build(deps): bump actions/cache from 5.0.0 to 5.0.5
What the developer wrote
Authored by dependabot[bot]
build(deps): bump actions/cache from 5.0.0 to 5.0.5
Bumps [actions/cache](https://github.com/actions/cache) from 5.0.0 to 5.0.5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/a7833574556fa59680c1b7cb190c1735db73ebf0...27d5ce7f107fe9357f9df03efb73ab90386fccae)
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 5.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine automated update by Dependabot that bumps the version of a GitHub Actions caching tool used only in a daily fuzzing workflow. There is no code change to the rust-bitcoin library itself, and nothing in the commit indicates a security problem.
No security action needed. Review and merge as a routine CI maintenance update if desired.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates the pinned SHA for actions/cache from v5.0.0 to v5.0.5 in .github/workflows/cron-daily-fuzz.yml. This is a patch-level dependency bump in CI infrastructure, not a change to the project’s source code, APIs, or cryptographic logic. No security signals are present in the diff or commit metadata.
Changed components
.github/workflows/cron-daily-fuzz.ymlInspect captured patch +1 / −1
diff --git a/.github/workflows/cron-daily-fuzz.yml b/.github/workflows/cron-daily-fuzz.yml
index e958e8a9..dd6c4c5e 100644
--- a/.github/workflows/cron-daily-fuzz.yml
+++ b/.github/workflows/cron-daily-fuzz.yml
@@ -133,7 +133,7 @@ jobs:
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
with:
persist-credentials: false
- - uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0
+ - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
id: cache-fuzz
with:
path: |
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.