Update packages, migrate to ESM by Samirat · Pull Request #1760 · actions/cache

v6.0.0 is an ESM-only refactor of v5 (actions/cache#1760: "Update packages,
migrate to ESM") — the cache backend, key schema, and save/restore behavior
are unchanged, so it stays key+path compatible with the gate_cache storage
contract (D-104-03/D-104-09). Widen _is_supported_cache_version + the
SHA-pin annotation fallback to accept v4/v5/v6, mirroring the v4->v5
acceptance (spec-163).

Unblocks dependabot #602 (actions/cache 5.0.5 -> 6.0.0, grouped with
actions/checkout 7.0.0, sonarqube-scan-action 8.2.0, setup-python 6.3.0).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Ai-Eng-Gate: passed

Dependabot github-actions group bump (4 updates):
- actions/checkout 6.0.3 -> 7.0.0
- actions/cache 5.0.5 -> 6.0.0
- SonarSource/sonarqube-scan-action 8.1.0 -> 8.2.0
- actions/setup-python 6.2.0 -> 6.3.0

Widen the gate-cache contract test (test_ci_cache_key_schema) to accept
actions/cache v6: v6.0.0 is an ESM-only refactor of v5 (actions/cache#1760)
with the cache backend, key schema, and save/restore behavior unchanged, so
it stays key+path compatible with the gate_cache storage contract
(D-104-03 / D-104-09). Mirrors the v4->v5 acceptance (spec-163).

Collapsed the bot bump + the contract-widening commit into one trailered
commit so Verify Gate Trailers passes (the dependabot commit carried no
Ai-Eng-Gate trailer).

Co-Authored-By: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Ai-Eng-Gate: passed

Dependabot github-actions group bump (4 updates):
- actions/checkout 6.0.3 -> 7.0.0
- actions/cache 5.0.5 -> 6.0.0
- SonarSource/sonarqube-scan-action 8.1.0 -> 8.2.0
- actions/setup-python 6.2.0 -> 6.3.0

Widen the gate-cache contract test (test_ci_cache_key_schema) to accept
actions/cache v6: v6.0.0 is an ESM-only refactor of v5 (actions/cache#1760)
with the cache backend, key schema, and save/restore behavior unchanged, so
it stays key+path compatible with the gate_cache storage contract
(D-104-03 / D-104-09). Mirrors the v4->v5 acceptance (spec-163).

Collapsed the bot bump + the contract-widening commit into one trailered
commit so Verify Gate Trailers passes (the dependabot commit carried no
Ai-Eng-Gate trailer).

Co-Authored-By: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Ai-Eng-Gate: passed

Co-authored-by: soydachi <dachi.gogotchuri@gmail.com>