chore(deps): bump uuid and @actions/cache

[dependabot]

Removes uuid. It's no longer used after updating ancestor dependency @actions/cache. These dependencies need to be updated together.

Removes uuid

Updates @actions/cache from 4.1.0 to 6.0.1

Changelog

Sourced from @​actions/cache's changelog.

6.0.1

• Bump dependency versions (#2393):
  • @actions/core to ^3.0.1
  • @actions/http-client to ^4.0.1
  • @actions/io to ^3.0.2
  • @azure/core-rest-pipeline to ^1.23.0
  • @azure/storage-blob to ^12.31.0
  • semver to ^7.7.4

6.0.0

• Breaking change: Package is now ESM-only
  • CommonJS consumers must use dynamic import() instead of require()

5.0.5

• Bump @actions/glob to 0.5.1

5.0.4

• Bump @actions/http-client to 3.0.2

5.0.3

Prevent retries for rate limited cache operations 2243.

5.0.1

• Fix Node.js 24 punycode deprecation warning by updating @azure/storage-blob from ^12.13.0 to ^12.29.1 #2213
• Newer storage-blob uses @azure/core-rest-pipeline instead of deprecated @azure/core-http, which eliminates the transitive dependency on node-fetch@2 → whatwg-url@5 → tr46@0.0.3 that used the deprecated punycode module

5.0.0

• Remove @azure/ms-rest-js dependency #2197
  • The TransferProgressEvent type is now imported from @azure/core-rest-pipeline instead of @azure/ms-rest-js
• Bump @actions/core from ^1.11.1 to ^2.0.0 #2198
• Bump @actions/exec from ^1.0.1 to ^2.0.0 #2198
• Bump @actions/glob from ^0.1.0 to ^0.5.0 #2198
• Bump @actions/http-client from ^2.1.1 to ^3.0.0 #2198
• Bump @actions/io from ^1.0.1 to ^2.0.0 #2198
• Add support for Node.js 24 #2110
• Add node-fetch override to resolve audit vulnerabilities #2110

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​actions/cache since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[roger-zhangg]

@dependabot ignore this major version

[dependabot]

This option is only available on single-dependency pull requests, as the versions in multi-dependency pull requests may differ.

If you'd like to ignore all updates for these dependencies just reply @dependabot ignore these dependencies.

[roger-zhangg]

@dependabot ignore @actions/cache major version

[dependabot]

This option is only available on single-dependency pull requests, as the versions in multi-dependency pull requests may differ.

If you'd like to ignore all updates for these dependencies just reply @dependabot ignore these dependencies.

[roger-zhangg]

@dependabot ignore this major version

[dependabot]

This option is only available on single-dependency pull requests, as the versions in multi-dependency pull requests may differ.

If you'd like to ignore all updates for these dependencies just reply @dependabot ignore these dependencies.

[roger-zhangg]

Closing: @actions/cache v6 is published as ESM-only ("type": "module", exports exposes only an import condition). This action is entirely CommonJS — index.js, lib/setup.js and test/setup.test.js all use require()/module.exports, and the bundle is produced by ncc in CJS mode, so npm test cannot resolve it.

Taking v6 requires a full ESM migration of the action (source, tests, jest config and the ncc build), which is far beyond the scope of a dependency bump. Staying on the 4.x line.

Note: @dependabot ignore ... major version is not available on multi-dependency PRs, so this is closed rather than ignored. A durable major-version ignore would need an ignore entry in .github/dependabot.yml.

@dependabot close

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.