Release notes

Sourced from actions/cache's releases.

\n
v6.0.0
\n
What's Changed
\n
\n
Update packages, migrate to ESM by @Samirat in actions/cache#1760
\n
\n
Full Changelog: https://github.com/actions/cache/compare/v5...v6.0.0
\n
v5.1.0
\n
What's Changed
\n
\n
Bump @actions/cache to v5.1.0 - handle read-only cache access by @jasongin in actions/cache#1775
\n
\n
Full Changelog: https://github.com/actions/cache/compare/v5...v5.1.0
\n
v5.0.5
\n
What's Changed
\n
\n
Update ts-http-runtime dependency by @yacaovsnc in actions/cache#1747
\n
\n
Full Changelog: https://github.com/actions/cache/compare/v5...v5.0.5
\n
v5.0.4
\n
What's Changed
\n
\n
Add release instructions and update maintainer docs by @Link- in actions/cache#1696
\n
Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @Link- in actions/cache#1697
\n
Fix workflow permissions and cleanup workflow names / formatting by @Link- in actions/cache#1699
\n
docs: Update examples to use the latest version by @XZTDean in actions/cache#1690
\n
Fix proxy integration tests by @Link- in actions/cache#1701
\n
Fix cache key in examples.md for bun.lock by @RyPeck in actions/cache#1722
\n
Update dependencies & patch security vulnerabilities by @Link- in actions/cache#1738
\n
\n
New Contributors
\n
\n
@XZTDean made their first contribution in actions/cache#1690
\n
@RyPeck made their first contribution in actions/cache#1722
\n
\n
Full Changelog: https://github.com/actions/cache/compare/v5...v5.0.4
\n
v5.0.3
\n
What's Changed
\n
\n
Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
\n
Bump @actions/core to v2.0.3
\n
\n
Full Changelog: https://github.com/actions/cache/compare/v5...v5.0.3
\n
v.5.0.2
\n
v5.0.2
\n
What's Changed
\n\n

... (truncated)

Changelog

Sourced from actions/cache's changelog.

\n
Releases
\n
How to prepare a release
\n
\n
[!NOTE]\nRelevant for maintainers with write access only.
\n
\n
\n
Switch to a new branch from main.
\n
Run npm test to ensure all tests are passing.
\n
Update the version in https://github.com/actions/cache/blob/main/package.json.
\n
Run npm run build to update the compiled files.
\n
Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
\n
Run licensed cache to update the license report.
\n
Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
\n
Commit your changes and push your branch upstream.
\n
Open a pull request against main and get it reviewed and merged.
\n
Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json\n
\n
Create a new tag with the version number.
\n
Auto generate release notes and update them to match the changes you made in RELEASES.md.
\n
Toggle the set as the latest release option.
\n
Publish the release.
\n
\n
\n
Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml\n
\n
There should be a workflow run queued with the same version number.
\n
Approve the run to publish the new version and update the major tags for this action.
\n
\n
\n
\n
Changelog
\n
6.1.0
\n
\n
Bump @actions/cache to v6.1.0 to pick up actions/toolkit#2435 Handle cache write error due to read-only token
\n
Switch redundant "Cache save failed" warning to debug log in save-only
\n
\n
6.0.0
\n
\n
Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2
\n
Migrated to ESM module system
\n
Upgraded Jest to v30 and test infrastructure to be ESM compatible
\n
\n
5.0.4
\n
\n
Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
\n
Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
\n
Bump fast-xml-parser to v5.5.6
\n
\n
5.0.3
\n
\n
Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
\n
Bump @actions/core to v2.0.3
\n
\n
5.0.2
\n\n

... (truncated)

Commits

55cc834 Merge pull request #1768 from jasongin/readonly-cache
d8cd72f Bump @actions/cache to v6.1.0 - handle cache write error due to RO token
2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
e9b91fd Prettier fixes
e4884b8 Rebuild dist
10baf01 Fixed licenses
e39b386 Fix test mock return order
b692820 PR feedback
6074912 Rebuild dist bundles as ESM to match type:module
5a912e8 Fix lint and jest issues
Additional commits viewable in compare view

\n
\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/cache&package-manager=github_actions&previous-version=4&new-version=6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n

