[qmuntal]

Description:
Upgrade @actions/cache from 6.2.0 to 6.3.0 to pick up the Windows BSD-tar temporary-file isolation fix. Concurrent archive reads no longer share the same intermediate tar file.

Update the lockfile, license records, and both action bundles. The lockfile adopts the release's narrower Azure dependency ranges and removes the obsolete nested glob dependency; unrelated dependency versions are unchanged. No setup-go source, workflow, cache-key, or Node runtime changes are included. Much of the setup bundle diff is generated module reordering.

Related issue:

• Fix: fix(cache): isolate Windows BSD tar temporary files toolkit#2497
• Release: Cache v6.3.0 release toolkit#2500

Validation:

• All 131 unit tests across 6 suites pass on Windows with Node 24.13.0.
• Formatting, lint, TypeScript compilation, and both bundle builds pass.
• Both bundles pass syntax checks and reproduce byte-for-byte on a second build.
• All 45 production license records match the installed package names and versions; updated license texts are unchanged. The Ruby Licensed check is left to CI.

Check list:

• Documentation changes are required (not needed for this dependency-only upgrade).
• Tests were added or updated (regressions are covered by the upstream fix; the existing setup-go suite passes).

[Copilot]

Copilot review overview

🟢 Approval recommended

No unresolved review comments remain, and all supplied assessments indicate approval readiness.

Review effort: Lite
Findings: None

What changed in this PR

Upgrades @actions/cache to 6.3.0, including the Windows BSD-tar isolation fix and related dependency and license updates.

Changes:

• Updated package and lockfile dependencies.
• Refreshed production license records.
• Regenerated action bundles.

File	Description
package.json	Bumps @actions/cache.
package-lock.json	Updates dependency resolutions.
.licenses/​npm/​minimatch.dep.yml	Adds current minimatch license record.
.licenses/​npm/​minimatch-3.1.5.dep.yml	Removes obsolete minimatch record.
.licenses/​npm/​concat-map.dep.yml	Removes obsolete production record.
.licenses/​npm/​brace-expansion.dep.yml	Adds current brace-expansion record.
.licenses/​npm/​brace-expansion-1.1.18.dep.yml	Removes obsolete record.
.licenses/​npm/​balanced-match.dep.yml	Adds current balanced-match record.
.licenses/​npm/​balanced-match-1.0.2.dep.yml	Removes obsolete record.
.licenses/​npm/​@azure/​storage-blob.dep.yml	Updates Azure dependency record.
.licenses/​npm/​@azure/​core-rest-pipeline.dep.yml	Updates Azure dependency record.
.licenses/​npm/​@actions/​glob.dep.yml	Adds current glob license record.
.licenses/​npm/​@actions/​glob-0.6.1.dep.yml	Removes obsolete glob record.
.licenses/​npm/​@actions/​cache.dep.yml	Updates cache license version.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.