From ff94e128fdb86e34613c38f451613c6f89fd037a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 15 Aug 2026 18:04:15 +0000
Subject: [PATCH] build(deps): bump actions/cache from 4 to 6

Bumps [actions/cache](https://github.com/actions/cache) from 4 to 6.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yml           | 12 ++++++------
 .github/workflows/fuzz-nightly.yml |  2 +-
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 811cbe6..6eb529e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -488,7 +488,7 @@ jobs:
 
       - name: Cache ~/.cargo/bin (twiggy, cargo-component)
         id: cargo-bin-cache
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: |
             ~/.cargo/bin/twiggy
@@ -607,7 +607,7 @@ jobs:
           key: tiktoken-parity-stable
 
       - name: Cache vocab blobs
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: ~/.cache/stringcheese-tokenizer-tiktoken
           # Bust the cache only when the hash constants in
@@ -681,7 +681,7 @@ jobs:
         # job has already run on this ref, the `cl100k_base.tiktoken`
         # blob is present and the bench's cl100k group produces
         # numbers; otherwise it soft-skips.
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: ~/.cache/stringcheese-tokenizer-tiktoken
           key: tiktoken-vocabs-${{ hashFiles('crates/stringcheese-tokenizer-tiktoken-conformance/src/variant.rs') }}
@@ -2415,7 +2415,7 @@ jobs:
           key: wasm-tokenizer-component-cl100k-stable
 
       - name: Cache cl100k vocab blob
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: ~/.cache/stringcheese-tokenizer-tiktoken
           # Bust the cache only when the hash constant in the
@@ -3081,7 +3081,7 @@ jobs:
 
       - name: Cache ~/.cargo/bin (cargo-audit)
         id: cargo-audit-cache
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: ~/.cargo/bin/cargo-audit
           key: cargo-bin-audit-${{ env.CARGO_AUDIT_VERSION }}
@@ -3127,7 +3127,7 @@ jobs:
 
       - name: Cache ~/.cargo/bin (cargo-deny)
         id: cargo-deny-cache
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: ~/.cargo/bin/cargo-deny
           key: cargo-bin-deny-${{ env.CARGO_DENY_VERSION }}
diff --git a/.github/workflows/fuzz-nightly.yml b/.github/workflows/fuzz-nightly.yml
index ad0b70b..498947e 100644
--- a/.github/workflows/fuzz-nightly.yml
+++ b/.github/workflows/fuzz-nightly.yml
@@ -99,7 +99,7 @@ jobs:
       # simpler than the split restore/save+run-id pattern, and sufficient for
       # v0.1. If we later need to preserve per-run historical corpora, revisit.
       - name: Restore and save fuzz corpus
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         with:
           path: fuzz/corpus/${{ matrix.target }}
           key: fuzz-corpus-${{ matrix.target }}