build(deps): bump the dependencies group across 46 directories with 7 updates

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the dependencies group with 5 updates in the /.github/workflows directory:

Package	From	To
envoyproxy/toolshed	80c3e8fccbda9aa39bd359c650e9822a741865bc	5ad2e9bddabad409b4afb5501d266292c9e88d40
actions/upload-artifact	7.0.0	7.0.1
github/codeql-action	4.35.1	4.35.2
actions-rust-lang/setup-rust-toolchain	1.15.4	1.16.0
peter-evans/create-pull-request	8.1.0	8.1.1

Bumps the dependencies group with 1 update in the /actions/azp/agent-cleanup directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/bind-mounts directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/bson directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/buildah directory: envoyproxy/toolshed.
Bumps the dependencies group with 2 updates in the /actions/cache/prime directory: envoyproxy/toolshed and actions/cache.
Bumps the dependencies group with 2 updates in the /actions/cache/restore directory: envoyproxy/toolshed and actions/cache.
Bumps the dependencies group with 1 update in the /actions/docker/cache/prime directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/docker/cache/restore directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/docker/fetch directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/docker/shas directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/envoy/ci/env directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/envoy/ci/request directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/envoy/run/summary directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/foreach directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/gcp/setup directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/gcs/fuse directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/github/afterall directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/github/artifact/cache/restore directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/github/artifact/download directory: actions/github-script.
Bumps the dependencies group with 1 update in the /actions/github/checkout directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/github/command directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/github/env/load directory: envoyproxy/toolshed.
Bumps the dependencies group with 2 updates in the /actions/github/env/save directory: envoyproxy/toolshed and actions/upload-artifact.
Bumps the dependencies group with 1 update in the /actions/github/env/summary directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/github/issue/get directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/github/merge-commit directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/github/pr directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/github/release directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/github/release/artifacts directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/github/release/latest directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/github/release/publish directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/github/release/shas directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/github/release/status directory: envoyproxy/toolshed.
Bumps the dependencies group with 2 updates in the /actions/github/run directory: envoyproxy/toolshed and actions/upload-artifact.
Bumps the dependencies group with 1 update in the /actions/github/should-run directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/gpg directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/gpg/import directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/json/table directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/oci/collector directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/regctl/install directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/source directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/test-runner directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/upload/diff directory: actions/upload-artifact.
Bumps the dependencies group with 1 update in the /actions/using/recurse directory: envoyproxy/toolshed.
Bumps the dependencies group with 1 update in the /actions/version directory: envoyproxy/toolshed.

Updates envoyproxy/toolshed from 80c3e8f to 5ad2e9b

Commits

• 5ad2e9b repo: Dev Actions v0.4.7-dev
• 0f75902 actions: Release v0.4.6 (#4010)
• 1f0251c actions: Prepare release v0.4.6 (#4009)
• 34d0ef5 actions/docker/cache/prime: Harden env var handling (#4008)
• 58c7e89 repo: Dev Bazel v0.3.33-dev
• f1e5ddf bazel: Release v0.3.32 (#3977)
• 71a092a repo: Dev Bins v0.1.53-dev
• 58220e5 bins: Release v0.1.52 (#3976)
• ed37530 build(deps): bump tokio (#3971)
• ffca391 tidy: support hermetic LLVM toolchains in clang-tidy aspect (#3970)
• Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.0 to 7.0.1

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.1

What's Changed

• Update the readme with direct upload details by @​danwkennedy in actions/upload-artifact#795
• Readme: bump all the example versions to v7 by @​danwkennedy in actions/upload-artifact#796
• Include changes in typespec/ts-http-runtime 0.3.5 by @​yacaovsnc in actions/upload-artifact#797

Full Changelog: actions/upload-artifact@v7...v7.0.1

Commits

• 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
• 634250c Include changes in typespec/ts-http-runtime 0.3.5
• e454baa Readme: bump all the example versions to v7 (#796)
• 74fad66 Update the readme with direct upload details (#795)
• See full diff in compare view

Updates github/codeql-action from 4.35.1 to 4.35.2

Release notes

Sourced from github/codeql-action's releases.

