chore(deps): bump github.com/1password/onepassword-sdk-go from 0.3.1 to 0.4.0

[dependabot]

Bumps github.com/1password/onepassword-sdk-go from 0.3.1 to 0.4.0.

Release notes

Sourced from github.com/1password/onepassword-sdk-go's releases.

Release 0.4.0

1Password Go SDK v0.4.0

NEW

• Desktop App integration: The SDK can now authenticate via an authorization prompt from the 1Password app.
• Vault CRUDL: You can now fully manage 1Password vaults with the SDK, including creating, reading, updating, deleting and listing.
• Vault group permission management operations: You can now grant, update and revoke group access to vaults using grantGroupPermissions, updateGroupPermissions, and revokeGroupPermissions functions.
• Item batch management: You can now retrieve, create, update and delete items in batch, enabling more scalable item management.

Release 0.4.0-beta.2

1Password Go SDK v0.4.0-beta.2

NEW

• Vault group permission management operations: You can now grant, update and revoke group access to vaults using GrantGroupPermissions, UpdateGroupPermissions, and RevokeGroupPermissions functions.
• Desktop App integration on Windows: The SDK can now authenticate via an authorization prompt from the 1Password app on Windows as well. Now all major desktop OSs support this feature.

FIXED

• Vault listing with additional parameters: Vaults().List no longer errors when additional parameters are provided.
• Handling locked 1Password app state: When the 1Password app gets locked after the SDK client is authenticated, it will now automatically re-authenticate.

Release 0.4.0-beta.1

1Password Go SDK v0.4.0-beta.1

NEW

• The SDK can now authenticate with the Desktop App.
• Vault Get, GetOverview as well as new options for vault List are now available.
• Item batch operations are now available.
• The Groups API has been introduced.

Commits

• d0f8afa Update notes
• 6e24bc3 Release v0.4.0
• ee80f4c Merge pull request #249 from 1Password/morgan/add-vault-group-operations-exam...
• 2a46d8e removed vault crudl operations from service account examples
• 26c7319 formatted variable names. Removed create vault example from service account t...
• 8d5d8a6 reverted import change so it's contained within docs
• b99ef46 Merge branch 'main' into morgan/add-vault-group-operations-examples
• 47716ed Merge pull request #251 from 1Password/beta
• 5e5ee00 removed group functionality from service account example
• 35aa35c fixed golangca lint error
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[atmos-pro]

Tip

Atmos Pro  

No affected stacks workflow was detected for this pull request.
If this is expected, no action is needed.
Learn More. Ask AI.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Files

• go.mod

[Erik Osterman (Cloud Posse) (osterman)]

Holding off on merging this — bumping to onepassword-sdk-go v0.4.0 breaks our CGO-disabled builds:

../../../go/pkg/mod/github.com/1password/onepassword-sdk-go@v0.4.0/client_builder_no_cgo.go:7:10:
undefined: ERROR_WithDesktopAppIntegration_requires_CGO_To_Cross_Compile_See_README_CGO_Section

Atmos builds with CGO_ENABLED=0 for cross-platform release binaries, and v0.4.0 introduced a compile-time trap that requires CGO for the desktop-app-integration code path even when it isn't used, so Build (linux)/Build (macos) fail outright.

Upstream is aware and has already fixed this on their main branch:

• SDK requires CGO even without using Desktop App Integration 1Password/onepassword-sdk-go#260 — "SDK requires CGO even without using Desktop App Integration" (closed)
• fix: cgo handling in the code base 1Password/onepassword-sdk-go#263 — "fix: cgo handling in the code base" (closed, merged as 677b6c65 on 2026-05-29) — replaces the compile-time trap with a runtime error instead

However, their latest published tag is still v0.4.1-beta.1 (2026-02-11), which predates that fix — so there is currently no released version of the SDK that actually contains it. We can't work around this by picking a different existing version; we're waiting on a new upstream release/beta cut from main.

Parking this PR until 1Password ships a release newer than 2026-05-29. Will revisit once that's available.