Skip to content

chore(deps): update dependency mozilla/sccache to v0.18.0 - #16310

Open
renovate-bot wants to merge 1 commit into
googleapis:mainfrom
renovate-bot:renovate/mozilla-sccache-0.x
Open

renovate-bot wants to merge 1 commit into
googleapis:mainfrom
renovate-bot:renovate/mozilla-sccache-0.x

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
mozilla/sccache minor v0.15.0v0.18.0
mozilla/sccache minor v0.10.0v0.18.0

Release Notes

mozilla/sccache (mozilla/sccache)

v0.18.0

Compare Source

sccache 0.18.0

Summary

sccache 0.18.0 is a broad correctness and coverage release: a lot of compiler flags that used to
force a cache miss are now understood, several cache-key and multi-level storage bugs are fixed,
and the Azure backend gained passwordless authentication.

Highlights:

  • Cache-key correctness: the assembler gcc/clang would actually invoke is now part of the cache
    key, so two toolchains with different binutils can no longer hand each other the wrong object
    file (#​2843). SCCACHE_BASEDIRS now also strips base directories from the compiler arguments,
    so flags like -ffile-prefix-map=/home/user/project=. stop tying an entry to one checkout
    (#​2840).
  • MSVC/clang flag coverage: support for /openmp:llvm, the /fsanitize*, /fsanitize-coverage*
    and /fno-sanitize* families, /feature, arm64EC and fastfail, /d20bforceinline, and a large
    batch of other flags (#​2807, #​2830, #​2831, #​2832), plus more clang CLI options (#​2834). gcc now
    marks flags as TooHard when they would require caching something else (#​2833).
  • CUDA: nvcc dryrun parsing works with CUDA 13.3 (#​2722), escaped quotes in Windows dryrun
    lines are protected before backslash flattening (#​2811), and the
    --diag-error/--diag-suppress/--diag-warn family is accepted (#​2816).
  • Multi-level cache: a chain with any writable level is writable again — a single read-only
    level no longer makes the whole storage read-only (#​2778) — and reads are no longer issued twice
    (#​2835).
  • Azure: Microsoft Entra ID (passwordless) authentication for the Azure Blob backend, for
    storage accounts that disable shared-key access (#​2802).
  • Distributed compilation: rlibs are no longer trimmed from crates that also emit a cdylib,
    which made those jobs fail on the build server (#​2839).
  • Process handling: the jobserver is no longer handed to children that can't use it, which
    restores the posix_spawn fast path for child spawns (#​2827), and daemonization now uses an
    allow-list for inherited file descriptors, fixing make deadlocks caused by leaked jobserver FDs
    (#​2841).
  • MSRV is now 1.91.0 (#​2793).

Welcome to 11 new contributors!

Features

Compiler support

Fixes

Dependencies

Tests & CI

Cleanup

New Contributors

Full Changelog: mozilla/sccache@v0.17.0...v0.18.0

v0.17.0

Compare Source

sccache 0.17.0
Summary

sccache 0.17.0 is a significant release: it introduces a new client-side architecture.

Until now, every compilation was handed off to the long-lived sccache server, which did the cache
lookup and ran the compiler. In client-side mode, the client process does that work itself - the
server is only consulted for the shared state it owns (compiler info, dist client, stats). This
removes a round-trip and the server-side bottleneck, and gives noticeably better results on
developer workstations.

Client-side mode is opt-in for now: enable it with the SCCACHE_CLIENT_SIDE environment variable
(or the client_side_mode config key). See docs/Architecture.md
for the details.

Other highlights:

  • Response files: gcc/clang builds using quoted @response files are now cached and
    distributed correctly (#​2755, #​2772), and Rust @argfile arguments are supported (#​2782).
  • Distributed compilation: compile tasks and their subprocesses are now aborted when a client
    disconnects, instead of running to completion on the build server (#​2761, #​2774). The
    ToolchainPackager cfg gate was fixed so the dist code builds on ppc64le and s390x (#​2749).
  • S3 SSE-KMS: server-side encryption with KMS keys is now supported (#​2770).
  • Diagnostics: gcc color diagnostics now behave the same way as rustc's (#​2758).
  • Preprocessor correctness: -ivfsoverlay is treated as a preprocessor-only argument (#​2767).

Welcome to 4 new contributors!

Client-side mode
Features
Fixes
Cleanup
New Contributors

Full Changelog: mozilla/sccache@v0.16.0...v0.17.0

v0.16.0

Compare Source

sccache 0.16.0
Summary

sccache 0.16.0 is a smaller, stabilizing release on top of 0.15.0's multi-tier caching work, with a few new capabilities:

  • Read-only backends: Any storage backend can now be marked read-only, not just a select few (#​2705).
  • Remote execution on aarch64: Distributed/remote execution now works on Linux aarch64, including fixes for ldd output parsing and toolchain packaging on non-x86_64 Linux (#​2668).
  • CUDA: nvcc's --dependency-output argument is now handled (#​2708).
  • Resilience: Fall back to a direct cache write when tempfile creation on the same filesystem fails (#​2369), and give a meaningful error when a multi-level chain references a backend that wasn't compiled in (#​2695).
  • Client efficiency: The client and dist-client now use a single-threaded tokio runtime, avoiding a thread explosion when many short-lived clients run on many-core hosts (#​2704).
  • Correctness: Strip SCCACHE_BASEDIRS from escaped-backslash paths on Windows (#​2736), ignore empty-set environment values in config (#​2639), and avoid the sccache wrapper when resolving the real compiler (#​2720).
  • Security/logging: JWT keys and cert digests are now base64-encoded in logs (#​2712), plus general logging improvements (#​2734).

Welcome to 4 new contributors!

Features
Fixes
Logging
Cleanup
New Contributors

Full Changelog: mozilla/sccache@v0.15.0...v0.16.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Monday through Friday (* * * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot
renovate-bot requested a review from a team as a code owner August 3, 2026 14:06
@dpebot

dpebot commented Aug 3, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the sccache version to v0.17.0 across multiple CI Dockerfiles. The reviewer suggests defining the version string using a Docker ARG to reduce duplication and improve maintainability across these files.

Comment on lines 90 to 93
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v0.17.0/sccache-v0.17.0-x86_64-unknown-linux-musl.tar.gz | \
tar -zxf - --strip-components=1 && \
mkdir -p /usr/local/bin && \
mv sccache /usr/local/bin/sccache && \

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

According to the repository's general rules, we should use an ARG to define version strings that are duplicated across multiple Dockerfiles. This improves maintainability and allows overriding the version at build time.

ARG SCCACHE_VERSION=0.17.0
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v${SCCACHE_VERSION}/sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl.tar.gz | \
    tar -zxf - --strip-components=1 && \
    mkdir -p /usr/local/bin && \
    mv sccache /usr/local/bin/sccache && \
References
  1. In Dockerfiles, use ARG to define version strings that are duplicated across multiple files to improve maintainability.

Comment on lines 171 to 174
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v0.17.0/sccache-v0.17.0-x86_64-unknown-linux-musl.tar.gz | \
tar -zxf - --strip-components=1 && \
mkdir -p /usr/local/bin && \
mv sccache /usr/local/bin/sccache && \

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

According to the repository's general rules, we should use an ARG to define version strings that are duplicated across multiple Dockerfiles. This improves maintainability and allows overriding the version at build time.

ARG SCCACHE_VERSION=0.17.0
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v${SCCACHE_VERSION}/sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl.tar.gz | \
    tar -zxf - --strip-components=1 && \
    mkdir -p /usr/local/bin && \
    mv sccache /usr/local/bin/sccache && \
References
  1. In Dockerfiles, use ARG to define version strings that are duplicated across multiple files to improve maintainability.

