［Historical PR］ chore（ci）: bump actions/cache from 5 to 6 #52

Historical pull request 44
Original state: merged
Originally created: 2026-06-29T12:34:11Z
Restored as documentation; authors, timestamps, and native events are not replayed.

Bumps ［actions/cache］（https：//github．com/actions/cache） from 5 to 6.
＜details＞
＜summary＞Release notes＜/summary＞
＜p＞＜em＞Sourced from ＜a href="https：//github．com/actions/cache/releases"＞actions/cache's releases＜/a＞.＜/em＞＜/p＞
＜blockquote＞
＜h2＞v6.0.0＜/h2＞
＜h2＞What's Changed＜/h2＞
＜ul＞
＜li＞Update packages, migrate to ESM by ＜a href="https：//github．com/Samirat"＞＜code＞＠Samirat＜/code＞＜/a＞ in ＜a href="https：//redirect．github．com/actions/cache/pull/1760"＞actions/cache＃1760＜/a＞＜/li＞
＜/ul＞
＜p＞＜strong＞Full Changelog＜/strong＞: ＜a href="https：//github．com/actions/cache/compare/v5...v6.0.0"＞https：//github．com/actions/cache/compare/v5...v6.0.0＜/a＞＜/p＞
＜h2＞v5.1.0＜/h2＞
＜h2＞What's Changed＜/h2＞
＜ul＞
＜li＞Bump ＜code＞＠actions/cache＜/code＞ to v5.1.0 - handle read-only cache access by ＜a href="https：//github．com/jasongin"＞＜code＞＠jasongin＜/code＞＜/a＞ in ＜a href="https：//redirect．github．com/actions/cache/pull/1775"＞actions/cache＃1775＜/a＞＜/li＞
＜/ul＞
＜p＞＜strong＞Full Changelog＜/strong＞: ＜a href="https：//github．com/actions/cache/compare/v5...v5.1.0"＞https：//github．com/actions/cache/compare/v5...v5.1.0＜/a＞＜/p＞
＜h2＞v5.0.5＜/h2＞
＜h2＞What's Changed＜/h2＞
＜ul＞
＜li＞Update ts-http-runtime dependency by ＜a href="https：//github．com/yacaovsnc"＞＜code＞＠yacaovsnc＜/code＞＜/a＞ in ＜a href="https：//redirect．github．com/actions/cache/pull/1747"＞actions/cache＃1747＜/a＞＜/li＞
＜/ul＞
＜p＞＜strong＞Full Changelog＜/strong＞: ＜a href="https：//github．com/actions/cache/compare/v5...v5.0.5"＞https：//github．com/actions/cache/compare/v5...v5.0.5＜/a＞＜/p＞
＜h2＞v5.0.4＜/h2＞
＜h2＞What's Changed＜/h2＞
＜ul＞
＜li＞Add release instructions and update maintainer docs by ＜a href="https：//github．com/Link"＞＜code＞＠Link＜/code＞＜/a＞- in ＜a href="https：//redirect．github．com/actions/cache/pull/1696"＞actions/cache＃1696＜/a＞＜/li＞
＜li＞Potential fix for code scanning alert no. 52: Workflow does not contain permissions by ＜a href="https：//github．com/Link"＞＜code＞＠Link＜/code＞＜/a＞- in ＜a href="https：//redirect．github．com/actions/cache/pull/1697"＞actions/cache＃1697＜/a＞＜/li＞
＜li＞Fix workflow permissions and cleanup workflow names / formatting by ＜a href="https：//github．com/Link"＞＜code＞＠Link＜/code＞＜/a＞- in ＜a href="https：//redirect．github．com/actions/cache/pull/1699"＞actions/cache＃1699＜/a＞＜/li＞
＜li＞docs: Update examples to use the latest version by ＜a href="https：//github．com/XZTDean"＞＜code＞＠XZTDean＜/code＞＜/a＞ in ＜a href="https：//redirect．github．com/actions/cache/pull/1690"＞actions/cache＃1690＜/a＞＜/li＞
＜li＞Fix proxy integration tests by ＜a href="https：//github．com/Link"＞＜code＞＠Link＜/code＞＜/a＞- in ＜a href="https：//redirect．github．com/actions/cache/pull/1701"＞actions/cache＃1701＜/a＞＜/li＞
＜li＞Fix cache key in examples.md for bun.lock by ＜a href="https：//github．com/RyPeck"＞＜code＞＠RyPeck＜/code＞＜/a＞ in ＜a href="https：//redirect．github．com/actions/cache/pull/1722"＞actions/cache＃1722＜/a＞＜/li＞
＜li＞Update dependencies & patch security vulnerabilities by ＜a href="https：//github．com/Link"＞＜code＞＠Link＜/code＞＜/a＞- in ＜a href="https：//redirect．github．com/actions/cache/pull/1738"＞actions/cache＃1738＜/a＞＜/li＞
＜/ul＞
＜h2＞New Contributors＜/h2＞
＜ul＞
＜li＞＜a href="https：//github．com/XZTDean"＞＜code＞＠XZTDean＜/code＞＜/a＞ made their first contribution in ＜a href="https：//redirect．github．com/actions/cache/pull/1690"＞actions/cache＃1690＜/a＞＜/li＞
＜li＞＜a href="https：//github．com/RyPeck"＞＜code＞＠RyPeck＜/code＞＜/a＞ made their first contribution in ＜a href="https：//redirect．github．com/actions/cache/pull/1722"＞actions/cache＃1722＜/a＞＜/li＞
＜/ul＞
＜p＞＜strong＞Full Changelog＜/strong＞: ＜a href="https：//github．com/actions/cache/compare/v5...v5.0.4"＞https：//github．com/actions/cache/compare/v5...v5.0.4＜/a＞＜/p＞
＜h2＞v5.0.3＜/h2＞
＜h2＞What's Changed＜/h2＞
＜ul＞
＜li＞Bump ＜code＞＠actions/cache＜/code＞ to v5.0.5 （Resolves: ＜a href="https：//github．com/actions/cache/security/dependabot/33"＞https：//github．com/actions/cache/security/dependabot/33＜/a＞）＜/li＞
＜li＞Bump ＜code＞＠actions/core＜/code＞ to v2.0.3＜/li＞
＜/ul＞
＜p＞＜strong＞Full Changelog＜/strong＞: ＜a href="https：//github．com/actions/cache/compare/v5...v5.0.3"＞https：//github．com/actions/cache/compare/v5...v5.0.3＜/a＞＜/p＞
＜h2＞v.5.0.2＜/h2＞
＜h1＞v5.0.2＜/h1＞
＜h2＞What's Changed＜/h2＞
＜！-- raw HTML omitted --＞
＜/blockquote＞
＜p＞... （truncated）＜/p＞
＜/details＞
＜details＞
＜summary＞Changelog＜/summary＞
＜p＞＜em＞Sourced from ＜a href="https：//github．com/actions/cache/blob/main/RELEASES.md"＞actions/cache's changelog＜/a＞.＜/em＞＜/p＞
＜blockquote＞
＜h1＞Releases＜/h1＞
＜h2＞How to prepare a release＜/h2＞
＜blockquote＞
＜p＞［！NOTE］
Relevant for maintainers with write access only.＜/p＞
＜/blockquote＞
＜ol＞
＜li＞Switch to a new branch from ＜code＞main＜/code＞.＜/li＞
＜li＞Run ＜code＞npm test＜/code＞ to ensure all tests are passing.＜/li＞
＜li＞Update the version in ＜a href="https：//github．com/actions/cache/blob/main/package.json"＞＜code＞https：//github．com/actions/cache/blob/main/package.json＜/code＞＜/a＞.＜/li＞
＜li＞Run ＜code＞npm run build＜/code＞ to update the compiled files.＜/li＞
＜li＞Update this ＜a href="https：//github．com/actions/cache/blob/main/RELEASES.md"＞＜code＞https：//github．com/actions/cache/blob/main/RELEASES.md＜/code＞＜/a＞ with the new version and changes in the ＜code＞＃＃ Changelog＜/code＞ section.＜/li＞
＜li＞Run ＜code＞licensed cache＜/code＞ to update the license report.＜/li＞
＜li＞Run ＜code＞licensed status＜/code＞ and resolve any warnings by updating the ＜a href="https：//github．com/actions/cache/blob/main/.licensed.yml"＞＜code＞https：//github．com/actions/cache/blob/main/.licensed.yml＜/code＞＜/a＞ file with the exceptions.＜/li＞
＜li＞Commit your changes and push your branch upstream.＜/li＞
＜li＞Open a pull request against ＜code＞main＜/code＞ and get it reviewed and merged.＜/li＞
＜li＞Draft a new release ＜a href="https：//github．com/actions/cache/releases"＞https：//github．com/actions/cache/releases＜/a＞ use the same version number used in ＜code＞package.json＜/code＞
＜ol＞
＜li＞Create a new tag with the version number.＜/li＞
＜li＞Auto generate release notes and update them to match the changes you made in ＜code＞RELEASES.md＜/code＞.＜/li＞
＜li＞Toggle the set as the latest release option.＜/li＞
＜li＞Publish the release.＜/li＞
＜/ol＞
＜/li＞
＜li＞Navigate to ＜a href="https：//github．com/actions/cache/actions/workflows/release-new-action-version.yml"＞https：//github．com/actions/cache/actions/workflows/release-new-action-version.yml＜/a＞
＜ol＞
＜li＞There should be a workflow run queued with the same version number.＜/li＞
＜li＞Approve the run to publish the new version and update the major tags for this action.＜/li＞
＜/ol＞
＜/li＞
＜/ol＞
＜h2＞Changelog＜/h2＞
＜h3＞6.1.0＜/h3＞
＜ul＞
＜li＞Bump ＜code＞＠actions/cache＜/code＞ to v6.1.0 to pick up ＜a href="https：//redirect．github．com/actions/toolkit/pull/2435"＞actions/toolkit＃2435 Handle cache write error due to read-only token＜/a＞＜/li＞
＜li＞Switch redundant "Cache save failed" warning to debug log in save-only＜/li＞
＜/ul＞
＜h3＞6.0.0＜/h3＞
＜ul＞
＜li＞Updated ＜code＞＠actions/cache＜/code＞ to ^6.0.1, ＜code＞＠actions/core＜/code＞ to ^3.0.1, ＜code＞＠actions/exec＜/code＞ to ^3.0.0, ＜code＞＠actions/io＜/code＞ to ^3.0.2＜/li＞
＜li＞Migrated to ESM module system＜/li＞
＜li＞Upgraded Jest to v30 and test infrastructure to be ESM compatible＜/li＞
＜/ul＞
＜h3＞5.0.4＜/h3＞
＜ul＞
＜li＞Bump ＜code＞minimatch＜/code＞ to v3.1.5 （fixes ReDoS via globstar patterns）＜/li＞
＜li＞Bump ＜code＞undici＜/code＞ to v6.24.1 （WebSocket decompression bomb protection, header validation fixes）＜/li＞
＜li＞Bump ＜code＞fast-xml-parser＜/code＞ to v5.5.6＜/li＞
＜/ul＞
＜h3＞5.0.3＜/h3＞
＜ul＞
＜li＞Bump ＜code＞＠actions/cache＜/code＞ to v5.0.5 （Resolves: ＜a href="https：//github．com/actions/cache/security/dependabot/33"＞https：//github．com/actions/cache/security/dependabot/33＜/a＞）＜/li＞
＜li＞Bump ＜code＞＠actions/core＜/code＞ to v2.0.3＜/li＞
＜/ul＞
＜h3＞5.0.2＜/h3＞
＜！-- raw HTML omitted --＞
＜/blockquote＞
＜p＞... （truncated）＜/p＞
＜/details＞
＜details＞
＜summary＞Commits＜/summary＞
＜ul＞
＜li＞＜a href="https：//github．com/actions/cache/commit/５５ｃｃ８３４５８６３ｃ７ｃｃ４ｃ６６ａ３２９ａｅｃ７ｅ４３３ｄ２ｄ１ｃ５２ａ９"＞＜code＞５５ｃｃ８３４＜/code＞＜/a＞ Merge pull request ＜a href="https：//redirect．github．com/actions/cache/issues/1768"＞＃1768＜/a＞ from jasongin/readonly-cache＜/li＞
＜li＞＜a href="https：//github．com/actions/cache/commit/ｄ８ｃｄ７２ｆ２３０７２６ｃｄｆ４４５７ｅｂｂ６１ｅｃ１ｂ５９３ａ８ｄ１２３３７"＞＜code＞ｄ８ｃｄ７２ｆ＜/code＞＜/a＞ Bump ＜code＞＠actions/cache＜/code＞ to v6.1.0 - handle cache write error due to RO token＜/li＞
＜li＞＜a href="https：//github．com/actions/cache/commit/２ｃ８ａ９ｂｄ７４５７ｄｅ２４４ａ４０８ｆ３５９６６ｆａｂ２ｆｂ４５ｆｄａ９ｃ８"＞＜code＞２ｃ８ａ９ｂｄ＜/code＞＜/a＞ Merge pull request ＜a href="https：//redirect．github．com/actions/cache/issues/1760"＞＃1760＜/a＞ from actions/samirat/esm＿migration＿and＿package＿update＜/li＞
＜li＞＜a href="https：//github．com/actions/cache/commit/ｅ９ｂ９１ｆｄｃ３ｆｅａ７ｄ７９１６５ｆｃｅｂ７９０４２ｅｆ４５ｃ２ｄ５１０２３"＞＜code＞ｅ９ｂ９１ｆｄ＜/code＞＜/a＞ Prettier fixes＜/li＞
＜li＞＜a href="https：//github．com/actions/cache/commit/ｅ４８８４ｂ８ｆｆ７ｆ９２ｅｆ６ｂ５２ｃ７９ｅｄａ４８０ｂｂｃ８６ｅ６８５ａｄｂ"＞＜code＞ｅ４８８４ｂ８＜/code＞＜/a＞ Rebuild dist＜/li＞
＜li＞＜a href="https：//github．com/actions/cache/commit/１０ｂａｆ０１９１ａ３ｃ４２６ｅａ０ｆａ４ａ３２５３ａ５ｃ０４２３３ｂ６ｅ１８ｆ"＞＜code＞１０ｂａｆ０１＜/code＞＜/a＞ Fixed licenses＜/li＞
＜li＞＜a href="https：//github．com/actions/cache/commit/ｅ３９ｂ３８６ｃ９００４ｄ７２ａ１５ｄ８６４ａｄｅ８ｃ０ｂ３ａ７０２ｄ４７ａ３７"＞＜code＞ｅ３９ｂ３８６＜/code＞＜/a＞ Fix test mock return order＜/li＞
＜li＞＜a href="https：//github．com/actions/cache/commit/ｂ６９２８２０３３７２ａ８５７１ｆｆ９８４ｃ０ｃ８８３ｅｆ３ａ１ａｄｆｂ０ｃ０６"＞＜code＞ｂ６９２８２０＜/code＞＜/a＞ PR feedback＜/li＞
＜li＞＜a href="https：//github．com/actions/cache/commit/６０７４９１２８ａ４４ｄ２５ｄ３ｃ５２０ａ４８９ｅ５７６３８０ｃｆ００ｆｆ３ｆ１"＞＜code＞６０７４９１２＜/code＞＜/a＞ Rebuild dist bundles as ESM to match type:module＜/li＞
＜li＞＜a href="https：//github．com/actions/cache/commit/５ａ９１２ｅ８ｂ４ａｆ８２０ｆａ０８２ａ０ｅ７５ｃｆｄ２ｃ７８２ｆ８ｆｂｆｅ０ｅ"＞＜code＞５ａ９１２ｅ８＜/code＞＜/a＞ Fix lint and jest issues＜/li＞
＜li＞Additional commits viewable in ＜a href="https：//github．com/actions/cache/compare/v5...v6"＞compare view＜/a＞＜/li＞
＜/ul＞
＜/details＞
＜br /＞

