Update dependency sccache to v0.18.0

[github-actions]

This PR contains the following updates:

Package	Update	Change
sccache	minor	0.15.0 → 0.18.0

---

Release Notes

mozilla/sccache (sccache)

v0.18.0

Compare Source

sccache 0.18.0

Summary

sccache 0.18.0 is a broad correctness and coverage release: a lot of compiler flags that used to
force a cache miss are now understood, several cache-key and multi-level storage bugs are fixed,
and the Azure backend gained passwordless authentication.

Highlights:

• Cache-key correctness: the assembler gcc/clang would actually invoke is now part of the cache
  key, so two toolchains with different binutils can no longer hand each other the wrong object
  file (#​2843). SCCACHE_BASEDIRS now also strips base directories from the compiler arguments,
  so flags like -ffile-prefix-map=/home/user/project=. stop tying an entry to one checkout
  (#​2840).
• MSVC/clang flag coverage: support for /openmp:llvm, the /fsanitize*, /fsanitize-coverage*
  and /fno-sanitize* families, /feature, arm64EC and fastfail, /d20bforceinline, and a large
  batch of other flags (#​2807, #​2830, #​2831, #​2832), plus more clang CLI options (#​2834). gcc now
  marks flags as TooHard when they would require caching something else (#​2833).
• CUDA: nvcc dryrun parsing works with CUDA 13.3 (#​2722), escaped quotes in Windows dryrun
  lines are protected before backslash flattening (#​2811), and the
  --diag-error/--diag-suppress/--diag-warn family is accepted (#​2816).
• Multi-level cache: a chain with any writable level is writable again — a single read-only
  level no longer makes the whole storage read-only (#​2778) — and reads are no longer issued twice
  (#​2835).
• Azure: Microsoft Entra ID (passwordless) authentication for the Azure Blob backend, for
  storage accounts that disable shared-key access (#​2802).
• Distributed compilation: rlibs are no longer trimmed from crates that also emit a cdylib,
  which made those jobs fail on the build server (#​2839).
• Process handling: the jobserver is no longer handed to children that can't use it, which
  restores the posix_spawn fast path for child spawns (#​2827), and daemonization now uses an
  allow-list for inherited file descriptors, fixing make deadlocks caused by leaked jobserver FDs
  (#​2841).
• MSRV is now 1.91.0 (#​2793).

Welcome to 11 new contributors!

Features

• feat: add Microsoft Entra ID (passwordless) auth for the Azure Blob backend by @​babrekel in #​2802
• gcc, clang: make the assembler part of the cache key by @​glandium in #​2843
• Strip basedirs from the compiler arguments too by @​avikivity in #​2840
• cache: allow skipping capability checks by @​Xuanwo in #​2822
• Optimize child process spawns by skipping job server configs by @​rnk in #​2827

Compiler support

• feat: add support for MSVC's /d20bforceinline. by @​AJIOB in #​2807
• msvc: support arm64EC and fastfail flags by @​AJIOB in #​2830
• msvc: backport flags support by @​AJIOB in #​2831
• msvc: support lots of flags by @​AJIOB in #​2832
• clang: support more CLI options by @​AJIOB in #​2834
• gcc: mark flags as TooHard if need to cache something else by @​AJIOB in #​2833
• nvcc: accept the --diag-error/--diag-suppress/--diag-warn family by @​Kataglyphis in #​2816

Fixes

• Fix nvcc dryrun parsing for CUDA 13.3 by @​mbrobbel in #​2722
• nvcc (Windows): protect escaped quotes in dryrun lines before flattening backslashes by @​Kataglyphis in #​2811
• multilevel: a chain with any writable level is writable by @​tycho in #​2778
• cache: avoid duplicate multilevel reads by @​zfaustk in #​2835
• Resolving always-false conditional making some compilers miss for preprocessor checks by @​Joldiges in #​2824
• dist: refuse to trim rlibs from crates that also emit a cdylib by @​gaetschwartz in #​2839
• daemonize: use an allow-list approach to inherited FDs by @​schopin-mozilla in #​2841

Dependencies

• Bump opendal to 0.58.1 and fix fallout (fixes local GCS cache usage) by @​flip1995 in #​2715
• Update shlex dependency to version 2 by @​musicinmybrain in #​2836
• Bump MSRV to 1.91.0 by @​flip1995 in #​2793

Tests & CI

• Fixed hardcoded binary path in test by @​ranger-ross in #​2790
• ci: dump sccache logs on integration failures by @​JalenBuildsHub in #​2851
• tests/integration: replace MinIO with Silo by @​avikivity in #​2853

Cleanup

• Add an agent file by @​sylvestre in #​2812
• chore: fix typo in comment by @​AJIOB in #​2829
• Release 0.18.0 by @​sylvestre in #​2848

New Contributors

• @​mbrobbel made their first contribution in #​2722
• @​flip1995 made their first contribution in #​2793
• @​babrekel made their first contribution in #​2802
• @​Kataglyphis made their first contribution in #​2811
• @​schopin-mozilla made their first contribution in #​2841
• @​Joldiges made their first contribution in #​2824
• @​tycho made their first contribution in #​2778
• @​JalenBuildsHub made their first contribution in #​2851
• @​zfaustk made their first contribution in #​2835
• @​gaetschwartz made their first contribution in #​2839
• @​rnk made their first contribution in #​2827

Full Changelog: mozilla/sccache@v0.17.0...v0.18.0

v0.17.0

Compare Source

sccache 0.17.0

Summary

sccache 0.17.0 is a significant release: it introduces a new client-side architecture.

Until now, every compilation was handed off to the long-lived sccache server, which did the cache
lookup and ran the compiler. In client-side mode, the client process does that work itself - the
server is only consulted for the shared state it owns (compiler info, dist client, stats). This
removes a round-trip and the server-side bottleneck, and gives noticeably better results on
developer workstations.

Client-side mode is opt-in for now: enable it with the SCCACHE_CLIENT_SIDE environment variable
(or the client_side_mode config key). See docs/Architecture.md
for the details.

Other highlights:

• Response files: gcc/clang builds using quoted @response files are now cached and
  distributed correctly (#​2755, #​2772), and Rust @argfile arguments are supported (#​2782).
• Distributed compilation: compile tasks and their subprocesses are now aborted when a client
  disconnects, instead of running to completion on the build server (#​2761, #​2774). The
  ToolchainPackager cfg gate was fixed so the dist code builds on ppc64le and s390x (#​2749).
• S3 SSE-KMS: server-side encryption with KMS keys is now supported (#​2770).
• Diagnostics: gcc color diagnostics now behave the same way as rustc's (#​2758).
• Preprocessor correctness: -ivfsoverlay is treated as a preprocessor-only argument (#​2767).

Welcome to 4 new contributors!

Client-side mode

• Initial client-side implementation by @​glandium in #​2735
• doc: document client-side and direct modes in Architecture.md by @​sylvestre in #​2752

Features

• gcc/clang: cache and distribute builds using quoted @​response files by @​avikivity in #​2755
• Add support for arg files in Rust by @​ranger-ross in #​2782
• feat: support S3 SSE-KMS by @​jpadilla in #​2770
• Make gcc diagnostics color output work the same as for rustc by @​jwidauer in #​2758
• Abort compile tasks and associated subprocesses when a client disconnects by @​trxcllnt in #​2761

Fixes

• Fix ToolchainPackager cfg gate to build on ppc64le/s390x by @​cryptomilk in #​2749
• treat -ivfsoverlay as a preprocessor-only argument by @​glandium in #​2767
• gcc: refine response-file tokenizer visibility and whitespace handling by @​sylvestre in #​2772
• Fix description of Unix socket-based Redis connection by @​Toorero in #​2769

Cleanup

• Simplify the code from pr #​2761 by @​sylvestre in #​2774
• tests: pin libc in the dist test crate by @​sylvestre in #​2784
• Release 0.17.0 by @​sylvestre in #​2783

New Contributors

• @​jwidauer made their first contribution in #​2758
• @​jpadilla made their first contribution in #​2770
• @​ranger-ross made their first contribution in #​2782
• @​Toorero made their first contribution in #​2769

Full Changelog: mozilla/sccache@v0.16.0...v0.17.0

v0.16.0

Compare Source

sccache 0.16.0

Summary

sccache 0.16.0 is a smaller, stabilizing release on top of 0.15.0's multi-tier caching work, with a few new capabilities:

• Read-only backends: Any storage backend can now be marked read-only, not just a select few (#​2705).
• Remote execution on aarch64: Distributed/remote execution now works on Linux aarch64, including fixes for ldd output parsing and toolchain packaging on non-x86_64 Linux (#​2668).
• CUDA: nvcc's --dependency-output argument is now handled (#​2708).
• Resilience: Fall back to a direct cache write when tempfile creation on the same filesystem fails (#​2369), and give a meaningful error when a multi-level chain references a backend that wasn't compiled in (#​2695).
• Client efficiency: The client and dist-client now use a single-threaded tokio runtime, avoiding a thread explosion when many short-lived clients run on many-core hosts (#​2704).
• Correctness: Strip SCCACHE_BASEDIRS from escaped-backslash paths on Windows (#​2736), ignore empty-set environment values in config (#​2639), and avoid the sccache wrapper when resolving the real compiler (#​2720).
• Security/logging: JWT keys and cert digests are now base64-encoded in logs (#​2712), plus general logging improvements (#​2734).

Welcome to 4 new contributors!

Features

• feat: all backends support making them as read-only by @​AJIOB in #​2705
• Enable RE on Linux-aarch64 by @​malfet in #​2668
• feat(nvcc): support argument: --dependency-output by @​ZRHann in #​2708
• feat: avoid sccache wrapper when resolving compiler by @​iTrooz in #​2720
• Fall back to direct cache write if tempfile creation on the same fs fails by @​myzhang1029 in #​2369
• Don't wait depfiles for gcc/clang preprocessed inputs by @​AJIOB in #​2665

Fixes

• fix: strip SCCACHE_BASEDIRS from escaped-backslash paths on Windows by @​rconde01 in #​2736
• fix: ignore empty-set environment values for config by @​AJIOB in #​2639
• fix: handle disabled cache backend features in multilevel chain by @​cryptomilk in #​2695
• fix: use single-threaded tokio runtime in sccache (dist-)client by @​AJIOB in #​2704
• fix: add newline when printing dist-status to stdout by @​iTrooz in #​2710

Logging

• chore: encode jwt key and cert digest with base64 in logs by @​iTrooz in #​2712
• Slightly improve logging by @​glandium in #​2734

Cleanup

• chore: make clippy happy by @​AJIOB in #​2727
• Extract new_client_runtime() helper to DRY up client runtime creation by @​sylvestre in #​2744

New Contributors

• @​ZRHann made their first contribution in #​2708
• @​myzhang1029 made their first contribution in #​2369
• @​malfet made their first contribution in #​2668
• @​rconde01 made their first contribution in #​2736

Full Changelog: mozilla/sccache@v0.15.0...v0.16.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates the Rust toolchain tools list by bumping the sccache tool version.

Changes:

• Bumped sccache from 0.15.0 to 0.16.0 in tools-cargo.json

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.