chore(ci): bump actions/cache from 5.0.3 to 5.0.4 in the gh-actions-packages group by dependabot[bot] · Pull Request #11059 · DataDog/dd-trace-java

dependabot · 2026-04-07T17:26:46Z

Bumps the gh-actions-packages group with 1 update: actions/cache.

Updates actions/cache from 5.0.3 to 5.0.4

Release notes

Sourced from actions/cache's releases.

v5.0.4

What's Changed

Add release instructions and update maintainer docs by @Link- in actions/cache#1696

Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @Link- in actions/cache#1697

Fix workflow permissions and cleanup workflow names / formatting by @Link- in actions/cache#1699

docs: Update examples to use the latest version by @XZTDean in actions/cache#1690

Fix proxy integration tests by @Link- in actions/cache#1701

Fix cache key in examples.md for bun.lock by @RyPeck in actions/cache#1722

Update dependencies & patch security vulnerabilities by @Link- in actions/cache#1738

New Contributors

@XZTDean made their first contribution in actions/cache#1690

@RyPeck made their first contribution in actions/cache#1722

Full Changelog: actions/cache@v5...v5.0.4

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

Switch to a new branch from main.

Run npm test to ensure all tests are passing.

Update the version in https://github.com/actions/cache/blob/main/package.json.

Run npm run build to update the compiled files.

Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.

Run licensed cache to update the license report.

Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.

Commit your changes and push your branch upstream.

Open a pull request against main and get it reviewed and merged.

Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json

Create a new tag with the version number.

Auto generate release notes and update them to match the changes you made in RELEASES.md.

Toggle the set as the latest release option.

Publish the release.

Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml

There should be a workflow run queued with the same version number.

Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)

Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)

Bump fast-xml-parser to v5.5.6

5.0.3

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

Bump @actions/core to v2.0.3

5.0.2

Bump @actions/cache to v5.0.3 #1692

5.0.1

Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits

6682284 Merge pull request #1738 from actions/prepare-v5.0.4
e340396 Update RELEASES
8a67110 Add licenses
1865903 Update dependencies & patch security vulnerabilities
5656298 Merge pull request #1722 from RyPeck/patch-1
4e380d1 Fix cache key in examples.md for bun.lock
b7e8d49 Merge pull request #1701 from actions/Link-/fix-proxy-integration-tests
984a21b Add traffic sanity check step
acf2f1f Fix resolution
95a07c5 Add wait for proxy
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gh-actions-packages group with 1 update: [actions/cache](https://github.com/actions/cache). Updates `actions/cache` from 5.0.3 to 5.0.4 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@cdf6c1f...6682284) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 5.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages ... Signed-off-by: dependabot[bot] <support@github.com>

pr-commenter · 2026-04-07T18:12:37Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	dependabot/github_actions/gh-actions-packages-003dc165f5
git_commit_date	1775572357	1775582803
git_commit_sha	`daa425b`	`de4edef`
release_version	1.61.0-SNAPSHOT~daa425b3a4	1.61.0-SNAPSHOT~de4edefc9a

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1775584475	1775584475
ci_job_id	1574261043	1574261043
ci_pipeline_id	106456812	106456812
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-0-l6nwuyxt 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-0-l6nwuyxt 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module	Agent	Agent
parent	None	None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 59 metrics, 12 unstable metrics.

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.61.0-SNAPSHOT~de4edefc9a, baseline=1.61.0-SNAPSHOT~daa425b3a4

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.054 s) : 0, 1054121
Total [baseline] (8.833 s) : 0, 8833130
Agent [candidate] (1.058 s) : 0, 1058172
Total [candidate] (8.847 s) : 0, 8847062
section iast
Agent [baseline] (1.227 s) : 0, 1227472
Total [baseline] (9.552 s) : 0, 9552460
Agent [candidate] (1.226 s) : 0, 1226351
Total [candidate] (9.548 s) : 0, 9547579

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.054 s	-
Agent	iast	1.227 s	173.352 ms (16.4%)
Total	tracing	8.833 s	-
Total	iast	9.552 s	719.33 ms (8.1%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.058 s	-
Agent	iast	1.226 s	168.179 ms (15.9%)
Total	tracing	8.847 s	-
Total	iast	9.548 s	700.517 ms (7.9%)

gantt
    title insecure-bank - break down per module: candidate=1.61.0-SNAPSHOT~de4edefc9a, baseline=1.61.0-SNAPSHOT~daa425b3a4

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.232 ms) : 0, 1232
crashtracking [candidate] (1.226 ms) : 0, 1226
BytebuddyAgent [baseline] (633.4 ms) : 0, 633400
BytebuddyAgent [candidate] (634.097 ms) : 0, 634097
AgentMeter [baseline] (29.375 ms) : 0, 29375
AgentMeter [candidate] (29.512 ms) : 0, 29512
GlobalTracer [baseline] (248.329 ms) : 0, 248329
GlobalTracer [candidate] (249.468 ms) : 0, 249468
AppSec [baseline] (31.961 ms) : 0, 31961
AppSec [candidate] (32.119 ms) : 0, 32119
Debugger [baseline] (59.052 ms) : 0, 59052
Debugger [candidate] (59.504 ms) : 0, 59504
Remote Config [baseline] (608.676 µs) : 0, 609
Remote Config [candidate] (596.74 µs) : 0, 597
Telemetry [baseline] (8.123 ms) : 0, 8123
Telemetry [candidate] (8.022 ms) : 0, 8022
Flare Poller [baseline] (5.828 ms) : 0, 5828
Flare Poller [candidate] (7.287 ms) : 0, 7287
section iast
crashtracking [baseline] (1.249 ms) : 0, 1249
crashtracking [candidate] (1.247 ms) : 0, 1247
BytebuddyAgent [baseline] (804.912 ms) : 0, 804912
BytebuddyAgent [candidate] (804.727 ms) : 0, 804727
AgentMeter [baseline] (11.633 ms) : 0, 11633
AgentMeter [candidate] (11.4 ms) : 0, 11400
GlobalTracer [baseline] (238.743 ms) : 0, 238743
GlobalTracer [candidate] (238.982 ms) : 0, 238982
IAST [baseline] (26.562 ms) : 0, 26562
IAST [candidate] (25.776 ms) : 0, 25776
AppSec [baseline] (29.449 ms) : 0, 29449
AppSec [candidate] (31.681 ms) : 0, 31681
Debugger [baseline] (62.567 ms) : 0, 62567
Debugger [candidate] (61.119 ms) : 0, 61119
Remote Config [baseline] (543.94 µs) : 0, 544
Remote Config [candidate] (1.119 ms) : 0, 1119
Telemetry [baseline] (11.838 ms) : 0, 11838
Telemetry [candidate] (10.498 ms) : 0, 10498
Flare Poller [baseline] (3.489 ms) : 0, 3489
Flare Poller [candidate] (3.439 ms) : 0, 3439

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.61.0-SNAPSHOT~de4edefc9a, baseline=1.61.0-SNAPSHOT~daa425b3a4

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.058 s) : 0, 1057822
Total [baseline] (11.09 s) : 0, 11089850
Agent [candidate] (1.057 s) : 0, 1057474
Total [candidate] (11.071 s) : 0, 11070957
section appsec
Agent [baseline] (1.247 s) : 0, 1246928
Total [baseline] (11.151 s) : 0, 11150837
Agent [candidate] (1.247 s) : 0, 1247472
Total [candidate] (11.21 s) : 0, 11210069
section iast
Agent [baseline] (1.235 s) : 0, 1234871
Total [baseline] (11.32 s) : 0, 11320153
Agent [candidate] (1.222 s) : 0, 1221551
Total [candidate] (11.297 s) : 0, 11296588
section profiling
Agent [baseline] (1.183 s) : 0, 1183455
Total [baseline] (11.103 s) : 0, 11103326
Agent [candidate] (1.184 s) : 0, 1183959
Total [candidate] (11.104 s) : 0, 11104397

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.058 s	-
Agent	appsec	1.247 s	189.106 ms (17.9%)
Agent	iast	1.235 s	177.049 ms (16.7%)
Agent	profiling	1.183 s	125.633 ms (11.9%)
Total	tracing	11.09 s	-
Total	appsec	11.151 s	60.987 ms (0.5%)
Total	iast	11.32 s	230.302 ms (2.1%)
Total	profiling	11.103 s	13.476 ms (0.1%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.057 s	-
Agent	appsec	1.247 s	189.997 ms (18.0%)
Agent	iast	1.222 s	164.077 ms (15.5%)
Agent	profiling	1.184 s	126.485 ms (12.0%)
Total	tracing	11.071 s	-
Total	appsec	11.21 s	139.112 ms (1.3%)
Total	iast	11.297 s	225.631 ms (2.0%)
Total	profiling	11.104 s	33.44 ms (0.3%)

gantt
    title petclinic - break down per module: candidate=1.61.0-SNAPSHOT~de4edefc9a, baseline=1.61.0-SNAPSHOT~daa425b3a4

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.235 ms) : 0, 1235
crashtracking [candidate] (1.233 ms) : 0, 1233
BytebuddyAgent [baseline] (633.49 ms) : 0, 633490
BytebuddyAgent [candidate] (633.2 ms) : 0, 633200
AgentMeter [baseline] (29.329 ms) : 0, 29329
AgentMeter [candidate] (29.461 ms) : 0, 29461
GlobalTracer [baseline] (248.737 ms) : 0, 248737
GlobalTracer [candidate] (248.835 ms) : 0, 248835
AppSec [baseline] (32.02 ms) : 0, 32020
AppSec [candidate] (31.918 ms) : 0, 31918
Debugger [baseline] (59.914 ms) : 0, 59914
Debugger [candidate] (59.912 ms) : 0, 59912
Remote Config [baseline] (603.4 µs) : 0, 603
Remote Config [candidate] (594.569 µs) : 0, 595
Telemetry [baseline] (8.093 ms) : 0, 8093
Telemetry [candidate] (8.08 ms) : 0, 8080
Flare Poller [baseline] (8.092 ms) : 0, 8092
Flare Poller [candidate] (8.063 ms) : 0, 8063
section appsec
crashtracking [baseline] (1.229 ms) : 0, 1229
crashtracking [candidate] (1.244 ms) : 0, 1244
BytebuddyAgent [baseline] (661.497 ms) : 0, 661497
BytebuddyAgent [candidate] (661.656 ms) : 0, 661656
AgentMeter [baseline] (12.091 ms) : 0, 12091
AgentMeter [candidate] (11.98 ms) : 0, 11980
GlobalTracer [baseline] (248.363 ms) : 0, 248363
GlobalTracer [candidate] (248.021 ms) : 0, 248021
IAST [baseline] (24.572 ms) : 0, 24572
IAST [candidate] (24.474 ms) : 0, 24474
AppSec [baseline] (184.35 ms) : 0, 184350
AppSec [candidate] (184.44 ms) : 0, 184440
Debugger [baseline] (65.742 ms) : 0, 65742
Debugger [candidate] (66.278 ms) : 0, 66278
Remote Config [baseline] (586.61 µs) : 0, 587
Remote Config [candidate] (601.448 µs) : 0, 601
Telemetry [baseline] (8.565 ms) : 0, 8565
Telemetry [candidate] (8.751 ms) : 0, 8751
Flare Poller [baseline] (3.552 ms) : 0, 3552
Flare Poller [candidate] (3.635 ms) : 0, 3635
section iast
crashtracking [baseline] (1.239 ms) : 0, 1239
crashtracking [candidate] (1.222 ms) : 0, 1222
BytebuddyAgent [baseline] (809.833 ms) : 0, 809833
BytebuddyAgent [candidate] (799.972 ms) : 0, 799972
AgentMeter [baseline] (11.751 ms) : 0, 11751
AgentMeter [candidate] (11.373 ms) : 0, 11373
GlobalTracer [baseline] (240.56 ms) : 0, 240560
GlobalTracer [candidate] (238.155 ms) : 0, 238155
IAST [baseline] (26.665 ms) : 0, 26665
IAST [candidate] (25.775 ms) : 0, 25775
AppSec [baseline] (31.92 ms) : 0, 31920
AppSec [candidate] (30.011 ms) : 0, 30011
Debugger [baseline] (59.768 ms) : 0, 59768
Debugger [candidate] (63.194 ms) : 0, 63194
Remote Config [baseline] (1.091 ms) : 0, 1091
Remote Config [candidate] (543.649 µs) : 0, 544
Telemetry [baseline] (12.139 ms) : 0, 12139
Telemetry [candidate] (11.634 ms) : 0, 11634
Flare Poller [baseline] (3.417 ms) : 0, 3417
Flare Poller [candidate] (3.428 ms) : 0, 3428
section profiling
crashtracking [baseline] (1.179 ms) : 0, 1179
crashtracking [candidate] (1.186 ms) : 0, 1186
BytebuddyAgent [baseline] (689.845 ms) : 0, 689845
BytebuddyAgent [candidate] (690.849 ms) : 0, 690849
AgentMeter [baseline] (9.231 ms) : 0, 9231
AgentMeter [candidate] (9.113 ms) : 0, 9113
GlobalTracer [baseline] (207.019 ms) : 0, 207019
GlobalTracer [candidate] (206.748 ms) : 0, 206748
AppSec [baseline] (32.63 ms) : 0, 32630
AppSec [candidate] (32.341 ms) : 0, 32341
Debugger [baseline] (66.106 ms) : 0, 66106
Debugger [candidate] (65.428 ms) : 0, 65428
Remote Config [baseline] (574.657 µs) : 0, 575
Remote Config [candidate] (572.343 µs) : 0, 572
Telemetry [baseline] (7.911 ms) : 0, 7911
Telemetry [candidate] (7.94 ms) : 0, 7940
Flare Poller [baseline] (3.612 ms) : 0, 3612
Flare Poller [candidate] (3.599 ms) : 0, 3599
ProfilingAgent [baseline] (94.067 ms) : 0, 94067
ProfilingAgent [candidate] (94.823 ms) : 0, 94823
Profiling [baseline] (94.637 ms) : 0, 94637
Profiling [candidate] (95.398 ms) : 0, 95398

