build(deps): Bump actions/setup-dotnet from 5.4.0 to 6.0.0

[dependabot]

Bumps actions/setup-dotnet from 5.4.0 to 6.0.0.

Release notes

Sourced from actions/setup-dotnet's releases.

v6.0.0

What's Changed

• Migrate to ESM and upgrade dependencies by @​priyagupta108 in actions/setup-dotnet#752
• Bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot[bot] in actions/setup-dotnet#751
• chore(deps): bump @​actions/cache to 6.2.0 by @​philip-gai in actions/setup-dotnet#756

New Contributors

• @​philip-gai made their first contribution in actions/setup-dotnet#756

Full Changelog: actions/setup-dotnet@v5...v6.0.0

Commits

• a98b568 chore(deps): bump @​actions/cache to 6.2.0 (#756)
• afb2931 Bump actions/checkout from 6.0.3 to 7.0.0 (#751)
• 6df8cef Migrate to ESM and upgrade dependencies (#752)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cursor]

Bug Scan Summary

Date: 2026-07-19
Commits inspected: b2ea5cb..31243917 (1 commit — PR #339 only)
Result: No critical bugs found in this PR.

Scope of this PR

PR #339 bumps actions/setup-dotnet from v5.4.0 → v6.0.0 in four workflow files (build.yml, codeql.yml, pre-commit.yml, release.yml). No application/runtime code is touched.

setup-dotnet v6 is an internal ESM migration with no input/output/behavior changes per upstream release notes. This is CI infrastructure only and does not affect production correctness paths.

Master re-check (outside this PR)

Re-traced the two import-finalize regressions introduced in f49384b (v6.12.4) on origin/master:

1. Branch 14 IsFileFiltered gate — TryFinalizeImportedTorrentAsync only runs inside Branch 14, which still requires IsFileFiltered for already-imported rows. Torrents first seen complete (cross-seeds, manual adds) skip Branch 9 file filtering, so Arr-confirmed imports can stall forever with Imported=false and AutoDelete never firing.
2. IsImportedAsync fail-open — Arr queue API errors are swallowed and the method returns true ("imported"), which can prematurely mark DB rows and trigger AutoDelete while the item is still queued.

Both remain on master; fix already exists in draft PR #330 (cursor/bug-finding-automation-2303, commit f2d674f).

Deduplication check

• Open PRs searched: IsFileFiltered, IsImportedAsync, import finalize, setup-dotnet → PR #330 (import fix draft), #339 (this PR), #322/#332/#334/#336/#340/#341 (dep-only)
• Recently merged PRs (14d): dep-only (#329, #331, #333, #335, #337, #338); no import-fix merge
• Open issues searched: IsFileFiltered import, IsImportedAsync → no tracking issues; fix tracked in PR #330
• Conclusion: No new fix needed for this PR. Import regressions already have a draft fix elsewhere.

Action taken: None on this PR. Safe to merge from a production-correctness standpoint.

  

_{Sent by Cursor Automation: Torrentarr - Find critical bugs}