Release 2.28.7

Reverts 285438a9d9.
Fixed in b40e006fab.

.github/.cspell/project-dictionary.txt

@@ -1,4 +1,5 @@
 almalinux
+bindgen
 binstall
 coreutils
 distro
@@ -18,7 +19,6 @@ pwsh
 quickinstall
 rdme
 sccache
-shellcheck
 shfmt
 syft
 udeps

.github/workflows/ci.yml

@@ -55,7 +55,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     timeout-minutes: 60
     steps:
-      - uses: taiki-e/github-actions/checkout@main
+      - uses: taiki-e/checkout-action@v1
       # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
       - run: rm Cargo.toml
       - name: Generate tool list
@@ -130,7 +130,7 @@ jobs:
         run: apk --no-cache add bash cargo
         shell: sh
         if: startsWith(matrix.container, 'alpine')
-      - uses: taiki-e/github-actions/checkout@main
+      - uses: taiki-e/checkout-action@v1
       # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
       - run: rm Cargo.toml
       - name: Generate tool list
@@ -145,7 +145,7 @@ jobs:
     timeout-minutes: 60
     container: ubuntu:22.04
     steps:
-      - uses: taiki-e/github-actions/checkout@main
+      - uses: taiki-e/checkout-action@v1
       - name: Generate tool list
         id: tool-list
         run: tools/ci/tool-list.sh >>"${GITHUB_OUTPUT}"
@@ -160,7 +160,7 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: taiki-e/github-actions/checkout@main
+      - uses: taiki-e/checkout-action@v1
       - name: Install Rust
         run: rustup toolchain add nightly --no-self-update && rustup default nightly
       - run: tools/manifest.sh

.github/workflows/release.yml

@@ -20,7 +20,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: taiki-e/github-actions/checkout@main
+      - uses: taiki-e/checkout-action@v1
       - uses: taiki-e/create-gh-release-action@v1
         with:
           changelog: CHANGELOG.md

.gitignore

@@ -1,5 +1,6 @@
 target
 Cargo.lock
+.venv
 tmp
 
 # For platform and editor specific settings, it is recommended to add to

CHANGELOG.md

@@ -10,6 +10,40 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [2.28.7] - 2024-03-09
+
+- Update `just@latest` to 1.25.0.
+
+## [2.28.6] - 2024-03-08
+
+- Update `biome@latest` to 1.6.0.
+
+## [2.28.5] - 2024-03-08
+
+- Update `shellcheck@latest` to 0.10.0.
+
+## [2.28.4] - 2024-03-06
+
+- Update `syft@latest` to 1.0.1.
+
+## [2.28.3] - 2024-03-06
+
+- Update `cargo-hack@latest` to 0.6.21.
+
+## [2.28.2] - 2024-03-06
+
+- Update `cargo-deny@latest` to 0.14.16.
+
+- Update `parse-changelog@latest` to 0.6.5.
+
+## [2.28.1] - 2024-03-04
+
+- Update `wasm-bindgen@latest` to 0.2.92.
+
+## [2.28.0] - 2024-03-02
+
+- Support `wasm-bindgen`. ([#383](https://github.com/taiki-e/install-action/pull/383), thanks @Ekleog)
+
 - Support `sccache`. ([#390](https://github.com/taiki-e/install-action/pull/390))
 
 ## [2.27.15] - 2024-03-02
@@ -1833,7 +1867,15 @@ Note: This release is considered a breaking change because installing on version
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.27.15...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.28.7...HEAD
+[2.28.7]: https://github.com/taiki-e/install-action/compare/v2.28.6...v2.28.7
+[2.28.6]: https://github.com/taiki-e/install-action/compare/v2.28.5...v2.28.6
+[2.28.5]: https://github.com/taiki-e/install-action/compare/v2.28.4...v2.28.5
+[2.28.4]: https://github.com/taiki-e/install-action/compare/v2.28.3...v2.28.4
+[2.28.3]: https://github.com/taiki-e/install-action/compare/v2.28.2...v2.28.3
+[2.28.2]: https://github.com/taiki-e/install-action/compare/v2.28.1...v2.28.2
+[2.28.1]: https://github.com/taiki-e/install-action/compare/v2.28.0...v2.28.1
+[2.28.0]: https://github.com/taiki-e/install-action/compare/v2.27.15...v2.28.0
 [2.27.15]: https://github.com/taiki-e/install-action/compare/v2.27.14...v2.27.15
 [2.27.14]: https://github.com/taiki-e/install-action/compare/v2.27.13...v2.27.14
 [2.27.13]: https://github.com/taiki-e/install-action/compare/v2.27.12...v2.27.13

README.md

@@ -114,6 +114,7 @@ https://spdx.org/licenses
 | [**shfmt**](https://github.com/mvdan/sh) | `/usr/local/bin` | [GitHub Releases](https://github.com/mvdan/sh/releases) | Linux, macOS, Windows | [BSD-3-Clause](https://github.com/mvdan/sh/blob/HEAD/LICENSE) |
 | [**syft**](https://github.com/anchore/syft) | `/usr/local/bin` | [Github Releases](https://github.com/anchore/syft/releases) | Linux, macOS, Windows | [Apache-2.0](https://github.com/anchore/syft/blob/HEAD/LICENSE) |
 | [**valgrind**](https://valgrind.org) | `/snap/bin` | [snap](https://snapcraft.io/install/valgrind/ubuntu) | Linux | [GPL-2.0-or-later](https://valgrind.org/docs/manual/license.gpl.html) |
+| [**wasm-bindgen**](https://github.com/rustwasm/wasm-bindgen) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/rustwasm/wasm-bindgen/releases) | Linux, macOS, Windows | [Apache-2.0](https://github.com/rustwasm/wasm-bindgen/blob/HEAD/LICENSE-APACHE) OR [MIT](https://github.com/rustwasm/wasm-bindgen/blob/HEAD/LICENSE-MIT) |
 | [**wasm-pack**](https://github.com/rustwasm/wasm-pack) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/rustwasm/wasm-pack/releases) | Linux, macOS, Windows | [Apache-2.0](https://github.com/rustwasm/wasm-pack/blob/HEAD/LICENSE-APACHE) OR [MIT](https://github.com/rustwasm/wasm-pack/blob/HEAD/LICENSE-MIT) |
 | [**wasmtime**](https://github.com/bytecodealliance/wasmtime) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/bytecodealliance/wasmtime/releases) | Linux, macOS, Windows | [Apache-2.0 WITH LLVM-exception](https://github.com/bytecodealliance/wasmtime/blob/HEAD/LICENSE) |
 | [**xbuild**](https://github.com/rust-mobile/xbuild) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/rust-mobile/xbuild/releases) | Linux, macOS, Windows | Apache-2.0 OR MIT |

main.sh

@@ -54,18 +54,26 @@ download_and_checksum() {
 }
 download_and_extract() {
     local url="$1"
-    local checksum="$2"
-    local bin_dir="$3"
-    local bin_in_archive="$4" # path to bin in archive
+    shift
+    local checksum="$1"
+    shift
+    local bin_dir="$1"
+    shift
+    local bin_in_archive=("$@") # path to bin in archive
     if [[ "${bin_dir}" == "${install_action_dir}/bin" ]]; then
         init_install_action_bin_dir
     fi
 
-    local installed_bin
-    # xbuild's binary name is "x", as opposed to the usual crate name
+    installed_bin=()
+    local tmp
     case "${tool}" in
-        xbuild) installed_bin="${bin_dir}/x" ;;
-        *) installed_bin="${bin_dir}/$(basename "${bin_in_archive}")" ;;
+        # xbuild's binary name is "x", as opposed to the usual crate name
+        xbuild) installed_bin=("${bin_dir}/x") ;;
+        *)
+            for tmp in "${bin_in_archive[@]}"; do
+                installed_bin+=("${bin_dir}/$(basename "${tmp}")")
+            done
+            ;;
     esac
 
     local tar_args=()
@@ -119,19 +127,23 @@ download_and_extract() {
         download_and_checksum "${url}" "${checksum}"
         if [[ ${#tar_args[@]} -gt 0 ]]; then
             tar_args+=("tmp")
-            local components
-            components=$(tr <<<"${bin_in_archive}" -cd '/' | wc -c)
-            if [[ "${components}" != "0" ]]; then
-                tar_args+=(--strip-components "${components}")
-            fi
-            tar "${tar_args[@]}" -C "${bin_dir}" "${bin_in_archive}"
+            tar "${tar_args[@]}"
+            for tmp in "${bin_in_archive[@]}"; do
+                mv "${tmp}" "${bin_dir}/"
+            done
         else
             case "${url}" in
                 *.zip)
                     unzip -q tmp "${bin_in_archive#\./}"
-                    mv "${bin_in_archive}" "${bin_dir}/"
+                    for tmp in "${bin_in_archive[@]}"; do
+                        mv "${tmp}" "${bin_dir}/"
+                    done
+                    ;;
+                *)
+                    for tmp in "${installed_bin[@]}"; do
+                        mv tmp "${tmp}"
+                    done
                     ;;
-                *) mv tmp "${installed_bin}" ;;
             esac
         fi
     )
@@ -139,9 +151,11 @@ download_and_extract() {
 
     case "${host_os}" in
         linux | macos)
-            if [[ ! -x "${installed_bin}" ]]; then
-                chmod +x "${installed_bin}"
-            fi
+            for tmp in "${installed_bin[@]}"; do
+                if [[ ! -x "${tmp}" ]]; then
+                    chmod +x "${tmp}"
+                fi
+            done
             ;;
     esac
 }
@@ -198,15 +212,31 @@ read_download_info() {
     fi
     checksum=$(call_jq <<<"${download_info}" -r '.checksum')
     url=$(call_jq <<<"${download_info}" -r '.url')
+    local tmp
+    bin_in_archive=()
     if [[ "${url}" == "null" ]]; then
         local template
         template=$(call_jq -r ".template.${host_platform}" "${manifest_dir}/${tool}.json")
         url=$(call_jq <<<"${template}" -r '.url')
         url="${url//\$\{version\}/${exact_version}}"
-        bin_in_archive=$(call_jq <<<"${template}" -r '.bin')
-        bin_in_archive="${bin_in_archive//\$\{version\}/${exact_version}}"
+        tmp=$(call_jq <<<"${template}" -r '.bin' | sed -E "s/\\$\\{version\\}/${exact_version}/g")
+        if [[ "${tmp}" == *"["* ]]; then
+            # shellcheck disable=SC2207
+            bin_in_archive=($(call_jq <<<"${template}" -r '.bin[]' | sed -E "s/\\$\\{version\\}/${exact_version}/g"))
+        fi
     else
-        bin_in_archive=$(call_jq <<<"${download_info}" -r '.bin')
+        tmp=$(call_jq <<<"${download_info}" -r '.bin')
+        if [[ "${tmp}" == *"["* ]]; then
+            # shellcheck disable=SC2207
+            bin_in_archive=($(call_jq <<<"${download_info}" -r '.bin[]'))
+        fi
+    fi
+    if [[ ${#bin_in_archive[@]} -eq 0 ]]; then
+        if [[ "${tmp}" == "null" ]]; then
+            bin_in_archive=("${tool}${exe}")
+        else
+            bin_in_archive=("${tmp}")
+        fi
     fi
     if [[ "${rust_crate}" == "null" ]]; then
         if [[ "${host_os}" == "windows" ]] || [[ ! -e /usr/local/bin ]]; then
@@ -217,9 +247,6 @@ read_download_info() {
     else
         bin_dir="${cargo_bin}"
     fi
-    if [[ "${bin_in_archive}" == "null" ]]; then
-        bin_in_archive="${tool}${exe}"
-    fi
 }
 download_from_manifest() {
     read_manifest "$@"
@@ -227,7 +254,7 @@ download_from_manifest() {
 }
 download_from_download_info() {
     read_download_info "$@"
-    download_and_extract "${url}" "${checksum}" "${bin_dir}" "${bin_in_archive}"
+    download_and_extract "${url}" "${checksum}" "${bin_dir}" "${bin_in_archive[@]}"
 }
 install_cargo_binstall() {
     local binstall_version
@@ -540,6 +567,7 @@ for tool in "${tools[@]}"; do
     else
         version="latest"
     fi
+    installed_bin=()
     case "${tool}" in
         protoc)
             info "installing ${tool}@${version}"
@@ -576,6 +604,7 @@ for tool in "${tools[@]}"; do
                 fi
             )
             rm -rf "${tmp_dir}"
+            installed_bin=("${tool}${exe}")
             ;;
         valgrind)
             info "installing ${tool}@${version}"
@@ -593,6 +622,7 @@ for tool in "${tools[@]}"; do
             # Use snap to install the latest Valgrind
             # https://snapcraft.io/install/valgrind/ubuntu
             snap_install valgrind --classic
+            installed_bin=("${tool}${exe}")
             ;;
         cargo-binstall)
             case "${version}" in
@@ -651,41 +681,50 @@ for tool in "${tools[@]}"; do
             ;;
     esac
 
-    case "${tool}" in
-        xbuild) tool_bin="x" ;;
-        *) tool_bin="${tool}" ;;
-    esac
-    installed_at=$(type -P "${tool_bin}${exe}" || echo "")
-    if [[ -n "${installed_at}" ]]; then
-        tool_bin="${tool_bin}${exe}"
-    else
+    tool_bin_stems=()
+    for tool_bin in "${installed_bin[@]}"; do
+        tool_bin=$(basename "${tool_bin}")
+        tool_bin_stem="${tool_bin%.exe}"
         installed_at=$(type -P "${tool_bin}" || echo "")
-    fi
-    if [[ -n "${installed_at}" ]]; then
-        info "${tool} installed at ${installed_at}"
-    else
-        warn "${tool} should be installed at ${bin_dir:+"${bin_dir}/"}${tool_bin}${exe}; but ${tool_bin}${exe} not found in path"
-    fi
-    # cargo-udeps 0.1.30 and wasm-pack 0.12.0 do not support --version option.
-    case "${tool}" in
-        biome) rx "${tool_bin}" --version || true ;; # biome up to 1.2.2 exits with 1 on --version and  --help
-        cargo-careful | cargo-machete) ;;            # cargo-careful 0.3.4 and cargo-machete 0.5.0 do not support neither --version nor --help option.
-        cargo-*)
-            case "${tool}" in
-                cargo-valgrind) rx "${tool_bin}" "${tool#cargo-}" --help ;; # cargo-valgrind 2.1.0's --version option just calls cargo's --version option
-                *)
-                    if ! rx "${tool_bin}" "${tool#cargo-}" --version; then
-                        rx "${tool_bin}" "${tool#cargo-}" --help
-                    fi
-                    ;;
-            esac
-            ;;
-        *)
-            if ! rx "${tool_bin}" --version; then
-                rx "${tool_bin}" --help
-            fi
-            ;;
-    esac
+        if [[ -z "${installed_at}" ]]; then
+            tool_bin="${tool_bin_stem}"
+            installed_at=$(type -P "${tool_bin}" || echo "")
+        fi
+        if [[ -n "${installed_at}" ]]; then
+            info "${tool_bin_stem} installed at ${installed_at}"
+        else
+            warn "${tool_bin_stem} should be installed at ${bin_dir:+"${bin_dir}/"}${tool_bin}${exe}; but ${tool_bin}${exe} not found in path"
+        fi
+        tool_bin_stems+=("${tool_bin_stem}")
+    done
+    for tool_bin_stem in "${tool_bin_stems[@]}"; do
+        # cargo-udeps 0.1.30 and wasm-pack 0.12.0 do not support --version flag.
+        case "${tool_bin_stem}" in
+            # biome up to 1.2.2 exits with 1 on both --version and --help flags.
+            # cargo-machete up to 0.6.0 does not support --version flag.
+            biome | cargo-machete) rx "${tool_bin_stem}" --version || true ;;
+            # these packages support neither --version nor --help flag.
+            cargo-careful | wasm-bindgen-test-runner) ;;
+            # wasm2es6js does not support --version flag and --help flag doesn't contains version info.
+            wasm2es6js) ;;
+            cargo-*)
+                case "${tool_bin_stem}" in
+                    # cargo-valgrind 2.1.0's --version flag just calls cargo's --version flag
+                    cargo-valgrind) rx "${tool_bin_stem}" "${tool_bin_stem#cargo-}" --help ;;
+                    *)
+                        if ! rx "${tool_bin_stem}" "${tool_bin_stem#cargo-}" --version; then
+                            rx "${tool_bin_stem}" "${tool_bin_stem#cargo-}" --help
+                        fi
+                        ;;
+                esac
+                ;;
+            *)
+                if ! rx "${tool_bin_stem}" --version; then
+                    rx "${tool_bin_stem}" --help
+                fi
+                ;;
+        esac
+    done
     echo
 done
 

manifests/biome.json

@@ -35,10 +35,33 @@
     }
   },
   "latest": {
-    "version": "1.5.3"
+    "version": "1.6.0"
   },
   "1": {
-    "version": "1.5.3"
+    "version": "1.6.0"
+  },
+  "1.6": {
+    "version": "1.6.0"
+  },
+  "1.6.0": {
+    "x86_64_linux_musl": {
+      "checksum": "4a76d09b1c06c3b7c486e99c899076d4f60f8b34d0bb9b41a61abee16345a99c"
+    },
+    "x86_64_macos": {
+      "checksum": "4cf6468c39e3eb45a5bfc4d65365d1b748470d0f97235471263ef7dd66b2bae5"
+    },
+    "x86_64_windows": {
+      "checksum": "43a2df63d8bc3c1afe3560d9a2c4629d6961d31b99d251446ce359e1ce7844dd"
+    },
+    "aarch64_linux_musl": {
+      "checksum": "7897c55191a8c500107764102c0cc5e29f5817829cd4eda6d9e1236aec95cdf7"
+    },
+    "aarch64_macos": {
+      "checksum": "396602d624fe1a68a6ea59a4d75bd43d2643f9283c543e240a86fbd3d21192b6"
+    },
+    "aarch64_windows": {
+      "checksum": "04e5fb6d337f468ab50fae1d2586dd210a8d6adb2cf4879011119b1dcb8446a1"
+    }
   },
   "1.5": {
     "version": "1.5.3"

manifests/cargo-deny.json

@@ -19,10 +19,24 @@
     }
   },
   "latest": {
-    "version": "0.14.15"
+    "version": "0.14.16"
   },
   "0.14": {
-    "version": "0.14.15"
+    "version": "0.14.16"
+  },
+  "0.14.16": {
+    "x86_64_linux_musl": {
+      "checksum": "7b09aafdc42eeae5d67e523469a69e5b5dc65edb87d87fa68b3c014c9a27d780"
+    },
+    "x86_64_macos": {
+      "checksum": "fa2efa5be935d684ba62c64950041eda7ed81af6b49608c6c8bad3c6f140eb2d"
+    },
+    "x86_64_windows": {
+      "checksum": "7d977cb7f37064bda9711adb5d6574f07634aa50b3eaf612ab134b07727e2e6d"
+    },
+    "aarch64_macos": {
+      "checksum": "285cf6fb30341652e07135fd2fdb083455211527985c8cb2f889804a4068cd3e"
+    }
   },
   "0.14.15": {
     "x86_64_linux_musl": {

manifests/cargo-hack.json

@@ -2,10 +2,36 @@
   "rust_crate": "cargo-hack",
   "template": null,
   "latest": {
-    "version": "0.6.20"
+    "version": "0.6.21"
   },
   "0.6": {
-    "version": "0.6.20"
+    "version": "0.6.21"
+  },
+  "0.6.21": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/taiki-e/cargo-hack/releases/download/v0.6.21/cargo-hack-x86_64-unknown-linux-musl.tar.gz",
+      "checksum": "4d1cc13c72ac620df9265506ad8dd03f84117c8c653586be3d73590e013fe9a8"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/taiki-e/cargo-hack/releases/download/v0.6.21/cargo-hack-x86_64-apple-darwin.tar.gz",
+      "checksum": "675e3a63d6e741a53363e71b29f7babd1f685cfa14168b8914116cdb176f38e0"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/taiki-e/cargo-hack/releases/download/v0.6.21/cargo-hack-x86_64-pc-windows-msvc.tar.gz",
+      "checksum": "f57ea407c7a2a11c6e31102087b8689c44ecdd8f8eb7c76fe98002cc7efd2f84"
+    },
+    "aarch64_linux_musl": {
+      "url": "https://github.com/taiki-e/cargo-hack/releases/download/v0.6.21/cargo-hack-aarch64-unknown-linux-musl.tar.gz",
+      "checksum": "52159eb4d6b03441d6a696dc52dd3c46ff06b4983df8524c5d908bcd53c9425d"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/taiki-e/cargo-hack/releases/download/v0.6.21/cargo-hack-aarch64-apple-darwin.tar.gz",
+      "checksum": "e37a2eaa79cb04d8868d8c23f45af296433d60b75181bed0be49650cfd7c0c6e"
+    },
+    "aarch64_windows": {
+      "url": "https://github.com/taiki-e/cargo-hack/releases/download/v0.6.21/cargo-hack-aarch64-pc-windows-msvc.tar.gz",
+      "checksum": "faa6323ebb18e54038b19c61d138793c9b1e31dd64e337cbc64cc283faa62a3c"
+    }
   },
   "0.6.20": {
     "x86_64_linux_musl": {

manifests/just.json

@@ -18,10 +18,30 @@
     }
   },
   "latest": {
-    "version": "1.24.0"
+    "version": "1.25.0"
   },
   "1": {
-    "version": "1.24.0"
+    "version": "1.25.0"
+  },
+  "1.25": {
+    "version": "1.25.0"
+  },
+  "1.25.0": {
+    "x86_64_linux_musl": {
+      "checksum": "1eeda5d8b319ce7868ee43748687f849e5a9ec2d03f64e0ebeda05af08f67af4"
+    },
+    "x86_64_macos": {
+      "checksum": "fbf2ef5ab53470c9fbce7f76b87008145addea90671148850e01ac204e3b461b"
+    },
+    "x86_64_windows": {
+      "checksum": "76a99c45395ccae0c2e8d95886c7059fde8f2f6cb25c697f55fd9252fe4930ea"
+    },
+    "aarch64_linux_musl": {
+      "checksum": "c73a41acce0f0913405e33009d60645824576a1177039bed9c7575f4c153eb0f"
+    },
+    "aarch64_macos": {
+      "checksum": "cbea371d2e15e94b33f3097eaf0ec97906c7b41ed81cf2d7d3ca972f1774f3ea"
+    }
   },
   "1.24": {
     "version": "1.24.0"

manifests/parse-changelog.json

@@ -2,10 +2,36 @@
   "rust_crate": "parse-changelog",
   "template": null,
   "latest": {
-    "version": "0.6.4"
+    "version": "0.6.5"
   },
   "0.6": {
-    "version": "0.6.4"
+    "version": "0.6.5"
+  },
+  "0.6.5": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/taiki-e/parse-changelog/releases/download/v0.6.5/parse-changelog-x86_64-unknown-linux-musl.tar.gz",
+      "checksum": "73ab820f50a26cce5548e1c6d3e4e97fa008bbad80c4bc844fcc5e89a2b540ca"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/taiki-e/parse-changelog/releases/download/v0.6.5/parse-changelog-x86_64-apple-darwin.tar.gz",
+      "checksum": "aa12781c8d57865d18217286fdf10c1eb772636e7e86b20425335858d76aad03"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/taiki-e/parse-changelog/releases/download/v0.6.5/parse-changelog-x86_64-pc-windows-msvc.tar.gz",
+      "checksum": "98d13ef997a8da38d5b419d516c48da302042f054d3a89238cfab0f1ba6971ba"
+    },
+    "aarch64_linux_musl": {
+      "url": "https://github.com/taiki-e/parse-changelog/releases/download/v0.6.5/parse-changelog-aarch64-unknown-linux-musl.tar.gz",
+      "checksum": "33f67cfed6d4ed71da5e873026723a70d79ca99a53bcb1ab2121b33c591ad45d"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/taiki-e/parse-changelog/releases/download/v0.6.5/parse-changelog-aarch64-apple-darwin.tar.gz",
+      "checksum": "77dffac8a8f562172ba0b19a998665a02c0a60f876eea047dc6126e5118378b9"
+    },
+    "aarch64_windows": {
+      "url": "https://github.com/taiki-e/parse-changelog/releases/download/v0.6.5/parse-changelog-aarch64-pc-windows-msvc.tar.gz",
+      "checksum": "e4f39aef6fe8e233cdac88e5029d785f48805a65ec31c511fbf3200e26ded97e"
+    }
   },
   "0.6.4": {
     "x86_64_linux_musl": {

manifests/shellcheck.json

@@ -19,7 +19,24 @@
     }
   },
   "latest": {
-    "version": "0.9.0"
+    "version": "0.10.0"
+  },
+  "0.10": {
+    "version": "0.10.0"
+  },
+  "0.10.0": {
+    "x86_64_linux_musl": {
+      "checksum": "6c881ab0698e4e6ea235245f22832860544f17ba386442fe7e9d629f8cbedf87"
+    },
+    "x86_64_macos": {
+      "checksum": "ef27684f23279d112d8ad84e0823642e43f838993bbb8c0963db9b58a90464c2"
+    },
+    "x86_64_windows": {
+      "checksum": "eb6cd53a54ea97a56540e9d296ce7e2fa68715aa507ff23574646c1e12b2e143"
+    },
+    "aarch64_linux_musl": {
+      "checksum": "324a7e89de8fa2aed0d0c28f3dab59cf84c6d74264022c00c22af665ed1a09bb"
+    }
   },
   "0.9": {
     "version": "0.9.0"

manifests/syft.json

@@ -23,13 +23,30 @@
     }
   },
   "latest": {
-    "version": "1.0.0"
+    "version": "1.0.1"
   },
   "1": {
-    "version": "1.0.0"
+    "version": "1.0.1"
   },
   "1.0": {
-    "version": "1.0.0"
+    "version": "1.0.1"
+  },
+  "1.0.1": {
+    "x86_64_linux_musl": {
+      "checksum": "420f90e57def27745e414efcb7a41384b2ccdccafca87c327096ca44621ab0ce"
+    },
+    "x86_64_macos": {
+      "checksum": "3730868e23a65c0c2b94bd1d3c7ce608176aa98b631bf98249f04bec1a035b12"
+    },
+    "x86_64_windows": {
+      "checksum": "95bc151e3a713a31f7ae7bfacbe0bda8c8d8e08e390038b0c2fc7220c1b9c49c"
+    },
+    "aarch64_linux_musl": {
+      "checksum": "c8582aa0e1c92c84c4a751c739ac3d7ca48c88a54b5d1b884d0629d7df72a6f9"
+    },
+    "aarch64_macos": {
+      "checksum": "5dc061290afb7e8249dc590fcf4a7e15966346e73948415559855e1154fc0f42"
+    }
   },
   "1.0.0": {
     "x86_64_linux_musl": {

manifests/wasm-bindgen.json

@@ -0,0 +1,136 @@
+{
+  "rust_crate": "wasm-bindgen-cli",
+  "template": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/rustwasm/wasm-bindgen/releases/download/${version}/wasm-bindgen-${version}-x86_64-unknown-linux-musl.tar.gz",
+      "bin": [
+        "wasm-bindgen-${version}-x86_64-unknown-linux-musl/wasm-bindgen-test-runner",
+        "wasm-bindgen-${version}-x86_64-unknown-linux-musl/wasm-bindgen",
+        "wasm-bindgen-${version}-x86_64-unknown-linux-musl/wasm2es6js"
+      ]
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/rustwasm/wasm-bindgen/releases/download/${version}/wasm-bindgen-${version}-x86_64-apple-darwin.tar.gz",
+      "bin": [
+        "wasm-bindgen-${version}-x86_64-apple-darwin/wasm-bindgen-test-runner",
+        "wasm-bindgen-${version}-x86_64-apple-darwin/wasm-bindgen",
+        "wasm-bindgen-${version}-x86_64-apple-darwin/wasm2es6js"
+      ]
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/rustwasm/wasm-bindgen/releases/download/${version}/wasm-bindgen-${version}-x86_64-pc-windows-msvc.tar.gz",
+      "bin": [
+        "wasm-bindgen-${version}-x86_64-pc-windows-msvc/wasm-bindgen-test-runner.exe",
+        "wasm-bindgen-${version}-x86_64-pc-windows-msvc/wasm-bindgen.exe",
+        "wasm-bindgen-${version}-x86_64-pc-windows-msvc/wasm2es6js.exe"
+      ]
+    },
+    "aarch64_linux_gnu": {
+      "url": "https://github.com/rustwasm/wasm-bindgen/releases/download/${version}/wasm-bindgen-${version}-aarch64-unknown-linux-gnu.tar.gz",
+      "bin": [
+        "wasm-bindgen-${version}-aarch64-unknown-linux-gnu/wasm-bindgen-test-runner",
+        "wasm-bindgen-${version}-aarch64-unknown-linux-gnu/wasm-bindgen",
+        "wasm-bindgen-${version}-aarch64-unknown-linux-gnu/wasm2es6js"
+      ]
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/rustwasm/wasm-bindgen/releases/download/${version}/wasm-bindgen-${version}-aarch64-apple-darwin.tar.gz",
+      "bin": [
+        "wasm-bindgen-${version}-aarch64-apple-darwin/wasm-bindgen-test-runner",
+        "wasm-bindgen-${version}-aarch64-apple-darwin/wasm-bindgen",
+        "wasm-bindgen-${version}-aarch64-apple-darwin/wasm2es6js"
+      ]
+    }
+  },
+  "latest": {
+    "version": "0.2.92"
+  },
+  "0.2": {
+    "version": "0.2.92"
+  },
+  "0.2.92": {
+    "x86_64_linux_musl": {
+      "checksum": "c6e43a3bf0be5231e0b72ea702f73b3f4f47c309037e8a332c5c2e41800ca934"
+    },
+    "x86_64_macos": {
+      "checksum": "1091b40f5e2cc67d10deb3b1260a92b97cef8851f2588708c2d4b6bef9444880"
+    },
+    "x86_64_windows": {
+      "checksum": "a23d556b35bc4d17222e324b205a1b66b1cdad630f62a1190ba6c42cf5ed2af7"
+    },
+    "aarch64_linux_gnu": {
+      "checksum": "ae6070b6f6a86160f9be02ee9c913820814825f6e8aff45b155a129a36acc0cb"
+    },
+    "aarch64_macos": {
+      "checksum": "9ac857faddd4368e5ad3f41b74bbc4c2d32c3726d008bd5760fc52c7c6843e48"
+    }
+  },
+  "0.2.91": {
+    "x86_64_linux_musl": {
+      "checksum": "48123760cd139036125dbc07aaf09c73237d2bf910810b00a2dabbbac7a92e4e"
+    },
+    "x86_64_macos": {
+      "checksum": "8c9378515f5162d77c8bbec8925e2444e4509fc5fd4e42c218b70bd7e7b5c34d"
+    },
+    "x86_64_windows": {
+      "checksum": "9077f846f8e29dbc246688294b02474c4247e176739b43b0ce5df093e3c23ccf"
+    },
+    "aarch64_linux_gnu": {
+      "checksum": "06a93a6c4ca7166082e8c6179e9f1dc6ca1df822894669b5257cdff08692bf00"
+    },
+    "aarch64_macos": {
+      "checksum": "8f644617cbd12763268854cb550604f18e15a869c9b2e63ba977278fee99ff3d"
+    }
+  },
+  "0.2.90": {
+    "x86_64_linux_musl": {
+      "checksum": "46131161e31617d102260b1420159fe5006f6b0fdb8a0a90fe7adc858b662132"
+    },
+    "x86_64_macos": {
+      "checksum": "374a460a4c8cf097e84725082da6c909830cbc6caa16538735bcc066971e3bcd"
+    },
+    "x86_64_windows": {
+      "checksum": "919b6f010164c5d2f28df505098d94c0ac3727c9aeeea2df12453008dc451c78"
+    },
+    "aarch64_linux_gnu": {
+      "checksum": "29075a17870097d800e471ec2a800f915c09c5c8d4b2b1436fd43381aa7bf480"
+    },
+    "aarch64_macos": {
+      "checksum": "d3724348014d028048b9539fac36858a0a1aba165814a69542d3038d65303093"
+    }
+  },
+  "0.2.89": {
+    "x86_64_linux_musl": {
+      "checksum": "e6361f3069a8a94ca44f0eb6e22b1de59ee71236bba2acd0278f1387e09a90d0"
+    },
+    "x86_64_macos": {
+      "checksum": "5ca6b6e9a2b971cdc5571a54a963f6f13ae6263bbf921998feeef3ff6b6b70b7"
+    },
+    "x86_64_windows": {
+      "checksum": "5dd04e972fc0910122f5d9881aa49470e6734e5a1d3294030eaace738771fddc"
+    },
+    "aarch64_linux_gnu": {
+      "checksum": "4ca6d7cedf6d47eec55d739bfd228270061a1c2bb4b625442e2bb716d2cc7337"
+    },
+    "aarch64_macos": {
+      "checksum": "cff8b011832e0f17fc94e4673a2910b04cb11bd527736b96f94abea24ff674be"
+    }
+  },
+  "0.2.88": {
+    "x86_64_linux_musl": {
+      "checksum": "d7dcb7f5ad1d0cb68df5d45ffd9119d1db3d42ee6d50a8b2d3c42a56c74bdd8e"
+    },
+    "x86_64_macos": {
+      "checksum": "0d1913322e657444c942c644abb687e46807fec31e3efbafb199a7932e677dcc"
+    },
+    "x86_64_windows": {
+      "checksum": "ed885be56d41c5c1d3b1495307d57a2d48b296cfe5afe92e06b6ea09c4ba4532"
+    },
+    "aarch64_linux_gnu": {
+      "checksum": "f13bb83170a3d44edfbebd263c695e6fb5815d77467490af1c49e2e8ec816803"
+    },
+    "aarch64_macos": {
+      "checksum": "712c787c411a765e5bf8f2f3f11db9d5ec823260b763e1017d6790e9b3c225ff"
+    }
+  }
+}

tools/codegen/base/wasm-bindgen.json

@@ -0,0 +1,19 @@
+{
+  "repository": "https://github.com/rustwasm/wasm-bindgen",
+  "tag_prefix": "",
+  "rust_crate": "wasm-bindgen-cli",
+  "version_range": ">= 0.2.88",
+  "asset_name": "wasm-bindgen-${version}-${rust_target}.tar.gz",
+  "bin": [
+    "wasm-bindgen-${version}-${rust_target}/wasm-bindgen-test-runner${exe}",
+    "wasm-bindgen-${version}-${rust_target}/wasm-bindgen${exe}",
+    "wasm-bindgen-${version}-${rust_target}/wasm2es6js${exe}"
+  ],
+  "platform": {
+    "x86_64_linux_musl": {},
+    "x86_64_macos": {},
+    "x86_64_windows": {},
+    "aarch64_linux_gnu": {},
+    "aarch64_macos": {}
+  }
+}

tools/codegen/src/main.rs

@@ -41,6 +41,7 @@ fn main() -> Result<()> {
     let mut base_info: BaseManifest = serde_json::from_slice(&fs::read(
         workspace_root.join("tools/codegen/base").join(format!("{package}.json")),
     )?)?;
+    base_info.validate();
     let repo = base_info
         .repository
         .strip_prefix("https://github.com/")
@@ -116,7 +117,10 @@ fn main() -> Result<()> {
                         for (platform, d) in &mut manifest.download_info {
                             let template = &template.download_info[platform];
                             d.url = Some(template.url.replace("${version}", version));
-                            d.bin = template.bin.as_ref().map(|s| s.replace("${version}", version));
+                            d.bin = template
+                                .bin
+                                .as_ref()
+                                .map(|s| s.map(|s| s.replace("${version}", version)));
                         }
                     }
                 }
@@ -310,11 +314,8 @@ fn main() -> Result<()> {
             download_info.insert(platform, ManifestDownloadInfo {
                 url: Some(url),
                 checksum: hash,
-                bin: base_download_info
-                    .bin
-                    .as_ref()
-                    .or(base_info.bin.as_ref())
-                    .map(|s| {
+                bin: base_download_info.bin.as_ref().or(base_info.bin.as_ref()).map(|s| {
+                    s.map(|s| {
                         replace_vars(
                             s,
                             package,
@@ -322,8 +323,9 @@ fn main() -> Result<()> {
                             Some(platform),
                             base_info.rust_crate.as_deref(),
                         )
+                        .unwrap()
                     })
-                    .transpose()?,
+                }),
             });
             buf.clear();
         }
@@ -451,7 +453,7 @@ fn main() -> Result<()> {
         let t = template.as_mut().unwrap();
         for (platform, d) in &mut manifest.download_info {
             let template_url = d.url.take().unwrap().replace(version, "${version}");
-            let template_bin = d.bin.take().map(|s| s.replace(version, "${version}"));
+            let template_bin = d.bin.take().map(|s| s.map(|s| s.replace(version, "${version}")));
             if let Some(d) = t.download_info.get(platform) {
                 if template_url != d.url || template_bin != d.bin {
                     template = None;
@@ -711,9 +713,9 @@ struct ManifestDownloadInfo {
     #[serde(skip_serializing_if = "Option::is_none")]
     url: Option<String>,
     checksum: String,
-    /// Default to ${tool}${exe}
+    /// Path to binaries in archive. Default to `${tool}${exe}`.
     #[serde(skip_serializing_if = "Option::is_none")]
-    bin: Option<String>,
+    bin: Option<StringOrArray>,
 }
 
 #[derive(Debug, Clone, Serialize, Deserialize)]
@@ -725,9 +727,9 @@ struct ManifestTemplate {
 #[derive(Debug, Clone, Serialize, Deserialize)]
 struct ManifestTemplateDownloadInfo {
     url: String,
-    /// Default to ${tool}${exe}
+    /// Path to binaries in archive. Default to `${tool}${exe}`.
     #[serde(skip_serializing_if = "Option::is_none")]
-    bin: Option<String>,
+    bin: Option<StringOrArray>,
 }
 
 #[derive(Debug, Deserialize)]
@@ -742,14 +744,26 @@ struct BaseManifest {
     default_major_version: Option<String>,
     /// Asset name patterns.
     asset_name: Option<StringOrArray>,
-    /// Path to binary in archive. Default to `${tool}${exe}`.
-    bin: Option<String>,
+    /// Path to binaries in archive. Default to `${tool}${exe}`.
+    bin: Option<StringOrArray>,
     signing: Option<Signing>,
     #[serde(default)]
     broken: Vec<semver::Version>,
     platform: BTreeMap<HostPlatform, BaseManifestPlatformInfo>,
     version_range: Option<String>,
 }
+impl BaseManifest {
+    fn validate(&self) {
+        if let Some(bin) = &self.bin {
+            assert!(!bin.as_slice().is_empty());
+        }
+        for m in self.platform.values() {
+            if let Some(bin) = &m.bin {
+                assert!(!bin.as_slice().is_empty());
+            }
+        }
+    }
+}
 
 #[derive(Debug, Deserialize)]
 #[serde(deny_unknown_fields)]
@@ -772,11 +786,11 @@ enum SigningKind {
 struct BaseManifestPlatformInfo {
     /// Asset name patterns. Default to the value at `BaseManifest::asset_name`.
     asset_name: Option<StringOrArray>,
-    /// Path to binary in archive. Default to the value at `BaseManifest::bin`.
-    bin: Option<String>,
+    /// Path to binaries in archive. Default to the value at `BaseManifest::bin`.
+    bin: Option<StringOrArray>,
 }
 
-#[derive(Debug, Clone, Deserialize)]
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
 #[serde(untagged)]
 enum StringOrArray {
     String(String),
@@ -786,8 +800,14 @@ enum StringOrArray {
 impl StringOrArray {
     fn as_slice(&self) -> &[String] {
         match self {
-            Self::Array(v) => v,
             Self::String(s) => slice::from_ref(s),
+            Self::Array(v) => v,
+        }
+    }
+    fn map(&self, mut f: impl FnMut(&String) -> String) -> Self {
+        match self {
+            Self::String(s) => Self::String(f(s)),
+            Self::Array(v) => Self::Array(v.iter().map(f).collect()),
         }
     }
 }

tools/tidy.sh

@@ -15,7 +15,8 @@ trap 's=$?; echo >&2 "$0: error on line "${LINENO}": ${BASH_COMMAND}"; exit ${s}
 # - shfmt
 # - shellcheck
 # - npm
-# - jq and yq
+# - jq
+# - python
 # - rustup (if Rust code exists)
 # - clang-format (if C/C++ code exists)
 #
@@ -53,6 +54,11 @@ error() {
     fi
     should_fail=1
 }
+venv() {
+    local bin="$1"
+    shift
+    "${venv_bin}/${bin}${exe}" "$@"
+}
 
 if [[ $# -gt 0 ]]; then
     cat <<EOF
@@ -204,32 +210,54 @@ if [[ -n "$(git ls-files '*.yml' '*.js' '*.json')" ]]; then
     # Check GitHub workflows.
     if [[ -d .github/workflows ]]; then
         info "checking GitHub workflows"
-        if type -P jq &>/dev/null && type -P yq &>/dev/null; then
-            for workflow in .github/workflows/*.yml; do
-                # The top-level permissions must be weak as they are referenced by all jobs.
-                permissions=$(yq -c '.permissions' "${workflow}")
-                case "${permissions}" in
-                    '{"contents":"read"}' | '{"contents":"none"}') ;;
-                    null) error "${workflow}: top level permissions not found; it must be 'contents: read' or weaker permissions" ;;
-                    *) error "${workflow}: only 'contents: read' and weaker permissions are allowed at top level; if you want to use stronger permissions, please set job-level permissions" ;;
-                esac
-                # Make sure the 'needs' section is not out of date.
-                if grep -q '# tidy:needs' "${workflow}" && ! grep -Eq '# *needs: \[' "${workflow}"; then
-                    # shellcheck disable=SC2207
-                    jobs_actual=($(yq '.jobs' "${workflow}" | jq -r 'keys_unsorted[]'))
-                    unset 'jobs_actual[${#jobs_actual[@]}-1]'
-                    # shellcheck disable=SC2207
-                    jobs_expected=($(yq -r '.jobs."ci-success".needs[]' "${workflow}"))
-                    if [[ "${jobs_actual[*]}" != "${jobs_expected[*]+"${jobs_expected[*]}"}" ]]; then
-                        printf -v jobs '%s, ' "${jobs_actual[@]}"
-                        sed -i "s/needs: \[.*\] # tidy:needs/needs: [${jobs%, }] # tidy:needs/" "${workflow}"
-                        check_diff "${workflow}"
-                        error "${workflow}: please update 'needs' section in 'ci-success' job"
-                    fi
+        if type -P jq &>/dev/null; then
+            if type -P python3 &>/dev/null || type -P python &>/dev/null; then
+                py_suffix=''
+                if type -P python3 &>/dev/null; then
+                    py_suffix='3'
                 fi
-            done
+                exe=''
+                venv_bin='.venv/bin'
+                case "$(uname -s)" in
+                    MINGW* | MSYS* | CYGWIN* | Windows_NT)
+                        exe='.exe'
+                        venv_bin='.venv/Scripts'
+                        ;;
+                esac
+                if [[ ! -d .venv ]]; then
+                    "python${py_suffix}" -m venv .venv
+                fi
+                if [[ ! -e "${venv_bin}/yq${exe}" ]]; then
+                    venv "pip${py_suffix}" install yq
+                fi
+                for workflow in .github/workflows/*.yml; do
+                    # The top-level permissions must be weak as they are referenced by all jobs.
+                    permissions=$(venv yq -c '.permissions' "${workflow}")
+                    case "${permissions}" in
+                        '{"contents":"read"}' | '{"contents":"none"}') ;;
+                        null) error "${workflow}: top level permissions not found; it must be 'contents: read' or weaker permissions" ;;
+                        *) error "${workflow}: only 'contents: read' and weaker permissions are allowed at top level; if you want to use stronger permissions, please set job-level permissions" ;;
+                    esac
+                    # Make sure the 'needs' section is not out of date.
+                    if grep -q '# tidy:needs' "${workflow}" && ! grep -Eq '# *needs: \[' "${workflow}"; then
+                        # shellcheck disable=SC2207
+                        jobs_actual=($(venv yq '.jobs' "${workflow}" | jq -r 'keys_unsorted[]'))
+                        unset 'jobs_actual[${#jobs_actual[@]}-1]'
+                        # shellcheck disable=SC2207
+                        jobs_expected=($(venv yq -r '.jobs."ci-success".needs[]' "${workflow}"))
+                        if [[ "${jobs_actual[*]}" != "${jobs_expected[*]+"${jobs_expected[*]}"}" ]]; then
+                            printf -v jobs '%s, ' "${jobs_actual[@]}"
+                            sed -i "s/needs: \[.*\] # tidy:needs/needs: [${jobs%, }] # tidy:needs/" "${workflow}"
+                            check_diff "${workflow}"
+                            error "${workflow}: please update 'needs' section in 'ci-success' job"
+                        fi
+                    fi
+                done
+            else
+                warn "'python3' is not installed; skipped GitHub workflow check"
+            fi
         else
-            warn "'jq' or 'yq' is not installed; skipped GitHub workflow check"
+            warn "'jq' is not installed; skipped GitHub workflow check"
         fi
     fi
 fi