chore(deps): bump Swatinem/rust-cache from e18b497796c12c097a38f9edb9d0641fb99eee32 to f0d9c3887740aee45f6153b24b3a6b815192ec16 - #50
Conversation
Bumps [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) from e18b497796c12c097a38f9edb9d0641fb99eee32 to f0d9c3887740aee45f6153b24b3a6b815192ec16. - [Release notes](https://github.com/swatinem/rust-cache/releases) - [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md) - [Commits](Swatinem/rust-cache@e18b497...f0d9c38) --- updated-dependencies: - dependency-name: Swatinem/rust-cache dependency-version: f0d9c3887740aee45f6153b24b3a6b815192ec16 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
Thermos review
No medium, high, or critical findings.
Dependabot one-line pin of Swatinem/rust-cache e18b497 → f0d9c388 in .github/workflows/ci.yml. Both SHAs are verified on the upstream repo. The new pin is 2.9.2 (node24, rollup dist/restore.js / dist/save.js, files present) plus a post-tag cleanup fix (#377: timestamp prune now checks every entry). This workflow uses defaults (cache-provider: github, no with:). Not a cargo-dist dual source of truth.
CI ci passed (restore + post-save + just ci). Release plan passed. No prior review threads.
Below-medium / not blocking: the # v2.7.8 comment was already stale on main; the pin is an untagged master tip past v2.9.2, same Dependabot SHA style as the previous pin.
Sent by Cursor Automation: Find vulnerabilities
Bumps Swatinem/rust-cache from e18b497796c12c097a38f9edb9d0641fb99eee32 to f0d9c3887740aee45f6153b24b3a6b815192ec16.
Changelog
Sourced from Swatinem/rust-cache's changelog.
... (truncated)
Commits
f0d9c38Merge pull request #380 from Swatinem/dependabot/github_actions/actions-8ff58...ccd9742Bump the actions group with 2 updates258712bfix: stop cleanup timestamp pruning after the first entry (#377)a45951fMerge pull request #373 from Swatinem/dependabot/github_actions/actions-420be...b882611Bump the actions group with 2 updates6323deb2.9.2b16e8d7bump rollup and rebuild3bf42acinvert target/profile check in cleanup6e5b278correctly sort and dedupe Rust versions5adc05fBump the actions group across 1 directory with 3 updates (#368)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)