Release 2.53.0

.github/.cspell/project-dictionary.txt

@@ -32,3 +32,4 @@ watchexec
 worktree
 xbuild
 xscale
+zizmor

CHANGELOG.md

@@ -10,6 +10,12 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [2.53.0] - 2025-06-16
+
+- Support `zizmor`. ([#1002](https://github.com/taiki-e/install-action/pull/1002), thanks @jayvdb)
+
+- Update `osv-scanner@latest` to 2.0.3.
+
 ## [2.52.8] - 2025-06-13
 
 - Update `cargo-careful@latest` to 0.4.7.
@@ -3984,7 +3990,8 @@ Note: This release is considered a breaking change because installing on version
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.52.8...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.53.0...HEAD
+[2.53.0]: https://github.com/taiki-e/install-action/compare/v2.52.8...v2.53.0
 [2.52.8]: https://github.com/taiki-e/install-action/compare/v2.52.7...v2.52.8
 [2.52.7]: https://github.com/taiki-e/install-action/compare/v2.52.6...v2.52.7
 [2.52.6]: https://github.com/taiki-e/install-action/compare/v2.52.5...v2.52.6

TOOLS.md

@@ -73,6 +73,7 @@ See the [Supported tools section in README.md](README.md#supported-tools) for ho
 | [**wasmtime**](https://github.com/bytecodealliance/wasmtime) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/bytecodealliance/wasmtime/releases) | Linux, macOS, Windows | [Apache-2.0 WITH LLVM-exception](https://github.com/bytecodealliance/wasmtime/blob/main/LICENSE) |
 | [**xbuild**](https://github.com/rust-mobile/xbuild) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/rust-mobile/xbuild/releases) | Linux, macOS, Windows | [Apache-2.0 OR MIT](https://github.com/rust-mobile/xbuild/blob/v0.2.0/xbuild/Cargo.toml#L7) |
 | [**xh**](https://github.com/ducaale/xh) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/ducaale/xh/releases) | Linux, macOS, Windows | [MIT](https://github.com/ducaale/xh/blob/master/LICENSE) |
+| [**zizmor**](https://github.com/zizmorcore/zizmor) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/zizmorcore/zizmor/releases) | Linux, macOS, Windows | [MIT](https://github.com/zizmorcore/zizmor/blob/main/LICENSE) |
 | [**zola**](https://github.com/getzola/zola) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/getzola/zola/releases) | Linux, macOS, Windows | [MIT](https://github.com/getzola/zola/blob/master/LICENSE) |
 
 [cargo-binstall]: https://github.com/cargo-bins/cargo-binstall

manifests/osv-scanner.json

@@ -3,13 +3,45 @@
   "template": null,
   "license_markdown": "[Apache-2.0](https://github.com/google/osv-scanner/blob/main/LICENSE)",
   "latest": {
-    "version": "2.0.2"
+    "version": "2.0.3"
   },
   "2": {
-    "version": "2.0.2"
+    "version": "2.0.3"
   },
   "2.0": {
-    "version": "2.0.2"
+    "version": "2.0.3"
+  },
+  "2.0.3": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.0.3/osv-scanner_linux_amd64",
+      "etag": "0x8DDAC7B6CADDC11",
+      "checksum": "9acf365f60abd1c8cefeea4db897b0a6afdfe1e1f56776f634bc7bce64be5149"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.0.3/osv-scanner_darwin_amd64",
+      "etag": "0x8DDAC7B6DEFC790",
+      "checksum": "a8580cf56fe24c2a41b902c371d2faa450a6c8011708fc91483aac27d2c10c8e"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.0.3/osv-scanner_windows_amd64.exe",
+      "etag": "0x8DDAC7B6C92838D",
+      "checksum": "b37ec1b56f2620c2ba84bf165f4186495041baf73caa5fe2a6d16eafff74ccea"
+    },
+    "aarch64_linux_musl": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.0.3/osv-scanner_linux_arm64",
+      "etag": "0x8DDAC7B6C88A395",
+      "checksum": "de20c4334325937a6cef9534967c83e2e77362654d71c66c2709f8108ec587ea"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.0.3/osv-scanner_darwin_arm64",
+      "etag": "0x8DDAC7B6C8021A2",
+      "checksum": "e32f6144d2a49ae68321b3827270f8fd1cf5d226d6938ea1090f1aefd209cef7"
+    },
+    "aarch64_windows": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.0.3/osv-scanner_windows_arm64.exe",
+      "etag": "0x8DDAC7B6DCED010",
+      "checksum": "9920eed2ba989407459cd03e50d639207047373a68574ae2b08ba3967db1c237"
+    }
   },
   "2.0.2": {
     "x86_64_linux_musl": {

manifests/zizmor.json

@@ -0,0 +1,52 @@
+{
+  "rust_crate": "zizmor",
+  "template": {
+    "x86_64_linux_gnu": {
+      "url": "https://github.com/zizmorcore/zizmor/releases/download/v${version}/zizmor-x86_64-unknown-linux-gnu.tar.gz"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/zizmorcore/zizmor/releases/download/v${version}/zizmor-x86_64-apple-darwin.tar.gz"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/zizmorcore/zizmor/releases/download/v${version}/zizmor-x86_64-pc-windows-msvc.zip"
+    },
+    "aarch64_linux_gnu": {
+      "url": "https://github.com/zizmorcore/zizmor/releases/download/v${version}/zizmor-aarch64-unknown-linux-gnu.tar.gz"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/zizmorcore/zizmor/releases/download/v${version}/zizmor-aarch64-apple-darwin.tar.gz"
+    }
+  },
+  "license_markdown": "[MIT](https://github.com/zizmorcore/zizmor/blob/main/LICENSE)",
+  "latest": {
+    "version": "1.9.0"
+  },
+  "1": {
+    "version": "1.9.0"
+  },
+  "1.9": {
+    "version": "1.9.0"
+  },
+  "1.9.0": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DD9FC256DC942D",
+      "checksum": "7ec3b5d0796324245eab6acf9223cc04b01ab5357e32bc89f5f42972082bb955"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DD9FC25670B70E",
+      "checksum": "bcdded3b6692a7030d59bfff58c20548b2ac9ec9ac34ed975645bd7cac6d3cb4"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DD9FC2566AA363",
+      "checksum": "8012a860749c7ebb76a4bed1c039759d05fd898b1e5b41eedb540583833ca4d1"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DD9FC2566FF49D",
+      "checksum": "4dec6688af284fff10d84846771999df00085d107e8cb8dc8d6a1c6cdc4a9640"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DD9FC2566C284B",
+      "checksum": "dd9233c82889e37c271fd9f615aeed670c4c3bdac014fb58ce64552468ac3afb"
+    }
+  }
+}

tools/ci/tool-list.sh

@@ -7,7 +7,11 @@ cd -- "$(dirname -- "$0")"/../..
 
 # They don't provide prebuilt binaries for musl or old glibc host.
 # version `GLIBC_2.35' not found
+glibc_pre_2_39_incompat=(
+  zizmor
+)
 glibc_pre_2_35_incompat=(
+  "${glibc_pre_2_39_incompat[@]}"
   zola
 )
 # version `GLIBC_2.34' not found
@@ -71,33 +75,38 @@ case "$(uname -s)" in
       incompat_tools+=("${musl_incompat[@]}")
     else
       host_glibc_version=$(grep -E "GLIBC|GNU libc" <<<"${ldd_version}" | sed "s/.* //g")
-      higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.35"$'\n'"${host_glibc_version}" | tail -1)
+      higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.39"$'\n'"${host_glibc_version}" | tail -1)
       if [[ "${higher_glibc_version}" != "${host_glibc_version}" ]]; then
-        higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.34"$'\n'"${host_glibc_version}" | tail -1)
+        higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.35"$'\n'"${host_glibc_version}" | tail -1)
         if [[ "${higher_glibc_version}" != "${host_glibc_version}" ]]; then
-          higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.31"$'\n'"${host_glibc_version}" | tail -1)
+          higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.34"$'\n'"${host_glibc_version}" | tail -1)
           if [[ "${higher_glibc_version}" != "${host_glibc_version}" ]]; then
-            higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.28"$'\n'"${host_glibc_version}" | tail -1)
+            higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.31"$'\n'"${host_glibc_version}" | tail -1)
             if [[ "${higher_glibc_version}" != "${host_glibc_version}" ]]; then
-              higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.27"$'\n'"${host_glibc_version}" | tail -1)
+              higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.28"$'\n'"${host_glibc_version}" | tail -1)
               if [[ "${higher_glibc_version}" != "${host_glibc_version}" ]]; then
-                higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.17"$'\n'"${host_glibc_version}" | tail -1)
+                higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.27"$'\n'"${host_glibc_version}" | tail -1)
                 if [[ "${higher_glibc_version}" != "${host_glibc_version}" ]]; then
-                  incompat_tools+=("${glibc_pre_2_17_incompat[@]}")
+                  higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.17"$'\n'"${host_glibc_version}" | tail -1)
+                  if [[ "${higher_glibc_version}" != "${host_glibc_version}" ]]; then
+                    incompat_tools+=("${glibc_pre_2_17_incompat[@]}")
+                  else
+                    incompat_tools+=("${glibc_pre_2_27_incompat[@]}")
+                  fi
                 else
-                  incompat_tools+=("${glibc_pre_2_27_incompat[@]}")
+                  incompat_tools+=("${glibc_pre_2_28_incompat[@]}")
                 fi
               else
-                incompat_tools+=("${glibc_pre_2_28_incompat[@]}")
+                incompat_tools+=("${glibc_pre_2_31_incompat[@]}")
               fi
             else
-              incompat_tools+=("${glibc_pre_2_31_incompat[@]}")
+              incompat_tools+=("${glibc_pre_2_34_incompat[@]}")
             fi
           else
-            incompat_tools+=("${glibc_pre_2_34_incompat[@]}")
+            incompat_tools+=("${glibc_pre_2_35_incompat[@]}")
           fi
         else
-          incompat_tools+=("${glibc_pre_2_35_incompat[@]}")
+          incompat_tools+=("${glibc_pre_2_39_incompat[@]}")
         fi
       fi
     fi

tools/codegen/base/zizmor.json

@@ -0,0 +1,16 @@
+{
+  "repository": "https://github.com/zizmorcore/zizmor",
+  "tag_prefix": "v",
+  "rust_crate": "${package}",
+  "asset_name": "${package}-${rust_target}.tar.gz",
+  "version_range": ">= 1.9.0",
+  "platform": {
+    "x86_64_linux_gnu": {},
+    "x86_64_macos": {},
+    "x86_64_windows": {
+      "asset_name": "${package}-${rust_target}.zip"
+    },
+    "aarch64_linux_gnu": {},
+    "aarch64_macos": {}
+  }
+}