FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

chore(ci): bump actions/cache from 5 to 6 by dependabot[bot] · Pull Request #13 · bauer-group/XPD-RPIImage · GitHub

  1. bauer-group
  2. XPD-RPIImage

Repository navigation

chore(ci): bump actions/cache from 5 to 6 - #13

Merged
karlspace merged 1 commit into
mainfrom
dependabot/github_actions/actions/cache-6
Sep 1, 2026
ConversationCommits (1)ChecksFiles changed
Merged

chore(ci): bump actions/cache from 5 to 6#13
karlspace merged 1 commit into
mainfrom
dependabot/github_actions/actions/cache-6

Conversation

dependabot Bot commented on behalf of github Jun 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps actions/cache from 5 to 6.

Release notes

Sourced from actions/cache's releases.

v6.0.0

What's Changed

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

What's Changed

Full Changelog: actions/cache@v5...v5.1.0

v5.0.5

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

What's Changed

New Contributors

Full Changelog: actions/cache@v5...v5.0.4

v5.0.3

What's Changed

Full Changelog: actions/cache@v5...v5.0.3

v.5.0.2

v5.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

6.0.0

  • Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2
  • Migrated to ESM module system
  • Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

  • Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
  • Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
  • Bump fast-xml-parser to v5.5.6

5.0.3

5.0.2

... (truncated)

Commits
  • 55cc834 Merge pull request #1768 from jasongin/readonly-cache
  • d8cd72f Bump @​actions/cache to v6.1.0 - handle cache write error due to RO token
  • 2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
  • e9b91fd Prettier fixes
  • e4884b8 Rebuild dist
  • 10baf01 Fixed licenses
  • e39b386 Fix test mock return order
  • b692820 PR feedback
  • 6074912 Rebuild dist bundles as ESM to match type:module
  • 5a912e8 Fix lint and jest issues
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

chore(ci): bump actions/cache from 5 to 6
1277703 
Bumps [actions/cache](https://github.com/actions/cache) from 5 to 6.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v5...v6)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot added dependabot Dependabot: dependabot dependencies Pull requests that update a dependency file github-actions Dependabot: github-actions labels Jun 28, 2026
dependabot Bot requested a review from karlspace as a code owner June 28, 2026 06:32
dependabot Bot added dependencies Pull requests that update a dependency file dependabot Dependabot: dependabot github-actions Dependabot: github-actions labels Jun 28, 2026

github-actions Bot commented Jun 28, 2026

Copy link
Copy Markdown

AI Analysis

Technical Summary

This pull request updates the GitHub Actions dependency actions/cache from version 5 to version 6. The upgrade incorporates several key changes and improvements documented in the actions/cache release notes and changelog.

Technical Requirements and Constraints

  • The package has migrated from CommonJS to ES Modules (ESM) starting with v6.0.0. This implies that any workflows or custom code interacting programmatically with actions/cache must be compatible with ESM.
  • Dependencies such as @actions/core, @actions/exec, and @actions/io were also upgraded to their respective versions supporting ESM.
  • Jest testing framework was updated to version 30 to support ESM-compatible testing.
  • Cache operations now handle read-only token scenarios gracefully to avoid errors on cache write attempts (introduced in v6.1.0).
  • The upgrade may involve modifications to pipeline configurations if the cache action syntax or options have changed due to the ESM

This summary was automatically generated by AI to help with triage and may not be 100% accurate.

Suggested Labels: test

karlspace approved these changes Sep 1, 2026
View reviewed changes

karlspace left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Major bump, but the changelog for v6.0.0 lists exactly one change: "Update packages, migrate to ESM". No input, output or cache-key semantics changed, so nothing in our usage has to adapt.

Scope: .github/workflows/build.yml — the "💾 Cache CustomPiOS checkout" step only.

Breaking changes: none that reach us. The major is an internal ESM migration; upstream still ships v5.1.0 alongside v6.1.0, so this is not a forced move.

Compatibility check: our usage is path + key, with restore-keys deliberately absent since the CustomPiOS pin work. Both inputs are unchanged in v6.

CI: GitGuardian and the AI summary are green. Note that 📦 Build Image does not run on this PR — build.yml carries paths-ignore: .github/**, so a workflow-only change never triggers it. The bump is therefore not exercised by CI here; I am dispatching a build on main after the merge to confirm the cache step still resolves.

Related: #12 and #14 touch the same file. Merging these sequentially and re-checking mergeability in between.

karlspace merged commit ce1fda1 into main Sep 1, 2026
8 checks passed
dependabot Bot deleted the dependabot/github_actions/actions/cache-6 branch September 1, 2026 09:12
This was referenced Sep 1, 2026
Merged
Merged

github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown

🎉 This PR is included in version 0.5.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

karlspace karlspace approved these changes

Assignees

No one assigned

Labels

dependabot Dependabot: dependabot dependencies Pull requests that update a dependency file github-actions Dependabot: github-actions released

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

Back | FazBrowse Home | New Git URL