deps: ci: bump 1password/load-secrets-action from 2 to 3
Nobody has claimed this yet.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 20/100
- Issue type
- Refactor
- Clarity
- Clearly specified
- Activity status
- Stale
- Tech stack
- github-actions
- Domain
- ci-cd
Research direction
Start by reviewing the GitHub Actions workflow usage of 1password/load-secrets-action and the existing PR #45. Check the v3 breaking change around export-env, then verify that CI passes and secret-loading behavior remains correct after the dependency update.
Written by the indexing model from the issue text.
Description
Dependabot Update
Bumps 1password/load-secrets-action from 2 to 3.
Release notes
Sourced from 1password/load-secrets-action's releases.
v3.0.0
What's Changed
🔴 Breaking change
- Set
export-envinput tofalseby default by@volodymyrZotovin 1Password/load-secrets-action#114 If you want export secrets as env variables you should update your workflows and explicitly setexport-env: trueaka- name: Load secret uses: 1password/load-secrets-action@v3 with: # Export loaded secrets as environment variables export-env: true env: OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }} SECRET: op://app-cicd/hello-world/secret- name: Print masked secret run: 'echo "Secret: $SECRET"' # Prints: Secret: ***
🚀 Features
- Use op cli installer to enable Windows support by
@volodymyrZotovin 1Password/load-secrets-action#109- Set default for
versioninput by@volodymyrZotovin 1Password/load-secrets-action#112🔒 Security
- Use of Insufficiently Random Values in undici {#103}
- undici Denial of Service attack via bad certificate data {#103}
Full Changelog: https://github.com/1Password/load-secrets-action/compare/v2...v3.0.0
Commits
8d0d610Merge pull request #129 from 1Password/release/v3.1.076bec67Make latest build74311b1Bump version in package-lock.json5999940Bump version to 3.1.0b43a224Make latest buildc2b96b5Merge pull request #128 from 1Password/dependabot/npm_and_yarn/multi-75e6bc52106f52eddBump js-yamldc5cd4dMerge pull request #127 from 1Password/vzt/delete-op-cli-installer-dependencyb4962e1Use execFile to run safily pass arguments2f243caUse op-cli-installed as local package- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Pull Request
- PR: #45
- Author: @dependabot[bot]
- URL: https://github.com/aRustyDev/pcf-mcp/pull/45
This issue was automatically created to track the Dependabot update.
- Dominant language
- Go
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from aRustyDev/pcf-mcp
-
dependencies github-actions
Difficulty 1/5 Under an hour Newbie friendliness 25/100
-
dependencies github-actions
Difficulty 2/5 1-3 hours Newbie friendliness 45/100
-
dependencies github-actions
Difficulty 1/5 Under an hour Newbie friendliness 10/100
-
dependencies github-actions
Difficulty 1/5 Under an hour Newbie friendliness 15/100
-
dependencies github-actions
Difficulty 2/5 1-3 hours Newbie friendliness 35/100
All issues in aRustyDev/pcf-mcp
Similar issues
-
Difficulty 1/5 Under an hour Newbie friendliness 84/100
-
enhancement needs triage
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
kind/cleanup
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
kubernetes-sigs/kueue#15947 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
sympozium-ai/sympozium#627 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100