
Refactor E2E</li>
<li><a
href="https://github.com/1Password/load-secrets-action/commit/b2408260f797a5c27a02a8d136e26f98617c360b"><code>b240826</code></a>
Update E2E tests</li>
<li><a
href="https://github.com/1Password/load-secrets-action/commit/759227f200efd70f56485d44029aa8535d62dbb7"><code>759227f</code></a>
Add pinned version</li>
<li>Additional commits viewable in <a
href="https://github.com/1password/load-secrets-action/compare/3a12b0ab99d9cd590a3e9b5a90ea017210ed9556...eb2efd0703da22a93c467f2d1ffbb6826c11e19c">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <su...@github.com>
Co-authored-by: dependabot[bot] <49...@users.noreply.github.com>
---
.github/workflows/aws_v4.yml | 12 ++++++------
.github/workflows/azure_storage.yml | 12 ++++++------
.github/workflows/google.yml | 12 ++++++------
3 files changed, 18 insertions(+), 18 deletions(-)
diff --git a/.github/workflows/aws_v4.yml b/.github/workflows/aws_v4.yml
index ceb947b..9e11eb4 100644
--- a/.github/workflows/aws_v4.yml
+++ b/.github/workflows/aws_v4.yml
@@ -83,7 +83,7 @@ jobs:
connect-host: ${{ secrets.OP_CONNECT_HOST }}
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
with:
export-env: true
env:
@@ -115,7 +115,7 @@ jobs:
connect-host: ${{ secrets.OP_CONNECT_HOST }}
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
with:
export-env: true
env:
@@ -145,7 +145,7 @@ jobs:
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
id: load_secret
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
env:
REQSIGN_AWS_V4_TEST_ENV: on
REQSIGN_AWS_V4_TEST_PROFILE: on
@@ -197,7 +197,7 @@ jobs:
connect-host: ${{ secrets.OP_CONNECT_HOST }}
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
with:
export-env: true
env:
@@ -244,7 +244,7 @@ jobs:
connect-host: ${{ secrets.OP_CONNECT_HOST }}
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
with:
export-env: true
env:
@@ -591,7 +591,7 @@ jobs:
connect-host: ${{ secrets.OP_CONNECT_HOST }}
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
with:
export-env: true
env:
diff --git a/.github/workflows/azure_storage.yml b/.github/workflows/azure_storage.yml
index a6affe2..d633daa 100644
--- a/.github/workflows/azure_storage.yml
+++ b/.github/workflows/azure_storage.yml
@@ -83,7 +83,7 @@ jobs:
connect-host: ${{ secrets.OP_CONNECT_HOST }}
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
with:
export-env: true
env:
@@ -114,7 +114,7 @@ jobs:
connect-host: ${{ secrets.OP_CONNECT_HOST }}
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
with:
export-env: true
env:
@@ -144,7 +144,7 @@ jobs:
connect-host: ${{ secrets.OP_CONNECT_HOST }}
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
with:
export-env: true
env:
@@ -175,7 +175,7 @@ jobs:
connect-host: ${{ secrets.OP_CONNECT_HOST }}
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
with:
export-env: true
env:
@@ -205,7 +205,7 @@ jobs:
connect-host: ${{ secrets.OP_CONNECT_HOST }}
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
with:
export-env: true
env:
@@ -251,7 +251,7 @@ jobs:
connect-host: ${{ secrets.OP_CONNECT_HOST }}
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
with:
export-env: true
env:
diff --git a/.github/workflows/google.yml b/.github/workflows/google.yml
index d628618..c612b19 100644
--- a/.github/workflows/google.yml
+++ b/.github/workflows/google.yml
@@ -83,7 +83,7 @@ jobs:
connect-host: ${{ secrets.OP_CONNECT_HOST }}
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
with:
export-env: true
env:
@@ -114,7 +114,7 @@ jobs:
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
id: load_secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
env:
REQSIGN_GOOGLE_TEST_DEFAULT: on
GOOGLE_APPLICATION_CREDENTIALS_BASE64: op://reqsign/google/credential_base64
@@ -146,7 +146,7 @@ jobs:
connect-host: ${{ secrets.OP_CONNECT_HOST }}
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
with:
export-env: true
env:
@@ -176,7 +176,7 @@ jobs:
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
id: load_secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
env:
REQSIGN_GOOGLE_TEST_AUTHORIZED_USER: on
AUTHORIZED_USER_CREDENTIALS_BASE64: op://reqsign/google/authorized_user_base64
@@ -211,7 +211,7 @@ jobs:
connect-host: ${{ secrets.OP_CONNECT_HOST }}
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
with:
export-env: true
env:
@@ -249,7 +249,7 @@ jobs:
connect-token: ${{ secrets.OP_CONNECT_TOKEN }}
- name: Load secrets
id: load_secrets
- uses: 1Password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
+ uses: 1Password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1
env:
REQSIGN_GOOGLE_TEST_IMPERSONATED_SERVICE_ACCOUNT: on
IMPERSONATED_SA_CREDENTIALS_BASE64: op://reqsign/google/impersonated_sa_base64