chore(deps): update actions/cache action to v5.0.3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	patch	v5.0.2 → v5.0.3

---

Release Notes

actions/cache (actions/cache)

v5.0.3

Compare Source

What's Changed

• Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
• Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

---

Configuration

📅 Schedule: Branch creation - Only on Sunday ( * * * * 0 ) in timezone US/Central, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Test Results

  120 files  ±0    120 suites  ±0   3m 20s ⏱️ -10s
  251 tests ±0    249 ✅ ±0   2 💤 ±0  0 ❌ ±0 
2 510 runs  ±0  2 480 ✅ ±0  30 💤 ±0  0 ❌ ±0 

Results for commit 063077f. ± Comparison against base commit cae0a88.

♻️ This comment has been updated with latest results.

[bkeryan]

PEP517 build of a dependency failed

Backend subprocess exited when trying to invoke get_requires_for_build_wheel

    | Command '['/var/folders/w0/cd8qgn052r16zsblrrxl1gxw0000gn/T/tmpdj847907/.venv/bin/python', '/Users/runner/work/_temp/poetry/home/lib/python3.10/site-packages/pyproject_hooks/_in_process/_in_process.py', 'get_requires_for_build_wheel', '/var/folders/w0/cd8qgn052r16zsblrrxl1gxw0000gn/T/tmp57oskubd']' returned non-zero exit status 1.
    | 
    | Traceback (most recent call last):
    |   File "/Users/runner/work/_temp/poetry/home/lib/python3.10/site-packages/pyproject_hooks/_in_process/_in_process.py", line 389, in <module>
    |     main()
    |   File "/Users/runner/work/_temp/poetry/home/lib/python3.10/site-packages/pyproject_hooks/_in_process/_in_process.py", line 373, in main
    |     json_out["return_val"] = hook(**hook_input["kwargs"])
    |   File "/Users/runner/work/_temp/poetry/home/lib/python3.10/site-packages/pyproject_hooks/_in_process/_in_process.py", line 143, in get_requires_for_build_wheel
    |     return hook(config_settings)
    |   File "/private/var/folders/w0/cd8qgn052r16zsblrrxl1gxw0000gn/T/tmpdj847907/.venv/lib/python3.10/site-packages/setuptools/build_meta.py", line 333, in get_requires_for_build_wheel
    |     return self._get_build_requires(config_settings, requirements=[])
    |   File "/private/var/folders/w0/cd8qgn052r16zsblrrxl1gxw0000gn/T/tmpdj847907/.venv/lib/python3.10/site-packages/setuptools/build_meta.py", line 301, in _get_build_requires
    |     self.run_setup()
    |   File "/private/var/folders/w0/cd8qgn052r16zsblrrxl1gxw0000gn/T/tmpdj847907/.venv/lib/python3.10/site-packages/setuptools/build_meta.py", line 520, in run_setup
    |     super().run_setup(setup_script=setup_script)
    |   File "/private/var/folders/w0/cd8qgn052r16zsblrrxl1gxw0000gn/T/tmpdj847907/.venv/lib/python3.10/site-packages/setuptools/build_meta.py", line 317, in run_setup
    |     exec(code, locals())
    |   File "<string>", line 30, in <module>
    | ModuleNotFoundError: No module named 'pkg_resources'

Note: This error originates from the build backend, and is likely not a problem with poetry but one of the following issues with grpcio-tools (1.49.1)

  - not supporting PEP 517 builds
  - not specifying PEP 517 build requirements correctly
  - the build requirements are incompatible with your operating system or Python version
  - the build requirements are missing system dependencies (eg: compilers, libraries, headers).

You can verify this by running pip wheel --no-cache-dir --use-pep517 "grpcio-tools (==1.49.1)".

@dixonjoel @jfriedri-ni @mshafer-NI

Poetry is trying to rebuild grpcio-tools from source on macOS, and it's failing because setuptools v82.0.0 removed the pkg_resources module, which grpcio-tools v1.49.1's setup.py used: https://github.com/grpc/grpc/blob/v1.49.1/tools/distrib/python/grpcio_tools/setup.py

Locking package versions in poetry.lock should prevent upgrading setuptools, but maybe this is using an unlocked version of setuptools?

• Our Poetry venv itself does not have a lock file
• Perhaps PEP 517 builds are using unlocked setuptools?

[bkeryan]

Also, why are we rebuilding from source? Because grpcio-tools 1.49.1 has a binary wheel for macOS x64 and the GitHub-hosted runner is macOS arm64 now.

[bkeryan]

I think we have 3 options:

• Upgrade grpcio-tools to v1.62.0 (which will force clients to upgrade if they haven't already)
• Disable the macOS workflows
• Upgrade to Poetry 2.3.x and use tool.poetry.build-constraints to specify grpcio-tools = { setuptools = "<82" } fix: Specify setuptools<82 build constraint for grpcio-tools measurement-plugin-python#1294

[dixonjoel]

It seems like option 1 would be the simplest? Is that just modifying tools/grpc_generator/pyproject.toml? What do you recommend?