Release 2.68.27

.github/workflows/ci.yml

@@ -48,9 +48,8 @@ jobs:
   tidy:
     uses: taiki-e/github-actions/.github/workflows/tidy.yml@main
     permissions:
-      contents: read
-      pull-requests: write # for gh pr edit --add-assignee
-      repository-projects: read # for gh pr edit --add-assignee
+      contents: write # for creating branch for pr
+      pull-requests: write # unused (used in `codegen-automerge: true` case)
       security-events: write # for github/codeql-action/*
     secrets: inherit
 

.github/workflows/manifest.yml

@@ -35,9 +35,8 @@ jobs:
   manifest:
     uses: taiki-e/github-actions/.github/workflows/gen.yml@main
     permissions:
-      contents: read
-      pull-requests: write # for gh pr edit --add-assignee / gh pr review --approve
-      repository-projects: read # for gh pr edit --add-assignee
+      contents: write # for creating branch for pr
+      pull-requests: write # for gh pr review --approve
     secrets: inherit
     with:
       script: tools/manifest.sh

.github/zizmor.yml

@@ -2,7 +2,7 @@
 # https://docs.zizmor.sh/configuration/
 
 rules:
-  dependabot-cooldown: { disable: true } # Useless unless hash-pin is forced by unpinned-uses.
+  dependabot-cooldown: { disable: true } # Unless dependencies are pinned/locked, the effect is limited.
   secrets-inherit: { disable: true }
   unpinned-uses:
     config:

CHANGELOG.md

@@ -10,6 +10,12 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [2.68.27] - 2026-03-12
+
+- Update `cargo-cyclonedx@latest` to 0.5.8.
+
+- Update `mise@latest` to 2026.3.8.
+
 ## [2.68.26] - 2026-03-10
 
 - Update `vacuum@latest` to 0.25.0.
@@ -5863,7 +5869,8 @@ Note: This release is considered a breaking change because installing on version
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.68.26...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.68.27...HEAD
+[2.68.27]: https://github.com/taiki-e/install-action/compare/v2.68.26...v2.68.27
 [2.68.26]: https://github.com/taiki-e/install-action/compare/v2.68.25...v2.68.26
 [2.68.25]: https://github.com/taiki-e/install-action/compare/v2.68.24...v2.68.25
 [2.68.24]: https://github.com/taiki-e/install-action/compare/v2.68.23...v2.68.24

manifests/cargo-cyclonedx.json

@@ -3,10 +3,36 @@
   "template": null,
   "license_markdown": "[Apache-2.0](https://github.com/CycloneDX/cyclonedx-rust-cargo/blob/main/LICENSE)",
   "latest": {
-    "version": "0.5.7"
+    "version": "0.5.8"
   },
   "0.5": {
-    "version": "0.5.7"
+    "version": "0.5.8"
+  },
+  "0.5.8": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/CycloneDX/cyclonedx-rust-cargo/releases/download/cargo-cyclonedx-0.5.8/cargo-cyclonedx-x86_64-unknown-linux-musl.tar.xz",
+      "etag": "0x8DE805A50426FFF",
+      "checksum": "7cda4d471e70cad04daef2d55f3d031a7a246098dad263ca7fbda4e752f3bcc7",
+      "bin": "cargo-cyclonedx-x86_64-unknown-linux-musl/cargo-cyclonedx"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/CycloneDX/cyclonedx-rust-cargo/releases/download/cargo-cyclonedx-0.5.8/cargo-cyclonedx-x86_64-apple-darwin.tar.xz",
+      "etag": "0x8DE805A4FE43F58",
+      "checksum": "fd44040b33bafbb7b5073b8302f83100e02e12327de1e1ac245b32853ca320e7",
+      "bin": "cargo-cyclonedx-x86_64-apple-darwin/cargo-cyclonedx"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/CycloneDX/cyclonedx-rust-cargo/releases/download/cargo-cyclonedx-0.5.8/cargo-cyclonedx-x86_64-pc-windows-msvc.zip",
+      "etag": "0x8DE805A5010C283",
+      "checksum": "81577d0bdc7dbe99bed56ec79437afef476842999541a85096efa1f28f7fd965",
+      "bin": "cargo-cyclonedx.exe"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/CycloneDX/cyclonedx-rust-cargo/releases/download/cargo-cyclonedx-0.5.8/cargo-cyclonedx-aarch64-apple-darwin.tar.xz",
+      "etag": "0x8DE805A4FB1F65D",
+      "checksum": "0b0b28095b775886a530c2be191a51a053e853d3a0212536b958ebf2828b119b",
+      "bin": "cargo-cyclonedx-aarch64-apple-darwin/cargo-cyclonedx"
+    }
   },
   "0.5.7": {
     "x86_64_linux_musl": {

manifests/mise.json

@@ -28,13 +28,39 @@
   },
   "license_markdown": "[MIT](https://github.com/jdx/mise/blob/main/LICENSE)",
   "latest": {
-    "version": "2026.3.7"
+    "version": "2026.3.8"
   },
   "2026": {
-    "version": "2026.3.7"
+    "version": "2026.3.8"
   },
   "2026.3": {
-    "version": "2026.3.7"
+    "version": "2026.3.8"
+  },
+  "2026.3.8": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE7FA887983575",
+      "checksum": "5919700f35af69145098ec7ce475f6770e8ea2ba1676f4e52b1f76b6584896c6"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE7FA889B07B58",
+      "checksum": "1c2ddee0fc911844667f705ee2723e28658d978e241229c83e014b6ecca14fac"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE7FA88A7620C7",
+      "checksum": "89c2b4dc882bb83cdcff7f6e97dc7ea745d5452e1319ef2856bba0f4d0a34c1f"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE7FA884494305",
+      "checksum": "7393a6dc9d18bd5b97203eb9391e93c0d5349672b3f8775c5307d9c45171d8c4"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE7FA888E8DC50",
+      "checksum": "3ef85e9102b8b53bcb038961a7bf9838988b70e72f17c3ca27c221bd121ef665"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE7FA88A3A6C8B",
+      "checksum": "c9ef55a00a7bc0eb1e1eb0c0913702c5ab1dc56c547ddd0416c27a8824f8c4a1"
+    }
   },
   "2026.3.7": {
     "x86_64_linux_musl": {