Release 2.58.4

Updates the requirements on [spdx](https://github.com/EmbarkStudios/spdx) to permit the latest version.
- [Release notes](https://github.com/EmbarkStudios/spdx/releases)
- [Changelog](https://github.com/EmbarkStudios/spdx/blob/main/CHANGELOG.md)
- [Commits](https://github.com/EmbarkStudios/spdx/compare/0.10.0...0.11.0)

---
updated-dependencies:
- dependency-name: spdx
  dependency-version: 0.11.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -10,6 +10,26 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [2.58.4] - 2025-08-09
+
+- Update `typos@latest` to 1.35.3.
+
+- Update `syft@latest` to 1.30.0.
+
+## [2.58.3] - 2025-08-08
+
+- Update `typos@latest` to 1.35.2.
+
+## [2.58.2] - 2025-08-07
+
+- Update `deepsource@latest` to 0.10.1.
+
+## [2.58.1] - 2025-08-07
+
+- Update `osv-scanner@latest` to 2.2.0.
+
+- Update `grcov@latest` to 0.10.5.
+
 ## [2.58.0] - 2025-08-06
 
 - Support `iai-callgrind-runner`. ([#1073](https://github.com/taiki-e/install-action/pull/1073), thanks @niklasf)
@@ -4244,7 +4264,11 @@ Note: This release is considered a breaking change because installing on version
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.58.0...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.58.4...HEAD
+[2.58.4]: https://github.com/taiki-e/install-action/compare/v2.58.3...v2.58.4
+[2.58.3]: https://github.com/taiki-e/install-action/compare/v2.58.2...v2.58.3
+[2.58.2]: https://github.com/taiki-e/install-action/compare/v2.58.1...v2.58.2
+[2.58.1]: https://github.com/taiki-e/install-action/compare/v2.58.0...v2.58.1
 [2.58.0]: https://github.com/taiki-e/install-action/compare/v2.57.8...v2.58.0
 [2.57.8]: https://github.com/taiki-e/install-action/compare/v2.57.7...v2.57.8
 [2.57.7]: https://github.com/taiki-e/install-action/compare/v2.57.6...v2.57.7

manifests/deepsource.json

@@ -19,10 +19,32 @@
   },
   "license_markdown": "[BSD-2-Clause](https://github.com/DeepSourceCorp/cli/blob/master/LICENSE)",
   "latest": {
-    "version": "0.10.0"
+    "version": "0.10.1"
   },
   "0.10": {
-    "version": "0.10.0"
+    "version": "0.10.1"
+  },
+  "0.10.1": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DDD5C079BBAE9D",
+      "checksum": "e415a6a53257457ef1dad900fdb39aeb991dd01c35c4be9cafa88a41f9e50b3b"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDD5C079B8093E",
+      "checksum": "c5ab075b8a717468cd7d50a0b601a0c403e1e0f51931f415757d93022215470d"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDD5C07A70C52A",
+      "checksum": "94ad1f9adc826bc4008a4c70c53ffc6a77aab3c9c8194259403a3b4ab5197178"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DDD5C07A70EC16",
+      "checksum": "a06b465ec142ed51b104f92d0266472acba61626fe5678ad38624151d16368fe"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDD5C07A543597",
+      "checksum": "9f5a930044d1bd7afb9d94098e625e4785996c8eeff51ad50f7d2b1fc4bab3e6"
+    }
   },
   "0.10.0": {
     "x86_64_linux_gnu": {

