Skip to content

Downgrade @actions/cache for now - #4194

Merged
mbg merged 2 commits into
mainfrom
mbg/dependency/downgrade-cache
Oct 2, 2026
Merged

mbg merged 2 commits into
mainfrom
mbg/dependency/downgrade-cache

Conversation

@mbg

@mbg mbg commented Oct 2, 2026

Copy link
Copy Markdown
Member

The version it was bumped to by #4182 is too new. This PR also adds min-release-age=7 to .npmrc.

@mbg
mbg requested a review from henrymercer October 2, 2026 16:17
@mbg
mbg requested a review from a team as a code owner October 2, 2026 16:17
@mbg
mbg added this pull request to stack #4195 October 2, 2026 16:17
Copilot AI balanced review requested due to automatic review settings October 2, 2026 16:17
@github-actions github-actions Bot added the size/XS Should be very easy to review label Oct 2, 2026
@mbg
mbg force-pushed the mbg/dependency/downgrade-cache branch from 4ed80b0 to 6ce88f6 Compare October 2, 2026 16:17

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Warning

  • Copilot's review of this pull request may be incomplete because some of the changed files are excluded by your Copilot content exclusion settings. See Excluding content from Copilot for details.

Copilot review overview

🟢 Approval recommended

The manifest and lockfile consistently implement the rollback, with no blocking issues in the reviewable changes.

Review effort: Balanced
Findings: None

What changed in this PR

Rolls back the cache dependency update from #4182 and adds a release-age safeguard for dependency resolution.

Changes:

  • Downgrades the locked @actions/cache version from 5.3.0 to 5.2.0.
  • Adds a seven-day minimum release age to npm configuration.
File Description
package.json Lowers the cache dependency range to ^5.2.0.
package-lock.json Locks cache to 5.2.0 and updates its dependency metadata.
.npmrc Adds min-release-age=7.
Files excluded by content exclusion policy (1)
  • lib/entry-points.js

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@mbg
mbg added this pull request to the merge queue Oct 2, 2026
Merged via the queue into main with commit 0cd78b3 Oct 2, 2026
233 checks passed
Base automatically changed from mbg/dependabot/uniform-cooldown to main October 2, 2026 16:44
@mbg
mbg deleted the mbg/dependency/downgrade-cache branch October 2, 2026 16:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/XS Should be very easy to review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants