Release 2.67.24

Fixed in 312f2e492d.

.clippy.toml

@@ -8,8 +8,6 @@ disallowed-macros = [
     { path = "std::dbg", reason = "it is okay to use during development, but please do not include it in main branch" },
 ]
 disallowed-methods = [
-    { path = "std::env::remove_var", reason = "this is not thread-safe and inherently unsafe; see <https://github.com/rust-lang/rust/issues/27970> for more" },
-    { path = "std::env::set_var", reason = "this is not thread-safe and inherently unsafe; see <https://github.com/rust-lang/rust/issues/27970> for more" },
 ]
 disallowed-types = [
 ]

.cspell.json

@@ -27,24 +27,25 @@
   "ignoreRegExpList": [
     // Copyright notice
     "Copyright .*",
+    "SPDX-(File|Snippet)CopyrightText: .*",
     // GHA actions/workflows
-    "uses: .+@",
+    "uses: .+@[\\w_.-]+",
     // GHA context (repo name, owner name, etc.)
-    "github.\\w+ (=|!)= '.+'",
+    "github.[\\w_.-]+ (=|!)= '[^']+'",
     // GH username
     "( |\\[)@[\\w_-]+",
     // Git config username
-    "git config user.name .*",
-    // Username in todo comment
+    "git config( --[^ ]+)? user.name .*",
+    // Username in TODO|FIXME comment
     "(TODO|FIXME)\\([\\w_., -]+\\)",
     // Cargo.toml authors
-    "authors *= *\\[.*\\]",
-    "\".* <[\\w_.+-]+@[\\w.-]+>\""
+    "authors *= *\\[[^\\]]*\\]",
+    "\"[^\"]* <[\\w_.+-]+@[\\w.-]+>\""
   ],
   "languageSettings": [
     {
       "languageId": ["*"],
-      "dictionaries": ["bash", "rust"]
+      "dictionaries": ["bash", "cpp-refined", "rust"]
     }
   ],
   "ignorePaths": []

.deny.toml

@@ -0,0 +1,48 @@
+# https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html
+[advisories]
+unused-ignored-advisory = "deny"
+yanked = "deny"
+unmaintained = "none"
+unsound = "all"
+git-fetch-with-cli = true
+ignore = [
+]
+
+# https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html
+[bans]
+multiple-versions = "warn"
+wildcards = "deny"
+allow-wildcard-paths = true
+build.executables = "deny"
+build.interpreted = "deny"
+build.include-dependencies = true
+build.include-workspace = false # covered by tools/tidy.sh
+build.include-archives = true
+build.allow-build-scripts = [
+    { name = "proc-macro2" }, # via serde_derive
+    { name = "quote" }, # via serde_derive
+    { name = "semver" },
+    { name = "serde_core" },
+    { name = "serde" }, # https://github.com/serde-rs/serde/issues/2972
+]
+build.bypass = [
+]
+
+# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
+[licenses]
+unused-allowed-license = "deny"
+unused-license-exception = "deny"
+private.ignore = true
+allow = [
+    "Apache-2.0",
+    "MIT",
+    "Unicode-3.0", # unicode-ident
+]
+
+# https://embarkstudios.github.io/cargo-deny/checks/sources/cfg.html
+[sources]
+unused-allowed-source = "deny"
+unknown-registry = "deny"
+unknown-git = "deny"
+allow-git = [
+]

.editorconfig

@@ -11,12 +11,14 @@ indent_style = space
 insert_final_newline = true
 trim_trailing_whitespace = true
 
-[*.{json,md,rb,yml,yaml}]
+[*.{css,html,json,md,rb,sh,yml,yaml}]
 indent_size = 2
 
 [*.{js,yml,yaml}]
 quote_type = single
 
 [*.sh]
+# https://google.github.io/styleguide/shellguide.html#s5.3-pipelines
 binary_next_line = true
+# https://google.github.io/styleguide/shellguide.html#s5.5-case-statement
 switch_case_indent = true

.git-blame-ignore-revs

@@ -0,0 +1,2 @@
+# Change indent size of shell script files to match scripts in CI config
+946918579413996845b77e146aa8eb3c6f40f7ab

.gitattributes

@@ -1,3 +1,4 @@
 * text=auto eol=lf
-manifests/** linguist-generated
+tools/tidy.sh linguist-detectable=false
 .github/.cspell/rust-dependencies.txt linguist-generated
+manifests/** linguist-generated

.github/.cspell/project-dictionary.txt

@@ -1,39 +1,39 @@
 almalinux
 archlinux
-bindgen
 binstall
+callgrind
 coreutils
 cyclonedx
 cygdrive
+deadlinks
 deepsource
-distro
 doas
-dprint
 enablerepo
 epel
 espup
-etag
 fastestmirror
 grcov
+insta
 knope
+libicu
 linkcheck
 mdbook
 microdnf
 mirrorlist
 nextest
 pluginconf
-protoc
-pubkey
-pwsh
-QQSTRING
+ppcle
+prek
 quickinstall
 rclone
 rdme
+rootfs
 sccache
 syft
+tombi
 udeps
 wasmtime
 watchexec
+worktree
 xbuild
 xscale
-zigbuild

.github/.cspell/rust-dependencies.txt

@@ -1,5 +1,5 @@
-// This file is @generated by tidy.sh.
-// It is not intended for manual editing.
+# This file is @generated by tidy.sh.
+# It is not intended for manual editing.
 
 flate
 minisign

.github/dependabot.yml

@@ -6,6 +6,9 @@ updates:
       interval: daily
     commit-message:
       prefix: ''
+    ignore:
+      # https://github.com/taiki-e/install-action/pull/831#issuecomment-2650284580
+      - dependency-name: ureq
     labels: []
   - package-ecosystem: github-actions
     directory: /

.github/workflows/ci.yml

@@ -11,7 +11,7 @@ on:
       - dev
       - ci-*
   schedule:
-    - cron: '0 0,3,6,9,12,15,18,21 * * *'
+    - cron: '0 0 * * *'
   workflow_dispatch:
 
 env:
@@ -25,15 +25,33 @@ env:
 
 defaults:
   run:
-    shell: bash
+    shell: bash --noprofile --norc -CeEuxo pipefail {0}
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
   cancel-in-progress: true
 
 jobs:
+  miri:
+    uses: taiki-e/github-actions/.github/workflows/miri.yml@main
+    with:
+      # NB: sync with test job's --exclude option
+      args: --exclude install-action-internal-codegen
+  msrv:
+    uses: taiki-e/github-actions/.github/workflows/msrv.yml@main
+  test-manifest-schema:
+    uses: taiki-e/github-actions/.github/workflows/test.yml@main
+    with:
+      # NB: sync with miri job's --exclude option
+      test-args: --exclude install-action-internal-codegen
+      no-std: false
   tidy:
     uses: taiki-e/github-actions/.github/workflows/tidy.yml@main
+    permissions:
+      contents: read
+      pull-requests: write # for gh pr edit --add-assignee
+      repository-projects: read # for gh pr edit --add-assignee
+    secrets: inherit
 
   test:
     strategy:
@@ -41,46 +59,56 @@ jobs:
       matrix:
         include:
           # NB: Sync list with https://github.com/taiki-e/checkout-action/blob/HEAD/.github/workflows/ci.yml
-          - os: ubuntu-20.04
           - os: ubuntu-22.04
+          - os: ubuntu-22.04-arm
           - os: ubuntu-24.04
+          - os: ubuntu-24.04-arm
+          - os: ubuntu-slim
           - os: ubuntu-22.04
             tool: major.minor.patch
           - os: ubuntu-22.04
             tool: major.minor
           - os: ubuntu-22.04
             tool: major
-          - os: macos-12
-          - os: macos-13
           - os: macos-14
-          - os: windows-2019
-          - os: windows-2019
-            bash: msys64
-          - os: windows-2019
-            bash: cygwin
+          - os: macos-15
+          - os: macos-15-intel
+          - os: macos-26
           - os: windows-2022
           - os: windows-2022
             bash: msys64
           - os: windows-2022
             bash: cygwin
+          - os: windows-2025
+          - os: windows-2025
+            bash: msys64
+          - os: windows-2025
+            bash: cygwin
+          - os: windows-11-arm
+          - os: windows-2022
+            tool: major.minor.patch
+          - os: windows-2022
+            tool: major.minor
+          - os: windows-2022
+            tool: major
     runs-on: ${{ matrix.os }}
     timeout-minutes: 60
     steps:
+      - uses: taiki-e/checkout-action@v1
+      # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
+      - run: rm -- Cargo.toml
+      - name: Generate tool list
+        id: tool-list
+        run: tools/ci/tool-list.sh "${{ matrix.tool }}" "${{ matrix.os }}" "${{ matrix.bash }}" >>"${GITHUB_OUTPUT}"
       - run: |
-          printf 'C:\msys64\mingw32\bin\n' >>"${GITHUB_PATH}"
-          printf 'C:\msys64\usr\bin\n' >>"${GITHUB_PATH}"
+          printf '%s\n' 'C:\msys64\mingw32\bin' >>"${GITHUB_PATH}"
+          printf '%s\n' 'C:\msys64\usr\bin' >>"${GITHUB_PATH}"
         if: matrix.bash == 'msys64'
       - run: |
           choco install --no-progress --requirechecksums cygwin
-          printf 'C:\tools\cygwin\bin\n' >>"${GITHUB_PATH}"
-          printf 'C:\tools\cygwin\usr\bin\n' >>"${GITHUB_PATH}"
+          printf '%s\n' 'C:\tools\cygwin\bin' >>"${GITHUB_PATH}"
+          printf '%s\n' 'C:\tools\cygwin\usr\bin' >>"${GITHUB_PATH}"
         if: matrix.bash == 'cygwin'
-      - uses: taiki-e/checkout-action@v1
-      # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
-      - run: rm Cargo.toml
-      - name: Generate tool list
-        id: tool-list
-        run: tools/ci/tool-list.sh "${{ matrix.tool }}" >>"${GITHUB_OUTPUT}"
       - run: env
       - uses: ./
         with:
@@ -98,6 +126,7 @@ jobs:
       - name: Test pwsh
         run: just --version; shfmt --version; protoc --version
         shell: pwsh
+        if: matrix.os != 'ubuntu-slim'
       - name: Test powershell
         run: just --version; shfmt --version; protoc --version
         shell: powershell
@@ -111,10 +140,67 @@ jobs:
       # check it with CI. (e.g., 0.14.0->0.16.0 update change it
       # from "cargo-binstall <version>" to "<version>")
       - run: |
-          if [[ "$(cargo binstall -V)" != "$(jq -r '.latest.version' manifests/cargo-binstall.json)" ]]; then
+          if [[ "$(cargo-binstall binstall -V)" != "$(jq -r '.latest.version' manifests/cargo-binstall.json)" ]]; then
             exit 1
           fi
-        if: matrix.bash != 'cygwin'
+        if: matrix.bash != 'cygwin' && matrix.os != 'windows-11-arm'
+
+  test-alias:
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+      - uses: taiki-e/checkout-action@v1
+      # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
+      - run: rm -- Cargo.toml
+      - run: env
+      - uses: ./
+        with:
+          # NB: Update alias list in tools/publish.rs and case for aliases in main.sh.
+          tool: |
+            nextest
+            taplo-cli
+            typos-cli
+            wasm-bindgen-cli
+            wasmtime-cli
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Test bash
+        run: cargo-nextest nextest --version && taplo --version
+        shell: bash
+      - name: Test sh
+        run: cargo-nextest nextest --version && taplo --version
+        shell: sh
+
+  test-fallback:
+    strategy:
+      fail-fast: false
+      matrix:
+        fallback:
+          - none
+          - cargo-install
+    runs-on: ubuntu-24.04-arm
+    timeout-minutes: 60
+    steps:
+      - uses: taiki-e/checkout-action@v1
+      # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
+      - run: rm -- Cargo.toml
+      - run: env
+      - uses: ./
+        id: install
+        continue-on-error: ${{ matrix.fallback == 'none' }}
+        with:
+          tool: parse-changelog@0.4.6
+          fallback: ${{ matrix.fallback }}
+      - run: exit 1
+        if: matrix.fallback == 'none' && steps.install.outcome != 'failure'
+      - name: Test bash
+        run: parse-changelog --version
+        shell: bash
+        if: matrix.fallback != 'none'
+      - name: Test sh
+        run: parse-changelog --version
+        shell: sh
+        if: matrix.fallback != 'none'
 
   test-container:
     strategy:
@@ -132,44 +218,35 @@ jobs:
           - debian:10-slim # glibc 2.28
           - debian:11-slim # glibc 2.31
           - debian:12-slim # glibc 2.36
-          - fedora:latest # glibc 2.38 (as of fedora 39)
+          - debian:13-slim # glibc 2.41
+          - fedora:latest # glibc 2.39 (as of fedora 40)
           - almalinux:8 # glibc 2.28
           - almalinux:8-minimal # glibc 2.28
           - almalinux:9 # glibc 2.34
           - almalinux:9-minimal # glibc 2.34
+          - almalinux:10 # glibc 2.39
+          - almalinux:10-minimal # glibc 2.39
           - centos:6 # glibc 2.12
           - centos:7 # glibc 2.17
-          # TODO: broken: Repository 'Update repository of openSUSE Backports' is invalid.
-          # - opensuse/leap:latest # glibc 2.31 (as of leap 15.5)
-          # - opensuse/tumbleweed:latest # glibc 2.39 (as of 2024-04-18)
-          - archlinux:latest # glibc 2.38 (as of 2024-04-18)
-          - alpine:latest # musl 1.2.4 (as of alpine 3.19)
+          - opensuse/leap:latest # glibc 2.38 (as of leap 15.6)
+          - opensuse/tumbleweed:latest # glibc 2.39 (as of 2024-07-19)
+          - archlinux:latest # glibc 2.39 (as of 2024-07-19)
+          - alpine:latest # musl 1.2.5 (as of alpine 3.20)
+          # - openwrt/rootfs:x86-64-openwrt-24.10 # musl 1.2.5
     runs-on: ubuntu-latest
     timeout-minutes: 60
     container: ${{ matrix.container }}
     steps:
-      - name: Install requirements (ubuntu:14.04)
+      - name: Install requirements (old debian)
         run: |
-          set -CeEuxo pipefail
-          # ubuntu 14.04's jq is 1.3
-          # error: syntax error, unexpected QQSTRING_START, expecting $end
-          # https://github.com/jqlang/jq/issues/273
-          apt-get -o Acquire::Retries=10 -qq update
-          apt-get -o Acquire::Retries=10 -o Dpkg::Use-Pty=0 install -y --no-install-recommends ca-certificates curl
-          curl --proto '=https' --tlsv1.2 -fsSL --retry 10 -o /usr/local/bin/jq https://github.com/jqlang/jq/releases/download/jq-1.5/jq-linux64
-          chmod +x /usr/local/bin/jq
-        if: startsWith(matrix.container, 'ubuntu:14.04')
-      - name: Install requirements (debian:9)
-        run: |
-          set -CeEuxo pipefail
           # In Debian, the old repositories is removed from the main mirrors some time after EoL.
+          codename=$(grep -E '^VERSION_CODENAME=' /etc/os-release | cut -d= -f2)
           sed -i /etc/apt/sources.list -e 's/deb.debian.org/archive.debian.org/g' \
             -e 's|security.debian.org|archive.debian.org/|g' \
-            -e '/stretch-updates/d'
-        if: startsWith(matrix.container, 'debian:9')
+            -e "/${codename}-updates/d"
+        if: startsWith(matrix.container, 'debian:9') || startsWith(matrix.container, 'debian:10')
       - name: Install requirements (centos)
         run: |
-          set -CeEuxo pipefail
           # In CentOS, the old repositories is removed from the main mirrors just after EoL.
           # https://github.com/rust-lang/rust/pull/126352
           sed -i /etc/yum.repos.d/*.repo -e 's!^mirrorlist!#mirrorlist!' \
@@ -183,12 +260,7 @@ jobs:
             ./configure --prefix=/usr/local --with-ssl
             make
             make install
-            # CentOS 6's jq is 1.3
-            # error: syntax error, unexpected QQSTRING_START, expecting $end
-            # https://github.com/jqlang/jq/issues/273
-            curl --proto '=https' --tlsv1.2 -fsSL --retry 10 -o /usr/local/bin/jq https://github.com/jqlang/jq/releases/download/jq-1.5/jq-linux64
-            chmod +x /usr/local/bin/jq
-            # for checkout-action https://github.com/taiki-e/checkout-action/blob/87380fc33ed8e04e325b05d3576995b2253ab5ba/.github/workflows/ci.yml#L134-L142
+            # for checkout-action https://github.com/taiki-e/checkout-action/blob/v1.3.0/.github/workflows/ci.yml#L135-L143
             yum install -y openssh-clients perl perl-Error perl-TermReadKey rsync
             rpm -i \
               https://vault.ius.io/el6/x86_64/packages/p/perl-Git18-1.8.5.5-4.ius.el6.noarch.rpm \
@@ -197,10 +269,10 @@ jobs:
         if: startsWith(matrix.container, 'centos')
       - uses: taiki-e/checkout-action@v1
       # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
-      - run: rm Cargo.toml