dependabot[bot] opened a new pull request, #770:
URL: https://github.com/apache/opendal-reqsign/pull/770

   Bumps 
[1Password/load-secrets-action/configure](https://github.com/1password/load-secrets-action)
 from 4.0.0 to 4.0.1.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/1password/load-secrets-action/releases";>1Password/load-secrets-action/configure's
 releases</a>.</em></p>
   <blockquote>
   <h2>v4.0.1</h2>
   <h2>What's Changed</h2>
   <h3>Fix</h3>
   <ul>
   <li>Fixed a Windows specific issue where 1Password CLI installation could 
fail because the downloaded archive lacked a .zip extension required by 
PowerShell’s archive extraction fallback. (<a 
href="https://redirect.github.com/1Password/load-secrets-action/pull/154";>#154</a>)</li>
   <li>Bump actions/checkout from v5 to v6 in CI workflows. (<a 
href="https://redirect.github.com/1Password/load-secrets-action/pull/156";>#156</a>)</li>
   </ul>
   <h3>Security</h3>
   <ul>
   <li>Harden GitHub Actions workflows by pinning external actions to immutable 
commit SHAs. (<a 
href="https://redirect.github.com/1Password/load-secrets-action/pull/157";>#157</a>)</li>
   </ul>
   <h3>Docs</h3>
   <ul>
   <li>Add 1Password API Terms of Service notice to the README (<a 
href="https://redirect.github.com/1Password/load-secrets-action/pull/166";>#166</a>)</li>
   </ul>
   <h3>New Contributors</h3>
   <ul>
   <li><a href="https://github.com/dagecko";><code>@​dagecko</code></a> made 
their first contribution in <a 
href="https://redirect.github.com/1Password/load-secrets-action/pull/157";>1Password/load-secrets-action#157</a></li>
   <li><a href="https://github.com/superteppo";><code>@​superteppo</code></a> 
made their first contribution in <a 
href="https://redirect.github.com/1Password/load-secrets-action/pull/154";>1Password/load-secrets-action#154</a></li>
   <li><a href="https://github.com/libutcher";><code>@​libutcher</code></a> made 
their first contribution in <a 
href="https://redirect.github.com/1Password/load-secrets-action/pull/166";>1Password/load-secrets-action#166</a></li>
   </ul>
   <p><strong>Full Changelog</strong>: <a 
href="https://github.com/1Password/load-secrets-action/compare/v4.0.0...v4.0.1";>https://github.com/1Password/load-secrets-action/compare/v4.0.0...v4.0.1</a></p>
   </blockquote>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/1Password/load-secrets-action/commit/3a12b0ab99d9cd590a3e9b5a90ea017210ed9556";><code>3a12b0a</code></a>
 Merge pull request <a 
href="https://redirect.github.com/1password/load-secrets-action/issues/167";>#167</a>
 from 1Password/release/v4.0.1</li>
   <li><a 
href="https://github.com/1Password/load-secrets-action/commit/0f0cd1b2cca821a593da63d07d393079bb151acb";><code>0f0cd1b</code></a>
 create new build</li>
   <li><a 
href="https://github.com/1Password/load-secrets-action/commit/be2f36bec409a934fef5d502f0864ab86af8faf7";><code>be2f36b</code></a>
 Add Terms of Service to README (<a 
href="https://redirect.github.com/1password/load-secrets-action/issues/166";>#166</a>)</li>
   <li><a 
href="https://github.com/1Password/load-secrets-action/commit/908aabfadefbbec4b622829114cad26439b67e77";><code>908aabf</code></a>
 Merge pull request <a 
href="https://redirect.github.com/1password/load-secrets-action/issues/154";>#154</a>
 from superteppo/main</li>
   <li><a 
href="https://github.com/1Password/load-secrets-action/commit/cc166c60deb878a166a3a11133c668415ef6aac8";><code>cc166c6</code></a>
 Merge pull request <a 
href="https://redirect.github.com/1password/load-secrets-action/issues/157";>#157</a>
 from dagecko/runner-guard/fix-ci-security</li>
   <li><a 
href="https://github.com/1Password/load-secrets-action/commit/080cd2d3be81ab40f269b8f3e54e98a2f7cdd6f6";><code>080cd2d</code></a>
 Merge branch '1Password:main' into main</li>
   <li><a 
href="https://github.com/1Password/load-secrets-action/commit/2a321c3fe70e3ee7ea97b645c84fe870fb518d0c";><code>2a321c3</code></a>
 fix: pin 4 unpinned action(s),extract 3 unsafe expression(s) to env vars</li>
   <li><a 
href="https://github.com/1Password/load-secrets-action/commit/2a9101f21de4fcc2ae46583a248b43d50ad0476a";><code>2a9101f</code></a>
 Merge pull request <a 
href="https://redirect.github.com/1password/load-secrets-action/issues/156";>#156</a>
 from 1Password/jill/bump-actions</li>
   <li><a 
href="https://github.com/1Password/load-secrets-action/commit/5b18565a3bb23363b250ce96e0b405de216f5a44";><code>5b18565</code></a>
 bump actions</li>
   <li><a 
href="https://github.com/1Password/load-secrets-action/commit/a763b8d28adee0398ab02627d7e2aa69e08945b4";><code>a763b8d</code></a>
 fix installer error on windows</li>
   <li>See full diff in <a 
href="https://github.com/1password/load-secrets-action/compare/92467eb28f72e8255933372f1e0707c567ce2259...3a12b0ab99d9cd590a3e9b5a90ea017210ed9556";>compare
 view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=1Password/load-secrets-action/configure&package-manager=github_actions&previous-version=4.0.0&new-version=4.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to