Dependabot commands and options

\n
\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n

","base","head","base_sha","45dc0b481bfb44a207da8e59788dc20efa29f38e","head_sha","merge_commit_sha","3f3268c414e42a327cc5adeefd14a6bafcb1ea46","comments","diff","user",{"_270":313,"_181":313,"_314":-5,"_274":315,"_42":316},"commits",1,"changed_files","additions","deletions","dependabot[bot]","email","https://avatars.githubusercontent.com/in/29110?v=4",49699333,"events",[319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346],{"_154":538,"_348":539},{"_154":363,"_348":533},{"_154":528,"_348":529},{"_154":367,"_348":520},{"_154":367,"_348":515},{"_154":367,"_348":510},{"_154":382,"_348":500},{"_154":382,"_348":495},{"_154":367,"_348":489},{"_154":367,"_348":486},{"_154":382,"_348":478},{"_154":367,"_348":474},{"_154":367,"_348":471},{"_154":382,"_348":464},{"_154":367,"_348":460},{"_154":382,"_348":455},{"_154":367,"_348":451},{"_154":367,"_348":444},{"_154":382,"_348":425},{"_154":367,"_348":418},{"_154":382,"_348":413},{"_154":367,"_348":403},{"_154":382,"_348":397},{"_154":367,"_348":387},{"_154":382,"_348":383},{"_154":367,"_348":368},{"_154":363,"_348":364},{"_154":347,"_348":349},"turn/completed","params",{"_350":351,"_87":352},"threadId","019f48fe-64c8-7ed2-8aa7-9ec5b9c99d82",{"_353":354,"_355":356,"_103":-5,"_42":357,"_358":359,"_360":361,"_362":113},"completedAt",1783636093,"durationMs",34038,"019f48fe-6581-7453-a4ef-019fea449dde","items",[],"startedAt",1783636059,"status","thread/status/changed",{"_362":365,"_350":351},{"_92":366},"idle","rawResponseItem/completed",{"_369":370,"_350":351,"_371":357},"item",{"_372":373,"_374":-5,"_42":-5,"_375":-5,"_376":377,"_96":93,"_92":378},"turnId","content",[379],"end_turn","internal_chat_message_metadata_passthrough","phase","final_answer","message",{"_46":380,"_92":381},"No regression expected from this repository’s usage.\n\nI checked the only `actions/cache` call site and it is a straightforward cache of `~/.sonar/cache` with a static key/restore key, so the v4 → v6 bump should only affect the GitHub Actions cache implementation, not build/test/runtime behavior. The workflow still restores/saves only SonarQube Cloud package cache data before installing the .NET SonarScanner. \n\nThe main upstream change in `actions/cache@v6` is the action’s internal migration to ESM/package updates, and the upstream action page notes the cache-service changes are intended to be backward compatible. Source: https://github.com/actions/cache\n\nPractical risk level: **low**.\n\nPossible non-functional differences to watch:\n* A cold cache on the first run if GitHub treats the new action/runtime path differently.\n* Cache save/restore warnings if the workflow token is read-only in some PR contexts; that should not break this workflow’s actual build/test/analyze steps.\n* Any outage or behavioral change in GitHub’s cache backend would affect speed, not correctness, because the cached path is only `~/.sonar/cache`. \n\nI did not make code changes, so I did not commit or open a follow-up PR.\n\n**Testing**\n* ✅ `pwd && find .. -name AGENTS.md -print && rg -n \"actions/cache|cache@\" -S .github . || true`\n* ✅ `nl -ba .github/workflows/sonar.yml | sed -n '1,120p'; git diff -- .github/workflows/sonar.yml; git status --short`","output_text","item/completed",{"_369":384,"_350":351,"_371":357},{"_42":385,"_376":377,"_46":380,"_92":386},"msg_06042b60ba17c1c4016a50207d365c819aa8336d75ce644635","agentMessage",{"_369":388,"_350":351,"_371":357},{"_389":390,"_42":-5,"_375":-5,"_362":113,"_92":391},"action",{"_392":393,"_394":395,"_92":396},"web_search_call","queries",[395],"query","actions/cache v6 migration ESM release notes","search",{"_369":398,"_350":351,"_371":357},{"_389":399,"_42":400,"_394":395,"_92":401},{"_392":402,"_394":395,"_92":396},"ws_06042b60ba17c1c4016a50206cc5d0819ab6594e910808c893","webSearch",[395],{"_369":404,"_350":351,"_371":357},{"_372":-5,"_405":406,"_42":-5,"_375":-5,"_407":408,"_92":409},"encrypted_content","gAAAAABqUCBsyXqVXr1G4Suu2WoWoXNOVKhiNK3mrSL1Dwgkz_Mg4vy6wDUfgisGEXkRtMkRIzEkNlXzwP2gCT2L53k_XVq_wBk-B7uoCaSnfqn4j7cgHmN4qORIWj7rNEIM5psKGvfVolx-DruUH7bpX4wk_1lTxMEc730mU_L6cYO_Kn4vxG9cDHcw2vMcFHkLTyfIKvLTQAlOh8xadjZBR3gw0jsGT_2ZrH6bSy79ztZ3KmRW5ykQnF0noTKp80ht84QCwpYzl5BSe9EDmahZUa8mWlsWW8mv7JU3vtGmEsosrIA2MrRqJ40rihE1troRW67vUWrKpE_qFc1z6-Hzh_va9jtKOkVCVwmK_KgWyVTsSafXAZYdcqh0p3ukjqeniY2lMpmhjDt15zfGCGOuxSWtq7-oaoJ-KvgrkLsrYDL5XGJm9UGu77KKjRtUuTR8DMcL00r3xFqopl51W_IwVva7CA7kkTFU9UwLl8wYnOIoBJ_tZ3TbE8FTX56kiHk6CGBmR4u-31A3IvGxakn_hi9S9NTZ8q53rFqVgMgKOptGDPD5UHkw6G6Nakoqlf2SOfQ41a4hQX5IeXYr9S0GUikxtiao7mVnHxTDZ_-Cq6-wal52plAKUMzpm038Jj_at-P1HV-b1wwPLqsikj_tN0gcgt_7QASNZaPGEuAvKj72kw_Jn3omCxgJmY67L8H3axzDBiVVQzkIVxrEFDL3NKQI6twqKy8EWJSyWKAlwjlo08cp9OYhK1gLSK4Np8cTuIu5q7Cz6pSjO0oCYzPxtvWbFaj0LPabboWWyFDsM_6NERFv2pkZzNM5i5wLmSMqmWyTQU3iPIYEYLPw_5Zv3P_hSMBHlDFX4a72oHDxZblhUzzEODCqFf1No_yoSN-8drdn75b4QYIio6U7tblYWO_75u8KL1fBUvZnCmE9_WOjXuw-X9BQBbIudWAwt2aPKyrKNCDWC6jOOoZxH2vLmscW4i04eBvJ0z4A_mjbP8VdaxKBKJ9gsDRkWAba_fRr2pCw4_9gg2pG0UdDzSG66nF8lKsnIYd5IN6lJ9wRpSs_FD1mAu32qpOLD5pl25-qMohVGGEQYzAAQb6Pu41sKRssGPZmc7nLe9IH1_d_5V6rh04q2TL7PxhGenLd0Y1UqvxQCciULu3mcBWfwmH2182KwPGP7oOH7PmUQb6g-XfnkOVbb14q7-ShOFlP_sLZwH-KEMMzRlNenPlc3Wz9sBSYxlswFN3OXfbD0n6u99T6sb5Iya1pYsgLHVndgyDNKXCvT8sLTVu0W_T2gu86RwEcGGa1ETZTiKw5g6cgqRyVH_kJG-8AgdKO_3vcPwZBLSB5dWSVO0BtNSV8OyX2QLDKlsEAS9nED6C099ZDojd2KBDYkJlfM7FIWsZ1hnZru5i0DSXJLKQVvb_Zrf7dNXdPgWRRuByLk3go-Ia6fNQ3tWkxwpsuRyO2jWz1O0OZD_w8PhPasCTGn26R2wJquj_jJV9tgUTKbPVVeSS-sSLHByqtoLU=","summary",[410],"reasoning",{"_46":411,"_92":412},"**Verifying actions/cache regression**\n\nI need to verify if there are any AGENTS. An empty output seems odd, and I shouldn't expect any regression. Should I mention that no changes or commits are necessary? Since no code changes are needed, making a commit or PR isn’t required. Perhaps checking the official docs would help, especially since I'm looking into actions/cache regression. I have PR release notes, but it’s important to verify any changes directly on GitHub.","summary_text",{"_369":414,"_350":351,"_371":357},{"_372":415,"_42":416,"_407":417,"_92":409},[],"rs_06042b60ba17c1c4016a50206a0348819aa7481a071a14d11c",[411],{"_369":419,"_350":351,"_371":357},{"_420":421,"_42":-5,"_375":-5,"_422":423,"_92":424},"call_id","call_mibFQNY7wpwS1SIkZoSrt4Io","output","Chunk ID: 6d6f2b\nWall time: 0.0005 seconds\nProcess exited with code 0\nOriginal token count: 919\nOutput:\n 1\tname: sonar\n 2\t\n 3\ton:\n 4\t push:\n 5\t branches:\n 6\t - main\n 7\t pull_request:\n 8\t branches:\n 9\t - main\n 10\t workflow_dispatch:\n 11\t\n 12\t# Cancel superseded runs on the same branch / PR.\n 13\tconcurrency:\n 14\t group: sonar-${{ github.workflow }}-${{ github.ref }}\n 15\t cancel-in-progress: true\n 16\t\n 17\t# Least privilege: the analysis only reads the repository. PR decoration is\n 18\t# delivered by the SonarQube Cloud GitHub App, not by this workflow's token.