［！［Dependabot compatibility score］（https：//dependabot-badges.githubapp.com/badges/compatibility＿score?dependency-name=actions/cache&package-manager=github＿actions&previous-version=5&new-version=6）］（https：//docs．github．com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates＃about-compatibility-scores）

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting ｀＠dependabot rebase｀.

［//］: ＃ （dependabot-automerge-start）
［//］: ＃ （dependabot-automerge-end）

＜details＞
＜summary＞Dependabot commands and options＜/summary＞
＜br /＞

You can trigger Dependabot actions by commenting on this PR:

• ｀＠dependabot rebase｀ will rebase this PR
• ｀＠dependabot recreate｀ will recreate this PR, overwriting any edits that have been made to it
• ｀＠dependabot show ＜dependency name＞ ignore conditions｀ will show all of the ignore conditions of the specified dependency
• ｀＠dependabot ignore this major version｀ will close this PR and stop Dependabot creating any more for this major version （unless you reopen the PR or upgrade to it yourself）
• ｀＠dependabot ignore this minor version｀ will close this PR and stop Dependabot creating any more for this minor version （unless you reopen the PR or upgrade to it yourself）
• ｀＠dependabot ignore this dependency｀ will close this PR and stop Dependabot creating any more for this dependency （unless you reopen the PR or upgrade to it yourself）

＜/details＞