You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@opendal.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/07/30 12:31:29 UTC
[PR] build(deps): bump 1Password/load-secrets-action from 4.0.1 to 4.1.1 [opendal-reqsign]
dependabot[bot] opened a new pull request, #810:
URL: https://github.com/apache/opendal-reqsign/pull/810
Bumps [1Password/load-secrets-action](https://github.com/1password/load-secrets-action) from 4.0.1 to 4.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/1password/load-secrets-action/releases">1Password/load-secrets-action's releases</a>.</em></p>
<blockquote>
<h2>v4.1.1</h2>
<h2>What's Changed</h2>
<h3>Features</h3>
<ul>
<li>Add fallback version resolution so if app-updates.agilebits.com is unavailable, the action now falls back to Docker Hub and then a baked-in pinned version. (<a href="https://redirect.github.com/1password/load-secrets-action/issues/173">#173</a> )</li>
</ul>
<h3>Security</h3>
<ul>
<li>Harden CI security: add <code>StepSecurity</code> harden runner and pin GitHub Actions to commit SHAs across workflows, restrict workflow permissions, and add Dependabot config. (<a href="https://redirect.github.com/1password/load-secrets-action/issues/174">#174</a> )</li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/1Password/load-secrets-action/compare/v4.0.1...v4.1.1">https://github.com/1Password/load-secrets-action/compare/v4.0.1...v4.1.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/1Password/load-secrets-action/commit/eb2efd0703da22a93c467f2d1ffbb6826c11e19c"><code>eb2efd0</code></a> Merge pull request <a href="https://redirect.github.com/1password/load-secrets-action/issues/183">#183</a> from 1Password/release/v4.1.1</li>
<li><a href="https://github.com/1Password/load-secrets-action/commit/22158bd3a3712a4b6532a333bed309e230e9e3d2"><code>22158bd</code></a> Prepare release</li>
<li><a href="https://github.com/1Password/load-secrets-action/commit/19a016fe1a9f5c9f7c9d3a8662416e73b2c89a30"><code>19a016f</code></a> Merge pull request <a href="https://redirect.github.com/1password/load-secrets-action/issues/174">#174</a> from 1Password/chore/GHA-151735-stepsecurity-remediation</li>
<li><a href="https://github.com/1Password/load-secrets-action/commit/01723ec64cd4c3735bb612662465ca5171aa6a56"><code>01723ec</code></a> Merge pull request <a href="https://redirect.github.com/1password/load-secrets-action/issues/173">#173</a> from 1Password/jill/add-docker-hub-fallback-for-cli-i...</li>
<li><a href="https://github.com/1Password/load-secrets-action/commit/4eec4d1de6b8751e23d50619f57889919e3342c3"><code>4eec4d1</code></a> Rebuild</li>
<li><a href="https://github.com/1Password/load-secrets-action/commit/2f9fe6862d5c77faca3c7d0e915b187ee88d65b4"><code>2f9fe68</code></a> Add CI release check for op version</li>
<li><a href="https://github.com/1Password/load-secrets-action/commit/c63b840e91ef76d1185a40fdeaf6e07ed02f5a6b"><code>c63b840</code></a> Apply GitHub Actions security best practices</li>
<li><a href="https://github.com/1Password/load-secrets-action/commit/d97149e3c782082e3e40b48c033a29b7aef12ee3"><code>d97149e</code></a> Refactor E2E</li>
<li><a href="https://github.com/1Password/load-secrets-action/commit/b2408260f797a5c27a02a8d136e26f98617c360b"><code>b240826</code></a> Update E2E tests</li>
<li><a href="https://github.com/1Password/load-secrets-action/commit/759227f200efd70f56485d44029aa8535d62dbb7"><code>759227f</code></a> Add pinned version</li>
<li>Additional commits viewable in <a href="https://github.com/1password/load-secrets-action/compare/3a12b0ab99d9cd590a3e9b5a90ea017210ed9556...eb2efd0703da22a93c467f2d1ffbb6826c11e19c">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@opendal.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] build(deps): bump 1Password/load-secrets-action from 4.0.1 to 4.1.1 [opendal-reqsign]
Posted by "Xuanwo (via GitHub)" <gi...@apache.org>.
Xuanwo merged PR #810:
URL: https://github.com/apache/opendal-reqsign/pull/810
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@opendal.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org