\n 19\tpermissions:\n 20\t contents: read\n 21\t\n 22\tenv:\n 23\t DOTNET_NOLOGO: 'true'\n 24\t DOTNET_CLI_TELEMETRY_OPTOUT: 'true'\n 25\t DOTNET_SKIP_FIRST_TIME_EXPERIENCE: 'true'\n 26\t\n 27\tjobs:\n 28\t analyze:\n 29\t name: SonarQube Cloud analysis\n 30\t runs-on: ubuntu-latest\n 31\t # PRs opened from a fork cannot read SONAR_TOKEN; skip the analysis there rather\n 32\t # than fail. Branches in this repository (the normal case) run normally.\n 33\t if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository\n 34\t steps:\n 35\t - name: Checkout\n 36\t uses: actions/checkout@v4\n 37\t with:\n 38\t # Full history lets Sonar attribute issues via git blame and detect new code.\n 39\t fetch-depth: 0\n 40\t\n 41\t - name: Setup .NET\n 42\t uses: actions/setup-dotnet@v4\n 43\t with:\n 44\t dotnet-version: '10.0.x'\n 45\t\n 46\t - name: Setup Java\n 47\t # The SonarScanner for .NET runs on the JVM; SonarQube Cloud requires Java 17+.\n 48\t uses: actions/setup-java@v4\n 49\t with:\n 50\t distribution: temurin\n 51\t java-version: '17'\n 52\t\n 53\t - name: Cache SonarQube Cloud packages\n 54\t uses: actions/cache@v6\n 55\t with:\n 56\t path: ~/.sonar/cache\n 57\t key: ${{ runner.os }}-sonar\n 58\t restore-keys: ${{ runner.os }}-sonar\n 59\t\n 60\t - name: Install SonarScanner for .NET\n 61\t run: |\n 62\t dotnet tool install --global dotnet-sonarscanner\n 63\t echo \"$HOME/.dotnet/tools\" >> \"$GITHUB_PATH\"\n 64\t\n 65\t # The build must sit between `begin` and `end`: the scanner hooks MSBuild to\n 66\t # observe the compilation, so it cannot use a pre-built or --no-build output.\n 67\t - name: Begin analysis\n 68\t env:\n 69\t SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}\n 70\t run: >-\n 71\t dotnet-sonarscanner begin\n 72\t /k:\"reefact_first-class-errors\"\n 73\t /o:\"reefact\"\n 74\t /d:sonar.token=\"$SONAR_TOKEN\"\n 75\t /d:sonar.host.url=\"https://sonarcloud.io\"\n 76\t /d:sonar.cs.opencover.reportsPaths=\"artifacts/coverage/**/coverage.opencover.xml\"\n 77\t\n 78\t - name: Build\n 79\t run: dotnet build FirstClassErrors.sln -c Release\n 80\t\n 81\t - name: Test with coverage\n 82\t # Reuse coverage.runsettings so the OpenCover report matches the one the ci workflow produces.\n 83\t run: >-\n 84\t dotnet test FirstClassErrors.sln -c Release --no-build\n 85\t --collect:\"XPlat Code Coverage\"\n 86\t --settings coverage.runsettings\n 87\t --results-directory artifacts/coverage\n 88\t --logger \"console;verbosity=normal\"\n 89\t\n 90\t - name: End analysis\n 91\t env:\n 92\t SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}\n 93\t run: dotnet-sonarscanner end /d:sonar.token=\"$SONAR_TOKEN\"\n","function_call_output",{"_369":426,"_350":351,"_371":357},{"_427":428,"_429":430,"_431":432,"_433":434,"_355":32,"_435":32,"_42":421,"_436":437,"_438":439,"_362":113,"_92":440},"aggregatedOutput"," 1\tname: sonar\n 2\t\n 3\ton:\n 4\t push:\n 5\t branches:\n 6\t - main\n 7\t pull_request:\n 8\t branches:\n 9\t - main\n 10\t workflow_dispatch:\n 11\t\n 12\t# Cancel superseded runs on the same branch / PR.\n 13\tconcurrency:\n 14\t group: sonar-${{ github.workflow }}-${{ github.ref }}\n 15\t cancel-in-progress: true\n 16\t\n 17\t# Least privilege: the analysis only reads the repository. PR decoration is\n 18\t# delivered by the SonarQube Cloud GitHub App, not by this workflow's token.\n 19\tpermissions:\n 20\t contents: read\n 21\t\n 22\tenv:\n 23\t DOTNET_NOLOGO: 'true'\n 24\t DOTNET_CLI_TELEMETRY_OPTOUT: 'true'\n 25\t DOTNET_SKIP_FIRST_TIME_EXPERIENCE: 'true'\n 26\t\n 27\tjobs:\n 28\t analyze:\n 29\t name: SonarQube Cloud analysis\n 30\t runs-on: ubuntu-latest\n 31\t # PRs opened from a fork cannot read SONAR_TOKEN; skip the analysis there rather\n 32\t # than fail. Branches in this repository (the normal case) run normally.\n 33\t if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository\n 34\t steps:\n 35\t - name: Checkout\n 36\t uses: actions/checkout@v4\n 37\t with:\n 38\t # Full history lets Sonar attribute issues via git blame and detect new code.\n 39\t fetch-depth: 0\n 40\t\n 41\t - name: Setup .NET\n 42\t uses: actions/setup-dotnet@v4\n 43\t with:\n 44\t dotnet-version: '10.0.x'\n 45\t\n 46\t - name: Setup Java\n 47\t # The SonarScanner for .NET runs on the JVM; SonarQube Cloud requires Java 17+.\n 48\t uses: actions/setup-java@v4\n 49\t with:\n 50\t distribution: temurin\n 51\t java-version: '17'\n 52\t\n 53\t - name: Cache SonarQube Cloud packages\n 54\t uses: actions/cache@v6\n 55\t with:\n 56\t path: ~/.sonar/cache\n 57\t key: ${{ runner.os }}-sonar\n 58\t restore-keys: ${{ runner.os }}-sonar\n 59\t\n 60\t - name: Install SonarScanner for .NET\n 61\t run: |\n 62\t dotnet tool install --global dotnet-sonarscanner\n 63\t echo \"$HOME/.dotnet/tools\" >> \"$GITHUB_PATH\"\n 64\t\n 65\t # The build must sit between `begin` and `end`: the scanner hooks MSBuild to\n 66\t # observe the compilation, so it cannot use a pre-built or --no-build output.\n 67\t - name: Begin analysis\n 68\t env:\n 69\t SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}\n 70\t run: >-\n 71\t dotnet-sonarscanner begin\n 72\t /k:\"reefact_first-class-errors\"\n 73\t /o:\"reefact\"\n 74\t /d:sonar.token=\"$SONAR_TOKEN\"\n 75\t /d:sonar.host.url=\"https://sonarcloud.io\"\n 76\t /d:sonar.cs.opencover.reportsPaths=\"artifacts/coverage/**/coverage.opencover.xml\"\n 77\t\n 78\t - name: Build\n 79\t run: dotnet build FirstClassErrors.sln -c Release\n 80\t\n 81\t - name: Test with coverage\n 82\t # Reuse coverage.runsettings so the OpenCover report matches the one the ci workflow produces.\n 83\t run: >-\n 84\t dotnet test FirstClassErrors.sln -c Release --no-build\n 85\t --collect:\"XPlat Code Coverage\"\n 86\t --settings coverage.runsettings\n 87\t --results-directory artifacts/coverage\n 88\t --logger \"console;verbosity=normal\"\n 89\t\n 90\t - name: End analysis\n 91\t env:\n 92\t SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}\n 93\t run: dotnet-sonarscanner end /d:sonar.token=\"$SONAR_TOKEN\"\n","command","/bin/bash -lc \"nl -ba .github/workflows/sonar.yml | sed -n '1,120p'; git diff -- .github/workflows/sonar.yml; git status --short\"","commandActions",[441],"cwd","/workspace/first-class-errors","exitCode","processId","16999","source","unifiedExecStartup","commandExecution",{"_429":442,"_92":443},"nl -ba .github/workflows/sonar.yml | sed -n '1,120p'; git diff -- .github/workflows/sonar.yml; git status --short","unknown",{"_369":445,"_350":351,"_371":357},{"_446":447,"_420":421,"_42":-5,"_375":-5,"_181":448,"_449":-5,"_92":450},"arguments","{\"cmd\":\"nl -ba .github/workflows/sonar.yml | sed -n '1,120p'; git diff -- .github/workflows/sonar.yml; git status --short\",\"workdir\":\"/workspace/first-class-errors\",\"yield_time_ms\":10000,\"max_output_tokens\":12000}","exec_command","namespace","function_call",{"_369":452,"_350":351,"_371":357},{"_372":-5,"_405":453,"_42":-5,"_375":-5,"_407":454,"_92":409},"gAAAAABqUCBnJ4vyrGopb8Hmmf5UyGFbAQ7PDsgjQxoRLJrvurtAtjY59ED0ayMOOfjzL20GfWjeUON_dT7ntU82Tt6yoVKuoZubvERE0q6Y8vHuE_Cx6DGgh5HbJjf1LyYnthXs8U0cJguVE3qxQo9uCzxuQWV0xm7ghqYb9xWYyVh0BoLe8xOWFufT0J14pCTL0O0sd5wFDYaxnxV_vZ0lFlxfcc5FFvw_TwLEeKLh59Z_omFPK2A6RYM1VCnSzELFpXymd6yGk71CsgevEmaPNHg5PnlZQWpmzpU-0zTFlM_xd1-7EzSg5yC88aegVSUtcwx4pS1uZmiEUNv1bblvqCDjUdaC2SFMAkhiFeye3h9nSi7H3axMBcTkXGXQadXqbtmOK7l_mMrbcUAwJcRqE9WwzcvEWDJv2z0SX9HXNYzh6HRemuhr1K4AOl3tf2PjteArMTMTM-NeSzmzZvPCXeywjh6AsI28-BXPuH-g6IRk8drazo3tenbTGlYAjL7p1YhiGjtJNR0xmoN7-Pl6DGnzxXqKMisYxtF8UiejiRMj5PrgLTBj847PgMfxIW2oUhKITAPg-be1Ih7r-fuDso5kl7AGhzJ9E07SR5ZKmCAPvFC-QjvOrW2oEmmiEWJMHqurto06pf3rrhdNltw8gtz6IfpULqHolrgQgmTsxmgfflp6wbZGBga5ITgLUv7kZlGHZsXYGQfZD7K2yLA3Kn0xr226LSdh14e-THkbtGFdDSCvDj3vdF_cA2ncj0x2SnBYwgac89BCUZ5IeyYfj-GizuWRwnnds17xc69K9jM7Qp8ICokSllwe9szwpVMM21WAjksypc2sgb-Nm1bWdpLlsohYb5qAlZ1cA3cWy4Z5dYhqoEt2U1LdAUDqTRw1bPhxe-FJkVbArLM9WueQqt12DlG-OyK94xRMpkTf2tV2L4slSFfhVAs0JuAED7xm5uVI8Kz0",[],{"_369":456,"_350":351,"_371":357},{"_372":457,"_42":458,"_407":459,"_92":409},[],"rs_06042b60ba17c1c4016a5020670e18819ab7b76a5eb87e255a",[],{"_369":461,"_350":351,"_371":357},{"_420":462,"_42":-5,"_375":-5,"_422":463,"_92":424},"call_PvoZ4H3vTV32sW7DbBE4wD7U","Chunk ID: ab61b4\nWall time: 0.0000 seconds\nProcess exited with code 0\nOriginal token count: 0\nOutput:\n",{"_369":465,"_350":351,"_371":357},{"_427":-5,"_429":466,"_431":467,"_433":434,"_355":32,"_435":32,"_42":462,"_436":468,"_438":439,"_362":113,"_92":440},"/bin/bash -lc 'cat AGENTS.md 2>/dev/null || true; find .. -name AGENTS.md -print'",[469],"87544",{"_429":470,"_92":443},"cat AGENTS.md 2>/dev/null || true; find .. -name AGENTS.md -print",{"_369":472,"_350":351,"_371":357},{"_446":473,"_420":462,"_42":-5,"_375":-5,"_181":448,"_449":-5,"_92":450},"{\"cmd\":\"cat AGENTS.md 2>/dev/null || true; find .. -name AGENTS.md -print\",\"workdir\":\"/workspace/first-class-errors\",\"yield_time_ms\":10000,\"max_output_tokens\":12000}",{"_369":475,"_350":351,"_371":357},{"_420":476,"_42":-5,"_375":-5,"_422":477,"_92":424},"call_ITCl9bRVo4d7eA1X1LOQTq5z","Chunk ID: 420f10\nWall time: 0.0001 seconds\nProcess exited with code 0\nOriginal token count: 23\nOutput:\n/workspace/first-class-errors\n.github/workflows/sonar.yml:54: uses: actions/cache@v6\n",{"_369":479,"_350":351,"_371":357},{"_427":480,"_429":481,"_431":482,"_433":434,"_355":32,"_435":32,"_42":476,"_436":483,"_438":439,"_362":113,"_92":440},"/workspace/first-class-errors\n.github/workflows/sonar.yml:54: uses: actions/cache@v6\n","/bin/bash -lc 'pwd && find .. -name AGENTS.md -print && rg -n \"actions/cache|cache@\" -S .github . || true'",[484],"84986",{"_429":485,"_92":443},"pwd && find .. -name AGENTS.md -print && rg -n \"actions/cache|cache@\" -S .github . || true",{"_369":487,"_350":351,"_371":357},{"_446":488,"_420":476,"_42":-5,"_375":-5,"_181":448,"_449":-5,"_92":450},"{\"cmd\": \"pwd && find .. -name AGENTS.md -print && rg -n \\\"actions/cache|cache@\\\" -S .github . || true\", \"workdir\": \"/workspace/first-class-errors\", \"yield_time_ms\": 10000, \"max_output_tokens\": 12000}",{"_369":490,"_350":351,"_371":357},{"_372":-5,"_405":491,"_42":-5,"_375":-5,"_407":492,"_92":409},"gAAAAABqUCBiYg5jggb7E_Zbg2-gKiR7Wcfw0Ryt1SEMSYfPAdAGuFyqKVeCbb-rU2PRBTLDa-hSgm-8y3TZGfgyU1csKJZxUDTPOkjEP56fYIJe-wzVcFryDwUhwY9SGH4a21nKADZYhCr-SIrDAQ_W4AOSPGh1ojGcq11JfuxPmFYUOeXsEcAwDnF9S3rXXCzYRXlT0ToBW0D2Etntl4mrI3kCkLTQEYF5DAnV-2TShOvFXrLvG08IYz3URl92k2hQOAhfhT94nyQ3W8GHTwnnSp-tZERGomYUsz0TfRJHKBNAlGb65CLUsOr8Yq5SJnqrzUfJLaK4BhGlXLtsIsxenj578ENZvxrU8pfXecKJ9nTFASWqCbzIeQftpj8xDJyvtAL8Aie_XibwPXZt3T6y86VqqoikZsZsF-A9YX1b9msdWrjseQ1bTw_HokueBSRojhppjby1z3waJl8qkCAr9CtTdSgLnDNgFbW_69eaguVXjN5LuOeyu67_Ny7jgFEqZvmy0ans6OlfHPW2vBGr1ghzacYptlqLDF9lXbYvQdSn2-2mo8LU61auJVkm7sWYcR7yinc3kwlnuATIxYKLLrwu59LZn5oZxbV60LVwipXpDFcO0pI82QQGTlyUnqFS4x0NBJyIlE7053phGZjLLYjsEddi8DOB7gXlEiZuRYNlXSkLzKTeITgDiW5sHl5P3Oiija5yuoMsws0PYBhRtuYtb2gLJUV3Yok5J4GOglGTXt1LIgUbz5GdUitFFbqF4xd29Fn01VpFyTWqXx6bgN3pcxTAN6vLzqlvr2KaxRyYNgJ7CnUkFCz2YgFh5K4wuBZE1qxfzvoBhOncIcUIDsqKmmGJ7ZpRxBfYGqoGuWVy-RBGZFQ4k-JjzHXh7CZpkC108fyw6q8nusfX1iw4mPUlFgxp_TAtKMTErvwD2FyAz35rVQ4J-fkzsypzscO0HsUqt3nGiLAOUTt-iHtpbnuxZra7XejnmYnXBazIiRtqPxag3xG59Md_y1jADWEFzO7RAn5q__wkGdtFQSUMJC8O6tpKU63b0KkNhyz_VO_AdMrYqD8Mr9_93-CP_qdOaV4h9r27DSlgQySjRzdOwg7ORiMTcs3Qp64jXdQ6humS48N1Jl4Twhfkn-IIRcJgGeolqiYW7-e-OLINtqzn1Zq3RSwovPE4zMrcUW_VefXf5FIuUHtKOkh9d4KHJ393loqqiB92f0WUhh_lW4oT6cnp3DOszs0PS7ERW6pYQ-yj4ZDvOxpqsjdAEgIrOMfXZbPKnzFwIK8B1lDjJzEIf_B6gURuJKHfzLemDWK3BCvPCpq2Ils=",[493],{"_46":494,"_92":412},"**Evaluating answers and workflow**\n\nI need to answer a question, but it looks like no code is needed. I might inspect the repository and look at workflows. I should be cautious not to commit unless there are changes. It seems I also need to cite relevant files and commands. I might have to check actions like cache for the latest regressions or PR info to see if that's sufficient for the user's question about regression expectations. I'll need to evaluate usage closely.",{"_369":496,"_350":351,"_371":357},{"_372":497,"_42":498,"_407":499,"_92":409},[],"rs_06042b60ba17c1c4016a5020602a2c819aaaaea98edaa53510",[494],{"_369":501,"_350":351,"_371":357},{"_502":-5,"_372":503,"_42":504,"_92":505},"clientId",[506],"bc5d4a29-d767-4249-a7a4-29e5c5cb877f","userMessage",{"_46":507,"_508":509,"_92":46},"\nYou are Codex, assisting with follow-up actions on a GitHub pull request.\n\nInput blocks\n------------\n… # The comment or event that invoked you\n… # PR metadata (title, branches, SHAs, status, etc.)\n… # Comments / Reviews for the PR\n\nPossible triggers\n• A user mentions you (@codex)\n• A reviewer requests changes\n• An automated or internal system asks you to review / update\n\nGuidelines\n1. Read the block first and treat it as the primary intent.\n2. Always consult and to interpret and validate the trigger; use only context that materially affects your decision and ignore the rest.\n3. If the trigger comes from a comment thread, the first block will be combined earlier comments from the same thread, clearly indicated with `Comments in the same thread`.\n4. Remaining blocks are in chronological order, oldest first, one block per comment.\n5. When the trigger relates to CI/build status (e.g., “help me fix CI”), incorporate CI/status details found in as supporting context.\n6. If code change is needed, generate a **new** PR with the requested changes. The PR title and message should summarize the changes **on top** of the original pull request.\n@codex any regression expected ?{\"title\":\"ci: Bump actions/cache from 4 to 6\",\"body\":\"Bumps [actions/cache](https://github.com/actions/cache) from 4 to 6.\\n

\\n

Release notes

\\n

Sourced from actions/cache's releases.

\\n

\\n
v6.0.0
\\n
What's Changed
\\n
\\n
Update packages, migrate to ESM by @Samirat in actions/cache#1760
\\n
\\n
Full Changelog: https://github.com/actions/cache/compare/v5...v6.0.0
\\n
v5.1.0
\\n
What's Changed
\\n
\\n
Bump @actions/cache to v5.1.0 - handle read-only cache access by @jasongin in actions/cache#1775
\\n
\\n
Full Changelog: https://github.com/actions/cache/compare/v5...v5.1.0
\\n
v5.0.5
\\n
What's Changed
\\n
\\n
Update ts-http-runtime dependency by @yacaovsnc in actions/cache#1747
\\n
\\n
Full Changelog: https://github.com/actions/cache/compare/v5...v5.0.5
\\n
v5.0.4
\\n
What's Changed
\\n
\\n
Add release instructions and update maintainer docs by @Link- in actions/cache#1696
\\n
Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @Link- in actions/cache#1697
\\n
Fix workflow permissions and cleanup workflow names / formatting by @Link- in actions/cache#1699
\\n
docs: Update examples to use the latest version by @XZTDean in actions/cache#1690
\\n
Fix proxy integration tests by @Link- in actions/cache#1701
\\n
Fix cache key in examples.md for bun.lock by @RyPeck in actions/cache#1722
\\n
Update dependencies & patch security vulnerabilities by @Link- in actions/cache#1738
\\n
\\n
New Contributors
\\n
\\n
@XZTDean made their first contribution in actions/cache#1690
\\n
@RyPeck made their first contribution in actions/cache#1722
\\n
\\n
Full Changelog: https://github.com/actions/cache/compare/v5...v5.0.4
\\n
v5.0.3
\\n
What's Changed
\\n
\\n
Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
\\n
Bump @actions/core to v2.0.3
\\n
\\n
Full Changelog: https://github.com/actions/cache/compare/v5...v5.0.3
\\n
v.5.0.2
\\n
v5.0.2
\\n
What's Changed
\\n\\n

\\n

... (truncated)

\\n

Changelog

\\n

Sourced from actions/cache's changelog.

\\n

\\n
Releases
\\n
How to prepare a release
\\n
\\n
[!NOTE]\\nRelevant for maintainers with write access only.
\\n
\\n
\\n
Switch to a new branch from main.
\\n
Run npm test to ensure all tests are passing.
\\n
Update the version in https://github.com/actions/cache/blob/main/package.json.
\\n
Run npm run build to update the compiled files.
\\n
Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
\\n
Run licensed cache to update the license report.
\\n
Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
\\n
Commit your changes and push your branch upstream.
\\n
Open a pull request against main and get it reviewed and merged.
\\n
Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json\\n
\\n
Create a new tag with the version number.
\\n
Auto generate release notes and update them to match the changes you made in RELEASES.md.
\\n
Toggle the set as the latest release option.
\\n
Publish the release.
\\n
\\n
\\n
Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml\\n
\\n
There should be a workflow run queued with the same version number.
\\n
Approve the run to publish the new version and update the major tags for this action.
\\n
\\n
\\n
\\n
Changelog
\\n
6.1.0
\\n
\\n
Bump @actions/cache to v6.1.0 to pick up actions/toolkit#2435 Handle cache write error due to read-only token
\\n
Switch redundant "Cache save failed" warning to debug log in save-only
\\n
\\n
6.0.0
\\n
\\n
Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2
\\n
Migrated to ESM module system
\\n
Upgraded Jest to v30 and test infrastructure to be ESM compatible
\\n
\\n
5.0.4
\\n
\\n
Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
\\n
Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
\\n
Bump fast-xml-parser to v5.5.6
\\n
\\n
5.0.3
\\n
\\n
Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
\\n
Bump @actions/core to v2.0.3
\\n
\\n
5.0.2
\\n\\n

\\n

... (truncated)

\\n

Commits

\\n

55cc834 Merge pull request #1768 from jasongin/readonly-cache
d8cd72f Bump @actions/cache to v6.1.0 - handle cache write error due to RO token
2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
e9b91fd Prettier fixes
e4884b8 Rebuild dist
10baf01 Fixed licenses
e39b386 Fix test mock return order
b692820 PR feedback
6074912 Rebuild dist bundles as ESM to match type:module
5a912e8 Fix lint and jest issues
Additional commits viewable in compare view

\\n

\\n
\\n\\n\\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/cache&package-manager=github_actions&previous-version=4&new-version=6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\\n\\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\\n\\n[//]: # (dependabot-automerge-start)\\n[//]: # (dependabot-automerge-end)\\n\\n---\\n\\n

\\n

Dependabot commands and options

\\n
\\n\\nYou can trigger Dependabot actions by commenting on this PR:\\n- `@dependabot rebase` will rebase this PR\\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\\n- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency\\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\\n\\n\\n

