[renovate]

This PR contains the following updates:

Package	Type	Update	Change
SonarSource/gh-action_cache	action	patch	v1.7.3 → v1.7.4

---

Release Notes

SonarSource/gh-action_cache

v1.7.4

Compare Source

What's Changed

Improvements

• BUILD-13160: Pin S3 cache to step-security/runs-on-cache by @​tomverin in #​101

  The S3 probe, restore-only, and combined save steps now call step-security/runs-on-cache v5.0.8 (e61ed9b0206c630e9a6bb5f12ca4cd78ae7bbe93) instead of runs-on/cache v5.0.7. Inputs and outputs are unchanged. v5.0.8 runs the StepSecurity subscription check at the start of the action.

  Workflows already on SonarSource/gh-action_cache@v1 pick this up automatically with this v1 branch update. Callers pinned to a commit SHA stay on runs-on/cache until they bump.

---

Full Changelog: SonarSource/gh-action_cache@v1.7.3...v1.7.4

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • "after 7am every weekday,before 8pm every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: BUILD-13042

[datadog-sonarsource]

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: d0be3e4 | Docs | View more details | Give us feedback!}

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · Updating pinned cache-action SHAs across nine workflows switches cache operations to a new implementation whose subscription check could affect cache availability.

Updates the SonarSource/gh-action_cache action from v1.7.3 to v1.7.4, which pins the S3 cache steps to step-security/runs-on-cache v5.0.8 with unchanged inputs and outputs. No issues found.

Verification Rules 3/3 met PRs 1 inspected

Functional validation No results

Rules 3 passed

✅ Approved GitHub Actions runners
✅ Internal artifact registries
✅ Repository license compliance

Broader impact PRs 1 inspected

Cross-PR 1 PR inspected 0 open impacts

PR 42: Update GitHub actions Inspected

Auto-approval Not enabled

Set up

_{For more verification details, comment gitar display:verbose.}

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing compact verification results.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud