Bump actions/cache from 4 to 6 - #108
Conversation
Bumps [actions/cache](https://github.com/actions/cache) from 4 to 6. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v4...v6) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![prmerger-ai-pull-request-review[bot]](https://avatars.githubusercontent.com/u/273110951?s=60&v=4){kind=small}
There was a problem hiding this comment.
PRMerger Review
Machine-reviewed on a GitHub Actions runner. Build and test evidence is included below.
Run: https://github.com/skrcode/java-auto-unit-tests/actions/runs/28743550039
VERDICT: approve
SUMMARY:
PR #108 is a single-line Dependabot-generated bump of actions/cache from v4 to v6 in .github/workflows/build.yml. The bump affects only the "Setup Plugin Verifier IDEs Cache" step in the verify job. The commit message is a standard Dependabot commit that references the upstream release notes and changelog, confirming v6 is a real published release. No other workflow files reference actions/cache. The change is correct, isolated, and carries no regression risk.
BUILD_AND_TEST:
No build or test execution attempted — this PR touches only a GitHub Actions workflow YAML file with no source, dependency, or build script changes. Code inspection and git history review were sufficient.
FINDINGS:
- none
FOLLOW_UPS:
- The other GitHub Actions used in
build.yml(checkout, setup-java, setup-gradle, upload-artifact) all remain pinned at v4. If any of those also have newer major releases, it may be worth letting Dependabot raise separate PRs to keep the workflow up-to-date uniformly. This is cosmetic and not a correctness issue.
Inline comments posted: 0 high-signal finding(s).
|
This pull request has been automatically marked as stale because it has not had recent activity. If you plan to continue work on this:
Thank you for your contribution! |
Bumps actions/cache from 4 to 6.
Release notes
Sourced from actions/cache's releases.
... (truncated)
Changelog
Sourced from actions/cache's changelog.
... (truncated)
Commits
2c8a9bdMerge pull request #1760 from actions/samirat/esm_migration_and_package_updatee9b91fdPrettier fixese4884b8Rebuild dist10baf01Fixed licensese39b386Fix test mock return orderb692820PR feedback6074912Rebuild dist bundles as ESM to match type:module5a912e8Fix lint and jest issuesb9bf592Update documentation for v6 release80f7777Update packages, migrate to ESMDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)