v4.35.2

• The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795
• The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789
• Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794
• Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807
• Update default CodeQL bundle version to 2.25.2. #3823

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.35.2 - 15 Apr 2026

• The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795
• The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789
• Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794
• Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807
• Update default CodeQL bundle version to 2.25.2. #3823

4.35.1 - 27 Mar 2026

• Fix incorrect minimum required Git version for improved incremental analysis: it should have been 2.36.0, not 2.11.0. #3781

4.35.0 - 27 Mar 2026

• Reduced the minimum Git version required for improved incremental analysis from 2.38.0 to 2.11.0. #3767
• Update default CodeQL bundle version to 2.25.1. #3773

4.34.1 - 20 Mar 2026

• Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #3762

4.34.0 - 20 Mar 2026

• Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #3569
• We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #3584
• Update default CodeQL bundle version to 2.25.0. #3585

4.33.0 - 16 Mar 2026

• Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. #3562

  To opt out of this change:

  • Repositories owned by an organization: Create a custom repository property with the name github-codeql-file-coverage-on-prs and the type "True/false", then set this property to true in the repository's settings. For more information, see Managing custom properties for repositories in your organization. Alternatively, if you are using an advanced setup workflow, you can set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
  • User-owned repositories using default setup: Switch to an advanced setup workflow and set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
  • User-owned repositories using advanced setup: Set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.

• Fixed a bug which caused the CodeQL Action to fail loading repository properties if a "Multi select" repository property was configured for the repository. #3557

• The CodeQL Action now loads custom repository properties on GitHub Enterprise Server, enabling the customization of features such as github-codeql-disable-overlay that was previously only available on GitHub.com. #3559

• Once private package registries can be configured with OIDC-based authentication for organizations, the CodeQL Action will now be able to accept such configurations. #3563

• Fixed the retry mechanism for database uploads. Previously this would fail with the error "Response body object should not be disturbed or locked". #3564

• A warning is now emitted if the CodeQL Action detects a repository property whose name suggests that it relates to the CodeQL Action, but which is not one of the properties recognised by the current version of the CodeQL Action. #3570

4.32.6 - 05 Mar 2026

... (truncated)

Commits

• 95e58e9 Merge pull request #3824 from github/update-v4.35.2-d2e135a73
• 6f31bfe Update changelog for v4.35.2
• d2e135a Merge pull request #3823 from github/update-bundle/codeql-bundle-v2.25.2
• 60abb65 Add changelog note
• 5a0a562 Update default bundle to codeql-bundle-v2.25.2
• 6521697 Merge pull request #3820 from github/dependabot/github_actions/dot-github/wor...
• 3c45af2 Merge pull request #3821 from github/dependabot/npm_and_yarn/npm-minor-345b93...
• f1c3393 Rebuild
• 1024fc4 Rebuild
• 9dd4cfe Bump the npm-minor group across 1 directory with 6 updates
• Additional commits viewable in compare view

Updates actions-rust-lang/setup-rust-toolchain from 1.15.4 to 1.16.0

Release notes

Sourced from actions-rust-lang/setup-rust-toolchain's releases.

v1.16.0

What's Changed

• Update actions/checkout to v6 on README by @​ryuapp in actions-rust-lang/setup-rust-toolchain#88
• feat: add cache-save-if input to propagate save-if to Swatinem/rust-cache by @​ChanTsune in actions-rust-lang/setup-rust-toolchain#90

New Contributors

• @​ryuapp made their first contribution in actions-rust-lang/setup-rust-toolchain#88
• @​ChanTsune made their first contribution in actions-rust-lang/setup-rust-toolchain#90

Full Changelog: actions-rust-lang/setup-rust-toolchain@v1.15.4...v1.16.0

Changelog

Sourced from actions-rust-lang/setup-rust-toolchain's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[1.16.0] - 2026-04-13

• Add new parameter cache-save-if that is propagated to Swatinem/rust-cache as save-if (#90 by @​ChanTsune)

[1.15.4] - 2026-03-15

• Bump Swatinem/rust-cache from 2.8.2 to 2.9.1 (#87 by @​hyperfinitism) This gets rid of the warnings about Node.js 20.

[1.15.3] - 2026-03-01

• Bump Swatinem/rust-cache from 2.8.1 to 2.8.2

[1.15.2] - 2025-10-04

• Fix: Run the version detection steps in the selected rust-src-dir directory. This should enable the version selection even without a default toolchain installed. Fixes #74.

[1.15.1] - 2025-09-23

• Update Swatinem/rust-cache to v2.8.1

[1.15.0] - 2025-09-14

• Add support for non-root source directory. Accept source code and rust-toolchain.toml file in subdirectories of the repository. Adds a new parameter rust-src-dir that controls the lookup for toolchain files and sets a default value for the cache-workspace input. (#69 by @​Kubaryt)

[1.14.1] - 2025-08-28

• Pin Swatinem/rust-cache action to a full commit SHA (#68 by @​JohnTitor)

[1.14.0] - 2025-08-23

• Add new parameters cache-all-crates and cache-workspace-crates that are propagated to Swatinem/rust-cache as cache-all-crates and cache-workspace-crates

[1.13.0] - 2025-06-16

• Add new parameter cache-provider that is propagated to Swatinem/rust-cache as cache-provider (#65 by @​mindrunner)

... (truncated)

Commits

• 2b1f5e9 Update CHANGELOG for version 1.16.0
• 9030f3d Merge pull request #90 from ChanTsune/feat/cache-save-if
• 186b99e feat: add cache-save-if input to propagate save-if to Swatinem/rust-cache
• d197c15 Merge pull request #88 from ryuapp/chore/update-chekcout-v6-on-readme
• fa057b4 Update actions/checkout to v6 on README
• See full diff in compare view

Updates peter-evans/create-pull-request from 8.1.0 to 8.1.1

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v8.1.1

What's Changed

• build(deps-dev): bump the npm group with 2 updates by @​dependabot[bot] in peter-evans/create-pull-request#4305
• build(deps): bump minimatch by @​dependabot[bot] in peter-evans/create-pull-request#4311
• build(deps): bump the github-actions group with 2 updates by @​dependabot[bot] in peter-evans/create-pull-request#4316
• build(deps): bump @​tootallnate/once and jest-environment-jsdom by @​dependabot[bot] in peter-evans/create-pull-request#4323
• build(deps-dev): bump undici from 6.23.0 to 6.24.0 by @​dependabot[bot] in peter-evans/create-pull-request#4328
• build(deps-dev): bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in peter-evans/create-pull-request#4334
• build(deps): bump picomatch by @​dependabot[bot] in peter-evans/create-pull-request#4339
• build(deps-dev): bump handlebars from 4.7.8 to 4.7.9 by @​dependabot[bot] in peter-evans/create-pull-request#4344
• build(deps-dev): bump the npm group with 3 updates by @​dependabot[bot] in peter-evans/create-pull-request#4349
• fix: retry post-creation API calls on 422 eventual consistency errors by @​peter-evans in peter-evans/create-pull-request#4356

Full Changelog: peter-evans/create-pull-request@v8.1.0...v8.1.1

Commits

• 5f6978f fix: retry post-creation API calls on 422 eventual consistency errors (#4356)
• d32e88d build(deps-dev): bump the npm group with 3 updates (#4349)
• 8170bcc build(deps-dev): bump handlebars from 4.7.8 to 4.7.9 (#4344)
• 0041819 build(deps): bump picomatch (#4339)
• b993918 build(deps-dev): bump flatted from 3.3.1 to 3.4.2 (#4334)
• 36d7c84 build(deps-dev): bump undici from 6.23.0 to 6.24.0 (#4328)
• a45d1fb build(deps): bump @​tootallnate/once and jest-environment-jsdom (#4323)
• 3499eb6 build(deps): bump the github-actions group with 2 updates (#4316)
• 3f3b473 build(deps): bump minimatch (#4311)
• 6699836 build(deps-dev): bump the npm group with 2 updates (#4305)
• See full diff in compare view

