chore(deps): Bump actions/cache from 5 to 6 in the github-actions-dependencies group by dependabot[bot] · Pull Request #128 · JerrettDavis/QuickApiMapper

dependabot · 2026-06-29T11:07:43Z

Bumps the github-actions-dependencies group with 1 update: actions/cache.

Updates actions/cache from 5 to 6

Release notes

Sourced from actions/cache's releases.

v6.0.0

What's Changed

Update packages, migrate to ESM by @Samirat in actions/cache#1760

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

What's Changed

Bump @actions/cache to v5.1.0 - handle read-only cache access by @jasongin in actions/cache#1775

Full Changelog: actions/cache@v5...v5.1.0

v5.0.5

What's Changed

Update ts-http-runtime dependency by @yacaovsnc in actions/cache#1747

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

What's Changed

Add release instructions and update maintainer docs by @Link- in actions/cache#1696

Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @Link- in actions/cache#1697

Fix workflow permissions and cleanup workflow names / formatting by @Link- in actions/cache#1699

docs: Update examples to use the latest version by @XZTDean in actions/cache#1690

Fix proxy integration tests by @Link- in actions/cache#1701

Fix cache key in examples.md for bun.lock by @RyPeck in actions/cache#1722

Update dependencies & patch security vulnerabilities by @Link- in actions/cache#1738

New Contributors

@XZTDean made their first contribution in actions/cache#1690

@RyPeck made their first contribution in actions/cache#1722

Full Changelog: actions/cache@v5...v5.0.4

v5.0.3

What's Changed

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

v.5.0.2

v5.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

Switch to a new branch from main.

Run npm test to ensure all tests are passing.

Update the version in https://github.com/actions/cache/blob/main/package.json.

Run npm run build to update the compiled files.

Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.

Run licensed cache to update the license report.

Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.

Commit your changes and push your branch upstream.

Open a pull request against main and get it reviewed and merged.

Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json

Create a new tag with the version number.

Auto generate release notes and update them to match the changes you made in RELEASES.md.

Toggle the set as the latest release option.

Publish the release.

Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml

There should be a workflow run queued with the same version number.

Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

Bump @actions/cache to v6.1.0 to pick up actions/toolkit#2435 Handle cache write error due to read-only token

Switch redundant "Cache save failed" warning to debug log in save-only

6.0.0

Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2

Migrated to ESM module system

Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)

Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)

Bump fast-xml-parser to v5.5.6

5.0.3

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

Bump @actions/core to v2.0.3

5.0.2

... (truncated)

Commits

55cc834 Merge pull request #1768 from jasongin/readonly-cache
d8cd72f Bump @actions/cache to v6.1.0 - handle cache write error due to RO token
2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
e9b91fd Prettier fixes
e4884b8 Rebuild dist
10baf01 Fixed licenses
e39b386 Fix test mock return order
b692820 PR feedback
6074912 Rebuild dist bundles as ESM to match type:module
5a912e8 Fix lint and jest issues
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions-dependencies group with 1 update: [actions/cache](https://github.com/actions/cache). Updates `actions/cache` from 5 to 6 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v5...v6) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-29T11:07:43Z

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions · 2026-06-29T11:12:55Z

Test Results

118 tests ±0 118 ✅ ±0 5s ⏱️ -1s
2 suites ±0 0 💤 ±0
2 files ±0 0 ❌ ±0

Results for commit 90cd275. ± Comparison against base commit b990089.

github-actions · 2026-06-29T11:13:31Z

🔍 PR Validation Results

Version: 0.0.0-g69eff65911

📦 Detected NuGet Packages (17)

Demo.JsonApi
Demo.SoapApi
QuickApiMapper.Application
QuickApiMapper.Behaviors
QuickApiMapper.Contracts
QuickApiMapper.CustomTransformers
QuickApiMapper.Extensions.RabbitMQ
QuickApiMapper.Extensions.ServiceBus
QuickApiMapper.Extensions.gRPC
QuickApiMapper.Management.Contracts
QuickApiMapper.MessageCapture.Abstractions
QuickApiMapper.MessageCapture.InMemory
QuickApiMapper.Persistence.Abstractions
QuickApiMapper.Persistence.PostgreSQL
QuickApiMapper.Persistence.SQLite
QuickApiMapper.StandardTransformers
QuickApiMapper.Tools.Migrator

🚀 Detected Executables (2)

QuickApiMapper.Host.AppHost
QuickApiMapper.Tools.Migrator

✅ Validation Steps

📊 Artifacts

Dry-run artifacts have been uploaded and will be available for 7 days.

This comment was automatically generated by the PR validation workflow.

github-actions · 2026-06-29T11:14:22Z

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

.github/workflows/pr-validation.yml

Package	Version	License	Issue Type
actions/cache	6..	Null	Unknown License

Denied Licenses:
GPL-2.0, GPL-3.0, AGPL-3.0

OpenSSF Scorecard

Package

Version

Score

Details

actions/actions/cache

6.*.*

🟢 5.7

Details

Check	Score	Reason
Maintained	🟢 4	4 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 4
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	🟢 10	all changesets reviewed
Binary-Artifacts	🟢 10	no binaries found in the repo
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 3	dependency not pinned by hash detected -- score normalized to 3
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 9	security policy file detected
SAST	🟢 10	SAST tool is run on all commits
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches

Scanned Files

.github/workflows/pr-validation.yml

dependabot Bot added the dependencies label Jun 29, 2026

dependabot Bot requested a review from JerrettDavis as a code owner June 29, 2026 11:07

dependabot Bot added the dependencies label Jun 29, 2026

github-actions Bot added the area: ci/cd label Jun 29, 2026

github-actions Bot added the size/xs label Jun 29, 2026

JerrettDavis approved these changes Jun 30, 2026

View reviewed changes

JerrettDavis merged commit 0eb970d into main Jun 30, 2026
7 checks passed

JerrettDavis deleted the dependabot/github_actions/github-actions-dependencies-6d1c06d137 branch June 30, 2026 20:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump actions/cache from 5 to 6 in the github-actions-dependencies group#128

chore(deps): Bump actions/cache from 5 to 6 in the github-actions-dependencies group#128
JerrettDavis merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-6d1c06d137

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026

Uh oh!

github-actions Bot commented Jun 29, 2026

Uh oh!

github-actions Bot commented Jun 29, 2026

Uh oh!

github-actions Bot commented Jun 29, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 29, 2026

v6.0.0

What's Changed

v5.1.0

What's Changed

v5.0.5

What's Changed

v5.0.4

What's Changed

New Contributors

v5.0.3

What's Changed

v.5.0.2

v5.0.2

What's Changed

Releases

How to prepare a release

Changelog

6.1.0

6.0.0

5.0.4

5.0.3

5.0.2

Uh oh!

dependabot Bot commented on behalf of github Jun 29, 2026

Labels

Uh oh!

github-actions Bot commented Jun 29, 2026

Test Results

Uh oh!

github-actions Bot commented Jun 29, 2026

🔍 PR Validation Results

📦 Detected NuGet Packages (17)

🚀 Detected Executables (2)

✅ Validation Steps

📊 Artifacts

Uh oh!

github-actions Bot commented Jun 29, 2026

Dependency Review

License Issues

.github/workflows/pr-validation.yml

OpenSSF Scorecard

Scanned Files

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant