Release 1.17.3

See badges/shields issue 8671

.github/.cspell/project-dictionary.txt

@@ -1,20 +1,25 @@
 binstall
 bytecodealliance
+distro
+doas
 Dpkg
 jfrimmel
 koalaman
 libc
 linkcheck
 mdbook
+microdnf
 mvdan
 nextest
 protobuf
 protoc
 protocolbuffers
 quickinstall
+rockylinux
 rustwasm
 shellcheck
 shfmt
 toolchains
 udeps
 wasmtime
+xscale

.github/workflows/ci.yml

@@ -34,7 +34,7 @@ jobs:
         include:
           # Note: Specifying the version of valgrind and cargo-binstall is not supported.
           - os: ubuntu-20.04
-            tool: cargo-hack@0.5.24,cargo-llvm-cov@0.5.2,cargo-minimal-versions@0.1.8,parse-changelog@0.5.2,cargo-udeps@0.1.35,cargo-valgrind@2.1.0,cargo-deny@0.13.5,cross@0.2.4,nextest@0.9.11,protoc@3.21.11,shellcheck@0.8.0,shfmt@3.6.0,wasm-pack@0.10.3,wasmtime@3.0.1,mdbook@0.4.22,mdbook-linkcheck@0.7.7,cargo-watch@8.1.1
+            tool: cargo-hack@0.5.24,cargo-llvm-cov@0.5.3,cargo-minimal-versions@0.1.8,parse-changelog@0.5.2,cargo-udeps@0.1.35,cargo-valgrind@2.1.0,cargo-deny@0.13.5,cross@0.2.4,nextest@0.9.11,protoc@3.21.12,shellcheck@0.9.0,shfmt@3.6.0,wasm-pack@0.10.3,wasmtime@4.0.0,mdbook@0.4.25,mdbook-linkcheck@0.7.7,cargo-watch@8.1.1
           # Nextest supports basic version ranges as well. For other tools, this will be supported by https://github.com/taiki-e/install-action/pull/27.
           - os: ubuntu-20.04
             tool: nextest@0.9
@@ -55,32 +55,64 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
+        container:
+          - ubuntu:18.04 # glibc 2.27
+          - ubuntu:20.04 # glibc 2.31
+          - debian:10-slim # glibc 2.28
+          - debian:11-slim # glibc 2.31
+          - rockylinux:8 # glibc 2.28
+          - rockylinux:8-minimal # glibc 2.28
+        tool:
+          # valgrind: installing snap to container is difficult...
+          - cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-udeps,cargo-valgrind,cargo-deny,cross,nextest,protoc,shellcheck,shfmt,wasm-pack,wasmtime,mdbook,mdbook-linkcheck,cargo-watch
         include:
-          - container: ubuntu:20.04
+          - container: ubuntu:22.04 # glibc 2.35
-            # valgrind: installing snap to container is difficult...
+            # cargo-udeps depends on openssl 1.1
-            tool: cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-udeps,cargo-valgrind,cargo-deny,cross,nextest,protoc,shellcheck,shfmt,wasm-pack,wasmtime,mdbook,mdbook-linkcheck,cargo-watch
+            tool: cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-valgrind,cargo-deny,cross,nextest,protoc,shellcheck,shfmt,wasm-pack,wasmtime,mdbook,mdbook-linkcheck,cargo-watch
-          - container: debian:latest
+          - container: fedora:latest # glibc 2.36 (as of fedora 37)
-            # valgrind: installing snap to container is difficult...
+            # cargo-udeps depends on openssl 1.1
-            tool: cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-udeps,cargo-valgrind,cargo-deny,cross,nextest,protoc,shellcheck,shfmt,wasm-pack,wasmtime,mdbook,mdbook-linkcheck,cargo-watch
+            tool: cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-valgrind,cargo-deny,cross,nextest,protoc,shellcheck,shfmt,wasm-pack,wasmtime,mdbook,mdbook-linkcheck,cargo-watch
-          - container: alpine:latest
+          - container: centos:7 # glibc 2.17
-            # cargo-udeps,protoc,valgrind,wasmtime,mdbook,mdbook-linkcheck,cargo-watch don't provide prebuilt binaries for musl host.
+            # cargo-udeps,protoc,valgrind,wasmtime,mdbook-linkcheck,cargo-watch don't provide prebuilt binaries for musl host.
-            tool: cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-valgrind,cargo-deny,cross,nextest,shellcheck,shfmt,wasm-pack,cargo-binstall
+            # we don't support nextest on very old glibc due to https://github.com/taiki-e/install-action/issues/13.
+            tool: cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-valgrind,cargo-deny,cross,shellcheck,shfmt,wasm-pack,mdbook,cargo-binstall
+          - container: alpine:latest # musl 1.2.3 (as of alpine 3.17)
+            # cargo-udeps,protoc,valgrind,wasmtime,mdbook-linkcheck,cargo-watch don't provide prebuilt binaries for musl host.
+            tool: cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-valgrind,cargo-deny,cross,nextest,shellcheck,shfmt,wasm-pack,mdbook,cargo-binstall
     runs-on: ubuntu-latest
     container: ${{ matrix.container }}
     steps:
+      - name: Install requirements (ubuntu/debian)
+        run: |
+          set -euxo pipefail
+          apt-get -o Acquire::Retries=10 -qq update
+          apt-get -o Acquire::Retries=10 -qq -o Dpkg::Use-Pty=0 install -y --no-install-recommends cargo
+        if: startsWith(matrix.container, 'ubuntu') || startsWith(matrix.container, 'debian')
+      - name: Install requirements (fedora/rockylinux)
+        run: |
+          set -euxo pipefail
+          dnf=dnf
+          if ! type -P dnf &>/dev/null; then
+            dnf=microdnf
+          fi
+          # tar and gzip are required for actions/checkout on rockylinux:*-minimal
+          $dnf install -y cargo tar gzip
+        if: startsWith(matrix.container, 'fedora') || startsWith(matrix.container, 'rockylinux')
+      - name: Install requirements (centos)
+        run: |
+          set -euxo pipefail
+          curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal --default-toolchain stable
+          echo "$HOME/.cargo/bin" >>"${GITHUB_PATH}"
+        if: startsWith(matrix.container, 'centos')
+      - name: Install requirements (alpine)
+        run: |
+          set -eux
+          apk add bash cargo
+        shell: sh
+        if: startsWith(matrix.container, 'alpine')
       - uses: actions/checkout@v3
         with:
           persist-credentials: false
-      - name: Install requirements (ubuntu/debian)
-        run: |
-          set -ex
-          apt-get -o Acquire::Retries=10 -qq update
-          apt-get -o Acquire::Retries=10 -qq -o Dpkg::Use-Pty=0 install -y --no-install-recommends ca-certificates cargo curl unzip xz-utils
-        if: startsWith(matrix.container, 'ubuntu') || startsWith(matrix.container, 'debian')
-      - name: Install requirements (alpine)
-        run: apk add bash cargo curl tar xz
-        shell: sh
-        if: startsWith(matrix.container, 'alpine')
       - uses: ./
         with:
           tool: ${{ matrix.tool }}

CHANGELOG.md

@@ -10,6 +10,42 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [1.17.3] - 2022-12-22
+
+- Update `wasmtime@latest` to 4.0.0.
+
+## [1.17.2] - 2022-12-17
+
+- Update `mdbook@latest` to 0.4.25.
+
+## [1.17.1] - 2022-12-15
+
+- Update `mdbook@latest` to 0.4.23.
+- Support `mdbook` on Linux (musl).
+- Update `cargo-llvm-cov@latest` to 0.5.3.
+
+## [1.17.0] - 2022-12-14
+
+- Update `protoc@latest` to 3.21.12.
+- Support aarch64 self-hosted runners (Linux, macOS, Windows).
+- Improve support for Fedora/RHEL based containers/self-hosted runners.
+
+## [1.16.0] - 2022-12-14
+
+- Update `cargo-binstall@latest` to 0.18.1. ([#32](https://github.com/taiki-e/install-action/pull/32), thanks @NobodyXu)
+
+- If the host environment lacks packages required for installation, such as `curl` or `tar`, install them if possible.
+
+  It is mainly intended to make the use of this action easy on containers or self-hosted runners, and currently supports Debian-based distributions (including Ubuntu) and Alpine.
+
+  The system's package manager is used for these installations. However, `bash`, which is an execution requirement of the action itself, and `cargo`, which is usually preferred for installation by rustup rather than the system's package manager, are *not* covered by these installations.
+
+  See also the [compatibility note in readme](https://github.com/taiki-e/install-action#compatibility).
+
+## [1.15.5] - 2022-12-13
+
+- Update `shellcheck@latest` to 0.9.0.
+
 ## [1.15.4] - 2022-12-12
 
 - Update `shfmt@latest` to 3.6.0.
@@ -425,7 +461,13 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v1.15.4...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v1.17.3...HEAD
+[1.17.3]: https://github.com/taiki-e/install-action/compare/v1.17.2...v1.17.3
+[1.17.2]: https://github.com/taiki-e/install-action/compare/v1.17.1...v1.17.2
+[1.17.1]: https://github.com/taiki-e/install-action/compare/v1.17.0...v1.17.1
+[1.17.0]: https://github.com/taiki-e/install-action/compare/v1.16.0...v1.17.0
+[1.16.0]: https://github.com/taiki-e/install-action/compare/v1.15.5...v1.16.0
+[1.15.5]: https://github.com/taiki-e/install-action/compare/v1.15.4...v1.15.5
 [1.15.4]: https://github.com/taiki-e/install-action/compare/v1.15.3...v1.15.4
 [1.15.3]: https://github.com/taiki-e/install-action/compare/v1.15.2...v1.15.3
 [1.15.2]: https://github.com/taiki-e/install-action/compare/v1.15.1...v1.15.2

README.md

@@ -1,6 +1,6 @@
 # install-action
 
-[![build status](https://img.shields.io/github/workflow/status/taiki-e/install-action/CI/main?style=flat-square&logo=github)](https://github.com/taiki-e/install-action/actions)
+[![build status](https://img.shields.io/github/actions/workflow/status/taiki-e/install-action/ci.yml?branch=main&style=flat-square&logo=github)](https://github.com/taiki-e/install-action/actions)
 
 GitHub Action for installing development tools (mainly from GitHub Releases).
 
@@ -9,6 +9,7 @@ GitHub Action for installing development tools (mainly from GitHub Releases).
   - [Example workflow](#example-workflow)
 - [Supported tools](#supported-tools)
 - [Security](#security)
+- [Compatibility](#compatibility)
 - [Related Projects](#related-projects)
 - [License](#license)
 
@@ -101,6 +102,14 @@ When installing the tool from GitHub Releases, this action will download the too
 
 If you want a higher level of security, consider working on [#1](https://github.com/taiki-e/install-action/issues/1).
 
+## Compatibility
+
+This action has been tested for GitHub-hosted runners (Ubuntu, macOS, Windows) and containers (Ubuntu, Debian, Alpine, Fedora, CentOS, Rocky).
+To use this action in self-hosted runners or in containers, you will need to install at least the following:
+
+- bash
+- cargo (if you install cargo subcommands or use cargo-binstall fallback)
+
 ## Related Projects
 
 - [create-gh-release-action]: GitHub Action for creating GitHub Releases based on changelog.

main.sh

@@ -47,14 +47,34 @@ download() {
     local tar_args=()
     case "${url}" in
         *.tar.gz | *.tgz) tar_args+=("xzf") ;;
-        *.tar.bz2 | *.tbz2) tar_args+=("xjf") ;;
+        *.tar.bz2 | *.tbz2)
-        *.tar.xz | *.txz) tar_args+=("xJf") ;;
+            tar_args+=("xjf")
+            if ! type -P bzip2 &>/dev/null; then
+                case "${base_distro}" in
+                    debian | alpine | fedora) sys_install bzip2 ;;
+                esac
+            fi
+            ;;
+        *.tar.xz | *.txz)
+            tar_args+=("xJf")
+            if ! type -P xz &>/dev/null; then
+                case "${base_distro}" in
+                    debian) sys_install xz-utils ;;
+                    alpine | fedora) sys_install xz ;;
+                esac
+            fi
+            ;;
         *.zip)
+            if ! type -P unzip &>/dev/null; then
+                case "${base_distro}" in
+                    debian | alpine | fedora) sys_install unzip ;;
+                esac
+            fi
             mkdir -p .install-action-tmp
             (
                 cd .install-action-tmp
                 info "downloading ${url}"
-                retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 --retry-connrefused "${url}" -o tmp.zip
+                retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 "${url}" -o tmp.zip
                 unzip tmp.zip
                 mv "${bin}" "${bin_dir}/"
             )
@@ -70,17 +90,12 @@ download() {
         tar_args+=(--strip-components "${components}")
     fi
     info "downloading ${url}"
-    retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 --retry-connrefused "${url}" \
+    retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 "${url}" \
         | tar "${tar_args[@]}" -C "${bin_dir}" "${bin}"
 }
-host_triple() {
-    if [[ -z "${host:-}" ]]; then
-        host="$(rustc -vV | grep host | cut -c 7-)"
-    fi
-}
 install_cargo_binstall() {
     # https://github.com/cargo-bins/cargo-binstall/releases
-    local binstall_version="0.18.0"
+    local binstall_version="0.18.1"
     local install_binstall='1'
     if [[ -f "${cargo_bin}/cargo-binstall${exe}" ]]; then
         if [[ "$(cargo binstall -V)" == "cargo-binstall ${binstall_version}" ]]; then
@@ -95,25 +110,12 @@ install_cargo_binstall() {
     if [[ -n "${install_binstall}" ]]; then
         info "installing cargo-binstall"
 
-        host_triple
         base_url="https://github.com/cargo-bins/cargo-binstall/releases/download/v${binstall_version}/cargo-binstall"
-        case "${host}" in
+        case "${OSTYPE}" in
-            x86_64-*-linux-gnu) url="${base_url}-x86_64-unknown-linux-musl.tgz" ;;
+            linux*) url="${base_url}-${host_arch}-unknown-linux-musl.tgz" ;;
-            x86_64-*-linux-musl) url="${base_url}-x86_64-unknown-linux-musl.tgz" ;;
+            darwin*) url="${base_url}-${host_arch}-apple-darwin.zip" ;;
-
+            cygwin* | msys*) url="${base_url}-x86_64-pc-windows-msvc.zip" ;;
-            armv7-*-linux-gnueabihf) url="${base_url}-armv7-unknown-linux-musleabihf.tgz" ;;
+            *) bail "unsupported OSTYPE '${OSTYPE}' for cargo-binstall" ;;
-            armv7-*-linux-musleabihf) url="${base_url}-armv7-unknown-linux-musleabihf.tgz" ;;
-
-            aarch64-*-linux-gnu) url="${base_url}-aarch64-unknown-linux-musl.tgz" ;;
-            aarch64-*-linux-musl) url="${base_url}-aarch64-unknown-linux-musl.tgz" ;;
-
-            x86_64-pc-windows-gnu) url="${base_url}-x86_64-pc-windows-msvc.zip" ;;
-
-            x86_64-apple-darwin | aarch64-apple-darwin | x86_64-pc-windows-msvc)
-                url="${base_url}-${host}.zip"
-                ;;
-
-            *) bail "unsupported target '${host}' for cargo-binstall" ;;
         esac
 
         download "${url}" "${cargo_bin}" "cargo-binstall${exe}"
@@ -143,8 +145,12 @@ apt_update() {
     else
         retry apt-get -o Acquire::Retries=10 -qq update
     fi
+    apt_updated=1
 }
 apt_install() {
+    if [[ -z "${apt_updated:-}" ]]; then
+        apt_update
+    fi
     if type -P sudo &>/dev/null; then
         retry sudo apt-get -o Acquire::Retries=10 -qq -o Dpkg::Use-Pty=0 install -y --no-install-recommends "$@"
     else
@@ -165,6 +171,27 @@ snap_install() {
         retry snap install "$@"
     fi
 }
+apk_install() {
+    if type -P doas &>/dev/null; then
+        doas apk add "$@"
+    else
+        apk add "$@"
+    fi
+}
+dnf_install() {
+    if type -P sudo &>/dev/null; then
+        retry sudo "${dnf}" install -y "$@"
+    else
+        retry "${dnf}" install -y "$@"
+    fi
+}
+sys_install() {
+    case "${base_distro}" in
+        debian) apt_install "$@" ;;
+        alpine) apk_install "$@" ;;
+        fedora) dnf_install "$@" ;;
+    esac
+}
 
 if [[ $# -gt 0 ]]; then
     bail "invalid argument '$1'"
@@ -179,8 +206,60 @@ if [[ -n "${tool}" ]]; then
     while read -rd,; do tools+=("${REPLY}"); done <<<"${tool},"
 fi
 
+# Refs: https://github.com/rust-lang/rustup/blob/HEAD/rustup-init.sh
+case "$(uname -m)" in
+    aarch64 | arm64) host_arch="aarch64" ;;
+    xscale | arm | armv6l | armv7l | armv8l)
+        # Ignore arm for now, as we need to consider the version and whether hard-float is supported.
+        # https://github.com/rust-lang/rustup/pull/593
+        # https://github.com/cross-rs/cross/pull/1018
+        # Does it seem only armv7l is supported?
+        # https://github.com/actions/runner/blob/6b9e8a6be411a6e63d5ccaf3c47e7b7622c5ec49/src/Misc/externals.sh#L174
+        bail "32-bit ARM runner is not supported yet by this action"
+        ;;
+    # GitHub Actions Runner supports Linux (x86_64, aarch64, arm), Windows (x86_64, aarch64),
+    # and macOS (x86_64, aarch64).
+    # https://github.com/actions/runner
+    # https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners#supported-architectures-and-operating-systems-for-self-hosted-runners
+    # So we can assume x86_64 unless it is aarch64 or arm.
+    *) host_arch="x86_64" ;;
+esac
+base_distro=""
 exe=""
 case "${OSTYPE}" in
+    linux*)
+        host_env="gnu"
+        if (ldd --version 2>&1 || true) | grep -q 'musl'; then
+            host_env="musl"
+        fi
+        if grep -q '^ID_LIKE=' /etc/os-release; then
+            base_distro="$(grep '^ID_LIKE=' /etc/os-release | sed 's/^ID_LIKE=//')"
+            case "${base_distro}" in
+                *debian*) base_distro=debian ;;
+                *alpine*) base_distro=alpine ;;
+                *fedora*) base_distro=fedora ;;
+            esac
+        else
+            base_distro="$(grep '^ID=' /etc/os-release | sed 's/^ID=//')"
+        fi
+        case "${base_distro}" in
+            fedora)
+                dnf=dnf
+                if ! type -P dnf &>/dev/null; then
+                    if type -P microdnf &>/dev/null; then
+                        # fedora-based distributions have "minimal" images that
+                        # use microdnf instead of dnf.
+                        dnf=microdnf
+                    else
+                        # If neither dnf nor microdnf is available, it is
+                        # probably an RHEL7-based distribution that does not
+                        # have dnf installed by default.
+                        dnf=yum
+                    fi
+                fi
+                ;;
+        esac
+        ;;
     cygwin* | msys*) exe=".exe" ;;
 esac
 
@@ -189,6 +268,12 @@ if [[ ! -d "${cargo_bin}" ]]; then
     cargo_bin=/usr/local/bin
 fi
 
+if ! type -P curl &>/dev/null || ! type -P tar &>/dev/null; then
+    case "${base_distro}" in
+        debian | alpine | fedora) sys_install ca-certificates curl tar ;;
+    esac
+fi
+
 for tool in "${tools[@]}"; do
     if [[ "${tool}" == *"@"* ]]; then
         version="${tool#*@}"
@@ -207,7 +292,7 @@ for tool in "${tools[@]}"; do
                 # https://github.com/taiki-e/cargo-hack/releases
                 cargo-hack) latest_version="0.5.24" ;;
                 # https://github.com/taiki-e/cargo-llvm-cov/releases
-                cargo-llvm-cov) latest_version="0.5.2" ;;
+                cargo-llvm-cov) latest_version="0.5.3" ;;
                 # https://github.com/taiki-e/cargo-minimal-versions/releases
                 cargo-minimal-versions) latest_version="0.1.8" ;;
                 # https://github.com/taiki-e/parse-changelog/releases
@@ -219,9 +304,14 @@ for tool in "${tools[@]}"; do
                 latest) version="${latest_version}" ;;
             esac
             case "${OSTYPE}" in
-                linux*) target="x86_64-unknown-linux-musl" ;;
+                linux*) target="${host_arch}-unknown-linux-musl" ;;
-                darwin*) target="x86_64-apple-darwin" ;;
+                darwin*) target="${host_arch}-apple-darwin" ;;
-                cygwin* | msys*) target="x86_64-pc-windows-msvc" ;;
+                cygwin* | msys*)
+                    case "${tool}" in
+                        cargo-llvm-cov) target="x86_64-pc-windows-msvc" ;;
+                        *) target="${host_arch}-pc-windows-msvc" ;;
+                    esac
+                    ;;
                 *) bail "unsupported OSTYPE '${OSTYPE}' for ${tool}" ;;
             esac
             url="https://github.com/${repo}/releases/download/v${version}/${tool}-${target}.tar.gz"
@@ -254,7 +344,7 @@ for tool in "${tools[@]}"; do
             download "${url}" "${cargo_bin}" "./${tool}-v${version}-${target}/${tool}${exe}"
             ;;
         cargo-valgrind)
-            # https://github.com/jfrimmel/cargo-valgrind
+            # https://github.com/jfrimmel/cargo-valgrind/releases
             latest_version="2.1.0"
             repo="jfrimmel/${tool}"
             case "${version}" in
@@ -287,7 +377,7 @@ for tool in "${tools[@]}"; do
             esac
             case "${OSTYPE}" in
                 linux*) target="x86_64-unknown-linux-musl" ;;
-                darwin*) target="x86_64-apple-darwin" ;;
+                darwin*) target="${host_arch}-apple-darwin" ;;
                 cygwin* | msys*) target="x86_64-pc-windows-msvc" ;;
                 *) bail "unsupported OSTYPE '${OSTYPE}' for ${tool}" ;;
             esac
@@ -318,9 +408,10 @@ for tool in "${tools[@]}"; do
             # https://nexte.st/book/pre-built-binaries.html
             case "${OSTYPE}" in
                 linux*)
-                    host_triple
+                    # musl build of nextest is slow, so use glibc build if host_env is gnu.
-                    case "${host}" in
+                    # https://github.com/taiki-e/install-action/issues/13
-                        *-linux-gnu*) url="https://get.nexte.st/${version}/linux" ;;
+                    case "${host_env}" in
+                        gnu) url="https://get.nexte.st/${version}/linux" ;;
                         *) url="https://get.nexte.st/${version}/linux-musl" ;;
                     esac
                     ;;
@@ -329,12 +420,12 @@ for tool in "${tools[@]}"; do
                 *) bail "unsupported OSTYPE '${OSTYPE}' for ${tool}" ;;
             esac
             info "downloading ${url}"
-            retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 --retry-connrefused "${url}" \
+            retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 "${url}" \
                 | tar xzf - -C "${cargo_bin}"
             ;;
         protoc)
             # https://github.com/protocolbuffers/protobuf/releases
-            latest_version="3.21.11"
+            latest_version="3.21.12"
             repo="protocolbuffers/protobuf"
             case "${version}" in
                 latest) version="${latest_version}" ;;
@@ -351,16 +442,21 @@ for tool in "${tools[@]}"; do
                 export PATH="${PATH}:${bin_dir}"
             fi
             case "${OSTYPE}" in
-                linux*) url="${base_url}-linux-x86_64.zip" ;;
+                linux*) url="${base_url}-linux-${host_arch/aarch/aarch_}.zip" ;;
-                darwin*) url="${base_url}-osx-x86_64.zip" ;;
+                darwin*) url="${base_url}-osx-${host_arch/aarch/aarch_}.zip" ;;
                 cygwin* | msys*) url="${base_url}-win64.zip" ;;
                 *) bail "unsupported OSTYPE '${OSTYPE}' for ${tool}" ;;
             esac
+            if ! type -P unzip &>/dev/null; then
+                case "${base_distro}" in
+                    debian | alpine | fedora) sys_install unzip ;;
+                esac
+            fi
             mkdir -p .install-action-tmp
             (
                 cd .install-action-tmp
                 info "downloading ${url}"
-                retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 --retry-connrefused "${url}" -o tmp.zip
+                retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 "${url}" -o tmp.zip
                 unzip tmp.zip
                 mv "bin/protoc${exe}" "${bin_dir}/"
                 mkdir -p "${include_dir}/"
@@ -377,7 +473,7 @@ for tool in "${tools[@]}"; do
             ;;
         shellcheck)
             # https://github.com/koalaman/shellcheck/releases
-            latest_version="0.8.0"
+            latest_version="0.9.0"
             repo="koalaman/${tool}"
             case "${version}" in
                 latest) version="${latest_version}" ;;
@@ -389,7 +485,7 @@ for tool in "${tools[@]}"; do
                     if type -P shellcheck &>/dev/null; then
                         apt_remove shellcheck
                     fi
-                    url="${base_url}.linux.x86_64.tar.xz"
+                    url="${base_url}.linux.${host_arch}.tar.xz"
                     ;;
                 darwin*) url="${base_url}.darwin.x86_64.tar.xz" ;;
                 cygwin* | msys*)
@@ -409,8 +505,18 @@ for tool in "${tools[@]}"; do
             esac
             bin_dir="/usr/local/bin"
             case "${OSTYPE}" in
-                linux*) target="linux_amd64" ;;
+                linux*)
-                darwin*) target="darwin_amd64" ;;
+                    case "${host_arch}" in
+                        aarch64) target="linux_arm64" ;;
+                        *) target="linux_amd64" ;;
+                    esac
+                    ;;
+                darwin*)
+                    case "${host_arch}" in
+                        aarch64) target="darwin_arm64" ;;
+                        *) target="darwin_amd64" ;;
+                    esac
+                    ;;
                 cygwin* | msys*)
                     target="windows_amd64"
                     bin_dir="${HOME}/.install-action/bin"
@@ -424,7 +530,7 @@ for tool in "${tools[@]}"; do
             esac
             url="https://github.com/${repo}/releases/download/v${version}/${tool}_v${version}_${target}${exe}"
             info "downloading ${url}"
-            retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 --retry-connrefused -o "${bin_dir}/${tool}${exe}" "${url}"
+            retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 -o "${bin_dir}/${tool}${exe}" "${url}"
             case "${OSTYPE}" in
                 linux* | darwin*) chmod +x "${bin_dir}/${tool}${exe}" ;;
             esac
@@ -439,7 +545,6 @@ for tool in "${tools[@]}"; do
                 darwin* | cygwin* | msys*) bail "${tool} for non-linux is not supported yet by this action" ;;
                 *) bail "unsupported OSTYPE '${OSTYPE}' for ${tool}" ;;
             esac
-            apt_update
             # libc6-dbg is needed to run Valgrind
             apt_install libc6-dbg
             # Use snap to install the latest Valgrind
@@ -454,7 +559,7 @@ for tool in "${tools[@]}"; do
                 latest) version="${latest_version}" ;;
             esac
             case "${OSTYPE}" in
-                linux*) target="x86_64-unknown-linux-musl" ;;
+                linux*) target="${host_arch}-unknown-linux-musl" ;;
                 darwin*) target="x86_64-apple-darwin" ;;
                 cygwin* | msys*) target="x86_64-pc-windows-msvc" ;;
                 *) bail "unsupported OSTYPE '${OSTYPE}' for ${tool}" ;;
@@ -464,7 +569,7 @@ for tool in "${tools[@]}"; do
             ;;
         wasmtime)
             # https://github.com/bytecodealliance/wasmtime/releases
-            latest_version="3.0.1"
+            latest_version="4.0.0"
             repo="bytecodealliance/${tool}"
             case "${version}" in
                 latest) version="${latest_version}" ;;
@@ -472,11 +577,11 @@ for tool in "${tools[@]}"; do
             base_url="https://github.com/${repo}/releases/download/v${version}/${tool}-v${version}"
             case "${OSTYPE}" in
                 linux*)
-                    target="x86_64-linux"
+                    target="${host_arch}-linux"
                     url="${base_url}-${target}.tar.xz"
                     ;;
                 darwin*)
-                    target="x86_64-macos"
+                    target="${host_arch}-macos"
                     url="${base_url}-${target}.tar.xz"
                     ;;
                 cygwin* | msys*)
@@ -489,14 +594,19 @@ for tool in "${tools[@]}"; do
             ;;
         mdbook)
             # https://github.com/rust-lang/mdBook/releases
-            latest_version="0.4.22"
+            latest_version="0.4.25"
             repo="rust-lang/mdBook"
             case "${version}" in
                 latest) version="${latest_version}" ;;
             esac
             base_url="https://github.com/${repo}/releases/download/v${version}/${tool}-v${version}"
             case "${OSTYPE}" in
-                linux*) url="${base_url}-x86_64-unknown-linux-gnu.tar.gz" ;;
+                linux*)
+                    case "${version}" in
+                        0.[1-3].* | 0.4.? | 0.4.1? | 0.4.2[0-1]) url="${base_url}-x86_64-unknown-linux-gnu.tar.gz" ;;
+                        *) url="${base_url}-${host_arch}-unknown-linux-musl.tar.gz" ;;
+                    esac
+                    ;;
                 darwin*) url="${base_url}-x86_64-apple-darwin.tar.gz" ;;
                 cygwin* | msys*) url="${base_url}-x86_64-pc-windows-msvc.zip" ;;
                 *) bail "unsupported OSTYPE '${OSTYPE}' for ${tool}" ;;