Update actions/cache action to v6

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	major	v5 → v6

---

Release Notes

actions/cache (actions/cache)

v6.0.0

Compare Source

What's Changed

• Update packages, migrate to ESM by @​Samirat in #​1760

Full Changelog: actions/cache@v5...v6.0.0

v6

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

📝 Walkthrough

Walkthrough

Two GitHub Actions configuration files are updated to reference actions/cache@v6 instead of actions/cache@v5: the composite artifact-cache action step and the pip cache step in the agents-auto-pilot workflow. No other logic, inputs, outputs, or conditions are changed.

Changes

Cache Action Version Bump

Layer / File(s)	Summary
Bump actions/cache from v5 to v6 .github/actions/artifact-cache/action.yml, .github/workflows/agents-auto-pilot.yml	The uses: reference for the cache restore step and the pip cache step are each updated from actions/cache@v5 to actions/cache@v6.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Suggested reviewers

• stranske

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'Update actions/cache action to v6' directly summarizes the main change—upgrading the GitHub Actions cache action from v5 to v6 across multiple workflow files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/actions-cache-6.x

---

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/workflows/agents-auto-pilot.yml:
- Line 225: The change to the actions/cache version in the agents-auto-pilot.yml
file should not be made directly in this consumer repository. This file is part
of a synced workflow pattern that is managed from the source repository
stranske/Workflows. Revert the change to the actions/cache action version in
this file and instead make the same update in the stranske/Workflows repository.
This ensures the change propagates correctly through the sync mechanism and
prevents the sync process from overwriting your changes.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: b0fba914-a22e-45da-840b-2def3ef6aa20

📥 Commits

Reviewing files that changed from the base of the PR and between 3bb53a5 and 3051b81.

📒 Files selected for processing (2)

• .github/actions/artifact-cache/action.yml
• .github/workflows/agents-auto-pilot.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)
• stranske/Template (auto-detected)

📜 Review details

⏰ Context from checks skipped due to timeout. (1)

• GitHub Check: Config Coverage Check

🧰 Additional context used

📓 Path-based instructions (4)

{pyproject.toml,.github/workflows/**/*.{yml,yaml}}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

Check both pyproject.toml ([tool.coverage.report] fail_under) AND workflow files for coverage-min settings - these must match or the lower one wins

Files:

• .github/workflows/agents-auto-pilot.yml

.github/workflows/**/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

For startup_failure GitHub Actions workflow errors with zero jobs, check for common causes: Invalid YAML syntax, top-level permissions: block on workflow_call reusable workflows (conflicts with caller permissions), invalid permission scopes, or circular workflow references

Files:

• .github/workflows/agents-auto-pilot.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

Reference reusable workflows in .github/workflows/*.yml files with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/agents-auto-pilot.yml

{.github/workflows/agents-*.yml,.github/workflows/autofix.yml,.github/codex/**/*}

📄 CodeRabbit inference engine (CLAUDE.md)

Synced workflows (agents-*.yml, autofix.yml), prompts in .github/codex/, and synced scripts/docs should be fixed in stranske/Workflows source, not locally in the consumer repo

Files:

• .github/workflows/agents-auto-pilot.yml

🔀 Multi-repo context stranske/Workflows, stranske/Template

Perfect! I now have enough context to provide a comprehensive analysis. Let me summarize my findings:

Linked repositories findings

stranske/Workflows [::stranske/Workflows::]

Direct consumers of actions/cache that need updating:

1. .github/actions/artifact-cache/action.yml:62 — The shared composite action uses actions/cache@v5 in the "Restore artifact cache" step. This is a critical dependency used by multiple workflows.

2. .github/workflows/agents-auto-pilot.yml:225 — Uses actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5 for the pip cache step (LLM requirements).

3. Multiple other workflow files also depend on actions/cache@v5:

   • .github/workflows/health-42-actionlint.yml:87, 106
   • .github/workflows/maint-52-validate-workflows.yml:27
   • .github/workflows/reusable-10-ci-python.yml:470, 872, 1193, 1406, 1547, 1853, 1867
   • .github/workflows/reusable-agents-verifier.yml:670, 979

4. Template copy: ./templates/consumer-repo/.github/actions/artifact-cache/action.yml:62 — Uses actions/cache@v5 and will need the same update.

5. Version management workflow: .github/workflows/maint-sync-action-versions.yml — This workflow automatically detects and syncs action versions (including actions/cache) across templates. The PR's updates should be compatible with this automation.

stranske/Template [::stranske/Template::]

Corresponding locations that mirror the Workflows repo:

1. .github/actions/artifact-cache/action.yml:62 — Uses actions/cache@v5 in the "Restore artifact cache" step.

2. .github/workflows/agents-auto-pilot.yml:225 — Uses the same actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5 for pip caching.

Synchronization Note: The Template repository mirrors the Workflows repository's configuration. After this PR is merged to Workflows, the Template repository may need similar updates to stay in sync, potentially via the maint-sync-action-versions.yml workflow.

---

🔇 Additional comments (1)

.github/actions/artifact-cache/action.yml (1)

62-62: LGTM!

[coderabbitai]

📐 Maintainability & Code Quality | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "Repo remote(s):"
git remote -v | sed -n '1,4p'

echo
echo "Current repository slug (if origin is GitHub):"
origin_url="$(git remote get-url origin 2>/dev/null || true)"
echo "$origin_url"
slug="$(printf '%s' "$origin_url" | sed -E 's#(git@github.com:|https://github.com/)([^/]+/[^/.]+)(\.git)?#\2#')"
echo "parsed_slug=$slug"

echo
if [ "$slug" = "stranske/Workflows" ]; then
  echo "OK: This appears to be the source repo."
else
  echo "NOT SOURCE: If this is a synced consumer, move the change to stranske/Workflows."
fi

Repository: stranske/Trend_Model_Project

Length of output: 550

---

Move this change to stranske/Workflows.

This file is part of the synced agents-*.yml workflow pattern. Per coding guidelines, synced workflows must be edited in stranske/Workflows (source repo), not in consumer repos like this one, to prevent sync overwrites.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.github/workflows/agents-auto-pilot.yml at line 225, The change to the
actions/cache version in the agents-auto-pilot.yml file should not be made
directly in this consumer repository. This file is part of a synced workflow
pattern that is managed from the source repository stranske/Workflows. Revert
the change to the actions/cache action version in this file and instead make the
same update in the stranske/Workflows repository. This ensures the change
propagates correctly through the sync mechanism and prevents the sync process
from overwriting your changes.

Source: Coding guidelines

[stranske]

Closing as superseded: superseded by stranske/Workflows#2520, which updates actions/cache v6 in the Workflows source/template before Maint 68 syncs consumers. Direct consumer PRs for synced workflow files would create ownership drift; the replacement should come from the Workflows source PR and the next Maint 68 sync wave.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 6.x releases. But if you manually upgrade to 6.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.