Updates envoyproxy/toolshed from 1f0251c to 5ad2e9b

Commits

• 5ad2e9b repo: Dev Actions v0.4.7-dev
• 0f75902 actions: Release v0.4.6 (#4010)
• 1f0251c actions: Prepare release v0.4.6 (#4009)
• 34d0ef5 actions/docker/cache/prime: Harden env var handling (#4008)
• 58c7e89 repo: Dev Bazel v0.3.33-dev
• f1e5ddf bazel: Release v0.3.32 (#3977)
• 71a092a repo: Dev Bins v0.1.53-dev
• 58220e5 bins: Release v0.1.52 (#3976)
• ed37530 build(deps): bump tokio (#3971)
• ffca391 tidy: support hermetic LLVM toolchains in clang-tidy aspect (#3970)
• Additional commits viewable in compare view

Updates envoyproxy/toolshed from 1f0251c to 5ad2e9b

Commits

• 5ad2e9b repo: Dev Actions v0.4.7-dev
• 0f75902 actions: Release v0.4.6 (#4010)
• 1f0251c actions: Prepare release v0.4.6 (#4009)
• 34d0ef5 actions/docker/cache/prime: Harden env var handling (#4008)
• 58c7e89 repo: Dev Bazel v0.3.33-dev
• f1e5ddf bazel: Release v0.3.32 (#3977)
• 71a092a repo: Dev Bins v0.1.53-dev
• 58220e5 bins: Release v0.1.52 (#3976)
• ed37530 build(deps): bump tokio (#3971)
• ffca391 tidy: support hermetic LLVM toolchains in clang-tidy aspect (#3970)
• Additional commits viewable in compare view

Updates envoyproxy/toolshed from 1f0251c to 5ad2e9b

Commits

• 5ad2e9b repo: Dev Actions v0.4.7-dev
• 0f75902 actions: Release v0.4.6 (#4010)
• 1f0251c actions: Prepare release v0.4.6 (#4009)
• 34d0ef5 actions/docker/cache/prime: Harden env var handling (#4008)
• 58c7e89 repo: Dev Bazel v0.3.33-dev
• f1e5ddf bazel: Release v0.3.32 (#3977)
• 71a092a repo: Dev Bins v0.1.53-dev
• 58220e5 bins: Release v0.1.52 (#3976)
• ed37530 build(deps): bump tokio (#3971)
• ffca391 tidy: support hermetic LLVM toolchains in clang-tidy aspect (#3970)
• Additional commits viewable in compare view

Updates envoyproxy/toolshed from 1f0251c to 5ad2e9b

Commits

• 5ad2e9b repo: Dev Actions v0.4.7-dev
• 0f75902 actions: Release v0.4.6 (#4010)
• 1f0251c actions: Prepare release v0.4.6 (#4009)
• 34d0ef5 actions/docker/cache/prime: Harden env var handling (#4008)
• 58c7e89 repo: Dev Bazel v0.3.33-dev
• f1e5ddf bazel: Release v0.3.32 (#3977)
• 71a092a repo: Dev Bins v0.1.53-dev
• 58220e5 bins: Release v0.1.52 (#3976)
• ed37530 build(deps): bump tokio (#3971)
• ffca391 tidy: support hermetic LLVM toolchains in clang-tidy aspect (#3970)
• Additional commits viewable in compare view

Updates envoyproxy/toolshed from 1f0251c to 5ad2e9b

Commits

• 5ad2e9b repo: Dev Actions v0.4.7-dev
• 0f75902 actions: Release v0.4.6 (#4010)
• 1f0251c actions: Prepare release v0.4.6 (#4009)
• 34d0ef5 actions/docker/cache/prime: Harden env var handling (#4008)
• 58c7e89 repo: Dev Bazel v0.3.33-dev
• f1e5ddf bazel: Release v0.3.32 (#3977)
• 71a092a repo: Dev Bins v0.1.53-dev
• 58220e5 bins: Release v0.1.52 (#3976)
• ed37530 build(deps): bump tokio (#3971)
• ffca391 tidy: support hermetic LLVM toolchains in clang-tidy aspect (#3970)
• Additional commits viewable in compare view

Updates actions/cache from 5.0.4 to 5.0.5

Release notes

Sourced from actions/cache's releases.

