Release 2.58.4

Updates the requirements on [spdx](https://github.com/EmbarkStudios/spdx) to permit the latest version.
- [Release notes](https://github.com/EmbarkStudios/spdx/releases)
- [Changelog](https://github.com/EmbarkStudios/spdx/blob/main/CHANGELOG.md)
- [Commits](https://github.com/EmbarkStudios/spdx/compare/0.10.0...0.11.0)

---
updated-dependencies:
- dependency-name: spdx
  dependency-version: 0.11.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -10,6 +10,16 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [2.58.4] - 2025-08-09
+
+- Update `typos@latest` to 1.35.3.
+
+- Update `syft@latest` to 1.30.0.
+
+## [2.58.3] - 2025-08-08
+
+- Update `typos@latest` to 1.35.2.
+
 ## [2.58.2] - 2025-08-07
 
 - Update `deepsource@latest` to 0.10.1.
@@ -4254,7 +4264,9 @@ Note: This release is considered a breaking change because installing on version
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.58.2...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.58.4...HEAD
+[2.58.4]: https://github.com/taiki-e/install-action/compare/v2.58.3...v2.58.4
+[2.58.3]: https://github.com/taiki-e/install-action/compare/v2.58.2...v2.58.3
 [2.58.2]: https://github.com/taiki-e/install-action/compare/v2.58.1...v2.58.2
 [2.58.1]: https://github.com/taiki-e/install-action/compare/v2.58.0...v2.58.1
 [2.58.0]: https://github.com/taiki-e/install-action/compare/v2.57.8...v2.58.0

manifests/syft.json

@@ -24,10 +24,35 @@
   },
   "license_markdown": "[Apache-2.0](https://github.com/anchore/syft/blob/main/LICENSE)",
   "latest": {
-    "version": "1.29.1"
+    "version": "1.30.0"
   },
   "1": {
-    "version": "1.29.1"
+    "version": "1.30.0"
+  },
+  "1.30": {
+    "version": "1.30.0"
+  },
+  "1.30.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DDD6A9FA95E2B1",
+      "checksum": "f0cdcba0b6ce4c7a87050d524f732ba9fa2e711835f993a4ef108cfbf928ec13"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDD6A9FB7B21BF",
+      "checksum": "ecde186dd98b0bbe303b47e8067144e00b1ced8597db1295246b22d1f4df0391"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDD6A9FB6F2153",
+      "checksum": "9e354ab18359e018bf8c654713ec44ce5ad1056f231c9d031749f38c1fd2b963"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DDD6A9FA9C91F5",
+      "checksum": "17cd933561b18210960526f32c9258087c5c8dce595e8f0b39477330023add13"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDD6A9FB4449E6",
+      "checksum": "4597082b0c9e2eabf6c54c2f4521ea865f1d1f48cb861ec3e44c5a2db83215d2"
+    }
   },
   "1.29": {
     "version": "1.29.1"

manifests/typos.json

@@ -19,13 +19,57 @@
   },
   "license_markdown": "[MIT](https://github.com/crate-ci/typos/blob/master/LICENSE-MIT) OR [Apache-2.0](https://github.com/crate-ci/typos/blob/master/LICENSE-APACHE)",
   "latest": {
-    "version": "1.35.1"
+    "version": "1.35.3"
   },
   "1": {
-    "version": "1.35.1"
+    "version": "1.35.3"
   },
   "1.35": {
-    "version": "1.35.1"
+    "version": "1.35.3"
+  },
+  "1.35.3": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DDD6B6E5947D7C",
+      "checksum": "453ca42f404d09214f43b702e4ec0fb7e4d11d208c6799a8bea380af614025e4"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDD6B6FCB606C8",
+      "checksum": "ac6946e2d3208f6a3bdcf3db3ba90e335622b0038f8a9677d7dc4f39c0391f0e"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDD6B72C44E511",
+      "checksum": "d89e1f83eade58f4e3966fbed742c85df75768971c35368a116e1e03204148da"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DDD6B70492F737",
+      "checksum": "5bb5fb5cd24d15be32a245911028974dbf49aacecbc222f7d0c414a10ea37954"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDD6B70E3845BF",
+      "checksum": "552f1dfed59bdd0c6303c03d2aa97375a92065b99cf77626af5b0bea7f60eeaf"
+    }
+  },
+  "1.35.2": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DDD5F5172A42DF",
+      "checksum": "fdc15f31c8ec51c46d71fd0c022e49ddb5c0eaa3b24e1d201ae4d42bfb7559d9"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDD5F50C1968CC",
+      "checksum": "f614be9d25b67902f566ea61aa0683aff57819f6164772c6805b1f8af66ca8fd"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDD5F555FDB736",
+      "checksum": "0af08a47bf4dff69ba141e1cd6b9967e5f90118e4d452ba1c5538c82a8b90023"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DDD5F516D70251",
+      "checksum": "b0f888e28fa67fef6708cffe28c5e7e40a76dfeec8edf4c3d8c374d6fad78876"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDD5F53296067E",
+      "checksum": "6f2cd72b1f31f3ededd8a3fd5eee7442f6ea817d5559473c393207f96e1fdbdd"
+    }
   },
   "1.35.1": {
     "x86_64_linux_musl": {

tools/codegen/Cargo.toml

@@ -14,7 +14,7 @@ serde = "1"
 serde_derive = "1"
 serde_json = "1"
 sha2 = "0.10"
-spdx = "0.10"
+spdx = "0.11"
 tar = "0.4"
 toml = { version = "0.9", default-features = false, features = ["parse", "serde"] }
 # TODO: call curl command instead of using ureq?