Update actions/cache action from vv4.3.0 to v5 - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/cache	action	major	v4 → v5	v6.1.0 (+3)

---

Release Notes

actions/cache (actions/cache)

v5.0.5

Compare Source

What's Changed

• Update ts-http-runtime dependency by @​yacaovsnc in #​1747

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

Compare Source

What's Changed

• Add release instructions and update maintainer docs by @​Link- in #​1696
• Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @​Link- in #​1697
• Fix workflow permissions and cleanup workflow names / formatting by @​Link- in #​1699
• docs: Update examples to use the latest version by @​XZTDean in #​1690
• Fix proxy integration tests by @​Link- in #​1701
• Fix cache key in examples.md for bun.lock by @​RyPeck in #​1722
• Update dependencies & patch security vulnerabilities by @​Link- in #​1738

New Contributors

• @​XZTDean made their first contribution in #​1690
• @​RyPeck made their first contribution in #​1722

Full Changelog: actions/cache@v5...v5.0.4

v5.0.3

Compare Source

What's Changed

• Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
• Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

v5.0.2: v.5.0.2

Compare Source

v5.0.2

What's Changed

When creating cache entries, 429s returned from the cache service will not be retried.

v5.0.1

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

---

v5.0.1

What's Changed

• fix: update @​actions/cache for Node.js 24 punycode deprecation by @​salmanmkc in #​1685
• prepare release v5.0.1 by @​salmanmkc in #​1686

v5.0.0

What's Changed

• Upgrade to use node24 by @​salmanmkc in #​1630
• Prepare v5.0.0 release by @​salmanmkc in #​1684

Full Changelog: actions/cache@v5...v5.0.1

v5.0.0

Compare Source

[!IMPORTANT]
actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

---

What's Changed

• Upgrade to use node24 by @​salmanmkc in #​1630
• Prepare v5.0.0 release by @​salmanmkc in #​1684

Full Changelog: actions/cache@v4.3.0...v5.0.0

v5

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Docker Scan - Alert(s) found with threshold matching severity high

Results

• critical: 1
• high: 0
• medium: 4
• low: 0

Docker Scan Report can be found here

Allowlist

Use the allowlist if you want to ignore vulnerabilities that do not affect the repository.
See the Docker Scan documentation on how to use allowlist.

[github-actions]

Docker Scan - Alert(s) found with threshold matching severity high

Results

• critical: 0
• high: 2
• medium: 4
• low: 0

Docker Scan Report can be found here

Allowlist

Use the allowlist if you want to ignore vulnerabilities that do not affect the repository.
See the Docker Scan documentation on how to use allowlist.

[github-actions]

📄 Terraform Plan PRD

Plan: 10 to add, 0 to change, 0 to destroy. 

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
 + create

Terraform will perform the following actions:

 # google_pubsub_subscription.kafka-stopplace-changelog-subscription will be created
 + resource "google_pubsub_subscription" "kafka-stopplace-changelog-subscription" {
     + ack_deadline_seconds       = (known after apply)
     + id                         = (known after apply)
     + labels                     = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + message_retention_duration = "604800s"
     + name                       = "KafkaStopPlaceChangelog"
     + project                    = "ent-irkalla-prd"
     + topic                      = "KafkaStopPlaceChangelog"
   }

 # google_pubsub_subscription.stopplace-delete-queue-subscription will be created
 + resource "google_pubsub_subscription" "stopplace-delete-queue-subscription" {
     + ack_deadline_seconds       = (known after apply)
     + id                         = (known after apply)
     + labels                     = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + message_retention_duration = "604800s"
     + name                       = "ChouetteStopPlaceDeleteQueue"
     + project                    = "ent-irkalla-prd"
     + topic                      = "ChouetteStopPlaceDeleteQueue"
   }

 # google_pubsub_subscription.stopplace-sync-queue-subscription will be created
 + resource "google_pubsub_subscription" "stopplace-sync-queue-subscription" {
     + ack_deadline_seconds       = (known after apply)
     + id                         = (known after apply)
     + labels                     = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + message_retention_duration = "604800s"
     + name                       = "ChouetteStopPlaceSyncQueue"
     + project                    = "ent-irkalla-prd"
     + topic                      = "ChouetteStopPlaceSyncQueue"
   }

 # google_pubsub_subscription.tiamat-changelog-subscription will be created
 + resource "google_pubsub_subscription" "tiamat-changelog-subscription" {
     + ack_deadline_seconds       = (known after apply)
     + id                         = (known after apply)
     + message_retention_duration = "604800s"
     + name                       = "ror.tiamat.changelog"
     + project                    = "ent-irkalla-prd"
     + topic                      = "projects/ent-tiamat-prd/topics/ror.tiamat.changelog"
   }

 # google_pubsub_topic.kafka-stopplace-changelog-topic will be created
 + resource "google_pubsub_topic" "kafka-stopplace-changelog-topic" {
     + id      = (known after apply)
     + labels  = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + name    = "KafkaStopPlaceChangelog"
     + project = "ent-irkalla-prd"
   }

 # google_pubsub_topic.kafka-stopplace-delete-queue will be created
 + resource "google_pubsub_topic" "kafka-stopplace-delete-queue" {
     + id      = (known after apply)
     + labels  = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + name    = "KafkaStopPlaceDeleteQueue"
     + project = "ent-irkalla-prd"
   }

 # google_pubsub_topic.stopplace-delete-queue will be created
 + resource "google_pubsub_topic" "stopplace-delete-queue" {
     + id      = (known after apply)
     + labels  = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + name    = "ChouetteStopPlaceDeleteQueue"
     + project = "ent-irkalla-prd"
   }

 # google_pubsub_topic.stopplace-sync-queue will be created
 + resource "google_pubsub_topic" "stopplace-sync-queue" {
     + id      = (known after apply)
     + labels  = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + name    = "ChouetteStopPlaceSyncQueue"
     + project = "ent-irkalla-prd"
   }

 # google_storage_bucket.storage_bucket will be created
 + resource "google_storage_bucket" "storage_bucket" {
     + force_destroy               = false
     + id                          = (known after apply)
     + labels                      = {
         + "app"     = "irkalla"
         + "manager" = "terraform"
         + "slack"   = "talk-ror"
         + "team"    = "ror"
       }
     + location                    = "EUROPE-WEST1"
     + name                        = "ror-irkalla-prd"
     + project                     = "ent-irkalla-prd"
     + public_access_prevention    = (known after apply)
     + self_link                   = (known after apply)
     + storage_class               = "REGIONAL"
     + uniform_bucket_level_access = true
     + url                         = (known after apply)

     + logging {
         + log_bucket        = "false"
         + log_object_prefix = "ror-irkalla-prd"
       }

     + versioning {
         + enabled = true
       }
   }

 # google_storage_bucket_object.content_folder will be created
 + resource "google_storage_bucket_object" "content_folder" {
     + bucket         = "ror-irkalla-prd"
     + content        = (sensitive value)
     + content_type   = (known after apply)
     + crc32c         = (known after apply)
     + detect_md5hash = "different hash"
     + id             = (known after apply)
     + kms_key_name   = (known after apply)
     + md5hash        = (known after apply)
     + media_link     = (known after apply)
     + name           = "StopPlace/"
     + output_name    = (known after apply)
     + self_link      = (known after apply)
     + storage_class  = (known after apply)
   }

Plan: 10 to add, 0 to change, 0 to destroy.

View full plan

[github-actions]

Docker Scan - Alert(s) found with threshold matching severity high

Results

• critical: 0
• high: 2
• medium: 6
• low: 3

Docker Scan Report can be found here

Allowlist

Use the allowlist if you want to ignore vulnerabilities that do not affect the repository.
See the Docker Scan documentation on how to use allowlist.