Comment on lines 152 to 155
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v0.17.0/sccache-v0.17.0-x86_64-unknown-linux-musl.tar.gz | \
tar -zxf - --strip-components=1 && \
mkdir -p /usr/local/bin && \
mv sccache /usr/local/bin/sccache && \

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

According to the repository's general rules, we should use an ARG to define version strings that are duplicated across multiple Dockerfiles. This improves maintainability and allows overriding the version at build time.

ARG SCCACHE_VERSION=0.17.0
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v${SCCACHE_VERSION}/sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl.tar.gz | \
    tar -zxf - --strip-components=1 && \
    mkdir -p /usr/local/bin && \
    mv sccache /usr/local/bin/sccache && \
References
  1. In Dockerfiles, use ARG to define version strings that are duplicated across multiple files to improve maintainability.

Comment on lines 134 to 137
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v0.17.0/sccache-v0.17.0-x86_64-unknown-linux-musl.tar.gz | \
tar -zxf - --strip-components=1 && \
mkdir -p /usr/local/bin && \
mv sccache /usr/local/bin/sccache && \

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

According to the repository's general rules, we should use an ARG to define version strings that are duplicated across multiple Dockerfiles. This improves maintainability and allows overriding the version at build time.

ARG SCCACHE_VERSION=0.17.0
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v${SCCACHE_VERSION}/sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl.tar.gz | \
    tar -zxf - --strip-components=1 && \
    mkdir -p /usr/local/bin && \
    mv sccache /usr/local/bin/sccache && \
References
  1. In Dockerfiles, use ARG to define version strings that are duplicated across multiple files to improve maintainability.

Comment on lines 170 to 173
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v0.17.0/sccache-v0.17.0-x86_64-unknown-linux-musl.tar.gz | \
tar -zxf - --strip-components=1 && \
mkdir -p /usr/local/bin && \
mv sccache /usr/local/bin/sccache && \

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

According to the repository's general rules, we should use an ARG to define version strings that are duplicated across multiple Dockerfiles. This improves maintainability and allows overriding the version at build time.

ARG SCCACHE_VERSION=0.17.0
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v${SCCACHE_VERSION}/sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl.tar.gz | \
    tar -zxf - --strip-components=1 && \
    mkdir -p /usr/local/bin && \
    mv sccache /usr/local/bin/sccache && \
References
  1. In Dockerfiles, use ARG to define version strings that are duplicated across multiple files to improve maintainability.

Comment on lines 127 to 130
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v0.17.0/sccache-v0.17.0-x86_64-unknown-linux-musl.tar.gz | \
tar -zxf - --strip-components=1 && \
mkdir -p /usr/local/bin && \
mv sccache /usr/local/bin/sccache && \

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

According to the repository's general rules, we should use an ARG to define version strings that are duplicated across multiple Dockerfiles. This improves maintainability and allows overriding the version at build time.

ARG SCCACHE_VERSION=0.17.0
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v${SCCACHE_VERSION}/sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl.tar.gz | \
    tar -zxf - --strip-components=1 && \
    mkdir -p /usr/local/bin && \
    mv sccache /usr/local/bin/sccache && \
References
  1. In Dockerfiles, use ARG to define version strings that are duplicated across multiple files to improve maintainability.

Comment on lines 125 to 128
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v0.17.0/sccache-v0.17.0-x86_64-unknown-linux-musl.tar.gz | \
tar -zxf - --strip-components=1 && \
mkdir -p /usr/local/bin && \
mv sccache /usr/local/bin/sccache && \

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

According to the repository's general rules, we should use an ARG to define version strings that are duplicated across multiple Dockerfiles. This improves maintainability and allows overriding the version at build time.

ARG SCCACHE_VERSION=0.17.0
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v${SCCACHE_VERSION}/sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl.tar.gz | \
    tar -zxf - --strip-components=1 && \
    mkdir -p /usr/local/bin && \
    mv sccache /usr/local/bin/sccache && \
References
  1. In Dockerfiles, use ARG to define version strings that are duplicated across multiple files to improve maintainability.

Comment on lines 151 to 154
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v0.17.0/sccache-v0.17.0-x86_64-unknown-linux-musl.tar.gz | \
tar -zxf - --strip-components=1 && \
mkdir -p /usr/local/bin && \
mv sccache /usr/local/bin/sccache && \

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

According to the repository's general rules, we should use an ARG to define version strings that are duplicated across multiple Dockerfiles. This improves maintainability and allows overriding the version at build time.

ARG SCCACHE_VERSION=0.17.0
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v${SCCACHE_VERSION}/sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl.tar.gz | \
    tar -zxf - --strip-components=1 && \
    mkdir -p /usr/local/bin && \
    mv sccache /usr/local/bin/sccache && \
References
  1. In Dockerfiles, use ARG to define version strings that are duplicated across multiple files to improve maintainability.

Comment on lines 196 to 199
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v0.17.0/sccache-v0.17.0-x86_64-unknown-linux-musl.tar.gz | \
tar -zxf - --strip-components=1 && \
mkdir -p /usr/local/bin && \
mv sccache /usr/local/bin/sccache && \

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

According to the repository's general rules, we should use an ARG to define version strings that are duplicated across multiple Dockerfiles. This improves maintainability and allows overriding the version at build time.

ARG SCCACHE_VERSION=0.17.0
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v${SCCACHE_VERSION}/sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl.tar.gz | \
    tar -zxf - --strip-components=1 && \
    mkdir -p /usr/local/bin && \
    mv sccache /usr/local/bin/sccache && \
References
  1. In Dockerfiles, use ARG to define version strings that are duplicated across multiple files to improve maintainability.

Comment on lines 195 to 198
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v0.17.0/sccache-v0.17.0-x86_64-unknown-linux-musl.tar.gz | \
tar -zxf - --strip-components=1 && \
mkdir -p /usr/local/bin && \
mv sccache /usr/local/bin/sccache && \

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

According to the repository's general rules, we should use an ARG to define version strings that are duplicated across multiple Dockerfiles. This improves maintainability and allows overriding the version at build time.

ARG SCCACHE_VERSION=0.17.0
RUN curl -fsSL https://github.com/mozilla/sccache/releases/download/v${SCCACHE_VERSION}/sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl.tar.gz | \
    tar -zxf - --strip-components=1 && \
    mkdir -p /usr/local/bin && \
    mv sccache /usr/local/bin/sccache && \
References
  1. In Dockerfiles, use ARG to define version strings that are duplicated across multiple files to improve maintainability.

@codecov

codecov Bot commented Aug 3, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.30%. Comparing base (b924104) to head (12ba3d3).

Additional details and impacted files
@@           Coverage Diff           @@
##             main   #16310   +/-   ##
=======================================
  Coverage   92.30%   92.30%           
=======================================
  Files        2246     2246           
  Lines      213529   213529           
=======================================
+ Hits       197088   197091    +3     
+ Misses      16441    16438    -3     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@scotthart scotthart added the do not merge Indicates a pull request not ready for merge, due to either quality or timing. label Aug 3, 2026
@scotthart

Copy link
Copy Markdown
Member

We may need to do some additional testing before moving to a newer version of sccache. See #16183

@renovate-bot
renovate-bot force-pushed the renovate/mozilla-sccache-0.x branch from 26bc3b7 to 62c20c3 Compare August 24, 2026 21:12
@dpebot

dpebot commented Aug 24, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@dpebot

dpebot commented Sep 7, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@dpebot

dpebot commented Sep 8, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@renovate-bot
renovate-bot force-pushed the renovate/mozilla-sccache-0.x branch from ef0ff2f to 12ba3d3 Compare September 14, 2026 15:40
@renovate-bot renovate-bot changed the title chore(deps): update dependency mozilla/sccache to v0.17.0 chore(deps): update dependency mozilla/sccache to v0.18.0 Sep 14, 2026
@dpebot

dpebot commented Sep 14, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

do not merge Indicates a pull request not ready for merge, due to either quality or timing.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants