Update 1password/load-secrets-action action to v5 - autoclosed

[mend-for-github-com]

This PR contains the following updates:

Package	Type	Update	Change
1password/load-secrets-action	action	major	v4 → v5

---

Release Notes

1password/load-secrets-action (1password/load-secrets-action)

v5.0.1

Compare Source

What's Changed

Fixes

• Correct the authentication error message. It previously listed only the CLI methods (OP_SERVICE_ACCOUNT_TOKEN, or OP_CONNECT_HOST + OP_CONNECT_TOKEN), which misled anyone who meant to use Workload Identity but had one of those variables missing or misspelled. It now lists OP_WORKLOAD_ID + OP_ENVIRONMENT_ID + OP_INTEGRATION_KEY as a third valid option. (#​187)

Dependencies

• Bump @1password/sdk from 0.5.0-beta.1 to the stable 0.5.0, and rebuild dist/ (including core_bg.wasm). (#​187)
• Update the baked-in beta CLI fallback version: 2.38.1-beta.02 → 2.39.0-beta.02.

Security

• Harden CI: add the StepSecurity harden-runner and pin GitHub Actions to commit SHAs across the E2E and fallback-version workflows, and restrict workflow permissions. (#​182)

Full Changelog: 1Password/load-secrets-action@v5.0.0...v5.0.1

v5.0.1

Compare Source

What's Changed

Fixes

• Correct the authentication error message. It previously listed only the CLI methods (OP_SERVICE_ACCOUNT_TOKEN, or OP_CONNECT_HOST + OP_CONNECT_TOKEN), which misled anyone who meant to use Workload Identity but had one of those variables missing or misspelled. It now lists OP_WORKLOAD_ID + OP_ENVIRONMENT_ID + OP_INTEGRATION_KEY as a third valid option. (#​187)

Dependencies

• Bump @1password/sdk from 0.5.0-beta.1 to the stable 0.5.0, and rebuild dist/ (including core_bg.wasm). (#​187)
• Update the baked-in beta CLI fallback version: 2.38.1-beta.02 → 2.39.0-beta.02.

Security

• Harden CI: add the StepSecurity harden-runner and pin GitHub Actions to commit SHAs across the E2E and fallback-version workflows, and restrict workflow permissions. (#​182)

Full Changelog: 1Password/load-secrets-action@v5.0.0...v5.0.1

v5.0.0

Compare Source

What's Changed

Features

• Add Workload Identity authentication using the GitHub Actions OIDC token (public preview). (#​169)

Full Changelog: 1Password/load-secrets-action@v4.1.1...v5.0.0

v5

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.52%. Comparing base (5ff55cd) to head (55b27b4).

Additional details and impacted files

@@             Coverage Diff              @@
##               main    #1452      +/-   ##
============================================
- Coverage     78.57%   78.52%   -0.05%     
  Complexity     1315     1315              
============================================
  Files           106      106              
  Lines          6045     6045              
  Branches        647      647              
============================================
- Hits           4750     4747       -3     
- Misses         1004     1008       +4     
+ Partials        291      290       -1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.