Skip to content

ci: bump actions/cache/restore from 4.3.0 to 6.1.0 - #5

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/cache/restore-6.1.0
Open

ci: bump actions/cache/restore from 4.3.0 to 6.1.0#5
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/cache/restore-6.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown

Bumps actions/cache/restore from 4.3.0 to 6.1.0.

Release notes

Sourced from actions/cache/restore's releases.

v6.1.0

What's Changed

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

What's Changed

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

What's Changed

Full Changelog: actions/cache@v5...v5.1.0

v5.0.5

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

What's Changed

New Contributors

Full Changelog: actions/cache@v5...v5.0.4

v5.0.3

What's Changed

... (truncated)

Changelog

Sourced from actions/cache/restore's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

6.0.0

  • Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2
  • Migrated to ESM module system
  • Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

  • Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
  • Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
  • Bump fast-xml-parser to v5.5.6

5.0.3

5.0.2

... (truncated)

Commits
  • 55cc834 Merge pull request #1768 from jasongin/readonly-cache
  • d8cd72f Bump @​actions/cache to v6.1.0 - handle cache write error due to RO token
  • 2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
  • e9b91fd Prettier fixes
  • e4884b8 Rebuild dist
  • 10baf01 Fixed licenses
  • e39b386 Fix test mock return order
  • b692820 PR feedback
  • 6074912 Rebuild dist bundles as ESM to match type:module
  • 5a912e8 Fix lint and jest issues
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/cache/restore](https://github.com/actions/cache) from 4.3.0 to 6.1.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@0057852...55cc834)

---
updated-dependencies:
- dependency-name: actions/cache/restore
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: ci, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Ttimmahlax pushed a commit that referenced this pull request Aug 20, 2026
…62 -> 132.00 (-20.62 Ir/op)

The public zalloc/calloc did malloc(size) then zero_block(p, is_zero), and
zero_block's non-zero arm (taken on every RECYCLED block, i.e. the steady calloc
churn path) called usable_size(p): mask to the segment, resolve the page, check
the segment kind, un-align — all to recover a block_size the allocator held one
field-load away.

New Heap::zalloc pops the block with the page still in hand and zeroes using
(*p).block_size directly. The re-resolution is gone from the hot recycled path;
the rare slow/large path still recovers it the general way.

Measured (callgrind opscan, freshly built): calloc 152.62 -> 132.00, 0.949x ->
0.820x vs mimalloc. Every other op is BYTE-IDENTICAL — small 79.38, batch_lifo
60.17, realloc 379.53, mixed 140.07 — because the plain malloc/free path is not
touched; only the zeroing entry point changed. The stronger-than-mimalloc
full-extent zeroing contract is preserved: zalloc still zeroes the whole usable
extent, and zalloc_is_zero_across_the_whole_usable_extent still passes.

Verified: workspace release green, all-features clippy clean, secure+blockmap
suite green (bar the documented WSL purge flake).

Also in this commit, opps.md #3 (bounds-check audit): 39 panic_bounds_check sites
lib-wide, but ZERO reachable from the shipped malloc / free / calloc fast paths
(confirmed by disassembling the override .so). All 39 are on slow/cold paths.
The safe-Rust hot path pays no bounds-check tax.

Co-Authored-By: Claude Fable 5 (1M context) <noreply@anthropic.com>
Ttimmahlax pushed a commit that referenced this pull request Aug 20, 2026
…code

#3 bounds-check audit — DONE, and the headline is that there is nothing to fix
on the hot path: 39 panic_bounds_check sites lib-wide, ZERO reachable from the
shipped malloc / free / calloc fast paths (confirmed on the override .so). All
39 are on slow/cold paths (segment alloc/free, visitors, arena, teardown, and 2
on the malloc_generic refill). The safe-Rust allocator pays no bounds-check tax
where it matters. The 2 refill checks resisted a min(MAX_NORMAL_BIN) clamp on
bin (count unchanged) and sit on a cold path — not worth chasing, recorded so
the dead end is not re-explored.

#4 update_direct recompute — ASSESSED, premise false. bin_size(bin) for the
common bin <= 8 is bin << 3 (a shift), and bin_size(bin-1) runs only for
bin > 8. There is no costly recompute on the hot path, and replacing the shift
with a table/stored load would reintroduce a panic_bounds_check (bin from
bins::bin is unbounded to LLVM) that costs more than it saves. Left as-is.

Both are honest negative results with the evidence attached, which is the point
of the register: they stop the next person re-attempting a dead end. The Tier-2
win that DID land is #5 (calloc -20.62 Ir/op), committed separately.

Co-Authored-By: Claude Fable 5 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants