From be3fa196e71f39d14e7b39894c221a8493fc33e4 Mon Sep 17 00:00:00 2001 From: Joshua Temple Date: Sun, 5 Jul 2026 00:05:23 -0400 Subject: [PATCH] ci: bump actions/cache to the node24 v6.1.0 release actions/cache was pinned at v4.3.0 (0057852), which runs on node20 and now emits a runner deprecation warning. It was also absent from the pin manifest and the dependabot anchor, so neither the consistency lint nor dependabot ever proposed a bump for it, letting it drift. Bring actions/cache under governance and move it to v6.1.0 (55cc8345863c7cc4c66a329aec7e433d2d1c52a9), the latest release whose action.yml declares using: node24: add it to internal/generate/action_pins.yaml as an emit:false maintainer-only pin, list it in the dependabot anchor, and update the setup-cli composite action ref. The consistency guard now locks the cache pin like every other action. Signed-off-by: Joshua Temple --- .github/actions/setup-cli/action.yaml | 2 +- .github/workflows/action-pins.yml | 4 ++++ internal/generate/action_pins.yaml | 1 + internal/generate/action_pins_manifest_test.go | 1 + 4 files changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/actions/setup-cli/action.yaml b/.github/actions/setup-cli/action.yaml index bc071a3e..422182de 100644 --- a/.github/actions/setup-cli/action.yaml +++ b/.github/actions/setup-cli/action.yaml @@ -65,7 +65,7 @@ runs: - name: Restore CLI from cache if: steps.check.outputs.installed != 'true' id: cache - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: /usr/local/bin/cascade key: cascade-${{ steps.binary.outputs.name }}-${{ steps.resolve.outputs.tag }} diff --git a/.github/workflows/action-pins.yml b/.github/workflows/action-pins.yml index 08e21d3c..8ff2d94b 100644 --- a/.github/workflows/action-pins.yml +++ b/.github/workflows/action-pins.yml @@ -58,6 +58,10 @@ jobs: with: app-id: '0' private-key: '' + - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 + with: + path: . + key: anchor - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 - uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0 diff --git a/internal/generate/action_pins.yaml b/internal/generate/action_pins.yaml index 1821132a..04b6a360 100644 --- a/internal/generate/action_pins.yaml +++ b/internal/generate/action_pins.yaml @@ -15,6 +15,7 @@ actions: actions/download-artifact: { tag: v8, sha: 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c, version: v8.0.1, emit: true } actions/upload-artifact: { tag: v7, sha: 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a, version: v7.0.1, emit: true } actions/create-github-app-token: { tag: v3, sha: bcd2ba49218906704ab6c1aa796996da409d3eb1, version: v3.2.0, emit: true } + actions/cache: { tag: v6, sha: 55cc8345863c7cc4c66a329aec7e433d2d1c52a9, version: v6.1.0, emit: false } actions/setup-go: { tag: v6, sha: 924ae3a1cded613372ab5595356fb5720e22ba16, version: v6.5.0, emit: false } actions/setup-node: { tag: v6, sha: 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e, version: v6.4.0, emit: false } actions/upload-pages-artifact: { tag: v5, sha: fc324d3547104276b827a68afc52ff2a11cc49c9, version: v5.0.0, emit: false } diff --git a/internal/generate/action_pins_manifest_test.go b/internal/generate/action_pins_manifest_test.go index 9153c9d0..69bdc326 100644 --- a/internal/generate/action_pins_manifest_test.go +++ b/internal/generate/action_pins_manifest_test.go @@ -50,6 +50,7 @@ func TestActionPinsManifest_EmitFlags(t *testing.T) { actionDownloadArtifact: true, actionUploadArtifact: true, actionCreateAppToken: true, + "actions/cache": false, "actions/setup-go": false, "actions/setup-node": false, "actions/upload-pages-artifact": false,