From ad56c015e3c9abd5fef10b9c58f731f490fbed4c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 1 Nov 2026 15:18:06 +0000
Subject: [PATCH 1/2] ci: bump the github-actions group with 2 updates

Bumps the github-actions group with 2 updates: [actions/cache](https://github.com/actions/cache) and [actions/upload-artifact](https://github.com/actions/upload-artifact).


Updates `actions/cache` from 4 to 6
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v4...v6)

Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v7)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/deploy.yml                 | 2 +-
 .github/workflows/link-validator-nightly.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index dc9aba3..7566bca 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -105,7 +105,7 @@ jobs:
           exit 1
 
       - name: Restore link check cache
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: .link-check-cache.json
           key: link-check-cache-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml', '.antora-link-suppressions.yml') }}
diff --git a/.github/workflows/link-validator-nightly.yml b/.github/workflows/link-validator-nightly.yml
index e324d1e..76ab362 100644
--- a/.github/workflows/link-validator-nightly.yml
+++ b/.github/workflows/link-validator-nightly.yml
@@ -63,7 +63,7 @@ jobs:
           fetch: true
 
       - name: Upload link validator report
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: link-validator-report
           path: |

From 845ef003f4a8e2d5c7bf2cd98b713cbd2c547a56 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Sun, 1 Nov 2026 15:19:02 +0000
Subject: [PATCH 2/2] docs(changelog): note GitHub Actions cache and
 upload-artifact bumps

Record dependabot updates to actions/cache v6 and upload-artifact v7
in the org-wide changelog so hub CI pin changes stay traceable.

Co-authored-by: Ryan Johnson <AMDphreak@users.noreply.github.com>
---
 docs/modules/ROOT/pages/changelog/org-wide.adoc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docs/modules/ROOT/pages/changelog/org-wide.adoc b/docs/modules/ROOT/pages/changelog/org-wide.adoc
index 35c8f74..be3ae89 100644
--- a/docs/modules/ROOT/pages/changelog/org-wide.adoc
+++ b/docs/modules/ROOT/pages/changelog/org-wide.adoc
@@ -6,6 +6,10 @@
 
 This page is the org-wide changelog: significant documentation and project activity across Dev-Centr. New entries are added at the top. For per-component shipping notes, see the xref:../changelog.adoc[Changelog Index]; for release tags, see repository tags and release notes.
 
+== 2026-11-01 - Hub GitHub Actions group bump (dependabot)
+
+* **CI workflow pins.** Dependabot bumped `actions/cache` **v4 → v6** in the Deploy workflow link-check cache restore (`.github/workflows/deploy.yml`) and `actions/upload-artifact` **v4 → v7** for nightly link-validator reports (`.github/workflows/link-validator-nightly.yml`). Usage is unchanged (multi-file artifact upload with default `archive: true`; cache key still ties to `pnpm-lock.yaml` and `.antora-link-suppressions.yml`). GitHub-hosted runners satisfy the Node 24 / runner **2.327.1** minimum for artifact v6+.
+
 == 2026-10-31 - Cloudflare Email Routing + Sending reference
 
 * **New reference page.** xref:general-knowledge::reference/email/cloudflare-email-routing-and-sending.adoc[Cloudflare Email Routing + Email Sending]: free inbound Routing next to Email Sending (beta, Workers Paid; per-account quota and per-1k pricing as of 2026-10-31), how the `cf-bounce` DNS records coexist with Routing's MX/SPF, Gmail *Send mail as* over `smtp.mx.cloudflare.net:465`, parked-domain DNS (null MX, SPF `-all`, DMARC reject), and a verification checklist.