From 73ca3473aac85250a23535c4d281e6ce5c5df0de Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 25 Jun 2026 09:31:55 +0200
Subject: [PATCH 1/2] chore(deps): update actions/cache action to v6 (#3781)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/cache](https://redirect.github.com/actions/cache) | action |
major | `v5` → `v6` |
---
### Release Notes
actions/cache (actions/cache)
###
[`v6.0.0`](https://redirect.github.com/actions/cache/releases/tag/v6.0.0)
[Compare
Source](https://redirect.github.com/actions/cache/compare/v6.0.0...v6.0.0)
#### What's Changed
- Update packages, migrate to ESM by
[@Samirat](https://redirect.github.com/Samirat) in
[#1760](https://redirect.github.com/actions/cache/pull/1760)
**Full Changelog**:
###
[`v6`](https://redirect.github.com/actions/cache/compare/v5.0.5...v6.0.0)
[Compare
Source](https://redirect.github.com/actions/cache/compare/v5.0.5...v6.0.0)
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- "every weekday"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/apify/crawlee).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/publish-to-npm.yml | 2 +-
.github/workflows/release.yml | 6 +++---
.github/workflows/test-ci.yml | 10 +++++-----
.github/workflows/test-e2e.yml | 4 ++--
4 files changed, 11 insertions(+), 11 deletions(-)
diff --git a/.github/workflows/publish-to-npm.yml b/.github/workflows/publish-to-npm.yml
index e94b20b58df0..a2ed49959f18 100644
--- a/.github/workflows/publish-to-npm.yml
+++ b/.github/workflows/publish-to-npm.yml
@@ -61,7 +61,7 @@ jobs:
- name: Turbo cache
id: turbo-cache
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: .turbo
key: turbo-${{ github.job }}-${{ github.ref_name }}-${{ github.sha }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cdbc9e639cc4..aa7b3d614f02 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -63,7 +63,7 @@ jobs:
- name: Turbo cache
id: turbo-cache
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: .turbo
key: turbo-${{ github.job }}-${{ github.ref_name }}-${{ github.sha }}
@@ -74,7 +74,7 @@ jobs:
run: yarn
- name: Cache Playwright browsers
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: ~/.cache/ms-playwright
key: playwright-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}
@@ -122,7 +122,7 @@ jobs:
- name: Turbo cache
id: turbo-cache
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: .turbo
key: turbo-${{ github.job }}-${{ github.ref_name }}-${{ github.sha }}
diff --git a/.github/workflows/test-ci.yml b/.github/workflows/test-ci.yml
index a644bbaf4d23..c61ec7304ea2 100644
--- a/.github/workflows/test-ci.yml
+++ b/.github/workflows/test-ci.yml
@@ -51,7 +51,7 @@ jobs:
- name: Turbo cache
id: turbo-cache
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: .turbo
key: turbo-${{ github.job }}-${{ matrix.node-version }}-${{ github.ref_name }}-${{ github.sha }}
@@ -64,7 +64,7 @@ jobs:
YARN_IGNORE_NODE: 1
- name: Cache Playwright browsers
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: ~/.cache/ms-playwright
key: playwright-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}
@@ -126,7 +126,7 @@ jobs:
- name: Turbo cache
id: turbo-cache
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: .turbo
key: turbo-${{ github.job }}-${{ github.ref_name }}-${{ github.sha }}
@@ -268,7 +268,7 @@ jobs:
- name: Turbo cache
id: turbo-cache
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: .turbo
key: turbo-${{ github.job }}-${{ github.ref_name }}-${{ github.sha }}
@@ -315,7 +315,7 @@ jobs:
- name: Turbo cache
id: turbo-cache
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: .turbo
key: turbo-${{ github.job }}-${{ github.ref_name }}-${{ github.sha }}
diff --git a/.github/workflows/test-e2e.yml b/.github/workflows/test-e2e.yml
index 44a6215bab7f..1cccfccbfce2 100644
--- a/.github/workflows/test-e2e.yml
+++ b/.github/workflows/test-e2e.yml
@@ -46,7 +46,7 @@ jobs:
- name: Turbo cache
id: turbo-cache
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: .turbo
key: turbo-${{ github.job }}-${{ github.ref_name }}-${{ github.sha }}
@@ -68,7 +68,7 @@ jobs:
- name: Cache Playwright browsers
if: (matrix.storage != 'PLATFORM')
- uses: actions/cache@v5
+ uses: actions/cache@v6
with:
path: ~/.cache/ms-playwright
key: playwright-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}
From 6a9eab7b588615e156681004b4772778b641a2a7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 25 Jun 2026 10:38:03 +0200
Subject: [PATCH 2/2] chore(deps): bump http-proxy-middleware from 2.0.9 to
2.0.10 in /website (#3778)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps
[http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware)
from 2.0.9 to 2.0.10.
Release notes
Sourced from http-proxy-middleware's
releases.
v2.0.10-beta.0
What's Changed
New Contributors
Full Changelog: https://github.com/chimurai/http-proxy-middleware/compare/v2.0.9...v2.0.10-beta.0
Changelog
Sourced from http-proxy-middleware's
changelog.
- fix(router): harden proxy-table matching (exact host for host+path
keys, prefix-only path matching) to prevent routing bypass
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new
releaser for http-proxy-middleware since your current version.
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/apify/crawlee/network/alerts).
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
website/yarn.lock | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/website/yarn.lock b/website/yarn.lock
index 542e3a199984..40cdae7530ba 100644
--- a/website/yarn.lock
+++ b/website/yarn.lock
@@ -10662,8 +10662,8 @@ __metadata:
linkType: hard
"http-proxy-middleware@npm:^2.0.9":
- version: 2.0.9
- resolution: "http-proxy-middleware@npm:2.0.9"
+ version: 2.0.10
+ resolution: "http-proxy-middleware@npm:2.0.10"
dependencies:
"@types/http-proxy": "npm:^1.17.8"
http-proxy: "npm:^1.18.1"
@@ -10675,7 +10675,7 @@ __metadata:
peerDependenciesMeta:
"@types/express":
optional: true
- checksum: 10c0/8e9032af625f7c9f2f0d318f6cdb14eb725cc16ffe7b4ccccea25cf591fa819bb7c3bb579e0b543e0ae9c73059b505a6d728290c757bff27bae526a6ed11c05e
+ checksum: 10c0/363cd25fbac18f851af93cea34ac7068656413c9af5af12d3b2a127adc70623d2c0d6e9e12037bbac5a4744b762fd9f89fb16e16c29ad06af2b17766890c1b26
languageName: node
linkType: hard