From cbcb930230eecceb7a235e2691f4a4e2adacb21c Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 21 Apr 2026 14:10:01 +0000 Subject: [PATCH 1/4] try reverting pipeline change --- src/config.ts | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/src/config.ts b/src/config.ts index d562033..482a043 100644 --- a/src/config.ts +++ b/src/config.ts @@ -3,7 +3,6 @@ import * as glob from "@actions/glob"; import crypto from "crypto"; import fs from "fs/promises"; import { createReadStream } from "fs"; -import { pipeline } from "stream/promises"; import os from "os"; import path from "path"; import * as toml from "smol-toml"; @@ -84,7 +83,7 @@ export class CacheConfig { } const job = process.env.GITHUB_JOB; - if ((job) && core.getInput("add-job-id-key").toLowerCase() == "true") { + if (job && core.getInput("add-job-id-key").toLowerCase() == "true") { key += `-${job}`; } } @@ -256,7 +255,9 @@ export class CacheConfig { keyFiles = sort_and_uniq(keyFiles); for (const file of keyFiles) { - await pipeline(createReadStream(file), hasher); + for await (const chunk of createReadStream(file)) { + hasher.update(chunk); + } } keyFiles.push(...parsedKeyFiles); From 50820818c6a19eb0bc4df3c4718ba9cdcc7fe441 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 21 Apr 2026 14:10:30 +0000 Subject: [PATCH 2/4] fix: apply code build script --- dist/restore/index.js | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/dist/restore/index.js b/dist/restore/index.js index b006170..14578f0 100644 --- a/dist/restore/index.js +++ b/dist/restore/index.js @@ -203780,8 +203780,6 @@ function glob_hashFiles(patterns_1) { // EXTERNAL MODULE: external "fs/promises" var promises_ = __nccwpck_require__(73292); var promises_default = /*#__PURE__*/__nccwpck_require__.n(promises_); -;// CONCATENATED MODULE: external "stream/promises" -const external_stream_promises_namespaceObject = require("stream/promises"); ;// CONCATENATED MODULE: ./node_modules/smol-toml/dist/error.js /*! * Copyright (c) Squirrel Chat et al., All rights reserved. @@ -249078,7 +249076,6 @@ class Workspace { - const HOME = external_os_default().homedir(); const config_CARGO_HOME = process.env.CARGO_HOME || external_path_default().join(HOME, ".cargo"); const STATE_CONFIG = "RUST_CACHE_CONFIG"; @@ -249139,7 +249136,7 @@ class CacheConfig { key += `-${inputKey}`; } const job = process.env.GITHUB_JOB; - if ((job) && getInput("add-job-id-key").toLowerCase() == "true") { + if (job && getInput("add-job-id-key").toLowerCase() == "true") { key += `-${job}`; } } @@ -249278,7 +249275,9 @@ class CacheConfig { } keyFiles = sort_and_uniq(keyFiles); for (const file of keyFiles) { - await (0,external_stream_promises_namespaceObject.pipeline)((0,external_fs_.createReadStream)(file), hasher); + for await (const chunk of (0,external_fs_.createReadStream)(file)) { + hasher.update(chunk); + } } keyFiles.push(...parsedKeyFiles); self.keyFiles = sort_and_uniq(keyFiles); From bf09fe1c3564890803e9bbe4b588adc15e5f8f7c Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 21 Apr 2026 14:10:35 +0000 Subject: [PATCH 3/4] fix: apply code build script --- dist/save/index.js | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/dist/save/index.js b/dist/save/index.js index c84124c..c80d56b 100644 --- a/dist/save/index.js +++ b/dist/save/index.js @@ -203769,8 +203769,6 @@ function glob_hashFiles(patterns_1) { // EXTERNAL MODULE: external "fs/promises" var promises_ = __nccwpck_require__(73292); var promises_default = /*#__PURE__*/__nccwpck_require__.n(promises_); -;// CONCATENATED MODULE: external "stream/promises" -const external_stream_promises_namespaceObject = require("stream/promises"); ;// CONCATENATED MODULE: ./node_modules/smol-toml/dist/error.js /*! * Copyright (c) Squirrel Chat et al., All rights reserved. @@ -249067,7 +249065,6 @@ class Workspace { - const HOME = external_os_default().homedir(); const CARGO_HOME = process.env.CARGO_HOME || external_path_default().join(HOME, ".cargo"); const STATE_CONFIG = "RUST_CACHE_CONFIG"; @@ -249128,7 +249125,7 @@ class CacheConfig { key += `-${inputKey}`; } const job = process.env.GITHUB_JOB; - if ((job) && getInput("add-job-id-key").toLowerCase() == "true") { + if (job && getInput("add-job-id-key").toLowerCase() == "true") { key += `-${job}`; } } @@ -249267,7 +249264,9 @@ class CacheConfig { } keyFiles = sort_and_uniq(keyFiles); for (const file of keyFiles) { - await (0,external_stream_promises_namespaceObject.pipeline)((0,external_fs_.createReadStream)(file), hasher); + for await (const chunk of (0,external_fs_.createReadStream)(file)) { + hasher.update(chunk); + } } keyFiles.push(...parsedKeyFiles); self.keyFiles = sort_and_uniq(keyFiles); From 201e0f51298b61037e72f41a522802476d78165d Mon Sep 17 00:00:00 2001 From: Raj-StepSecurity Date: Tue, 21 Apr 2026 20:59:28 +0530 Subject: [PATCH 4/4] Merge pull request #283 from step-security/auto-cherry-pick-merge package upgraded --- package-lock.json | 4 ++-- package.json | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 5dd76a8..24261b4 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "rust-cache", - "version": "2.9.0", + "version": "2.9.1", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "rust-cache", - "version": "2.9.0", + "version": "2.9.1", "license": "LGPL-3.0", "dependencies": { "@actions/buildjet-cache": "npm:github-actions.cache-buildjet@0.2.0", diff --git a/package.json b/package.json index ed3c090..479e9b8 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "private": true, "name": "rust-cache", - "version": "2.9.0", + "version": "2.9.1", "description": "A GitHub Action that implements smart caching for rust/cargo projects with sensible defaults.", "keywords": [ "actions",