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	dependabot/github_actions/gh-actions-packages-003dc165f5
git_commit_date	1775572357	1775582803
git_commit_sha	`daa425b`	`de4edef`
release_version	1.61.0-SNAPSHOT~daa425b3a4	1.61.0-SNAPSHOT~de4edefc9a

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1775585023	1775585023
ci_job_id	1574261047	1574261047
ci_pipeline_id	106456812	106456812
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-0-jjvmc48v 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-0-jjvmc48v 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 3 performance regressions! Performance is the same for 17 metrics, 16 unstable metrics.

scenario	Δ mean agg_http_req_duration_p50	Δ mean agg_http_req_duration_p95	Δ mean throughput	candidate mean agg_http_req_duration_p50	candidate mean agg_http_req_duration_p95	candidate mean throughput	baseline mean agg_http_req_duration_p50	baseline mean agg_http_req_duration_p95	baseline mean throughput
scenario:load:insecure-bank:iast_FULL:high_load	worse [+285.886µs; +666.442µs] or [+5.593%; +13.037%]	worse [+0.642ms; +1.528ms] or [+5.279%; +12.566%]	unstable [-144.076op/s; +12.826op/s] or [-17.916%; +1.595%]	5.588ms	13.244ms	738.562op/s	5.112ms	12.159ms	804.188op/s
scenario:load:petclinic:profiling:high_load	worse [+0.600ms; +1.793ms] or [+3.330%; +9.956%]	same [-135.627µs; +2072.887µs] or [-0.459%; +7.011%]	unstable [-38.537op/s; +13.099op/s] or [-15.198%; +5.166%]	19.211ms	30.534ms	240.844op/s	18.014ms	29.566ms	253.562op/s

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.61.0-SNAPSHOT~de4edefc9a, baseline=1.61.0-SNAPSHOT~daa425b3a4
    dateFormat X
    axisFormat %s
section baseline
no_agent (19.396 ms) : 19201, 19591
.   : milestone, 19396,
appsec (18.909 ms) : 18717, 19100
.   : milestone, 18909,
code_origins (17.797 ms) : 17622, 17972
.   : milestone, 17797,
iast (18.303 ms) : 18121, 18485
.   : milestone, 18303,
profiling (18.403 ms) : 18220, 18585
.   : milestone, 18403,
tracing (18.166 ms) : 17983, 18348
.   : milestone, 18166,
section candidate
no_agent (18.57 ms) : 18380, 18760
.   : milestone, 18570,
appsec (18.609 ms) : 18427, 18791
.   : milestone, 18609,
code_origins (17.84 ms) : 17666, 18013
.   : milestone, 17840,
iast (17.754 ms) : 17578, 17929
.   : milestone, 17754,
profiling (19.379 ms) : 19181, 19576
.   : milestone, 19379,
tracing (18.002 ms) : 17822, 18182
.   : milestone, 18002,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	19.396 ms [19.201 ms, 19.591 ms]	-
appsec	18.909 ms [18.717 ms, 19.1 ms]	-487.435 µs (-2.5%)
code_origins	17.797 ms [17.622 ms, 17.972 ms]	-1.599 ms (-8.2%)
iast	18.303 ms [18.121 ms, 18.485 ms]	-1.093 ms (-5.6%)
profiling	18.403 ms [18.22 ms, 18.585 ms]	-993.487 µs (-5.1%)
tracing	18.166 ms [17.983 ms, 18.348 ms]	-1.231 ms (-6.3%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	18.57 ms [18.38 ms, 18.76 ms]	-
appsec	18.609 ms [18.427 ms, 18.791 ms]	38.75 µs (0.2%)
code_origins	17.84 ms [17.666 ms, 18.013 ms]	-730.469 µs (-3.9%)
iast	17.754 ms [17.578 ms, 17.929 ms]	-816.624 µs (-4.4%)
profiling	19.379 ms [19.181 ms, 19.576 ms]	808.489 µs (4.4%)
tracing	18.002 ms [17.822 ms, 18.182 ms]	-568.08 µs (-3.1%)

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.61.0-SNAPSHOT~de4edefc9a, baseline=1.61.0-SNAPSHOT~daa425b3a4
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.251 ms) : 1239, 1264
.   : milestone, 1251,
iast (3.291 ms) : 3242, 3340
.   : milestone, 3291,
iast_FULL (5.749 ms) : 5691, 5806
.   : milestone, 5749,
iast_GLOBAL (3.587 ms) : 3534, 3640
.   : milestone, 3587,
profiling (2.078 ms) : 2056, 2100
.   : milestone, 2078,
tracing (1.905 ms) : 1889, 1921
.   : milestone, 1905,
section candidate
no_agent (1.251 ms) : 1239, 1264
.   : milestone, 1251,
iast (3.219 ms) : 3176, 3263
.   : milestone, 3219,
iast_FULL (6.265 ms) : 6200, 6330
.   : milestone, 6265,
iast_GLOBAL (3.65 ms) : 3590, 3710
.   : milestone, 3650,
profiling (2.109 ms) : 2091, 2128
.   : milestone, 2109,
tracing (1.858 ms) : 1843, 1873
.   : milestone, 1858,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.251 ms [1.239 ms, 1.264 ms]	-
iast	3.291 ms [3.242 ms, 3.34 ms]	2.04 ms (163.0%)
iast_FULL	5.749 ms [5.691 ms, 5.806 ms]	4.497 ms (359.3%)
iast_GLOBAL	3.587 ms [3.534 ms, 3.64 ms]	2.335 ms (186.6%)
profiling	2.078 ms [2.056 ms, 2.1 ms]	826.453 µs (66.0%)
tracing	1.905 ms [1.889 ms, 1.921 ms]	653.423 µs (52.2%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.251 ms [1.239 ms, 1.264 ms]	-
iast	3.219 ms [3.176 ms, 3.263 ms]	1.968 ms (157.3%)
iast_FULL	6.265 ms [6.2 ms, 6.33 ms]	5.014 ms (400.7%)
iast_GLOBAL	3.65 ms [3.59 ms, 3.71 ms]	2.399 ms (191.7%)
profiling	2.109 ms [2.091 ms, 2.128 ms]	858.148 µs (68.6%)
tracing	1.858 ms [1.843 ms, 1.873 ms]	606.542 µs (48.5%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	dependabot/github_actions/gh-actions-packages-003dc165f5
git_commit_date	1775572357	1775582803
git_commit_sha	`daa425b`	`de4edef`
release_version	1.61.0-SNAPSHOT~daa425b3a4	1.61.0-SNAPSHOT~de4edefc9a

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1775584722	1775584722
ci_job_id	1574261051	1574261051
ci_pipeline_id	106456812	106456812
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-1-ei2pzqp4 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-1-ei2pzqp4 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.61.0-SNAPSHOT~de4edefc9a, baseline=1.61.0-SNAPSHOT~daa425b3a4
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.486 ms) : 1474, 1497
.   : milestone, 1486,
appsec (3.825 ms) : 3603, 4047
.   : milestone, 3825,
iast (2.259 ms) : 2190, 2329
.   : milestone, 2259,
iast_GLOBAL (2.314 ms) : 2244, 2384
.   : milestone, 2314,
profiling (2.093 ms) : 2038, 2148
.   : milestone, 2093,
tracing (2.078 ms) : 2025, 2132
.   : milestone, 2078,
section candidate
no_agent (1.482 ms) : 1470, 1493
.   : milestone, 1482,
appsec (3.797 ms) : 3574, 4021
.   : milestone, 3797,
iast (2.274 ms) : 2204, 2343
.   : milestone, 2274,
iast_GLOBAL (2.306 ms) : 2236, 2375
.   : milestone, 2306,
profiling (2.089 ms) : 2034, 2144
.   : milestone, 2089,
tracing (2.067 ms) : 2014, 2120
.   : milestone, 2067,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.486 ms [1.474 ms, 1.497 ms]	-
appsec	3.825 ms [3.603 ms, 4.047 ms]	2.34 ms (157.5%)
iast	2.259 ms [2.19 ms, 2.329 ms]	773.582 µs (52.1%)
iast_GLOBAL	2.314 ms [2.244 ms, 2.384 ms]	828.77 µs (55.8%)
profiling	2.093 ms [2.038 ms, 2.148 ms]	607.645 µs (40.9%)
tracing	2.078 ms [2.025 ms, 2.132 ms]	592.671 µs (39.9%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.482 ms [1.47 ms, 1.493 ms]	-
appsec	3.797 ms [3.574 ms, 4.021 ms]	2.316 ms (156.3%)
iast	2.274 ms [2.204 ms, 2.343 ms]	792.097 µs (53.5%)
iast_GLOBAL	2.306 ms [2.236 ms, 2.375 ms]	824.368 µs (55.6%)
profiling	2.089 ms [2.034 ms, 2.144 ms]	607.275 µs (41.0%)
tracing	2.067 ms [2.014 ms, 2.12 ms]	585.653 µs (39.5%)

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.61.0-SNAPSHOT~de4edefc9a, baseline=1.61.0-SNAPSHOT~daa425b3a4
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.489 s) : 15489000, 15489000
.   : milestone, 15489000,
appsec (15.103 s) : 15103000, 15103000
.   : milestone, 15103000,
iast (17.882 s) : 17882000, 17882000
.   : milestone, 17882000,
iast_GLOBAL (17.915 s) : 17915000, 17915000
.   : milestone, 17915000,
profiling (15.033 s) : 15033000, 15033000
.   : milestone, 15033000,
tracing (14.863 s) : 14863000, 14863000
.   : milestone, 14863000,
section candidate
no_agent (14.885 s) : 14885000, 14885000
.   : milestone, 14885000,
appsec (14.633 s) : 14633000, 14633000
.   : milestone, 14633000,
iast (18.072 s) : 18072000, 18072000
.   : milestone, 18072000,
iast_GLOBAL (17.844 s) : 17844000, 17844000
.   : milestone, 17844000,
profiling (14.85 s) : 14850000, 14850000
.   : milestone, 14850000,
tracing (15.086 s) : 15086000, 15086000
.   : milestone, 15086000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.489 s [15.489 s, 15.489 s]	-
appsec	15.103 s [15.103 s, 15.103 s]	-386.0 ms (-2.5%)
iast	17.882 s [17.882 s, 17.882 s]	2.393 s (15.4%)
iast_GLOBAL	17.915 s [17.915 s, 17.915 s]	2.426 s (15.7%)
profiling	15.033 s [15.033 s, 15.033 s]	-456.0 ms (-2.9%)
tracing	14.863 s [14.863 s, 14.863 s]	-626.0 ms (-4.0%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	14.885 s [14.885 s, 14.885 s]	-
appsec	14.633 s [14.633 s, 14.633 s]	-252.0 ms (-1.7%)
iast	18.072 s [18.072 s, 18.072 s]	3.187 s (21.4%)
iast_GLOBAL	17.844 s [17.844 s, 17.844 s]	2.959 s (19.9%)
profiling	14.85 s [14.85 s, 14.85 s]	-35.0 ms (-0.2%)
tracing	15.086 s [15.086 s, 15.086 s]	201.0 ms (1.4%)

dependabot bot added comp: tooling Build & Tooling tag: dependencies Dependencies related changes tag: no release notes Changes to exclude from release notes labels Apr 7, 2026

dependabot bot requested a review from a team as a code owner April 7, 2026 17:26

dependabot bot requested review from amarziali and removed request for a team April 7, 2026 17:26

mhlidd approved these changes Apr 7, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(ci): bump actions/cache from 5.0.3 to 5.0.4 in the gh-actions-packages group#11059

chore(ci): bump actions/cache from 5.0.3 to 5.0.4 in the gh-actions-packages group#11059
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/gh-actions-packages-003dc165f5

dependabot bot commented on behalf of github Apr 7, 2026

Uh oh!

pr-commenter bot commented Apr 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Apr 7, 2026

v5.0.4

What's Changed

New Contributors

Releases

How to prepare a release

Changelog

5.0.4

5.0.3

5.0.2

5.0.1

5.0.0

Uh oh!

pr-commenter bot commented Apr 7, 2026

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant