chore(deps): update 1password/load-secrets-action action to v5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
1password/load-secrets-action	action	major	v4 → v5

---

Release Notes

1password/load-secrets-action (1password/load-secrets-action)

v5.0.1

Compare Source

What's Changed

Fixes

• Correct the authentication error message. It previously listed only the CLI methods (OP_SERVICE_ACCOUNT_TOKEN, or OP_CONNECT_HOST + OP_CONNECT_TOKEN), which misled anyone who meant to use Workload Identity but had one of those variables missing or misspelled. It now lists OP_WORKLOAD_ID + OP_ENVIRONMENT_ID + OP_INTEGRATION_KEY as a third valid option. (#​187)

Dependencies

• Bump @1password/sdk from 0.5.0-beta.1 to the stable 0.5.0, and rebuild dist/ (including core_bg.wasm). (#​187)
• Update the baked-in beta CLI fallback version: 2.38.1-beta.02 → 2.39.0-beta.02.

Security

• Harden CI: add the StepSecurity harden-runner and pin GitHub Actions to commit SHAs across the E2E and fallback-version workflows, and restrict workflow permissions. (#​182)

Full Changelog: 1Password/load-secrets-action@v5.0.0...v5.0.1

v5.0.0

Compare Source

What's Changed

Features

• Add Workload Identity authentication using the GitHub Actions OIDC token (public preview). (#​169)

Full Changelog: 1Password/load-secrets-action@v4.1.1...v5.0.0

v4.1.1

Compare Source

What's Changed

Features

• Add fallback version resolution so if app-updates.agilebits.com is unavailable, the action now falls back to Docker Hub and then a baked-in pinned version. (#​173 )

Security

• Harden CI security: add StepSecurity harden runner and pin GitHub Actions to commit SHAs across workflows, restrict workflow permissions, and add Dependabot config. (#​174 )

Full Changelog: 1Password/load-secrets-action@v4.0.1...v4.1.1

v4.0.1

Compare Source

What's Changed

Fix

• Fixed a Windows specific issue where 1Password CLI installation could fail because the downloaded archive lacked a .zip extension required by PowerShell’s archive extraction fallback. (#​154)
• Bump actions/checkout from v5 to v6 in CI workflows. (#​156)

Security

• Harden GitHub Actions workflows by pinning external actions to immutable commit SHAs. (#​157)

Docs

• Add 1Password API Terms of Service notice to the README (#​166)

New Contributors

• @​dagecko made their first contribution in 1Password#157
• @​superteppo made their first contribution in 1Password#154
• @​libutcher made their first contribution in 1Password#166

Full Changelog: 1Password/load-secrets-action@v4.0.0...v4.0.1

---

Configuration

📅 Schedule: (in timezone Europe/Brussels)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.