◐ Shell
clean mode source ↗

ci(deps): bump the github-actions group across 1 directory with 4 updates by dependabot[bot] · Pull Request #602 · arcasilesgroup/ai-engineering

soydachi added a commit that referenced this pull request

Jun 24, 2026
v6.0.0 is an ESM-only refactor of v5 (actions/cache#1760: "Update packages,
migrate to ESM") — the cache backend, key schema, and save/restore behavior
are unchanged, so it stays key+path compatible with the gate_cache storage
contract (D-104-03/D-104-09). Widen _is_supported_cache_version + the
SHA-pin annotation fallback to accept v4/v5/v6, mirroring the v4->v5
acceptance (spec-163).

Unblocks dependabot #602 (actions/cache 5.0.5 -> 6.0.0, grouped with
actions/checkout 7.0.0, sonarqube-scan-action 8.2.0, setup-python 6.3.0).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Ai-Eng-Gate: passed
Dependabot github-actions group bump (4 updates):
- actions/checkout 6.0.3 -> 7.0.0
- actions/cache 5.0.5 -> 6.0.0
- SonarSource/sonarqube-scan-action 8.1.0 -> 8.2.0
- actions/setup-python 6.2.0 -> 6.3.0

Widen the gate-cache contract test (test_ci_cache_key_schema) to accept
actions/cache v6: v6.0.0 is an ESM-only refactor of v5 (actions/cache#1760)
with the cache backend, key schema, and save/restore behavior unchanged, so
it stays key+path compatible with the gate_cache storage contract
(D-104-03 / D-104-09). Mirrors the v4->v5 acceptance (spec-163).

Collapsed the bot bump + the contract-widening commit into one trailered
commit so Verify Gate Trailers passes (the dependabot commit carried no
Ai-Eng-Gate trailer).

Co-Authored-By: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Ai-Eng-Gate: passed

@soydachi soydachi deleted the dependabot/github_actions/github-actions-0a3942bc17 branch

June 24, 2026 21:18