ci: bump actions/cache from 4 to 5#30
Conversation
Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v4...v5) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
roam-code AnalysisMode: incremental ( Health Score: 80/100 health: Healthy codebase (80/100) — 33 critical issues, focus: god_components Health Metrics
PR Risk
Quality Gate: PASSEDGate expression: SARIF Upload
Full analysis outputhealth{
"_meta": {
"cache_ttl_s": 300,
"cacheable": true,
"index_age_s": 1,
"latency_ms": null,
"response_tokens": 3923,
"timestamp": "2026-05-11T16:32:58Z"
},
"actionable_count": 6,
"actionable_cycles": 0,
"algebraic_connectivity": 0,
"bottleneck_thresholds": {
"p70": 537,
"p90": 1504.5,
"population": 467,
"utility_multiplier": 1.5
},
"category_severity": {
"bottlenecks": {
"CRITICAL": 15,
"INFO": 0,
"WARNING": 0
},
"cycles": {
"CRITICAL": 0,
"INFO": 0,
"WARNING": 0
},
"god_components": {
"CRITICAL": 18,
"INFO": 23,
"WARNING": 9
},
"layer_violations": {
"CRITICAL": 0,
"INFO": 0,
"WARNING": 0
}
},
"command": "health",
"framework_filtered": 0,
"health_score": 80,
"ignored_cycles": 18,
"imported_coverable_lines": 0,
"imported_coverage_files": 0,
"imported_coverage_pct": null,
"imported_covered_lines": 0,
"index_status": {
"dirty_files": 0,
"fresh": false,
"head_commit": "00d0a52dbb07",
"hint": "index latest commit 603e6bb729ec != HEAD 00d0a52dbb07 — git-derived metrics (commits, churn, co-change, weather) may be stale. Run `roam index --force`.",
"indexed_commit": "603e6bb729ec"
},
"issue_count": 65,
"project": "roam-code",
"propagation_cost": 0.0005,
"schema": "roam-envelope-v1",
"schema_version": "1.1.0",
"severity": {
"CRITICAL": 33,
"INFO": 41,
"WARNING": 9
},
"summary": {
"actionable_cycles": 0,
"algebraic_connectivity": 0,
"category_severity": {
"bottlenecks": {
"CRITICAL": 15,
"INFO": 0,
"WARNING": 0
},
"cycles": {
"CRITICAL": 0,
"INFO": 0,
"WARNING": 0
},
"god_components": {
"CRITICAL": 18,
"INFO": 23,
"WARNING": 9
},
"layer_violations": {
"CRITICAL": 0,
"INFO": 0,
"WARNING": 0
}
},
"detail_available": true,
"health_score": 80,
"ignored_cycles": 18,
"imported_coverage_files": 0,
"imported_coverage_pct": null,
"issue_count": 65,
"propagation_cost": 0.0005,
"severity": {
"CRITICAL": 33,
"INFO": 41,
"WARNING": 9
},
"tangle_ratio": 0,
"truncated": true,
"verdict": "Healthy codebase (80/100) — 33 critical issues, focus: god_components"
},
"tangle_ratio": 0,
"total_cycles": 18,
"utility_count": 44,
"version": "12.50"
}pr-risk{
"_meta": {
"cache_ttl_s": 60,
"cacheable": true,
"index_age_s": 2,
"latency_ms": null,
"response_tokens": 360,
"timestamp": "2026-05-11T16:32:59Z"
},
"author": null,
"blast_radius_pct": 0,
"bus_factor_risk": 0,
"change_shape": "mixed",
"changed_files": 1,
"closest_historical_pattern": null,
"closest_similarity": 0,
"cluster_spread": 0,
"clusters_touched": 4,
"command": "pr-risk",
"coupling_score": 0,
"dead_code": [],
"dead_exports": 0,
"familiarity": {
"avg_familiarity": 1,
"files": [],
"files_assessed": 0
},
"hotspot_score": 0,
"label": "8e44f3e0d60ebe3429ff78b3429d36b7a7f463aa..HEAD",
"layer_spread": 0.08,
"layers_touched": 1,
"lines_added": 2,
"lines_removed": 2,
"minor_risk": {
"files": [],
"files_assessed": 0,
"minor_files": 0
},
"novelty_score": 0,
"per_file": [
{
"blast": 0,
"churn": 746,
"is_test": false,
"lines_added": 2,
"lines_removed": 2,
"path": "action.yml",
"symbols": 4
}
],
"project": "roam-code",
"reductive_change": false,
"reductive_discount_applied": false,
"risk_level": "MODERATE",
"risk_score": 30,
"schema": "roam-envelope-v1",
"schema_version": "1.1.0",
"suggested_reviewers": [
{
"author": "Cranot",
"lines": 649
},
{
"author": "dependabot[bot]",
"lines": 2
}
],
"summary": {
"change_shape": "mixed",
"changed_files": 1,
"lines_added": 2,
"lines_removed": 2,
"risk_level": "MODERATE",
"risk_score": 30,
"verdict": "Moderate risk (30/100) — review recommended (driver: test_coverage_low)"
},
"test_coverage_pct": 0,
"total_clusters": 9769,
"total_layers": 13,
"version": "12.50"
}roam-code analysis | Commands: |
Roam Agent ReviewVerdict: SAFE blast-radius 0/100 · ai-likelihood 14/100 · rule violations 0 · critique high-severity 0 Verdict: SAFE. All structural signals clean at the configured thresholds. Next steps
Powered by roam-code — Apache 2.0, 100% local. Customize thresholds in |
Bumps actions/cache from 4 to 5.
Release notes
Sourced from actions/cache's releases.
... (truncated)
Changelog
Sourced from actions/cache's changelog.
... (truncated)
Commits
27d5ce7Merge pull request #1747 from actions/yacaovsnc/update-dependencyf280785licensed changes619aeb1npm run build generated dist filesbcf16c2Update ts-http-runtime to 0.3.56682284Merge pull request #1738 from actions/prepare-v5.0.4e340396Update RELEASES8a67110Add licenses1865903Update dependencies & patch security vulnerabilities5656298Merge pull request #1722 from RyPeck/patch-14e380d1Fix cache key in examples.md for bun.lockDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)