Skip to content

fix(deps): update dependency @actions/tool-cache to v4#545

Merged
EricCrosson merged 3 commits intomasterfrom
renovate/actions-tool-cache-4.x
Apr 21, 2026
Merged

fix(deps): update dependency @actions/tool-cache to v4#545
EricCrosson merged 3 commits intomasterfrom
renovate/actions-tool-cache-4.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Jan 30, 2026

This PR contains the following updates:

Package Change Age Confidence
@actions/tool-cache (source) 2.0.24.0.0 age confidence

Release Notes

actions/toolkit (@​actions/tool-cache)

v4.0.0

  • Breaking change: Package is now ESM-only
    • CommonJS consumers must use dynamic import() instead of require()
3.0.1
  • Bump @actions/http-client to 3.0.2
3.0.0
  • Update to v2.0.1 of @actions/core
  • Update to v2.0.0 of @actions/exec
  • Update to v3.0.1 of @actions/http-client
  • Update to v2.0.0 of @actions/io
2.0.2
2.0.1
  • Update to v2.0.1 of @actions/http-client #​1087
2.0.0
  • Update to v2.0.0 of @actions/http-client
  • The type of the headers parameter in the exported function downloadTool has been narrowed from { [header: string]: any } to { [header: string]: number | string | string[] | undefined; } (that is, http.OutgoingHttpHeaders).
    This is strictly a compile-time change for TypeScript consumers. Previous attempts to use a header value of a type other than those now accepted would have resulted in an error at run time.
1.7.2
  • Update lockfileVersion to v2 in package-lock.json #​1025
1.7.1
1.7.0
1.6.1
1.6.0
1.3.5
1.3.4

Here is the security issue that was fixed in the http-client 1.0.8 release

1.3.3
1.3.2
1.3.1
1.3.0
1.2.0
1.1.2
1.0.0
  • Initial release

v3.0.1

  • Bump @actions/http-client to 3.0.2

v3.0.0

  • Update to v2.0.1 of @actions/core
  • Update to v2.0.0 of @actions/exec
  • Update to v3.0.1 of @actions/http-client
  • Update to v2.0.0 of @actions/io

Configuration

📅 Schedule: (in timezone America/Chicago)

  • Branch creation
    • "after 10pm every weekday,before 5am every weekday,every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/actions-tool-cache-4.x branch from 0dcaa59 to 6605d7d Compare January 31, 2026 08:25
@renovate renovate Bot force-pushed the renovate/actions-tool-cache-4.x branch 2 times, most recently from f5f522e to bab00ae Compare February 19, 2026 09:07
@renovate renovate Bot force-pushed the renovate/actions-tool-cache-4.x branch from bab00ae to bc587b3 Compare March 5, 2026 14:32
@renovate renovate Bot force-pushed the renovate/actions-tool-cache-4.x branch from bc587b3 to 9f42530 Compare March 13, 2026 17:43
@renovate renovate Bot force-pushed the renovate/actions-tool-cache-4.x branch from 9f42530 to 9b57af8 Compare April 8, 2026 20:10
@EricCrosson
Copy link
Copy Markdown
Owner

@dependabot rebase

@renovate renovate Bot force-pushed the renovate/actions-tool-cache-4.x branch from 9b57af8 to 45cf1d2 Compare April 21, 2026 11:03
@EricCrosson EricCrosson force-pushed the renovate/actions-tool-cache-4.x branch from 45cf1d2 to 1b11c0b Compare April 21, 2026 11:32
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Apr 21, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate Bot and others added 3 commits April 21, 2026 06:35
The flake was pinned to a 2023 nixpkgs revision that did not expose
nodejs_24, so matching the repo's Node 24 runtime required both a
newer nixpkgs lock revision and a compatible pre-commit-hooks input.

This keeps the dev shell aligned with CI and removes the stale
pre-commit-hooks flake-utils override that no longer applies to the
updated input.
GitHub Actions was failing at tsc --noEmit because TypeScript was not
loading the Node ambient types, so node:* imports and NodeJS
references were reported as missing.

Regenerating dist/index.js on top of origin/master also updates the
checked-in action bundle for the @actions/tool-cache v4 dependency
bump so the shipped action matches the rebased source tree.
@EricCrosson EricCrosson force-pushed the renovate/actions-tool-cache-4.x branch from 1b11c0b to 36552ec Compare April 21, 2026 11:35
@EricCrosson EricCrosson merged commit 030d957 into master Apr 21, 2026
1 check passed
@EricCrosson EricCrosson deleted the renovate/actions-tool-cache-4.x branch April 21, 2026 11:35
@github-actions
Copy link
Copy Markdown

🎉 This PR is included in version 2.5.18 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant