Release 1.5.0

`--secure` mode enforce downloads over secure transports only.
As a result, http will be disabled, and it will also set
min tls version to be 1.2

Signed-off-by: Jiahao XU <Jiahao_XU@outlook.com>

.github/workflows/ci.yml

@@ -28,7 +28,7 @@ jobs:
           # Note: Specifying the version of valgrind and wasm-pack is not supported.
           # cargo-watch is supported by cargo-binstall (through quickinstall)
           - cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cross,nextest,shellcheck,shfmt,valgrind,wasm-pack,wasmtime,mdbook,cargo-watch
-          - cargo-hack@0.5.14,cargo-llvm-cov@0.4.5,cargo-minimal-versions@0.1.4,parse-changelog@0.4.8,cross@0.2.1,nextest@0.9.11,shellcheck@0.8.0,shfmt@3.5.1,wasmtime@0.37.0,mdbook@0.4.18,cargo-watch@8.1.1
+          - cargo-hack@0.5.14,cargo-llvm-cov@0.4.8,cargo-minimal-versions@0.1.4,parse-changelog@0.4.8,cross@0.2.1,nextest@0.9.11,shellcheck@0.8.0,shfmt@3.5.1,wasmtime@0.38.1,mdbook@0.4.18,cargo-watch@8.1.1
           # Nextest supports basic version ranges as well
           - nextest@0.9
         include:

CHANGELOG.md

@@ -10,6 +10,19 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [1.5.0] - 2022-06-28
+
+- Enable secure mode for `cargo-binstall`. ([#9](https://github.com/taiki-e/install-action/pull/9), thanks @NobodyXu)
+- Update `wasmtime@latest` to 0.38.1.
+
+## [1.4.2] - 2022-06-16
+
+- Update `cargo-llvm-cov@latest` to 0.4.8.
+
+## [1.4.1] - 2022-06-13
+
+- Update `cargo-llvm-cov@latest` to 0.4.7.
+
 ## [1.4.0] - 2022-06-10
 
 - Support `cargo-binstall`. ([#8](https://github.com/taiki-e/install-action/pull/8), thanks @NobodyXu)
@@ -149,7 +162,10 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v1.4.0...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v1.5.0...HEAD
+[1.5.0]: https://github.com/taiki-e/install-action/compare/v1.4.2...v1.5.0
+[1.4.2]: https://github.com/taiki-e/install-action/compare/v1.4.1...v1.4.2
+[1.4.1]: https://github.com/taiki-e/install-action/compare/v1.4.0...v1.4.1
 [1.4.0]: https://github.com/taiki-e/install-action/compare/v1.3.13...v1.4.0
 [1.3.13]: https://github.com/taiki-e/install-action/compare/v1.3.12...v1.3.13
 [1.3.12]: https://github.com/taiki-e/install-action/compare/v1.3.11...v1.3.12

README.md

@@ -96,9 +96,11 @@ If you want a higher level of security, consider working on [#1](https://github.
 
 - [create-gh-release-action]: GitHub Action for creating GitHub Releases based on changelog.
 - [upload-rust-binary-action]: GitHub Action for building and uploading Rust binary to GitHub Releases.
+- [setup-cross-toolchain-action]: GitHub Action for setup toolchains for cross compilation and cross testing for Rust.
 
 [cargo-binstall]: https://github.com/ryankurte/cargo-binstall
 [create-gh-release-action]: https://github.com/taiki-e/create-gh-release-action
+[setup-cross-toolchain-action]: https://github.com/taiki-e/setup-cross-toolchain-action
 [upload-rust-binary-action]: https://github.com/taiki-e/upload-rust-binary-action
 
 ## License

main.sh

@@ -88,12 +88,15 @@ cargo_binstall() {
 
     install_cargo_binstall
 
+    # --secure mode enforce downloads over secure transports only.
+    # As a result, http will be disabled, and it will also set
+    # min tls version to be 1.2
     case "${version}" in
         latest)
-            cargo binstall --no-confirm "$tool"
+            cargo binstall --secure --no-confirm "$tool"
             ;;
         *)
-            cargo binstall --no-confirm --version "$version" "$tool"
+            cargo binstall --secure --no-confirm --version "$version" "$tool"
             ;;
     esac
 }
@@ -126,7 +129,7 @@ for tool in "${tools[@]}"; do
                 # https://github.com/taiki-e/cargo-hack/releases
                 cargo-hack) latest_version="0.5.14" ;;
                 # https://github.com/taiki-e/cargo-llvm-cov/releases
-                cargo-llvm-cov) latest_version="0.4.5" ;;
+                cargo-llvm-cov) latest_version="0.4.8" ;;
                 # https://github.com/taiki-e/cargo-minimal-versions/releases
                 cargo-minimal-versions) latest_version="0.1.4" ;;
                 # https://github.com/taiki-e/parse-changelog/releases
@@ -245,7 +248,7 @@ for tool in "${tools[@]}"; do
             ;;
         wasmtime)
             # https://github.com/bytecodealliance/wasmtime/releases
-            latest_version="0.37.0"
+            latest_version="0.38.1"
             repo="bytecodealliance/wasmtime"
             case "${OSTYPE}" in
                 linux*) target="x86_64-linux" ;;

tools/publish.sh

@@ -42,7 +42,7 @@ fi
 tags=$(git --no-pager tag)
 if [[ -n "${tags}" ]]; then
     # Make sure the same release does not exist in CHANGELOG.md.
-    release_date=$(date --utc '+%Y-%m-%d')
+    release_date=$(date -u '+%Y-%m-%d')
     if grep -Eq "^## \\[${version//./\\.}\\] - ${release_date}$" CHANGELOG.md; then
         bail "release ${version} already exist in CHANGELOG.md"
     fi