\",\"base_ref\":\"45dc0b481bfb44a207da8e59788dc20efa29f38e\",\"head_ref\":\"195f301a8384759dc5c60c1713b0cbefecbdea89\",\"merge_commit_sha\":null,\"type\":\"pull_request_info\"}","text_elements",[],{"_369":511,"_350":351,"_371":357},{"_372":512,"_374":-5,"_42":-5,"_375":-5,"_376":-5,"_96":306,"_92":378},[513],{"_46":507,"_92":514},"input_text",{"_369":516,"_350":351,"_371":357},{"_372":517,"_374":-5,"_42":-5,"_375":-5,"_376":-5,"_96":306,"_92":378},[518],{"_46":519,"_92":514},"\n /workspace/first-class-errors\n bash\n 2026-07-09\n Etc/UTC\n",{"_369":521,"_350":351,"_371":357},{"_372":522,"_374":-5,"_42":-5,"_375":-5,"_376":-5,"_96":523,"_92":378},[524,525],"developer",{"_46":527,"_92":514},{"_46":526,"_92":514},"\n## Skills\nA skill is a set of local instructions to follow that is stored in a `SKILL.md` file. Below is the list of skills that can be used. Each entry includes a name, description, and file path so you can open the source for full instructions when using a specific skill.\n### Available skills\n- imagegen: Generate or edit raster images when the task benefits from AI-created bitmap visuals such as photos, illustrations, textures, sprites, mockups, or transparent-background cutouts. Use when Codex should create a brand-new image, transform an existing image, or derive visual variants from references, and the output should be a bitmap asset rather than repo-native code or vector. Do not use when the task is better handled by editing existing SVG/vector/code-native assets, extending an established icon or logo system, or building the visual directly in HTML/CSS/canvas. (file: /opt/codex/skills/.system/imagegen/SKILL.md)\n- openai-docs: Use when the user asks how to build with OpenAI products or APIs and needs up-to-date official documentation with citations, help choosing the latest model for a use case, or model upgrade and prompt-upgrade guidance; prioritize OpenAI docs MCP tools, use bundled references only as helper context, and restrict any fallback browsing to official OpenAI domains. (file: /opt/codex/skills/.system/openai-docs/SKILL.md)\n- plugin-creator: Create and scaffold plugin directories for Codex with a required `.codex-plugin/plugin.json`, optional plugin folders/files, and baseline placeholders you can edit before publishing or testing. Use when Codex needs to create a new local plugin, add optional plugin structure, or generate or update repo-root `.agents/plugins/marketplace.json` entries for plugin ordering and availability metadata. (file: /opt/codex/skills/.system/plugin-creator/SKILL.md)\n- skill-creator: Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Codex's capabilities with specialized knowledge, workflows, or tool integrations. (file: /opt/codex/skills/.system/skill-creator/SKILL.md)\n- skill-installer: Install Codex skills into $CODEX_HOME/skills from a curated list or a GitHub repo path. Use when a user asks to list installable skills, install a curated skill, or install a skill from another repo (including private repos). (file: /opt/codex/skills/.system/skill-installer/SKILL.md)\n### How to use skills\n- Discovery: The list above is the skills available in this session (name + description + file path). Skill bodies live on disk at the listed paths.\n- Trigger rules: If the user names a skill (with `$SkillName` or plain text) OR the task clearly matches a skill's description shown above, you must use that skill for that turn. Multiple mentions mean use them all. Do not carry skills across turns unless re-mentioned.\n- Missing/blocked: If a named skill isn't in the list or the path can't be read, say so briefly and continue with the best fallback.\n- How to use a skill (progressive disclosure):\n 1) After deciding to use a skill, open its `SKILL.md`. Read only enough to follow the workflow.\n 2) When `SKILL.md` references relative paths (e.g., `scripts/foo.py`), resolve them relative to the skill directory listed above first, and only consider other paths if needed.\n 3) If `SKILL.md` points to extra folders such as `references/`, load only the specific files needed for the request; don't bulk-load everything.\n 4) If `scripts/` exist, prefer running or patching them instead of retyping large code blocks.\n 5) If `assets/` or templates exist, reuse them instead of recreating from scratch.\n- Coordination and sequencing:\n - If multiple skills apply, choose the minimal set that covers the request and state the order you'll use them.\n - Announce which skill(s) you're using and why (one short line). If you skip an obvious skill, say why.\n- Context hygiene:\n - Keep context small: summarize long sections instead of pasting them; only load extra files when needed.\n - Avoid deep reference-chasing: prefer opening only files directly linked from `SKILL.md` unless you're blocked.\n - When variants exist (frameworks, providers, domains), pick only the relevant reference file(s) and note that choice.\n- Safety and fallback: If a skill can't be applied cleanly (missing files, unclear instructions), state the issue, pick the next-best approach, and continue.\n","\nFilesystem sandboxing defines which files can be read or written. `sandbox_mode` is `danger-full-access`: No filesystem sandboxing - all commands are permitted. Network access is enabled.\nApproval policy is currently never. Do not provide the `sandbox_permissions` for any reason, commands will be rejected.\n","turn/started",{"_350":351,"_87":530},{"_103":-5,"_42":357,"_358":531,"_360":361,"_362":532},[],"inProgress",{"_362":534,"_350":351},{"_535":536,"_92":537},"activeFlags",[],"active","thread/started",{"_540":541},"thread",{"_542":-5,"_543":-5,"_544":545,"_546":361,"_433":434,"_547":15,"_548":-5,"_549":-5,"_42":351,"_550":551,"_181":-5,"_552":-5,"_161":553,"_554":199,"_555":-5,"_438":556,"_362":557,"_558":-5,"_77":559,"_560":361},"agentNickname","agentRole","cliVersion","0.128.0","createdAt","ephemeral","forkedFromId","gitInfo","modelProvider","openai","parentThreadId","/opt/codex/sessions/2026/07/09/rollout-2026-07-09T22-27-39-019f48fe-64c8-7ed2-8aa7-9ec5b9c99d82.jsonl","preview","recencyAt","vscode",{"_92":366},"threadSource",[],"updatedAt",[],"messages",[564],{"_42":565,"_566":567,"_568":569,"_570":569,"_372":571,"_362":572,"_374":-5,"_573":32,"_574":575,"_576":577,"_578":-5},"49df78cc-ca37-484d-876b-9655dcfe3683","author",{"_96":306,"_181":-5,"_574":587},"create_time",1783636058.575794,"update_time",{"_583":46,"_584":585},"finished_successfully","weight","metadata",{"_579":580},"recipient","all","channel","l1239dk1",{"_581":582},"inline_comments",[],"content_type","parts",[586],"@codex any regression expected ?\nci: Bump actions/cache from 4 to 6\n\nBumps [actions/cache](https://github.com/actions/cache) from 4 to 6.\n

Release notes

Sourced from actions/cache's releases.

\n
v6.0.0
\n
What's Changed
\n
\n
Update packages, migrate to ESM by @Samirat in actions/cache#1760
\n
\n
Full Changelog: https://github.com/actions/cache/compare/v5...v6.0.0
\n
v5.1.0
\n
What's Changed
\n
\n
Bump @actions/cache to v5.1.0 - handle read-only cache access by @jasongin in actions/cache#1775
\n
\n
Full Changelog: https://github.com/actions/cache/compare/v5...v5.1.0
\n
v5.0.5
\n
What's Changed
\n
\n
Update ts-http-runtime dependency by @yacaovsnc in actions/cache#1747
\n
\n
Full Changelog: https://github.com/actions/cache/compare/v5...v5.0.5
\n
v5.0.4
\n
What's Changed
\n
\n
Add release instructions and update maintainer docs by @Link- in actions/cache#1696
\n
Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @Link- in actions/cache#1697
\n
Fix workflow permissions and cleanup workflow names / formatting by @Link- in actions/cache#1699
\n
docs: Update examples to use the latest version by @XZTDean in actions/cache#1690
\n
Fix proxy integration tests by @Link- in actions/cache#1701
\n
Fix cache key in examples.md for bun.lock by @RyPeck in actions/cache#1722
\n
Update dependencies & patch security vulnerabilities by @Link- in actions/cache#1738
\n
\n
New Contributors
\n
\n
@XZTDean made their first contribution in actions/cache#1690
\n
@RyPeck made their first contribution in actions/cache#1722
\n
\n
Full Changelog: https://github.com/actions/cache/compare/v5...v5.0.4
\n
v5.0.3
\n
What's Changed
\n
\n
Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
\n
Bump @actions/core to v2.0.3
\n
\n
Full Changelog: https://github.com/actions/cache/compare/v5...v5.0.3
\n
v.5.0.2
\n
v5.0.2
\n
What's Changed
\n\n

... (truncated)

Changelog

Sourced from actions/cache's changelog.

\n
Releases
\n
How to prepare a release
\n
\n
[!NOTE]\nRelevant for maintainers with write access only.
\n
\n
\n
Switch to a new branch from main.
\n
Run npm test to ensure all tests are passing.
\n
Update the version in https://github.com/actions/cache/blob/main/package.json.
\n
Run npm run build to update the compiled files.
\n
Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
\n
Run licensed cache to update the license report.
\n
Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
\n
Commit your changes and push your branch upstream.
\n
Open a pull request against main and get it reviewed and merged.
\n
Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json\n
\n
Create a new tag with the version number.
\n
Auto generate release notes and update them to match the changes you made in RELEASES.md.
\n
Toggle the set as the latest release option.
\n
Publish the release.
\n
\n
\n
Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml\n
\n
There should be a workflow run queued with the same version number.
\n
Approve the run to publish the new version and update the major tags for this action.
\n
\n
\n
\n
Changelog
\n
6.1.0
\n
\n
Bump @actions/cache to v6.1.0 to pick up actions/toolkit#2435 Handle cache write error due to read-only token
\n
Switch redundant "Cache save failed" warning to debug log in save-only
\n
\n
6.0.0
\n
\n
Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2
\n
Migrated to ESM module system
\n
Upgraded Jest to v30 and test infrastructure to be ESM compatible
\n
\n
5.0.4
\n
\n
Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
\n
Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
\n
Bump fast-xml-parser to v5.5.6
\n
\n
5.0.3
\n
\n
Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
\n
Bump @actions/core to v2.0.3
\n
\n
5.0.2
\n\n

... (truncated)

Commits

55cc834 Merge pull request #1768 from jasongin/readonly-cache
d8cd72f Bump @actions/cache to v6.1.0 - handle cache write error due to RO token
2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
e9b91fd Prettier fixes
e4884b8 Rebuild dist
10baf01 Fixed licenses
e39b386 Fix test mock return order
b692820 PR feedback
6074912 Rebuild dist bundles as ESM to match type:module
5a912e8 Fix lint and jest issues
Additional commits viewable in compare view

Dependabot commands and options

",{},"created",1783636100.8270571,"Completing the task","event_type","info",{"_92":378,"_96":93,"_372":598},{"_92":595,"_596":597},"partial_repo_snapshot","files",[],[599],{"_583":46,"_46":380},{"_92":306,"_42":84,"_96":306,"_602":603,"_604":605,"_606":607,"_132":-5,"_119":608},[83],"input_items",[626,627],"external_post_config",{"_609":610,"_243":244,"_611":286,"_255":-5,"_612":237,"_613":-5,"_614":615,"_616":617,"_618":-5,"_619":-5,"_620":621,"_622":15,"_623":59,"_624":54,"_625":15},"user_model_slug","slug",1783636050.653953,"installation_id",72237377,"pr_number","repo_id","review_trigger","comment_id",4930108903,"comment_type","issue","pr_write_guard_token","pending_pr_reaction_id","pending_comment_reaction_id",380711695,"comment_if_no_findings","comment_on_error","share_url","is_parallel_review",{"_92":378,"_96":306,"_372":631},{"_293":294,"_295":296,"_628":300,"_629":129,"_302":-5,"_92":630},"base_ref","head_ref","pull_request_info",[632],{"_583":46,"_46":633},"@codex any regression expected ?",[802,803],[],{"_588":589,"_46":590,"_591":592},{"_562":793},{"_317":792},{"_317":669},{"_285":286,"_276":287,"_288":289,"_290":59,"_291":15,"_292":15,"_293":294,"_295":296,"_297":248,"_298":127,"_299":300,"_301":129,"_302":303,"_304":-5,"_305":-5,"_306":668,"_308":309,"_310":309,"_311":309,"_312":309},{"_42":123,"_193":194,"_195":196,"_197":15,"_198":199,"_200":201,"_202":657,"_204":-5,"_205":-5,"_206":658,"_208":199,"_209":199,"_210":659,"_212":660,"_214":661,"_216":-5,"_217":218,"_219":220,"_221":222,"_223":662,"_55":-5,"_119":225,"_226":663,"_228":664,"_230":231,"_232":15,"_233":15},{"_133":650},[644,645,646,647,648,649],{"_148":171,"_150":165,"_152":166,"_154":163,"_156":172,"_158":159,"_160":32,"_161":-5},{"_148":170,"_150":165,"_152":166,"_154":163,"_156":167,"_158":159,"_160":32,"_161":-5},{"_148":168,"_150":165,"_152":166,"_154":163,"_156":169,"_158":159,"_160":32,"_161":-5},{"_148":164,"_150":165,"_152":166,"_154":163,"_156":167,"_158":159,"_160":32,"_161":-5},{"_148":162,"_150":151,"_152":153,"_154":163,"_156":157,"_158":159,"_160":32,"_161":-5},{"_148":149,"_150":151,"_152":153,"_154":155,"_156":157,"_158":159,"_160":32,"_161":-5},[651,652,653],{"_177":656,"_179":190},{"_177":655,"_179":186},{"_177":654,"_179":180},{"_181":182,"_92":183,"_119":184},{"_181":187,"_92":183,"_119":188},{"_181":191,"_92":183,"_119":192},{"_278":279,"_280":-5,"_281":-5,"_282":-5,"_283":-5,"_284":-5},[237],{"_237":665},{},{},[],{"_236":59},{"_234":59,"_235":199},{"_42":239,"_181":240,"_241":666,"_243":244,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":64,"_256":15,"_257":-5,"_258":-5,"_259":-5,"_260":-5,"_261":-5,"_262":-5,"_160":263,"_264":-5,"_55":667},{"_270":271,"_42":272,"_92":273,"_274":275,"_276":277},{"_266":15,"_267":15,"_268":15,"_269":15},{"_270":313,"_181":313,"_314":-5,"_274":315,"_42":316},[670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697],{"_154":538,"_348":788},{"_154":363,"_348":785},{"_154":528,"_348":782},{"_154":367,"_348":777},{"_154":367,"_348":773},{"_154":367,"_348":769},{"_154":382,"_348":764},{"_154":382,"_348":760},{"_154":367,"_348":756},{"_154":367,"_348":754},{"_154":382,"_348":750},{"_154":367,"_348":748},{"_154":367,"_348":746},{"_154":382,"_348":742},{"_154":367,"_348":740},{"_154":382,"_348":736},{"_154":367,"_348":733},{"_154":367,"_348":731},{"_154":382,"_348":727},{"_154":367,"_348":725},{"_154":382,"_348":721},{"_154":367,"_348":717},{"_154":382,"_348":713},{"_154":367,"_348":709},{"_154":382,"_348":707},{"_154":367,"_348":703},{"_154":363,"_348":701},{"_154":347,"_348":698},{"_350":351,"_87":699},{"_353":354,"_355":356,"_103":-5,"_42":357,"_358":700,"_360":361,"_362":113},[],{"_362":702,"_350":351},{"_92":366},{"_369":704,"_350":351,"_371":357},{"_372":705,"_374":-5,"_42":-5,"_375":-5,"_376":377,"_96":93,"_92":378},[706],{"_46":380,"_92":381},{"_369":708,"_350":351,"_371":357},{"_42":385,"_376":377,"_46":380,"_92":386},{"_369":710,"_350":351,"_371":357},{"_389":711,"_42":-5,"_375":-5,"_362":113,"_92":391},{"_392":712,"_394":395,"_92":396},[395],{"_369":714,"_350":351,"_371":357},{"_389":715,"_42":400,"_394":395,"_92":401},{"_392":716,"_394":395,"_92":396},[395],{"_369":718,"_350":351,"_371":357},{"_372":-5,"_405":406,"_42":-5,"_375":-5,"_407":719,"_92":409},[720],{"_46":411,"_92":412},{"_369":722,"_350":351,"_371":357},{"_372":723,"_42":416,"_407":724,"_92":409},[],[411],{"_369":726,"_350":351,"_371":357},{"_420":421,"_42":-5,"_375":-5,"_422":423,"_92":424},{"_369":728,"_350":351,"_371":357},{"_427":428,"_429":430,"_431":729,"_433":434,"_355":32,"_435":32,"_42":421,"_436":437,"_438":439,"_362":113,"_92":440},[730],{"_429":442,"_92":443},{"_369":732,"_350":351,"_371":357},{"_446":447,"_420":421,"_42":-5,"_375":-5,"_181":448,"_449":-5,"_92":450},{"_369":734,"_350":351,"_371":357},{"_372":-5,"_405":453,"_42":-5,"_375":-5,"_407":735,"_92":409},[],{"_369":737,"_350":351,"_371":357},{"_372":738,"_42":458,"_407":739,"_92":409},[],[],{"_369":741,"_350":351,"_371":357},{"_420":462,"_42":-5,"_375":-5,"_422":463,"_92":424},{"_369":743,"_350":351,"_371":357},{"_427":-5,"_429":466,"_431":744,"_433":434,"_355":32,"_435":32,"_42":462,"_436":468,"_438":439,"_362":113,"_92":440},[745],{"_429":470,"_92":443},{"_369":747,"_350":351,"_371":357},{"_446":473,"_420":462,"_42":-5,"_375":-5,"_181":448,"_449":-5,"_92":450},{"_369":749,"_350":351,"_371":357},{"_420":476,"_42":-5,"_375":-5,"_422":477,"_92":424},{"_369":751,"_350":351,"_371":357},{"_427":480,"_429":481,"_431":752,"_433":434,"_355":32,"_435":32,"_42":476,"_436":483,"_438":439,"_362":113,"_92":440},[753],{"_429":485,"_92":443},{"_369":755,"_350":351,"_371":357},{"_446":488,"_420":476,"_42":-5,"_375":-5,"_181":448,"_449":-5,"_92":450},{"_369":757,"_350":351,"_371":357},{"_372":-5,"_405":491,"_42":-5,"_375":-5,"_407":758,"_92":409},[759],{"_46":494,"_92":412},{"_369":761,"_350":351,"_371":357},{"_372":762,"_42":498,"_407":763,"_92":409},[],[494],{"_369":765,"_350":351,"_371":357},{"_502":-5,"_372":766,"_42":504,"_92":505},[767],{"_46":507,"_508":768,"_92":46},[],{"_369":770,"_350":351,"_371":357},{"_372":771,"_374":-5,"_42":-5,"_375":-5,"_376":-5,"_96":306,"_92":378},[772],{"_46":507,"_92":514},{"_369":774,"_350":351,"_371":357},{"_372":775,"_374":-5,"_42":-5,"_375":-5,"_376":-5,"_96":306,"_92":378},[776],{"_46":519,"_92":514},{"_369":778,"_350":351,"_371":357},{"_372":779,"_374":-5,"_42":-5,"_375":-5,"_376":-5,"_96":523,"_92":378},[780,781],{"_46":527,"_92":514},{"_46":526,"_92":514},{"_350":351,"_87":783},{"_103":-5,"_42":357,"_358":784,"_360":361,"_362":532},[],{"_362":786,"_350":351},{"_535":787,"_92":537},[],{"_540":789},{"_542":-5,"_543":-5,"_544":545,"_546":361,"_433":434,"_547":15,"_548":-5,"_549":-5,"_42":351,"_550":551,"_181":-5,"_552":-5,"_161":553,"_554":199,"_555":-5,"_438":556,"_362":790,"_558":-5,"_77":791,"_560":361},{"_92":366},[],[],[794],{"_42":565,"_566":795,"_568":569,"_570":569,"_372":796,"_362":572,"_374":-5,"_573":32,"_574":797,"_576":577,"_578":-5},{"_96":306,"_181":-5,"_574":801},{"_583":46,"_584":800},{"_579":798},{"_581":799},[],[586],{},{"_92":378,"_96":93,"_372":805},{"_92":595,"_596":804},[],[806],{"_583":46,"_46":380},[809,810],{"_609":610,"_243":244,"_611":286,"_255":-5,"_612":237,"_613":-5,"_614":615,"_616":617,"_618":-5,"_619":-5,"_620":621,"_622":15,"_623":59,"_624":54,"_625":15},{"_92":378,"_96":306,"_372":811},{"_293":294,"_295":296,"_628":300,"_629":129,"_302":-5,"_92":630},[812],{"_583":46,"_46":633},"task_e_6a5020512ec083208339207101ec3cbb",1783636049.182943,"GitHub Mention: ci: Bump actions/cache from 4 to 6","has_generated_title","has_unread_turn","denormalized_metadata",{"_844":32,"_845":846,"_847":-5,"_848":-5,"_839":849,"_850":-5,"_851":-5,"_852":-5,"_853":-5},"task_status_display",{"_832":833,"_834":196,"_130":127,"_835":-5,"_836":837},"creator_workspace","external_pull_requests",[825],{"_42":826,"_827":83,"_828":829,"_830":129},"github-1046229690-63","assistant_turn_id","pull_request",{"_285":286,"_276":287,"_288":289,"_290":59,"_291":15,"_292":15,"_293":294,"_295":296,"_297":248,"_298":127,"_299":300,"_301":129,"_302":303,"_304":-5,"_305":-5,"_306":831,"_308":309,"_310":309,"_311":309,"_312":309},"codex_updated_sha",{"_270":313,"_181":313,"_314":-5,"_274":315,"_42":316},"latest_turn_status_display",{"_838":83,"_112":113,"_839":-5,"_94":840,"_841":-5,"_842":-5,"_843":837,"_114":-5},"environment_label","fix_task_id","initial_intent","pr","turn_id","diff_stats",[],"image_asset_pointer_citations","issue_counts","intent","num_follow_ups","repo_name_map",{},"last_user_turn_created_at","last_turn_status",{"_854":-5,"_855":-5,"_856":-5},"last_pushed_turn_id","start_branch_name","pushed_branch_name","cached_pull_request_data","files_modified","lines_added","lines_removed","dd",{"_868":869,"_870":871},"disablePrefetch","shouldPrefetchAccount","shouldPrefetchUser","shouldPrefetchSystemHints","promoteCss","disableSSR","stripModulepreloadImports","statsigGateEvaluationsPromise",["P",867],"traceId","14525036577734863339","traceTime",1783915065529]