Update GitHub Actions (major) - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
1password/load-secrets-action	action	major	v4 → v5
ubuntu	github-runner	major	24.04 → 26.04

Once all tests pass, add a label with pr-pull. This will trigger a workflow that pulls the compiled bottles into the current release and closes the PR. Do not merge PRs directly.

---

Release Notes

1password/load-secrets-action (1password/load-secrets-action)

v5.0.1

Compare Source

What's Changed

Fixes

• Correct the authentication error message. It previously listed only the CLI methods (OP_SERVICE_ACCOUNT_TOKEN, or OP_CONNECT_HOST + OP_CONNECT_TOKEN), which misled anyone who meant to use Workload Identity but had one of those variables missing or misspelled. It now lists OP_WORKLOAD_ID + OP_ENVIRONMENT_ID + OP_INTEGRATION_KEY as a third valid option. (#​187)

Dependencies

• Bump @1password/sdk from 0.5.0-beta.1 to the stable 0.5.0, and rebuild dist/ (including core_bg.wasm). (#​187)
• Update the baked-in beta CLI fallback version: 2.38.1-beta.02 → 2.39.0-beta.02.

Security

• Harden CI: add the StepSecurity harden-runner and pin GitHub Actions to commit SHAs across the E2E and fallback-version workflows, and restrict workflow permissions. (#​182)

Full Changelog: 1Password/load-secrets-action@v5.0.0...v5.0.1

v5.0.0

Compare Source

What's Changed

Features

• Add Workload Identity authentication using the GitHub Actions OIDC token (public preview). (#​169)

Full Changelog: 1Password/load-secrets-action@v4.1.1...v5.0.0

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • "before 10am on friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.