v5.0.5

What's Changed

• Update ts-http-runtime dependency by @​yacaovsnc in actions/cache#1747

Full Changelog: actions/cache@v5...v5.0.5

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

1. Switch to a new branch from main.
2. Run npm test to ensure all tests are passing.
3. Update the version in https://github.com/actions/cache/blob/main/package.json.
4. Run npm run build to update the compiled files.
5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
6. Run licensed cache to update the license report.
7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
8. Commit your changes and push your branch upstream.
9. Open a pull request against main and get it reviewed and merged.
10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

• Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
• Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
• Bump fast-xml-parser to v5.5.6

5.0.3

• Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
• Bump @actions/core to v2.0.3

5.0.2

• Bump @actions/cache to v5.0.3 #1692

5.0.1

• Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits

• 27d5ce7 Merge pull request #1747 from actions/yacaovsnc/update-dependency
• f280785 licensed changes
• 619aeb1 npm run build generated dist files
• bcf16c2 Update ts-http-runtime to 0.3.5
• See full diff in compare view

Updates envoyproxy/toolshed from 1f0251c to 5ad2e9b

Commits

• 5ad2e9b repo: Dev Actions v0.4.7-dev
• 0f75902 actions: Release v0.4.6 (#4010)
• 1f0251c actions: Prepare release v0.4.6 (#4009)
• 34d0ef5 actions/docker/cache/prime: Harden env var handling (#4008)
• 58c7e89 repo: Dev Bazel v0.3.33-dev
• f1e5ddf bazel: Release v0.3.32 (#3977)
• 71a092a repo: Dev Bins v0.1.53-dev
• 58220e5 bins: Release v0.1.52 (#3976)
• ed37530 build(deps): bump tokio (#3971)
• ffca391 tidy: support hermetic LLVM toolchains in clang-tidy aspect (#3970)
• Additional commits viewable in compare view

Updates actions/cache from 5.0.4 to 5.0.5

Release notes

Sourced from actions/cache's releases.

v5.0.5

What's Changed

• Update ts-http-runtime dependency by @​yacaovsnc in actions/cache#1747

Full Changelog: actions/cache@v5...v5.0.5

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

1. Switch to a new branch from main.
2. Run npm test to ensure all tests are passing.
3. Update the version in https://github.com/actions/cache/blob/main/package.json.
4. Run npm run build to update the compiled files.
5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
6. Run licensed cache to update the license report.
7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
8. Commit your changes and push your branch upstream.
9. Open a pull request against main and get it reviewed and merged.
10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

• Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
• Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
• Bump fast-xml-parser to v5.5.6

5.0.3

• Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
• Bump @actions/core to v2.0.3

5.0.2

• Bump @actions/cache to v5.0.3 #1692

5.0.1

• Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits

• 27d5ce7 Merge pull request #1747 from actions/yacaovsnc/update-dependency
• f280785 licensed changes
• 619aeb1 npm run build generated dist files
• bcf16c2 Update ts-http-runtime to 0.3.5
• See full diff in compare view

Updates envoyproxy/toolshed from 1f0251c to 5ad2e9b

Commits

• 5ad2e9b repo: Dev Actions v0.4.7-dev
• 0f75902 actions: Release v0.4.6 (#4010)
• 1f0251c actions: Prepare release v0.4.6 (#4009)
• 34d0ef5 actions/docker/cache/prime: Harden env var handling (#4008)
• 58c7e89 repo: Dev Bazel v0.3.33-dev
• f1e5ddf bazel: Release v0.3.32 (#3977)
• 71a092a repo: Dev Bins v0.1.53-dev
• 58220e5 bins: Release v0.1.52 (#3976)
• ed37530 build(deps): bump tokio (#3971)
• ffca391 tidy: support hermetic LLVM toolchains in clang-tidy aspect (#3970)
• Additional commits viewable in compare view

Updates envoyproxy/toolshed from 1f0251c to 5ad2e9b

Commits

• 5ad2e9b repo: Dev Actions v0.4.7-dev

[netlify]

✅ Deploy Preview for nifty-bassi-e26446 ready!

Name	Link
🔨 Latest commit	140702e
🔍 Latest deploy log	https://app.netlify.com/projects/nifty-bassi-e26446/deploys/69e02b24e43a6e00084837a6
😎 Deploy Preview	https://deploy-preview-4012--nifty-bassi-e26446.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml