Bump the github-actions group across 1 directory with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates in the / directory: dart-lang/setup-dart and actions/cache.

Updates dart-lang/setup-dart from 1.7.1 to 1.7.2

Release notes

Sourced from dart-lang/setup-dart's releases.

v1.7.2

• Update Node.js requirement to Node 24.
• Fix open Dependabot alerts by bumping undici to >=6.24.0.
• Update GitHub Action dependencies (@actions/core, @actions/exec, @actions/tool-cache, @actions/http-client).
• Update workflow actions to their latest versions (actions/checkout v6, setup-flutter).

Changelog

Sourced from dart-lang/setup-dart's changelog.

v1.7.2

• Update Node.js requirement to Node 24.
• Fix open Dependabot alerts by bumping undici to >=6.24.0.
• Update GitHub Action dependencies (@actions/core, @actions/exec, @actions/tool-cache, @actions/http-client).
• Update workflow actions to their latest versions (actions/checkout v6, setup-flutter).

v1.7.1

• Roll undici dependency to address CVE-2025-22150.
• Update to the latest npm dependencies.
• Recompile the action using the new Dart / JavaScript interop.

v1.7.0

• Install flutter sdk in publishing step, allowing Flutter packages to be published (#68[])

  #68: dart-lang/setup-dart#68

v1.6.5

• Fix zip path handling on Windows 11 (#118[])

#118: dart-lang/setup-dart#118

v1.6.4

• Rebuild JS code.

v1.6.3

• Roll undici dependency to address CVE-2024-30260 and CVE-2024-30261.

v1.6.2

• Switch to running the workflow on node20`` from node16`. See also Transitioning from Node 16 to Node 20.

v1.6.1

• Updated the google storage url for main channel releases.

... (truncated)

Commits

• 65eb853 chore: prepare v1.7.2 release (#175)
• 6e0ff0b Node 24 (#174)
• 03a180d Group npm dependency updates (#172)
• 74195ec Bump @​actions/exec from 1.1.1 to 3.0.0 (#167)
• 41705c9 Bump @​actions/core from 1.11.1 to 3.0.0 (#168)
• dd42013 Bump @​actions/tool-cache from 2.0.2 to 4.0.0 (#169)
• b36cb5e Bump @​actions/http-client from 3.0.0 to 4.0.0 (#170)
• 21e68f4 Bump actions/checkout from 5 to 6 in the github-actions group (#162)
• 0bdb602 Bump @​actions/http-client from 2.2.3 to 3.0.0 (#160)
• daef289 Bump flutter-actions/setup-flutter in the github-actions group (#159)
• Additional commits viewable in compare view

Updates actions/cache from 5.0.3 to 5.0.4

Release notes

Sourced from actions/cache's releases.

v5.0.4

What's Changed

• Add release instructions and update maintainer docs by @​Link- in actions/cache#1696
• Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @​Link- in actions/cache#1697
• Fix workflow permissions and cleanup workflow names / formatting by @​Link- in actions/cache#1699
• docs: Update examples to use the latest version by @​XZTDean in actions/cache#1690
• Fix proxy integration tests by @​Link- in actions/cache#1701
• Fix cache key in examples.md for bun.lock by @​RyPeck in actions/cache#1722
• Update dependencies & patch security vulnerabilities by @​Link- in actions/cache#1738

New Contributors

• @​XZTDean made their first contribution in actions/cache#1690
• @​RyPeck made their first contribution in actions/cache#1722

Full Changelog: actions/cache@v5...v5.0.4

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

1. Switch to a new branch from main.
2. Run npm test to ensure all tests are passing.
3. Update the version in https://github.com/actions/cache/blob/main/package.json.
4. Run npm run build to update the compiled files.
5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
6. Run licensed cache to update the license report.
7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
8. Commit your changes and push your branch upstream.
9. Open a pull request against main and get it reviewed and merged.
10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

• Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
• Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
• Bump fast-xml-parser to v5.5.6

5.0.3

• Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
• Bump @actions/core to v2.0.3

5.0.2

• Bump @actions/cache to v5.0.3 #1692

5.0.1

• Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits

• 6682284 Merge pull request #1738 from actions/prepare-v5.0.4
• e340396 Update RELEASES
• 8a67110 Add licenses
• 1865903 Update dependencies & patch security vulnerabilities
• 5656298 Merge pull request #1722 from RyPeck/patch-1
• 4e380d1 Fix cache key in examples.md for bun.lock
• b7e8d49 Merge pull request #1701 from actions/Link-/fix-proxy-integration-tests
• 984a21b Add traffic sanity check step
• acf2f1f Fix resolution
• 95a07c5 Add wait for proxy
• Additional commits viewable in compare view

[auto-submit]

autosubmit label was removed for dart-lang/webdev/2809, because - The status or check suite unit_test; windows; Dart main; PKG: dwds; `dart test --total-shards 3 --shard-index 2 --exclude-t... has failed. Please fix the issues identified (or deflake) before re-applying this label.