manifests/grcov.json

@@ -19,10 +19,54 @@
   },
   "license_markdown": "[MPL-2.0](https://github.com/mozilla/grcov/blob/HEAD/LICENSE-MPL-2.0)",
   "latest": {
-    "version": "0.10.3"
+    "version": "0.10.5"
   },
   "0.10": {
-    "version": "0.10.3"
+    "version": "0.10.5"
+  },
+  "0.10.5": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DDD4F409E8D97C",
+      "checksum": "93f558f7ee8db6f69d21f9ecf4a1e58d657d31757ddd3d0107e9cfba9cf18867"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDD4F4082C080E",
+      "checksum": "02c3161743c0ee8fa1e72dfe7a37e2009608aee010827067b101a0ccc72dd344"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDD4F408999095",
+      "checksum": "6421531c26d23e38af16f21cf2104dd846afaf8ac4cb3f531d50f5ecd507b737"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DDD4F407C33506",
+      "checksum": "b2b59a0b5fa59ede403b482257fe8b5a67ab191ed1fed0f2152b76a5a48e00ee"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDD4F406869BB7",
+      "checksum": "4d92a519a950adc1ca4a62be8d717eab160fec5406ee7bcad55bf830c366853e"
+    }
+  },
+  "0.10.4": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DDD4CDF80C450C",
+      "checksum": "d423fe29723792996c9e0bdce2a51a8cb0e6dc2a597dc7aed87fa48dd015a78c"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDD4CDF650D173",
+      "checksum": "5026d2318c6bb478fb77707140148e3f5c20cc7d34706813ef1abc7a57bdfd12"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDD4CDF6C3F909",
+      "checksum": "b01017cf5cb1b82dfe0955cfdd3ffcd9dabd4d11e06a011236e515467120b074"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DDD4CDF5F1B783",
+      "checksum": "b92117c71ba2c30f1e551cd26b2d4fb0be7df1de6aeaeab0fe4d562fb6d5be3c"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDD4CDF4A798DC",
+      "checksum": "efbb326e4c1708f5df559da71e0bf6ae23c7a4c7ffa79061eb79c088f58f2438"
+    }
   },
   "0.10.3": {
     "x86_64_linux_musl": {

manifests/osv-scanner.json

@@ -3,10 +3,45 @@
   "template": null,
   "license_markdown": "[Apache-2.0](https://github.com/google/osv-scanner/blob/main/LICENSE)",
   "latest": {
-    "version": "2.1.0"
+    "version": "2.2.0"
   },
   "2": {
-    "version": "2.1.0"
+    "version": "2.2.0"
+  },
+  "2.2": {
+    "version": "2.2.0"
+  },
+  "2.2.0": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.2.0/osv-scanner_linux_amd64",
+      "etag": "0x8DDD564667CB4E6",
+      "checksum": "e9aedca80c4f147d84fc82ef124f73e9f3d96b837319a6ba3b18eeba631e90e1"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.2.0/osv-scanner_darwin_amd64",
+      "etag": "0x8DDD56466490DCB",
+      "checksum": "76aa6ae74cc33b01f3dca990cfc4c1bbce4eda4383860b19c55c1d216571a19f"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.2.0/osv-scanner_windows_amd64.exe",
+      "etag": "0x8DDD564674AB631",
+      "checksum": "30cb10d2ff31d7286fe41dfc0c88cd4ec99fcb8cec2f03a2295a03728dd5b917"
+    },
+    "aarch64_linux_musl": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.2.0/osv-scanner_linux_arm64",
+      "etag": "0x8DDD5646761A6E0",
+      "checksum": "3f5edc9c38505acab39d3067b963e0e9d12ac167c09df2b26cadec91b1d33f01"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.2.0/osv-scanner_darwin_arm64",
+      "etag": "0x8DDD5646645B63F",
+      "checksum": "09ed8a356c3134b5fa603f7bb731fabef59c34b0610fc84be17acf200ccb767a"
+    },
+    "aarch64_windows": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.2.0/osv-scanner_windows_arm64.exe",
+      "etag": "0x8DDD564664EACBE",
+      "checksum": "e3ed8f1fdb73bbd0fa7b8f8a43fe5fb0d35ecde52a6a4380d02adf1039ecd703"
+    }
   },
   "2.1": {
     "version": "2.1.0"

manifests/syft.json

@@ -24,10 +24,35 @@
   },
   "license_markdown": "[Apache-2.0](https://github.com/anchore/syft/blob/main/LICENSE)",
   "latest": {
-    "version": "1.29.1"
+    "version": "1.30.0"
   },
   "1": {
-    "version": "1.29.1"
+    "version": "1.30.0"
+  },
+  "1.30": {
+    "version": "1.30.0"
+  },
+  "1.30.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DDD6A9FA95E2B1",
+      "checksum": "f0cdcba0b6ce4c7a87050d524f732ba9fa2e711835f993a4ef108cfbf928ec13"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDD6A9FB7B21BF",
+      "checksum": "ecde186dd98b0bbe303b47e8067144e00b1ced8597db1295246b22d1f4df0391"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDD6A9FB6F2153",
+      "checksum": "9e354ab18359e018bf8c654713ec44ce5ad1056f231c9d031749f38c1fd2b963"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DDD6A9FA9C91F5",
+      "checksum": "17cd933561b18210960526f32c9258087c5c8dce595e8f0b39477330023add13"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDD6A9FB4449E6",
+      "checksum": "4597082b0c9e2eabf6c54c2f4521ea865f1d1f48cb861ec3e44c5a2db83215d2"
+    }
   },
   "1.29": {
     "version": "1.29.1"

manifests/typos.json

@@ -19,13 +19,57 @@
   },
   "license_markdown": "[MIT](https://github.com/crate-ci/typos/blob/master/LICENSE-MIT) OR [Apache-2.0](https://github.com/crate-ci/typos/blob/master/LICENSE-APACHE)",
   "latest": {
-    "version": "1.35.1"
+    "version": "1.35.3"
   },
   "1": {
-    "version": "1.35.1"
+    "version": "1.35.3"
   },
   "1.35": {
-    "version": "1.35.1"
+    "version": "1.35.3"
+  },
+  "1.35.3": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DDD6B6E5947D7C",
+      "checksum": "453ca42f404d09214f43b702e4ec0fb7e4d11d208c6799a8bea380af614025e4"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDD6B6FCB606C8",
+      "checksum": "ac6946e2d3208f6a3bdcf3db3ba90e335622b0038f8a9677d7dc4f39c0391f0e"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDD6B72C44E511",
+      "checksum": "d89e1f83eade58f4e3966fbed742c85df75768971c35368a116e1e03204148da"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DDD6B70492F737",
+      "checksum": "5bb5fb5cd24d15be32a245911028974dbf49aacecbc222f7d0c414a10ea37954"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDD6B70E3845BF",
+      "checksum": "552f1dfed59bdd0c6303c03d2aa97375a92065b99cf77626af5b0bea7f60eeaf"
+    }
+  },
+  "1.35.2": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DDD5F5172A42DF",
+      "checksum": "fdc15f31c8ec51c46d71fd0c022e49ddb5c0eaa3b24e1d201ae4d42bfb7559d9"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDD5F50C1968CC",
+      "checksum": "f614be9d25b67902f566ea61aa0683aff57819f6164772c6805b1f8af66ca8fd"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDD5F555FDB736",
+      "checksum": "0af08a47bf4dff69ba141e1cd6b9967e5f90118e4d452ba1c5538c82a8b90023"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DDD5F516D70251",
+      "checksum": "b0f888e28fa67fef6708cffe28c5e7e40a76dfeec8edf4c3d8c374d6fad78876"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDD5F53296067E",
+      "checksum": "6f2cd72b1f31f3ededd8a3fd5eee7442f6ea817d5559473c393207f96e1fdbdd"
+    }
   },
   "1.35.1": {
     "x86_64_linux_musl": {

tools/codegen/Cargo.toml

@@ -14,7 +14,7 @@ serde = "1"
 serde_derive = "1"
 serde_json = "1"
 sha2 = "0.10"
-spdx = "0.10"
+spdx = "0.11"
 tar = "0.4"
 toml = { version = "0.9", default-features = false, features = ["parse", "serde"] }
 # TODO: call curl command instead of using ureq?