chore(ci): bump actions/cache from 4 to 5#4
Conversation
Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v4...v5) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Kelos AI Agent
Commands
Palette initialized. Updates appear as agents run. |
Bundles the five GitHub Actions dependabot bumps so they land as a single CI-validated unit instead of five separate force-rebases: - actions/upload-artifact v4 → v7 (#3) - actions/cache v4 → v5 (#4) - github/codeql-action/* v3 → v4 (#5) - actions/attest-build-provenance v2 → v4 (#6) - peter-evans/create-pull-request v6 → v8 (#2) Only loose @vn tag pins are touched. SHA-pinned action references (scorecard.yml upload-artifact v7.0.1, scorecard.yml codeql-action v4.35.3, helm-release.yml upload-artifact v4.4.3) are left intact — those were intentionally pinned at specific points for supply-chain hardening and will be updated independently when their pins next roll. actionlint passes; only pre-existing shellcheck info-level findings in unrelated script blocks (SC2086 / SC2129) which the linter has been emitting since before the bump. upload-artifact v5 dropped the implicit same-name-merge behavior; our usages already use uniquely-namespaced artifact names (matrix.platform, env.VERSION, etc.) so no callsite needs adjustment. actions/cache v5 tightens cache-key validation but our keys are already conservative hashes of Cargo.lock / requirements.txt etc. Closes dependabot PRs #2, #3, #4, #5, #6. Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Bumps actions/cache from 4 to 5.
Release notes
Sourced from actions/cache's releases.
... (truncated)
Changelog
Sourced from actions/cache's changelog.
... (truncated)
Commits
27d5ce7Merge pull request #1747 from actions/yacaovsnc/update-dependencyf280785licensed changes619aeb1npm run build generated dist filesbcf16c2Update ts-http-runtime to 0.3.56682284Merge pull request #1738 from actions/prepare-v5.0.4e340396Update RELEASES8a67110Add licenses1865903Update dependencies & patch security vulnerabilities5656298Merge pull request #1722 from RyPeck/patch-14e380d1Fix cache key in examples.md for bun.lockDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)