## Release notes Sourced from 1password/load-secrets-action's releases. v5.0.1 What's Changed Fixes Correct the authentication error message. It previously listed only the CLI methods (OP_SERVICE_ACCOUNT_TOKEN, or OP_CONNECT_HOST + OP_CONNECT_TOKEN), which misled anyone who meant to use Workload Identity but had one of those variables missing or misspelled. It now lists OP_WORKLOAD_ID + OP_ENVIRONMENT_ID + OP_INTEGRATION_KEY as a third valid option. (#187) Dependencies Bump @1password/sdk from 0.5.0-beta.1 to the stable 0.5.0, and rebuild dist/ (including core_bg.wasm). (#187) Update the baked-in beta CLI fallback version: 2.38.1-beta.02 → 2.39.0-beta.02. Security Harden CI: add the StepSecurity harden-runner and pin GitHub Actions to commit SHAs across the E2E and fallback-version workflows, and restrict workflow permissions. (#182) Full Changelog: 1Password/load-secrets-action@v5.0.0...v5.0.1 v5.0.0 What's Changed Features Add Workload Identity authentication using the GitHub Actions OIDC token (public preview). (#169) Full Changelog: 1Password/load-secrets-action@v4.1.1...v5.0.0 v5.0.0-beta.1 What's Changed Feature Add Workload Identity authentication using the GitHub Actions OIDC token (private beta) (#169) Full Changelog: 1Password/load-secrets-action@v4.0.0...v5.0.0-beta.1 v4.1.1 What's Changed Features Add fallback version resolution so if app-updates.agilebits.com is unavailable, the action now falls back to Docker Hub and then a baked-in pinned version. (#173 ) Security Harden CI security: add StepSecurity harden runner and pin GitHub Actions to commit SHAs across workflows, restrict workflow permissions, and add Dependabot config. (#174 ) Full Changelog: 1Password/load-secrets-action@v4.0.1...v4.1.1 ## Commits 70062d7 Merge pull request #190 from 1Password/release/v5.0.1 6f5bd0e Prepare Release 5.0.1 846abe0 Merge pull request #187 from 1Password/jill/bump-to-stable-sdk 557708f Bump sdk type 2d8a25c Merge pull request #182 from 1Password/chore/GHA-211518-stepsecurity-remediation e544b78 Prepare Release v5.0.0 (#185) eb2efd0 Merge pull request #183 from 1Password/release/v4.1.1 22158bd Prepare release 631992c Apply GitHub Actions security best practices 19a016f Merge pull request #174 from 1Password/chore/GHA-151735-stepsecurity-remediation Additional commits viewable in compare view ![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Id66bf4aa4946fc12fb32e3a84e53ac5c722159f2 GitHub-PR: #34 GitHub-Hash: a06c5e95ad8edf52 Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>
-Original file line number
+Diff line change
       - name: Load secret from 1Password
         if: steps.check-pom-xml.outputs.exists == 'true'
 -        uses: 1password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1
 +        uses: 1password/load-secrets-action@70062d7a876d3eb6334754fa26efd2fbd90c32f2 # v5.0.1
         with:
           export-env: true
         env: