Release 2.71.2

Retry on bash startup failure on Windows
Update mise@latest to 2026.4.1
2026-04-27 01:20:28 +00:00 · 2026-04-02 12:27:25 +00:00 · 2026-04-02 21:10:55 +09:00 · 2026-04-02 11:52:13 +00:00 · 2026-04-02 00:57:46 +00:00 · 2026-04-02 00:37:25 +00:00
31 changed files with 1963 additions and 386 deletions
--- a/.github/.cspell/project-dictionary.txt
+++ b/.github/.cspell/project-dictionary.txt
@@ -3,6 +3,7 @@ archlinux
 binstall
 callgrind
 coreutils
+covgate
 cyclonedx
 cygdrive
 deadlinks
@@ -16,6 +17,7 @@ grcov
 gungraun
 insta
 knope
+LASTEXITCODE
 libicu
 linkcheck
 mdbook
@@ -27,14 +29,17 @@ pluginconf
 ppcle
 prek
 quickinstall
+rclone
 rdme
 rootfs
 sccache
 SHASUMS
+shortstat
 sigstore
 syft
 tombi
 udeps
+USERPROFILE
 wasmtime
 watchexec
 worktree
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,6 +1,6 @@
 version: 2
 updates:
-  - package-ecosystem: cargo
+  - package-ecosystem: cargo # zizmor: ignore[dependabot-cooldown] # Unless dependencies are pinned/locked, the effect is limited.
    directory: /
    schedule:
      interval: daily
@@ -14,6 +14,8 @@ updates:
    directory: /
    schedule:
      interval: daily
+    cooldown:
+      default-days: 7
    commit-message:
      prefix: ''
    labels: []
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -51,7 +51,8 @@ jobs:
      contents: write # for creating branch for pr
      pull-requests: write # unused (used in `codegen-automerge: true` case)
      security-events: write # for github/codeql-action/*
-    secrets: inherit
+    secrets:
+      PR_TOKEN_APP_PRIVATE_KEY: ${{ secrets.PR_TOKEN_APP_PRIVATE_KEY }}

  test:
    strategy:
@@ -99,7 +100,11 @@ jobs:
      - run: rm -- Cargo.toml
      - name: Generate tool list
        id: tool-list
-        run: tools/ci/tool-list.sh "${{ matrix.tool }}" "${{ matrix.os }}" "${{ matrix.bash }}" >>"${GITHUB_OUTPUT}"
+        run: tools/ci/tool-list.sh "${TOOL}" "${OS}" "${BASH}" >>"${GITHUB_OUTPUT}"
+        env:
+          TOOL: ${{ matrix.tool }}
+          OS: ${{ matrix.os }}
+          BASH: ${{ matrix.bash }}
      - run: |
          printf '%s\n' 'C:\msys64\mingw32\bin' >>"${GITHUB_PATH}"
          printf '%s\n' 'C:\msys64\usr\bin' >>"${GITHUB_PATH}"
@@ -155,7 +160,7 @@ jobs:
      - run: env
      - uses: ./
        with:
-          # NB: Update alias list in tools/publish.rs, case for aliases in main.sh,
+          # NB: Update alias list in release.yml, case for aliases in main.sh,
          # and match for alias for tools/codegen/src/tools-markdown.rs.
          tool: |
            nextest
@@ -215,6 +220,7 @@ jobs:
          - ubuntu:20.04 # glibc 2.31
          - ubuntu:22.04 # glibc 2.35
          - ubuntu:24.04 # glibc 2.39
+          - ubuntu:26.04 # glibc 2.42
          - debian:9-slim # glibc 2.24
          - debian:10-slim # glibc 2.28
          - debian:11-slim # glibc 2.31
@@ -263,7 +269,7 @@ jobs:
          sed -i /etc/yum.repos.d/*.repo -e 's!^mirrorlist!#mirrorlist!' \
            -e 's!^#baseurl=http://mirror.centos.org/!baseurl=https://vault.centos.org/!'
          sed -i 's/enabled=1/enabled=0/' /etc/yum/pluginconf.d/fastestmirror.conf
-          if [[ "${{ matrix.container }}" == "centos:6" ]]; then
+          if [[ "${CONTAINER}" == "centos:6" ]]; then
            # CentOS 6's curl (7.19.7) has no curl has no --proto/--tlsv1.2.
            yum install -y gcc openssl-devel
            curl -fsSL --retry 10 https://curl.se/download/curl-7.34.0.tar.gz | tar xzf -
@@ -277,13 +283,17 @@ jobs:
              https://vault.ius.io/el6/x86_64/packages/p/perl-Git18-1.8.5.5-4.ius.el6.noarch.rpm \
              https://vault.ius.io/el6/x86_64/packages/g/git18-1.8.5.5-4.ius.el6.x86_64.rpm
          fi
+        env:
+          CONTAINER: ${{ matrix.container }}
        if: startsWith(matrix.container, 'centos')
      - uses: taiki-e/checkout-action@v1
      # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
      - run: rm -- Cargo.toml
      - name: Generate tool list
        id: tool-list
-        run: tools/ci/tool-list.sh "" "${{ matrix.container }}" >>"${GITHUB_OUTPUT}"
+        run: tools/ci/tool-list.sh "" "${CONTAINER}" >>"${GITHUB_OUTPUT}"
+        env:
+          CONTAINER: ${{ matrix.container }}
      # remove bash installed by checkout-action
      - run: apk --no-cache del bash
        shell: sh
--- a/.github/workflows/manifest.yml
+++ b/.github/workflows/manifest.yml
@@ -37,7 +37,8 @@ jobs:
    permissions:
      contents: write # for creating branch for pr
      pull-requests: write # for gh pr review --approve
-    secrets: inherit
+    secrets:
+      PR_TOKEN_APP_PRIVATE_KEY: ${{ secrets.PR_TOKEN_APP_PRIVATE_KEY }}
    with:
      script: tools/manifest.sh
      commit-script: tools/ci/manifest.sh
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -4,18 +4,212 @@ permissions:
  contents: read

 on:
-  push:
-    tags:
-      - v[0-9]+.[0-9]+.*
-      - install-action-manifest-schema-[0-9]+.[0-9]+.*
+  workflow_dispatch:
+    inputs:
+      target:
+        description: Package to be released
+        required: true
+        type: choice
+        options:
+          - install-action
+          - install-action-manifest-schema
+      version:
+        description: Version to be increased
+        required: true
+        type: choice
+        options:
+          - patch
+          - minor
+          - major

 defaults:
  run:
    shell: bash --noprofile --norc -CeEuxo pipefail {0}

+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: false
+
 jobs:
-  create-release:
-    if: github.repository_owner == 'taiki-e' && !startsWith(github.ref_name, 'install-action-manifest-schema-')
+  prepare:
+    if: github.repository_owner == 'taiki-e' && inputs.target == 'install-action'
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: parse-changelog
+          fallback: none
+      - id: check
+        run: |
+          set +x
+          IFS=$'\n\t'
+          trap -- 's=$?; printf >&2 "%s\n" "${0##*/}:${LINENO}: \`${BASH_COMMAND}\` exit with ${s}"; exit ${s}' ERR
+          retry() {
+            for i in {1..10}; do
+              if "$@"; then
+                return 0
+              else
+                sleep "${i}"
+              fi
+            done
+            "$@"
+          }
+          bail() {
+            printf '::error::%s\n' "$*"
+            exit 1
+          }
+          normalize_comma_or_space_separated() {
+            # Normalize whitespace characters into space because it's hard to handle single input contains lines with POSIX sed alone.
+            local list="${1//[$'\r\n\t']/ }"
+            if [[ "${list}" == *","* ]]; then
+              # If a comma is contained, consider it is a comma-separated list.
+              # Drop leading and trailing whitespaces in each element.
+              sed -E 's/ *, */,/g; s/^.//' <<<",${list},"
+            else
+              # Otherwise, consider it is a whitespace-separated list.
+              # Convert whitespace characters into comma.
+              sed -E 's/ +/,/g; s/^.//' <<<" ${list} "
+            fi
+          }
+          if { sed --help 2>&1 || true; } | grep -Eq -e '-i extension'; then
+            in_place=(-i '')
+          else
+            in_place=(-i)
+          fi
+
+          # shellcheck disable=SC2153
+          version="${VERSION}"
+          printf '%s\n' "version(input): ${version}"
+          # shellcheck disable=SC2153
+          tag_prefix="${TAG_PREFIX}"
+          printf '%s\n' "tag_prefix: ${tag_prefix}"
+          # shellcheck disable=SC2153
+          changelog="${CHANGELOG}"
+          printf '%s\n' "changelog: ${changelog}"
+
+          # Get the current date.
+          release_date=$(date -u '+%Y-%m-%d')
+          printf '%s\n' "release-date: ${release_date}"
+          printf '%s\n' "release-date=${release_date}" >>"${GITHUB_OUTPUT}"
+
+          # Get the current revision.
+          rev=$(git rev-parse HEAD)
+          printf '%s\n' "rev: ${rev}"
+          printf '%s\n' "rev=${rev}" >>"${GITHUB_OUTPUT}"
+
+          prev_version=$(parse-changelog --title-no-link "${changelog}" | cut -d' ' -f1)
+
+          # Determine the new version number and tag name.
+          case "${version}" in
+            major | minor | patch)
+              if [[ ! "${prev_version}" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+                bail "pre-release/build-metadata"
+              fi
+              major="${prev_version%%.*}"
+              minor_patch="${prev_version#*.}"
+              minor="${minor_patch%%.*}"
+              patch="${minor_patch#*.}"
+              case "${version}" in
+                major) version="$((major+1)).0.0" ;;
+                minor) version="${major}.$((minor+1)).0" ;;
+                patch) version="${major}.${minor}.$((patch+1))" ;;
+              esac
+              ;;
+            *) version="${version#v}" ;;
+          esac
+          if [[ ! "${version}" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z\.-]+)?(\+[0-9A-Za-z\.-]+)?$ ]]; then
+            bail "invalid version format '${version}'"
+          fi
+          printf '%s\n' "version: ${version}"
+          printf '%s\n' "version=${version}" >>"${GITHUB_OUTPUT}"
+          tag="${tag_prefix}${version}"
+          printf '%s\n' "tag: ${tag}"
+          printf '%s\n' "tag=${tag}" >>"${GITHUB_OUTPUT}"
+
+          # Make sure the same release has not been created in the past.
+          if gh release view "${tag}" &>/dev/null; then
+            bail "tag '${tag}' has already been created and pushed"
+          fi
+          # Make sure that the release was created from an allowed branch.
+          if ! git branch | grep -Eq '\* '"${BRANCH}"'$'; then
+            bail "current branch is not '${BRANCH}'"
+          fi
+
+          changed_paths=()
+          retry git fetch origin --tags &>/dev/null
+          tags=$(git --no-pager tag | { grep -E "^${tag_prefix}[0-9]+" || true; })
+          if [[ -n "${tags}" ]]; then
+            printf 'has-tags=true\n' >>"${GITHUB_OUTPUT}"
+            # Make sure the same release does not exist in changelog.
+            if grep -Eq "^## \\[${version//./\\.}\\]" "${changelog}"; then
+              bail "release ${version} already exist in ${changelog}"
+            fi
+            if grep -Eq "^\\[${version//./\\.}\\]: " "${changelog}"; then
+              bail "link to ${version} already exist in ${changelog}"
+            fi
+
+            # Update changelog.
+            changed_paths+=("${changelog}")
+            remote_url=$(grep -E '^\[Unreleased\]: https://' "${changelog}" | sed -E 's/^\[Unreleased\]: //; s/\.\.\.HEAD$//')
+            prev_tag="${remote_url#*/compare/}"
+            remote_url="${remote_url%/compare/*}"
+            sed -E "${in_place[@]}" \
+              -e "s/^## \\[Unreleased\\]/## [Unreleased]\\n\\n## [${version}] - ${release_date}/" \
+              -e "s#^\[Unreleased\]: https://.*#[Unreleased]: ${remote_url}/compare/${tag}...HEAD\\n[${version}]: ${remote_url}/compare/${prev_tag}...${tag}#" "${changelog}"
+            if ! grep -Eq "^## \\[${version//./\\.}\\] - ${release_date}$" "${changelog}"; then
+              bail "failed to update ${changelog}"
+            fi
+            if ! grep -Eq "^\\[${version//./\\.}\\]: " "${changelog}"; then
+              bail "failed to update ${changelog}"
+            fi
+          else
+            # Make sure the release exists in changelog.
+            if ! grep -Eq "^## \\[${version//./\\.}\\] - ${release_date}$" "${changelog}"; then
+              bail "release ${version} does not exist in ${changelog} or has wrong release date"
+            fi
+            if ! grep -Eq "^\\[${version//./\\.}\\]: " "${changelog}"; then
+              bail "link to ${version} does not exist in ${changelog}"
+            fi
+          fi
+          # Make sure that a valid release note for this version exists.
+          # https://github.com/taiki-e/parse-changelog
+          changes=$(parse-changelog "${changelog}" "${version}")
+          if [[ -z "${changes}" ]]; then
+            bail "changelog for ${version} has no body"
+          fi
+          printf '============== CHANGELOG ==============\n'
+          printf '%s\n' "${changes}"
+          printf '=======================================\n'
+
+          if [[ -n "${tags}" ]]; then
+            git -c color.ui=always diff "${changed_paths[@]}"
+            git add "${changed_paths[@]}"
+          fi
+          # Make sure that there is no unintended change.
+          git add -N .
+          git -c color.ui=always diff --exit-code
+
+          (
+            set -x
+            git show HEAD --shortstat
+          )
+        env:
+          VERSION: ${{ inputs.version }}
+          TAG_PREFIX: v
+          CHANGELOG: CHANGELOG.md
+          BRANCH: main
+    outputs:
+      has-tags: ${{ steps.check.outputs.has-tags }}
+      release-date: ${{ steps.check.outputs.release-date }}
+      rev: ${{ steps.check.outputs.rev }}
+      tag: ${{ steps.check.outputs.tag }}
+      version: ${{ steps.check.outputs.version }}
+
+  release:
+    if: github.repository_owner == 'taiki-e' && inputs.target == 'install-action'
+    needs: prepare
    runs-on: ubuntu-latest
    timeout-minutes: 60
    environment:
@@ -25,24 +219,232 @@ jobs:
      contents: write # for taiki-e/create-gh-release-action
    steps:
      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: parse-changelog
+          fallback: none
+      - name: Create and push release commit and tag
+        id: push
+        run: |
+          set +x
+          IFS=$'\n\t'
+          trap -- 's=$?; printf >&2 "%s\n" "${0##*/}:${LINENO}: \`${BASH_COMMAND}\` exit with ${s}"; exit ${s}' ERR
+          retry() {
+            for i in {1..10}; do
+              if "$@"; then
+                return 0
+              else
+                sleep "${i}"
+              fi
+            done
+            "$@"
+          }
+          bail() {
+            printf '::error::%s\n' "$*"
+            exit 1
+          }
+          if { sed --help 2>&1 || true; } | grep -Eq -e '-i extension'; then
+            in_place=(-i '')
+          else
+            in_place=(-i)
+          fi
+
+          git config user.name 'Taiki Endo'
+          git config user.email 'te316e89@gmail.com'
+
+          # shellcheck disable=SC2153
+          version="${VERSION}"
+          # shellcheck disable=SC2153
+          tag="${TAG}"
+          # shellcheck disable=SC2153
+          changelog="${CHANGELOG}"
+          # shellcheck disable=SC2153
+          release_date="${RELEASE_DATE}"
+
+          # Make sure the current revision is same as prepare step.
+          # --unshallow is necessary to successfully push the
+          # "releases/${major_version_tag}" branch in the subsequent step.
+          retry git fetch origin --unshallow &>/dev/null
+          rev=$(git rev-parse HEAD)
+          if [[ "${rev}" != "${PREPARE_REV}" ]]; then
+            bail "revision difference between prepare step"
+          fi
+
+          # Make sure the same release has not been created in the past.
+          if gh release view "${tag}" &>/dev/null; then
+            bail "tag '${tag}' has already been created and pushed"
+          fi
+          # Make sure that the release was created from an allowed branch.
+          if ! git branch | grep -Eq '\* '"${BRANCH}"'$'; then
+            bail "current branch is not '${BRANCH}'"
+          fi
+
+          changed_paths=()
+          if [[ "${HAS_TAGS}" == "true" ]]; then
+            # Update changelog.
+            changed_paths+=("${changelog}")
+            remote_url=$(grep -E '^\[Unreleased\]: https://' "${changelog}" | sed -E 's/^\[Unreleased\]: //; s/\.\.\.HEAD$//')
+            prev_tag="${remote_url#*/compare/}"
+            remote_url="${remote_url%/compare/*}"
+            sed -E "${in_place[@]}" \
+              -e "s/^## \\[Unreleased\\]/## [Unreleased]\\n\\n## [${version}] - ${release_date}/" \
+              -e "s#^\[Unreleased\]: https://.*#[Unreleased]: ${remote_url}/compare/${tag}...HEAD\\n[${version}]: ${remote_url}/compare/${prev_tag}...${tag}#" "${changelog}"
+            if ! grep -Eq "^## \\[${version//./\\.}\\] - ${release_date}$" "${changelog}"; then
+              bail "failed to update ${changelog}"
+            fi
+            if ! grep -Eq "^\\[${version//./\\.}\\]: " "${changelog}"; then
+              bail "failed to update ${changelog}"
+            fi
+          fi
+          changes=$(parse-changelog "${changelog}" "${version}")
+          printf '============== CHANGELOG ==============\n'
+          printf '%s\n' "${changes}"
+          printf '=======================================\n'
+
+          if [[ "${HAS_TAGS}" == "true" ]]; then
+            # Create a release commit.
+            (
+              set -x
+              git add "${changed_paths[@]}"
+              git commit -m "Release ${version}"
+            )
+          fi
+
+          prev_credential_helper=$(git config get --global credential.helper || true)
+          if [[ -n "${prev_credential_helper}" ]]; then
+            printf 'credential helper is already set (%s)\n' "${prev_credential_helper}"
+          else
+            (
+              set -x
+              git config --global credential.helper store
+            )
+            protocol="${GITHUB_SERVER_URL%%://*}"
+            hostname="${GITHUB_SERVER_URL#*://}"
+            printf '%s\n' "${protocol}://${GITHUB_ACTOR}:${PUSH_TOKEN}@${hostname}" >~/.git-credentials
+            # Remove credential helper config on exit.
+            trap -- '(set -x; rm -f -- ~/.git-credentials; git config --global --unset credential.helper || true)' EXIT
+          fi
+
+          (
+            set -x
+            git tag "${tag}"
+            retry git push origin HEAD
+
+            major_version_tag="v${version%%.*}"
+            git branch "releases/${major_version_tag}"
+            git tag -f "${major_version_tag}"
+            refs=("refs/tags/${tag}" "refs/heads/releases/${major_version_tag}" "+refs/tags/${major_version_tag}")
+
+            tools=()
+            for tool in tools/codegen/base/*.json; do
+              tool="${tool##*/}"
+              tools+=("${tool%.*}")
+            done
+            # Aliases.
+            # NB: Update case for aliases in main.sh, tool input option in test-alias job
+            # in .github/workflows/ci.yml, and match for alias for tools/codegen/src/tools-markdown.rs.
+            tools+=(
+              nextest
+              taplo-cli
+              typos-cli
+              wasm-bindgen-cli
+              wasmtime-cli
+            )
+            # Non-manifest-based tools.
+            tools+=(valgrind)
+
+            branches=()
+            for tool in "${tools[@]}"; do
+              git checkout -b "releases/${tool}"
+              sed -E "${in_place[@]}" action.yml \
+                -e "s/required: true/required: false/g" \
+                -e "s/# default: #publish:tool/default: ${tool}/g"
+              git add action.yml
+              git commit -m "${tool}"
+              git tag -f "${tool}"
+              git checkout refs/tags/"${tag}"
+              refs+=("+refs/heads/releases/${tool}" "+refs/tags/${tool}")
+              branches+=("releases/${tool}")
+            done
+
+            retry git push origin --atomic "${refs[@]}"
+            git branch -d "releases/${major_version_tag}"
+            git branch -D "${branches[@]}"
+
+            schema_workspace=/tmp/workspace
+            rm -rf -- "${schema_workspace}"
+            # Checkout manifest-schema branch
+            schema_version="$(cargo metadata --format-version=1 --no-deps | jq -r '.packages[] | select(.name == "install-action-manifest-schema") | .version')"
+            if [[ "${schema_version}" == "0."* ]]; then
+              schema_version="0.$(cut -d. -f2 <<<"${schema_version}")"
+            else
+              schema_version="$(cut -d. -f1 <<<"${schema_version}")"
+            fi
+            schema_branch="manifest-schema-${schema_version}"
+
+            git worktree add --force "${schema_workspace}"
+            (
+              cd -- "${schema_workspace}"
+              if git fetch origin "${schema_branch}"; then
+                git checkout "origin/${schema_branch}" -B "${schema_branch}"
+              elif ! git checkout "${schema_branch}"; then
+                # New branch with no history. Credit: https://stackoverflow.com/a/13969482
+                git checkout --orphan "${schema_branch}"
+                git rm -rf -- . || true
+                git commit -m 'Initial commit' --allow-empty
+              fi
+            )
+
+            # Copy over schema
+            cp -- ./manifests/* "${schema_workspace}"
+
+            (
+              cd -- "${schema_workspace}"
+              # Stage changes
+              git add .
+              # Detect changes, then commit and push if changes exist
+              if [[ "$(git status --porcelain=v1 | LC_ALL=C wc -l)" != "0" ]]; then
+                git commit -m 'Update manifest schema'
+                retry git push origin HEAD
+              fi
+            )
+
+            rm -rf -- "${schema_workspace}"
+            git worktree prune
+            # TODO: get branch in schema_workspace dir instead
+            git branch -D "${schema_branch}" "${schema_workspace##*/}"
+          )
+        env:
+          VERSION: ${{ needs.prepare.outputs.version }}
+          RELEASE_DATE: ${{ needs.prepare.outputs.release-date }}
+          HAS_TAGS: ${{ needs.prepare.outputs.has-tags }}
+          TAG: ${{ needs.prepare.outputs.tag }}
+          CHANGELOG: CHANGELOG.md
+          BRANCH: main
+          PREPARE_REV: ${{ needs.prepare.outputs.rev }}
+          # Note that if we use secrets.GITHUB_TOKEN, the pushed commit/tag cannot trigger other workflows.
+          PUSH_TOKEN: ${{ secrets.PUSH_TOKEN }}
      - uses: taiki-e/create-gh-release-action@v1
        with:
          changelog: CHANGELOG.md
          title: $version
-          branch: 'main|v[0-9]+'
+          branch: main
          token: ${{ secrets.GITHUB_TOKEN }}
+          ref: refs/tags/${{ needs.prepare.outputs.tag }}

-  create-release-manifest-schema:
-    if: github.repository_owner == 'taiki-e' && startsWith(github.ref_name, 'install-action-manifest-schema-')
-    # TODO: use new rust-release workflow
-    uses: taiki-e/github-actions/.github/workflows/create-release.yml@853cebf868aa2dce1470668df24176803e05adc8
-    with:
-      crates: tools/manifest-schema
-      changelog: tools/manifest-schema/CHANGELOG.md
-      title: $prefix $version
-      prefix: install-action-manifest-schema
+  release-manifest-schema:
+    if: github.repository_owner == 'taiki-e' && inputs.target == 'install-action-manifest-schema'
+    uses: taiki-e/github-actions/.github/workflows/rust-release.yml@main
    permissions:
      contents: write # for taiki-e/create-gh-release-action
      id-token: write # for rust-lang/crates-io-auth-action
      attestations: write # unused (used when options for uploading binaries are set)
-    secrets: inherit
+    secrets:
+      PUSH_TOKEN: ${{ secrets.PUSH_TOKEN }}
+    with:
+      version: ${{ inputs.version }}
+      tag-prefix: install-action-manifest-schema-
+      crates: tools/manifest-schema
+      changelog: tools/manifest-schema/CHANGELOG.md
+      title: $prefix $version
+      prefix: install-action-manifest-schema
--- a/.github/zizmor.yml
+++ b/.github/zizmor.yml
@@ -2,10 +2,8 @@
 # https://docs.zizmor.sh/configuration/

 rules:
-  dependabot-cooldown: { disable: true } # Unless dependencies are pinned/locked, the effect is limited.
-  secrets-inherit: { disable: true }
+  anonymous-definition: { disable: true }
  unpinned-uses:
    config:
      policies:
        taiki-e/*: any
-        '*': ref-pin
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,96 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com

 ## [Unreleased]

+## [2.71.2] - 2026-04-02
+
+- Implement workaround for [windows-11-arm runner bug](https://github.com/actions/partner-runner-images/issues/169) which sometimes causes installation failure. ([#1657](https://github.com/taiki-e/install-action/pull/1657))
+
+  This addresses an issue that was attempted to be worked around in 2.71.0 but was insufficient.
+
+- Update `mise@latest` to 2026.4.1.
+
+- Update `uv@latest` to 0.11.3.
+
+## [2.71.1] - 2026-04-02
+
+- Fix a regression that caused an execution policy violation on self-hosted Windows runner due to use of non-default `powershell` shell, introduced in 2.71.0.
+
+- Update `dprint@latest` to 0.53.2.
+
+## [2.71.0] - 2026-04-01
+
+- Support `wasm-tools`. ([#1642](https://github.com/taiki-e/install-action/pull/1642), thanks @crepererum)
+
+- Support `covgate`. ([#1613](https://github.com/taiki-e/install-action/pull/1613), thanks @jesse-black)
+
+- Implement potential workaround for [windows-11-arm runner bug](https://github.com/actions/partner-runner-images/issues/169) which sometimes causes issue that the action successfully completes but the tool is not installed. ([#1647](https://github.com/taiki-e/install-action/pull/1647))
+
+- Update `typos@latest` to 1.45.0.
+
+- Update `mise@latest` to 2026.4.0.
+
+- Update `cargo-careful@latest` to 0.4.10.
+
+## [2.70.4] - 2026-04-01
+
+- Update `wasm-bindgen@latest` to 0.2.117.
+
+- Update `vacuum@latest` to 0.25.5.
+
+- Update `tombi@latest` to 0.9.13.
+
+- Update `mise@latest` to 2026.3.18.
+
+## [2.70.3] - 2026-03-31
+
+- Update `wasm-bindgen@latest` to 0.2.116.
+
+- Update `cargo-insta@latest` to 1.47.2.
+
+- Update `tombi@latest` to 0.9.12.
+
+- Update `biome@latest` to 2.4.10.
+
+## [2.70.2] - 2026-03-30
+
+- Update `vacuum@latest` to 0.25.3.
+
+- Update `tombi@latest` to 0.9.11.
+
+## [2.70.1] - 2026-03-29
+
+- Update `cargo-insta@latest` to 1.47.1.
+
+- Update `cargo-binstall@latest` to 1.17.9.
+
+- Update `tombi@latest` to 0.9.10.
+
+## [2.70.0] - 2026-03-28
+
+- Install `uv`, `uvw` (Windows-only), and `uvx` binaries when installing `uv`. Previously, only `uv` binary was installed. ([#1632](https://github.com/taiki-e/install-action/pull/1632))
+
+## [2.69.14] - 2026-03-28
+
+- Update `just@latest` to 1.48.1.
+
+- Update `wasm-bindgen@latest` to 0.2.115.
+
+## [2.69.13] - 2026-03-27
+
+- Update `mise@latest` to 2026.3.17.
+
+- Update `cargo-insta@latest` to 1.47.0.
+
+## [2.69.12] - 2026-03-27
+
+- Update `uv@latest` to 0.11.2.
+
+## [2.69.11] - 2026-03-26
+
+- Update `dprint@latest` to 0.53.1.
+
+- Update `mise@latest` to 2026.3.16.
+
 ## [2.69.10] - 2026-03-25

 - Update `biome@latest` to 2.4.9.
@@ -6031,7 +6121,19 @@ Note: This release is considered a breaking change because installing on version

 Initial release

-[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.69.10...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.71.2...HEAD
+[2.71.2]: https://github.com/taiki-e/install-action/compare/v2.71.1...v2.71.2
+[2.71.1]: https://github.com/taiki-e/install-action/compare/v2.71.0...v2.71.1
+[2.71.0]: https://github.com/taiki-e/install-action/compare/v2.70.4...v2.71.0
+[2.70.4]: https://github.com/taiki-e/install-action/compare/v2.70.3...v2.70.4
+[2.70.3]: https://github.com/taiki-e/install-action/compare/v2.70.2...v2.70.3
+[2.70.2]: https://github.com/taiki-e/install-action/compare/v2.70.1...v2.70.2
+[2.70.1]: https://github.com/taiki-e/install-action/compare/v2.70.0...v2.70.1
+[2.70.0]: https://github.com/taiki-e/install-action/compare/v2.69.14...v2.70.0
+[2.69.14]: https://github.com/taiki-e/install-action/compare/v2.69.13...v2.69.14
+[2.69.13]: https://github.com/taiki-e/install-action/compare/v2.69.12...v2.69.13
+[2.69.12]: https://github.com/taiki-e/install-action/compare/v2.69.11...v2.69.12
+[2.69.11]: https://github.com/taiki-e/install-action/compare/v2.69.10...v2.69.11
 [2.69.10]: https://github.com/taiki-e/install-action/compare/v2.69.9...v2.69.10
 [2.69.9]: https://github.com/taiki-e/install-action/compare/v2.69.8...v2.69.9
 [2.69.8]: https://github.com/taiki-e/install-action/compare/v2.69.7...v2.69.8
--- a/README.md
+++ b/README.md
@@ -100,6 +100,12 @@ See the [development guide](DEVELOPMENT.md) for how to add support for new tool.

 ## Security

+The `@v<major>` and `@<tool_name>` tags are updated with each release. To enhance workflow stability and security against supply chain attacks, use the `@v<major>.<minor>.<patch>` tag or their hash to pin the version. Since all releases are immutable, pinning the version in either way should have the same effect.
+
+When installing the tool from GitHub Releases, the tool version that install-action installs with `tool: <tool_name>@latest` or `tool: <tool_name>@<omitted_version>` is associated with the install-action version, so pinning install-action version with the above ways also pins the version of the tool being installed. This also means that if a [dependency cooldown](https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns) applies to the action itself, a cooldown of the same duration or a few days longer will apply to the tools installed by that action.
+
+### Security on tool installation
+
 When installing the tool from GitHub Releases, this action will download the tool or its installer from GitHub Releases using HTTPS with tlsv1.2+. This is basically considered to be the same level of security as [the recommended installation of rustup](https://www.rust-lang.org/tools/install).

 Additionally, this action will also verify SHA256 checksums for downloaded files in all tools installed from GitHub Releases. This is enabled by default and can be disabled by setting the `checksum` input option to `false`.
--- a/TOOLS.md
+++ b/TOOLS.md
@@ -45,6 +45,7 @@ See the [Supported tools section in README.md](README.md#supported-tools) for ho
 | [**cargo-valgrind**](https://github.com/jfrimmel/cargo-valgrind) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/jfrimmel/cargo-valgrind/releases) | Linux, macOS, Windows | [MIT](https://github.com/jfrimmel/cargo-valgrind/blob/master/LICENSE-MIT) OR [Apache-2.0](https://github.com/jfrimmel/cargo-valgrind/blob/master/LICENSE-APACHE) |
 | [**cargo-zigbuild**](https://github.com/rust-cross/cargo-zigbuild) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/rust-cross/cargo-zigbuild/releases) | Linux, macOS, Windows | [MIT](https://github.com/rust-cross/cargo-zigbuild/blob/main/LICENSE) |
 | [**coreutils**](https://github.com/uutils/coreutils) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/uutils/coreutils/releases) | Linux, macOS, Windows | [MIT](https://github.com/uutils/coreutils/blob/main/LICENSE) |
+| [**covgate**](https://github.com/jesse-black/covgate) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/jesse-black/covgate/releases) | Linux, macOS, Windows | [Apache-2.0](https://github.com/jesse-black/covgate/blob/main/LICENSE) |
 | [**cross**](https://github.com/cross-rs/cross) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/cross-rs/cross/releases) | Linux, macOS, Windows | [MIT](https://github.com/cross-rs/cross/blob/main/LICENSE-MIT) OR [Apache-2.0](https://github.com/cross-rs/cross/blob/main/LICENSE-APACHE) |
 | [**cyclonedx**](https://github.com/CycloneDX/cyclonedx-cli) | `$HOME/.install-action/bin` | [GitHub Releases](https://github.com/CycloneDX/cyclonedx-cli/releases) | Linux, macOS, Windows | [Apache-2.0](https://github.com/CycloneDX/cyclonedx-cli/blob/main/LICENSE) |
 | [**deepsource**](https://github.com/DeepSourceCorp/cli) | `$HOME/.install-action/bin` | [GitHub Releases](https://github.com/DeepSourceCorp/cli/releases) | Linux, macOS, Windows | [BSD-2-Clause](https://github.com/DeepSourceCorp/cli/blob/master/LICENSE) |
@@ -91,6 +92,7 @@ See the [Supported tools section in README.md](README.md#supported-tools) for ho
 | [**wash**](https://github.com/wasmCloud/wasmCloud) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/wasmCloud/wasmCloud/releases) | Linux, macOS, Windows | [Apache-2.0](https://github.com/wasmCloud/wasmCloud/blob/main/LICENSE) |
 | [**wasm-bindgen**](https://github.com/wasm-bindgen/wasm-bindgen) (alias: `wasm-bindgen-cli`) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/wasm-bindgen/wasm-bindgen/releases) | Linux, macOS, Windows | [MIT](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/LICENSE-MIT) OR [Apache-2.0](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/LICENSE-APACHE) |
 | [**wasm-pack**](https://github.com/drager/wasm-pack) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/drager/wasm-pack/releases) | Linux, macOS, Windows | [MIT](https://github.com/drager/wasm-pack/blob/master/LICENSE-MIT) OR [Apache-2.0](https://github.com/drager/wasm-pack/blob/master/LICENSE-APACHE) |
+| [**wasm-tools**](https://github.com/bytecodealliance/wasm-tools) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/bytecodealliance/wasm-tools/releases) | Linux, macOS, Windows | [Apache-2.0 WITH LLVM-exception](https://github.com/bytecodealliance/wasm-tools/blob/main/LICENSE-APACHE) OR [Apache-2.0](https://github.com/bytecodealliance/wasm-tools/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/bytecodealliance/wasm-tools/blob/main/LICENSE-MIT) |
 | [**wasmtime**](https://github.com/bytecodealliance/wasmtime) (alias: `wasmtime-cli`) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/bytecodealliance/wasmtime/releases) | Linux, macOS, Windows | [Apache-2.0 WITH LLVM-exception](https://github.com/bytecodealliance/wasmtime/blob/main/LICENSE) |
 | [**xbuild**](https://github.com/rust-mobile/xbuild) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/rust-mobile/xbuild/releases) | Linux, macOS, Windows | [Apache-2.0 OR MIT](https://github.com/rust-mobile/xbuild/blob/v0.2.0/xbuild/Cargo.toml#L7) |
 | [**xh**](https://github.com/ducaale/xh) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/ducaale/xh/releases) | Linux, macOS, Windows | [MIT](https://github.com/ducaale/xh/blob/master/LICENSE) |
--- a/action.yml
+++ b/action.yml
@@ -45,8 +45,39 @@ runs:
    - run: bash --noprofile --norc "${GITHUB_ACTION_PATH:?}/main.sh"
      shell: bash
      env:
+        # NB: Sync with non-Windows case.
        INPUT_TOOL: ${{ inputs.tool }}
        INPUT_CHECKSUM: ${{ inputs.checksum }}
        INPUT_FALLBACK: ${{ inputs.fallback }}
        DEFAULT_GITHUB_TOKEN: ${{ github.token }}
        ACTION_USER_AGENT: ${{ github.action_repository }} (${{ github.action_ref }})
+      if: runner.os != 'Windows'
+    # Use pwsh and retry on bash startup failure to work around windows-11-arm runner bug: https://github.com/actions/partner-runner-images/issues/169
+    - run: |
+        Set-StrictMode -Version Latest
+        for ($i=1; $i -le 10; $i++) {
+          $prev_err_action = $ErrorActionPreference
+          $ErrorActionPreference = "Continue"
+          & bash --noprofile --norc "$env:GITHUB_ACTION_PATH/main.sh"
+          $code = $LASTEXITCODE
+          $ErrorActionPreference = "$prev_err_action"
+          if (Test-Path "$env:USERPROFILE\.install-action\init") {
+            # If bash started successfully, main.sh creates init file.
+            Remove-Item "$env:USERPROFILE\.install-action\init" -Force
+            exit $code
+          }
+          if ($i -lt 10) {
+            Write-Output "::warning::installation failed due to bash startup failure (<https://github.com/actions/partner-runner-images/issues/169>); retrying..."
+          }
+        }
+        Write-Output "::error::installation failed due to bash startup failure (<https://github.com/actions/partner-runner-images/issues/169>); this maybe resolved by re-running job"
+        exit 1
+      shell: pwsh
+      env:
+        # NB: Sync with non-Windows case.
+        INPUT_TOOL: ${{ inputs.tool }}
+        INPUT_CHECKSUM: ${{ inputs.checksum }}
+        INPUT_FALLBACK: ${{ inputs.fallback }}
+        DEFAULT_GITHUB_TOKEN: ${{ github.token }}
+        ACTION_USER_AGENT: ${{ github.action_repository }} (${{ github.action_ref }})
+      if: runner.os == 'Windows'
--- a/main.sh
+++ b/main.sh
@@ -179,7 +179,7 @@ download_and_extract() {
    else
      case "${url}" in
        *.zip)
-          unzip -q tmp "${bin_in_archive#\./}"
+          unzip -q tmp
          for tmp in "${bin_in_archive[@]}"; do
            case "${tool}" in
              editorconfig-checker) mv -- "${tmp}" "${bin_dir}/${tool}${exe}" ;;
@@ -436,46 +436,6 @@ canonicalize_windows_path() {
  esac
 }

-# cargo-binstall may call `cargo install` on their fallback: https://github.com/taiki-e/install-action/pull/54#issuecomment-1383140833
-# cross calls rustup on `cross --version` if the current directly is cargo workspace.
-export CARGO_NET_RETRY=10
-export RUSTUP_MAX_RETRIES=10
-
-if [[ $# -gt 0 ]]; then
-  bail "invalid argument '$1'"
-fi
-
-export DEBIAN_FRONTEND=noninteractive
-manifest_dir="$(dirname -- "$0")/manifests"
-
-# Inputs
-tool="${INPUT_TOOL:-}"
-tools=()
-if [[ -n "${tool}" ]]; then
-  while read -rd,; do
-    tools+=("${REPLY}")
-  done < <(normalize_comma_or_space_separated "${tool}")
-fi
-if [[ ${#tools[@]} -eq 0 ]]; then
-  warn "no tool specified; this could be caused by a dependabot bug where @<tool_name> tags on this action are replaced by @<version> tags"
-  # Exit with 0 for backward compatibility.
-  # TODO: We want to reject it in the next major release.
-  exit 0
-fi
-
-enable_checksum="${INPUT_CHECKSUM:-}"
-case "${enable_checksum}" in
-  true) ;;
-  false) enable_checksum='' ;;
-  *) bail "'checksum' input option must be 'true' or 'false': '${enable_checksum}'" ;;
-esac
-
-fallback="${INPUT_FALLBACK:-}"
-case "${fallback}" in
-  none | cargo-binstall | cargo-install) ;;
-  *) bail "'fallback' input option must be 'none', 'cargo-binstall', or 'cargo-install': '${fallback}'" ;;
-esac
-
 # Refs: https://github.com/rust-lang/rustup/blob/HEAD/rustup-init.sh
 base_distro=''
 exe=''
@@ -590,6 +550,9 @@ cargo_bin="${CARGO_HOME:-"${home}/.cargo"}/bin"
 # is used ($CARGO_HOME/bin is most likely not included in the PATH), fallback to
 # $install_action_dir/bin.
 if [[ "${host_os}" == "windows" ]]; then
+  mkdir -p -- "${install_action_dir}"
+  # See action.yml.
+  touch -- "${install_action_dir}"/init
  if type -P cargo >/dev/null; then
    info "cargo is located at $(type -P cargo)"
    cargo_bin=$(dirname -- "$(type -P cargo)")
@@ -604,6 +567,46 @@ elif [[ ! -e "${cargo_bin}" ]] || [[ "$(type -P cargo || true)" != "${cargo_bin}
  cargo_bin="${install_action_dir}/bin"
 fi

+# cargo-binstall may call `cargo install` on their fallback: https://github.com/taiki-e/install-action/pull/54#issuecomment-1383140833
+# cross calls rustup on `cross --version` if the current directly is cargo workspace.
+export CARGO_NET_RETRY=10
+export RUSTUP_MAX_RETRIES=10
+
+if [[ $# -gt 0 ]]; then
+  bail "invalid argument '$1'"
+fi
+
+export DEBIAN_FRONTEND=noninteractive
+manifest_dir="$(dirname -- "$0")/manifests"
+
+# Inputs
+tool="${INPUT_TOOL:-}"
+tools=()
+if [[ -n "${tool}" ]]; then
+  while read -rd,; do
+    tools+=("${REPLY}")
+  done < <(normalize_comma_or_space_separated "${tool}")
+fi
+if [[ ${#tools[@]} -eq 0 ]]; then
+  warn "no tool specified; this could be caused by a dependabot bug where @<tool_name> tags on this action are replaced by @<version> tags"
+  # Exit with 0 for backward compatibility.
+  # TODO: We want to reject it in the next major release.
+  exit 0
+fi
+
+enable_checksum="${INPUT_CHECKSUM:-}"
+case "${enable_checksum}" in
+  true) ;;
+  false) enable_checksum='' ;;
+  *) bail "'checksum' input option must be 'true' or 'false': '${enable_checksum}'" ;;
+esac
+
+fallback="${INPUT_FALLBACK:-}"
+case "${fallback}" in
+  none | cargo-binstall | cargo-install) ;;
+  *) bail "'fallback' input option must be 'none', 'cargo-binstall', or 'cargo-install': '${fallback}'" ;;
+esac
+
 case "${host_os}" in
  linux)
    if ! type -P jq >/dev/null || ! type -P curl >/dev/null || ! type -P tar >/dev/null; then
@@ -763,7 +766,7 @@ for tool in "${tools[@]}"; do
      ;;
    *)
      # Handle aliases.
-      # NB: Update alias list in tools/publish.rs, tool input option in test-alias in .github/workflows/ci.yml,
+      # NB: Update alias list in .github/workflows/release.yml, tool input option in test-alias in .github/workflows/ci.yml,
      # and match for alias for tools/codegen/src/tools-markdown.rs.
      # TODO(codegen): auto-detect cases where crate name and tool name are different.
      case "${tool}" in
--- a/manifests/biome.json
+++ b/manifests/biome.json
@@ -3,13 +3,51 @@
  "template": null,
  "license_markdown": "[Apache-2.0](https://github.com/biomejs/biome/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/biomejs/biome/blob/main/LICENSE-MIT)",
  "latest": {
-    "version": "2.4.9"
+    "version": "2.4.10"
  },
  "2": {
-    "version": "2.4.9"
+    "version": "2.4.10"
  },
  "2.4": {
-    "version": "2.4.9"
+    "version": "2.4.10"
+  },
+  "2.4.10": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.10/biome-linux-x64-musl",
+      "etag": "0x8DE8E7705F6C243",
+      "hash": "897a1eb7be2bcc6dfa596f4c786014f82fd60615c7a2726241eb0bafc228f82c",
+      "bin": "biome"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.10/biome-darwin-x64",
+      "etag": "0x8DE8E7705A3CF6D",
+      "hash": "8269b5ef30bbc1fcf0cff5695bdc3733d417744ae638df70e7dabc3b82590fca",
+      "bin": "biome"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.10/biome-win32-x64.exe",
+      "etag": "0x8DE8E77063F8765",
+      "hash": "a2bdc915914114c09a6f38ea092af2e450953bf3ace76bc143f2ab4d5a17b238",
+      "bin": "biome.exe"
+    },
+    "aarch64_linux_musl": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.10/biome-linux-arm64-musl",
+      "etag": "0x8DE8E7705851F43",
+      "hash": "dfabcbc165bd077464244fe2f73eceb7148219566a3ad94ddf7510e663675045",
+      "bin": "biome"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.10/biome-darwin-arm64",
+      "etag": "0x8DE8E7705839A5F",
+      "hash": "c6782336dff872beec7d34e1b801c533bd296b5dcf2a30d3cf6335bca975e984",
+      "bin": "biome"
+    },
+    "aarch64_windows": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.10/biome-win32-arm64.exe",
+      "etag": "0x8DE8E77061B8612",
+      "hash": "4285a020237cdb93e6c42cf8af12b3bb2614ecccaeec283dc89f4e092577a3b7",
+      "bin": "biome.exe"
+    }
  },
  "2.4.9": {
    "x86_64_linux_musl": {
--- a/manifests/cargo-binstall.json
+++ b/manifests/cargo-binstall.json
@@ -22,32 +22,32 @@
  },
  "license_markdown": "[GPL-3.0](https://github.com/cargo-bins/cargo-binstall/blob/HEAD/crates/bin/LICENSE)",
  "latest": {
-    "version": "1.17.8"
+    "version": "1.17.9"
  },
-  "1.17.8": {
+  "1.17.9": {
    "x86_64_linux_musl": {
-      "etag": "0x8DE8715DB8A1417",
-      "hash": "1da1ef72448db667cc4ae6d48e37451087602c8c07dc61782a4a5e538303e015"
+      "etag": "0x8DE8D54CBD7C8ED",
+      "hash": "bdea3fd820b118576316bf69c8240f454857287717809e6ecef010faace901ff"
    },
    "x86_64_macos": {
-      "etag": "0x8DE8715E03D9720",
-      "hash": "db353e01b582c97382178db9b4dfe22d81109782e480a38f3db953e62f569952"
+      "etag": "0x8DE8D54D0C7EA49",
+      "hash": "1d4fbd74c15274a029dd92e19a0ead8e1831b6e6b60f0f5c3690ef517022c41c"
    },
    "x86_64_windows": {
-      "etag": "0x8DE8715DEAA171B",
-      "hash": "fef07560d4e391812091bb30c6ed1bd5289f74403a0c947b47b8a8c7a597b51b"
+      "etag": "0x8DE8D54CF270B9E",
+      "hash": "d17b413a19592af2cf57f9f742d49bef8837099e1407d73e79de5bc7834c4fd6"
    },
    "aarch64_linux_musl": {
-      "etag": "0x8DE8715E6784BD0",
-      "hash": "81d6245bd1a7a89e914d29af81d82280540e94927e61492a0fc359820cd97abb"
+      "etag": "0x8DE8D54D9B48785",
+      "hash": "89df253cc00a307209daee7648272bba4d8a342fce084d5922f6b3f4e4db0e25"
    },
    "aarch64_macos": {
-      "etag": "0x8DE8715EBEC4A3F",
-      "hash": "af87346fdb186f0a2333bc0a30cfddd6faa98b31145ef1bb19c284aedea65972"
+      "etag": "0x8DE8D54DF4E885F",
+      "hash": "021d537caa2071bbcd8ec50b210ea45af68a6983cca7780918b3603ef68d2585"
    },
    "aarch64_windows": {
-      "etag": "0x8DE8715EA179DDA",
-      "hash": "2270a5a7a8b3e85bd5fe32ac3fbd48cfd32d6f468a8c35499af8b65b806d271d"
+      "etag": "0x8DE8D54DD746155",
+      "hash": "37295aa1c3aed07bda2b757f613477c8ca2de1208ec360c7d00238b6886de780"
    }
  }
 }
--- a/manifests/cargo-careful.json
+++ b/manifests/cargo-careful.json
@@ -3,10 +3,27 @@
  "template": null,
  "license_markdown": "[MIT](https://github.com/RalfJung/cargo-careful/blob/master/LICENSE-MIT) OR [Apache-2.0](https://github.com/RalfJung/cargo-careful/blob/master/LICENSE-APACHE)",
  "latest": {
-    "version": "0.4.9"
+    "version": "0.4.10"
  },
  "0.4": {
-    "version": "0.4.9"
+    "version": "0.4.10"
+  },
+  "0.4.10": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.10/cargo-careful-x86_64-unknown-linux-musl",
+      "etag": "0x8DE8FC4E147531F",
+      "hash": "bd0937ba41dec5ba45ca7cb9c502060fbcf625d12f5cf8d0b0c47328b4d82ac4"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.10/cargo-careful-x86_64-apple-darwin",
+      "etag": "0x8DE8FC4E136EADB",
+      "hash": "5f39ae33320bc0fb101e1be2020a69c2e6368bc26ee6ef7207e89ae39b2cf351"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.10/cargo-careful-windows.exe",
+      "etag": "0x8DE8FC4E141665F",
+      "hash": "89e2e95a6347595d73326b9ed014a58fb397f5a3cf9887ee8b9d92c181e20828"
+    }
  },
  "0.4.9": {
    "x86_64_linux_musl": {
--- a/manifests/cargo-insta.json
+++ b/manifests/cargo-insta.json
@@ -20,10 +20,67 @@
  },
  "license_markdown": "[Apache-2.0](https://github.com/mitsuhiko/insta/blob/master/LICENSE)",
  "latest": {
-    "version": "1.46.3"
+    "version": "1.47.2"
  },
  "1": {
-    "version": "1.46.3"
+    "version": "1.47.2"
+  },
+  "1.47": {
+    "version": "1.47.2"
+  },
+  "1.47.2": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8E9EE7357F8F",
+      "hash": "1c2a2e82200b430f6fa27b6d0ba0059573eae2f32b0b8aa54446184ab7b46ee7"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8E9EE6D41E0F",
+      "hash": "62efa25c4e9f8182c16ae46f58bc3e9c8fdbe74aaf0409d3ed06909a70d128a5"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8E9EE705F287",
+      "hash": "2f2ffcdda5608f78de53509bdd6a5feba185dad9490b5aad951c35bf8c37fa9e"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8E9EE6D1FDA1",
+      "hash": "4876319b5201b875188351445b754db09f7674b506daa983634c95d6d44ca51e"
+    }
+  },
+  "1.47.1": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8D549F25E618",
+      "hash": "b5c162d25f477f0a7989edc5b82297a63c69d764c3c6f2839f12a546a00c188a"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8D549EDE5832",
+      "hash": "3197c099ca857e36211b7b10d383404f305e036181ca2cb42495c8d08e4dcc86"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8D549EF37620",
+      "hash": "7d6cad4a8768abc2bda8f0ea244f51ae077d426e6e7bc6561503876b4eba18e8"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8D549ED08513",
+      "hash": "b92971f37be1e22401de1187ee842a7e15f936838bdce06fb9d3582dd538efa7"
+    }
+  },
+  "1.47.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8B9FBE3D26E2",
+      "hash": "fcd8a57fb21e5446c12002c0f967e7630a9e4f317814427dbf35faff3797c1d9"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8B9FBDBE4C61",
+      "hash": "55db1160ab8db370d3a03491a291f04e52837b4bea13b2919068a10700b085b2"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8B9FBDFA9C5D",
+      "hash": "ecdab0fe43537a15ef6bd4628d91cddd3c26ddb3fd60f9c89d5d40904139649e"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8B9FBDB8AD65",
+      "hash": "579f62ab41187c8494ca8572b4d0db51e0c9b9275064758999b27fc900c9c60c"
+    }
  },
  "1.46": {
    "version": "1.46.3"
--- a/manifests/covgate.json
+++ b/manifests/covgate.json
@@ -0,0 +1,100 @@
+{
+  "rust_crate": "covgate",
+  "template": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/jesse-black/covgate/releases/download/v${version}/covgate-v${version}-x86_64-unknown-linux-musl.tar.gz",
+      "bin": "covgate-v${version}-x86_64-unknown-linux-musl/covgate"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/jesse-black/covgate/releases/download/v${version}/covgate-v${version}-x86_64-pc-windows-msvc.zip",
+      "bin": "covgate-v${version}-x86_64-pc-windows-msvc/covgate.exe"
+    },
+    "aarch64_linux_musl": {
+      "url": "https://github.com/jesse-black/covgate/releases/download/v${version}/covgate-v${version}-aarch64-unknown-linux-musl.tar.gz",
+      "bin": "covgate-v${version}-aarch64-unknown-linux-musl/covgate"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/jesse-black/covgate/releases/download/v${version}/covgate-v${version}-aarch64-apple-darwin.tar.gz",
+      "bin": "covgate-v${version}-aarch64-apple-darwin/covgate"
+    }
+  },
+  "license_markdown": "[Apache-2.0](https://github.com/jesse-black/covgate/blob/main/LICENSE)",
+  "latest": {
+    "version": "0.1.3"
+  },
+  "0.1": {
+    "version": "0.1.3"
+  },
+  "0.1.3": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8AA88DFE2E44",
+      "hash": "462f00b5c4abc470f506c416718e4861e814747676c2fd281428f875b56d0dcb"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8AA88DE19E99",
+      "hash": "a70ca861ed7f33ae4b943f188d878bff0e714df79bad390c67676d04c91fa402"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8AA88DEA6E53",
+      "hash": "92de55699a0d86adb85afb69d5b8af7d3e6e8068d778ce7ebbc9ca637fa5a005"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8AA88DF05B19",
+      "hash": "772c512a41b86df5140abcd19f5c5c5149af8279e1c42385d7284c9670387bc0"
+    }
+  },
+  "0.1.2": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE89E3F6FA6473",
+      "hash": "a4568617e8dc40895e7ffe758567ccf7d8aa932df9fd03b31e63b73fdae2d825"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE89E3F6F7F62B",
+      "hash": "55ad87955d511f0b3b4d5bbe39e7591fd4c6b41034dc6b67bdade53c43904786"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE89E3F70ACCDC",
+      "hash": "169940c659824ed70618d6fd4face0e738c8e44d2b3e0d0fdb7b659465e6c671"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE89E3F6F7F62B",
+      "hash": "854cf62fd8fa18f1e8ba7844b8207cfdcc4c4c723e4b840e786dee745334bd58"
+    }
+  },
+  "0.1.1": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE892120A499FC",
+      "hash": "9caddce96293c8eb64e8226b6db9aa3c8ee48aca781762d3d17995b8d9896660"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE892120854E4C",
+      "hash": "d69185167aeeebbb1d647551968fc7342ea3140f4c8067f3b6399f4c0a7b15a2"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE892120B04CA9",
+      "hash": "6aad7326f2604a1c0e06390daf2eb7d5c3e45f341abd135bfdecf89fac8a0bef"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8921208CBFFC",
+      "hash": "43b7a648f1888b4ea5260f44d33b88fcdc11728ef7eaf328f00a3e52329f1c45"
+    }
+  },
+  "0.1.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE86A9F48F07CA",
+      "hash": "28ac6cb68e44e56b6590463668199c51deba709ae0b647c69837c98a85629a70"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE86A9F48AC6D3",
+      "hash": "20f9f86605ddf27ac7dd1e57bcd3ea61be16febb1b621b12295f9003d657a473"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE86A9F48EE0E6",
+      "hash": "85fe8bad3b6fef936b4ed247b103b58ceadfd92e6f7cbc79ade41290fd7eb018"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE86A9F48B6265",
+      "hash": "56363d4ec10d1bb8174cc4a5d2b9589cde4fc487aeb72333c84944d7e8063f78"
+    }
+  }
+}
--- a/manifests/dprint.json
+++ b/manifests/dprint.json
@@ -28,10 +28,62 @@
  },
  "license_markdown": "[MIT](https://github.com/dprint/dprint/blob/main/LICENSE)",
  "latest": {
-    "version": "0.53.0"
+    "version": "0.53.2"
  },
  "0.53": {
-    "version": "0.53.0"
+    "version": "0.53.2"
+  },
+  "0.53.2": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE9007EE1278D0",
+      "hash": "7ff2cf9b25c687bd59867528ae9a5526c17e75e82e9788bf1f84a0e3ca7163b6"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE9007EE1EC70A",
+      "hash": "902a9cff86a0ce643d5f1bb53e3e2434096511542363924e18016ee7bedb769f"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE9007EDFFA241",
+      "hash": "f18910879d6796b05b0666513391ab7963b346723c041dc4d777d3f43179e416"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE9007EE226C77",
+      "hash": "c3843a4604dac7428f41f762c4c352e409c63bd634172765bbac482dc59773ba"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE9007EE116890",
+      "hash": "a185ba53f74e1e3a8ccdaf03a5d6f96b67d3fdf3f86d0d0f98950d15817eb0c4"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE9007EE210E69",
+      "hash": "9fe90a2e414cfd59c6df984a3910ce11e0c349d5326ab7debec06682f3ba1150"
+    }
+  },
+  "0.53.1": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8B3F9B6F4770",
+      "hash": "f2815a5c217bb63ff54356c4a6e1e5393a126b29c46116ae57a08ec97c29cb85"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8B3F9B08E273",
+      "hash": "b35e91afe0f7f2217128b8edcebd63d789b00f9c1b0300e4907a115106d857fd"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8B3F9B1F10A2",
+      "hash": "db21e2f7a09dc9b3a2fbe2faac34a9f0733a4cc3cb8c78dd13dae6f081e13d4c"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8B3F9B268256",
+      "hash": "559cbd7aff707d461627c46f817cd06c28828458ef4a21eb18801f588bc94e89"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8B3F9B08E273",
+      "hash": "4c822f9d4c692b0f0cd53d14bc82057488e1c4db2df1122b1aceb0a660795ac8"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE8B3F9B259909",
+      "hash": "035c6e63d47b68f86b859dca7628cdb5006737b8b472df64cb51036594dd7247"
+    }
  },
  "0.53.0": {
    "x86_64_linux_musl": {
--- a/manifests/just.json
+++ b/manifests/just.json
@@ -22,13 +22,39 @@
  },
  "license_markdown": "[CC0-1.0](https://github.com/casey/just/blob/master/LICENSE)",
  "latest": {
-    "version": "1.48.0"
+    "version": "1.48.1"
  },
  "1": {
-    "version": "1.48.0"
+    "version": "1.48.1"
  },
  "1.48": {
-    "version": "1.48.0"
+    "version": "1.48.1"
+  },
+  "1.48.1": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8C6D748DA58F",
+      "hash": "9293e553ce401d1b524bf4e104918f72f268e3f9c6827e0055fe98d84a1b2522"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8C6D697B40B5",
+      "hash": "4c3e9c880b8fc93d7fc24abfde3c36b0cc59f6e9f8b31f7175095700f64125a7"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8C6DC96FB40D",
+      "hash": "368cd9ca827cba04d9e6fc00f7ad840773c4605b6f64b9f87bdb00325d351029"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8C6D791ED527",
+      "hash": "3308721b991cf88cf2b9bbb3b31ac40550ec61a0c9b6fc011564e25e87964030"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8C6D73E04DFD",
+      "hash": "03a73339ff55bcf7411a3c940cdcb0a726d98134b87203c83a9008575434e2a8"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8C6DB1FA1AAD",
+      "hash": "ed9cd54e46d65770bf0b79c051761b29f0b89a88e56e8cae4454ec7246c82160"
+    }
  },
  "1.48.0": {
    "x86_64_linux_musl": {
--- a/manifests/mise.json
+++ b/manifests/mise.json
@@ -28,13 +28,146 @@
  },
  "license_markdown": "[MIT](https://github.com/jdx/mise/blob/main/LICENSE)",
  "latest": {
-    "version": "2026.3.15"
+    "version": "2026.4.1"
  },
  "2026": {
-    "version": "2026.3.15"
+    "version": "2026.4.1"
+  },
+  "2026.4": {
+    "version": "2026.4.1"
+  },
+  "2026.4.1": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE90A9CD760EC0",
+      "hash": "fdbe9804c76f6e223a662cbd7356fefc42e791f5752cc0d5a621ffee81b735e5"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE90A9CFC11483",
+      "hash": "8673b9b846d247ba13ccde1bf95b3b8b53fb3eb464f82c59d9787562222e7fd8"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE90A9D0A67B10",
+      "hash": "5d2cdf8ed9901a92840154cd2e2046400c03b26f35906c4e9e1a60318b2af83a"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE90A9C9F9D36E",
+      "hash": "faca5c453001dafd6caf1f9186cf8640103fabbc29b3218cbac5d8c69f0422d2"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE90A9CEFE9F12",
+      "hash": "b7696c98581ffcc45989a777e75982495f23be5cdbfe092523c2915eb196272c"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE90A9D04E84B7",
+      "hash": "6d268edf452acd93af983da2a803180987b85140698541a4a587fe17200e8858"
+    }
+  },
+  "2026.4.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8FE21276B8C4",
+      "hash": "fb18613a5757097e947b1f904f51c2187be1153637e596645f4cc2c9d693810c"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8FE21C68EACC",
+      "hash": "1a8aa4e2c9d5aa29cd471efc9de13008c49aa49ac498eacf589ee2c94b29356f"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8FE21FCAB703",
+      "hash": "59e82ebc9497b1cde6e6815807d0297b4d35c601aad2446cb8e101bb369f9b4d"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8FE2092ED454",
+      "hash": "e54667528e0f2d7c4b2d259a72b53a4008f622b6bbf599461e65383f73f7741f"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8FE2180465F0",
+      "hash": "38af032537ffe661b004aef888c829d08f5d977e71f53f9711e184719ff5a6a8"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8FE21F1C7623",
+      "hash": "b40d20a2e0b17d7e454e8f4c3a19e0da45d28c3b484d9fad35e7a1513acb865d"
+    }
  },
  "2026.3": {
-    "version": "2026.3.15"
+    "version": "2026.3.18"
+  },
+  "2026.3.18": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8F16236336C0",
+      "hash": "46c5c69eb04b8695189d530782a8778c390c3fbcea04bbe01eb321f1fb0f09ab"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8F1625C18807",
+      "hash": "55ca4c1b201dff443e9d12119c957874ff61915bf297eeacda8ec5e3ed7f931d"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8F16267EAC4F",
+      "hash": "7c50c4588f1b85944a5d9e5640998459b8a1360574a1617a5590f055e1b3caea"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8F161FB2DF40",
+      "hash": "2cae8fe34edab073f7e8794d30bc7419bebd0391fdc73decc51b4ed1d3f62a32"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8F1625132034",
+      "hash": "f387b7ed21afede268daccceb54d62905e2b7bab081bc17dc37c1077f0d17e69"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8F162692E0ED",
+      "hash": "7ee025648c1efbf7fd927079b07af26a7bc89e62fea8c889c4186cabe22ab671"
+    }
+  },
+  "2026.3.17": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8BF1812CA605",
+      "hash": "f416a2d27f69173b22551429d2bc712c40fc3fb639112cf76ae817baae3772e2"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8BF1834954DF",
+      "hash": "bd120908c1476f6f27ae27f4214bdbc3fb0e81b9671aaba720b994a217d28e39"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8BF1841058BD",
+      "hash": "a5e0a77fe5ac6397d6bd3413b6c9b39ac06f24649a88eed526173062960f7b85"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8BF17E0B455B",
+      "hash": "7ef20440c3e1d9f0db69e57e68e6833a9cade44fd1e97384a279660e48091f97"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8BF18293F06F",
+      "hash": "6d98cedb9c92bd7a1694c9efedc035288da87f6e19c79d15bf91449474c37ce9"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8BF183D566EE",
+      "hash": "98772d1d68d23e8f1040c62501bcd0d136cf2db3b995a5e7b6f77aca93aef060"
+    }
+  },
+  "2026.3.16": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8B299B139FB6",
+      "hash": "7b10cc988cdfdc434791a6102bdc18edbd1909243e05ed5a37ddc12c9ed53167"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8B299E855DE3",
+      "hash": "a6f6f320b547dec3eff321e301fa05268dfc73a620d35ec3292603fbab1c4c29"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8B299F39B21C",
+      "hash": "a7b6aaa23804418799d5d33e77e1d08144fec0efadcc38d138b68eaa214080f5"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8B2995D2AD4D",
+      "hash": "1d33037f6eb3c6e67b62e951825764836b530213b8acce8667ab2c2bcf3775e9"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8B299D508381",
+      "hash": "9d6e2bfea3e00ffb566ad1a369914cb029c32a28eb4b699e8655cf3c3d4ef87e"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8B299EFE726F",
+      "hash": "f6293578bae263614c8af6c1664bd4c28f741f902f45bcbdad922bee6d04d7e6"
+    }
  },
  "2026.3.15": {
    "x86_64_linux_musl": {
--- a/manifests/tombi.json
+++ b/manifests/tombi.json
@@ -22,10 +22,114 @@
  },
  "license_markdown": "[MIT](https://github.com/tombi-toml/tombi/blob/main/LICENSE)",
  "latest": {
-    "version": "0.9.9"
+    "version": "0.9.13"
  },
  "0.9": {
-    "version": "0.9.9"
+    "version": "0.9.13"
+  },
+  "0.9.13": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8F7844A7DC4C",
+      "hash": "55023b6a24f12c5be2fb6dd826a5f3763e701d4175352619518ac5092540d61a"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8F7844169FFC",
+      "hash": "00232564a55f84a19b571769207ce319056b96800e25ed2fab44203e71e38443"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8F78442C32A0",
+      "hash": "b886f817ea20a561ca330c9bc4097392c5d6471d94faabad41283763044b79cc"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8F78441175B8",
+      "hash": "db2bf291f42193a4bd5aebbddd37f1154f7a179b8952ea1ca20290800f0d344d"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8F784480359A",
+      "hash": "608e397c0b1a874814113cd337464589db858364aad26146ce5c778d4cbcbdea"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8F784435C4C1",
+      "hash": "21d83ec6a1526c601bfcafdd7a5890d96710d80a2b84e62c6edacdc9a1c92f70"
+    }
+  },
+  "0.9.12": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8E7577C157C6",
+      "hash": "79236f1175331e3d189e54103d12ed957eed53d4ccc0a0eb9299f30102c7dda1"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8E7577BA0D09",
+      "hash": "9a1b1463135f88493500dc1abfea9777a6e2f4f980dcfbe7b150cc41f4ccb474"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8E7577D14B62",
+      "hash": "f60bd33e0bddaaa4ca556d82229ff7a833119b63accfca14f62c0175a2f5b4d0"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8E7577C413D4",
+      "hash": "e0d333c04d75980a6f28d1f476e8b2182e03f58c74cfbe0706e2249d1d666dc8"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8E7578A33F60",
+      "hash": "98c6d08b6102ce0498208ef55d14861c197f131a42a9add020aa0d076636d166"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8E7578703417",
+      "hash": "55b186788381c89ad1a18b8bf0c2ffe9cb0eb270efe1cab406edb845b3743a50"
+    }
+  },
+  "0.9.11": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8D9EC510FD7C",
+      "hash": "a26165a20198b7af772c1abafebac31fe70ea76de438cdc14975d451ef9282a3"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8D9EC4ABF6BC",
+      "hash": "80c70ef17dc76a0f997d8284911a178f90d4c3d04354eaa653b5dd3e15efff44"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8D9EC53C498A",
+      "hash": "f073c5aa5cfdf291023207a58390a4593b7774ccd8a49d12fdefa2d859285f95"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8D9EC4A89F22",
+      "hash": "1a4cdb63e5ab57d0eb12f170493a7902c3244572b6a3052ae894d06c082d4ddc"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8D9EC4AC1DA5",
+      "hash": "1c3b3335f3feeda3f7676d90ffb6463ee2bca5a5393b1bbae76926e3fdb2b514"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8D9EC4BA8C4E",
+      "hash": "85624e7e2f0bac43d8267c88a767afbb18ca338b72cf45c879046fc3a23a2e89"
+    }
+  },
+  "0.9.10": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8CEDFE4FEBC7",
+      "hash": "eddad889a7194e6b993015475ccd6303edb06f076b632b3a1b134936e280b103"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8CEDFECFAF7A",
+      "hash": "8421af429bec96ec09b621267d3ad505d202dc1ac8e3e5f2677dca0efa348395"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8CEDFE5E3394",
+      "hash": "f6a722ef9f1a5d3656338cf45f88a35aebd29d6bf045b1dd2e91d0dcb356a92e"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8CEDFE539126",
+      "hash": "5373de8f10af1e626bbedc2beb46fbc7dd8bb3ccd73517b45108e165469e69e6"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8CEDFE6E9BDE",
+      "hash": "1c7fcccf0c14d4c3189cfc405357f524b8db0ac7278bee434212f6c113070eb4"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8CEDFED8CCF3",
+      "hash": "e3a5ce5bb2f4071974250b27dd8cc9df76c1feaa1be7c5a7e814191d9999311f"
+    }
  },
  "0.9.9": {
    "x86_64_linux_musl": {
--- a/manifests/typos.json
+++ b/manifests/typos.json
@@ -22,10 +22,35 @@
  },
  "license_markdown": "[MIT](https://github.com/crate-ci/typos/blob/master/LICENSE-MIT) OR [Apache-2.0](https://github.com/crate-ci/typos/blob/master/LICENSE-APACHE)",
  "latest": {
-    "version": "1.44.0"
+    "version": "1.45.0"
  },
  "1": {
-    "version": "1.44.0"
+    "version": "1.45.0"
+  },
+  "1.45": {
+    "version": "1.45.0"
+  },
+  "1.45.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8FF7414DC005",
+      "hash": "fa10c3c77c61bdf03f2f6f8245eb6fb89d92115450272a4eabe326b3967ac375"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8FF77A57754B",
+      "hash": "4a4c1060b248c13ce7bc6c1ffe5cb75120885e8ecb62e7ba2b40f5567680f9ba"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8FF779606F57",
+      "hash": "dc89f5f175ee1a389e1f5cc5173353d9db3751e2cddedf34339d8ec45cd38aa0"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8FF709B312E4",
+      "hash": "dde3b5c5bd5d0ab6ff76a1465658dc6485e7d420cf8eccfdfbdea37809bed793"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8FF71347FCF5",
+      "hash": "c42f8d8af49bff559f0bf0a45d1fb704f9e13446cc8faebfb30a3f669b89c802"
+    }
  },
  "1.44": {
    "version": "1.44.0"
--- a/manifests/uv.json
+++ b/manifests/uv.json
@@ -1,49 +1,154 @@
 {
-  "rust_crate": null,
+  "rust_crate": "uv",
  "template": {
    "x86_64_linux_musl": {
      "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-x86_64-unknown-linux-musl.tar.gz",
-      "bin": "uv-x86_64-unknown-linux-musl/uv"
+      "bin": [
+        "uv-x86_64-unknown-linux-musl/uv",
+        "uv-x86_64-unknown-linux-musl/uvx"
+      ]
    },
    "x86_64_macos": {
      "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-x86_64-apple-darwin.tar.gz",
-      "bin": "uv-x86_64-apple-darwin/uv"
+      "bin": [
+        "uv-x86_64-apple-darwin/uv",
+        "uv-x86_64-apple-darwin/uvx"
+      ]
    },
    "x86_64_windows": {
      "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-x86_64-pc-windows-msvc.zip",
-      "bin": "uv.exe"
+      "bin": [
+        "uv.exe",
+        "uvw.exe",
+        "uvx.exe"
+      ]
    },
    "aarch64_linux_musl": {
      "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-aarch64-unknown-linux-musl.tar.gz",
-      "bin": "uv-aarch64-unknown-linux-musl/uv"
+      "bin": [
+        "uv-aarch64-unknown-linux-musl/uv",
+        "uv-aarch64-unknown-linux-musl/uvx"
+      ]
    },
    "aarch64_macos": {
      "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-aarch64-apple-darwin.tar.gz",
-      "bin": "uv-aarch64-apple-darwin/uv"
+      "bin": [
+        "uv-aarch64-apple-darwin/uv",
+        "uv-aarch64-apple-darwin/uvx"
+      ]
    },
    "aarch64_windows": {
      "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-aarch64-pc-windows-msvc.zip",
-      "bin": "uv.exe"
+      "bin": [
+        "uv.exe",
+        "uvw.exe",
+        "uvx.exe"
+      ]
    },
    "powerpc64le_linux_gnu": {
      "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-powerpc64le-unknown-linux-gnu.tar.gz",
-      "bin": "uv-powerpc64le-unknown-linux-gnu/uv"
+      "bin": [
+        "uv-powerpc64le-unknown-linux-gnu/uv",
+        "uv-powerpc64le-unknown-linux-gnu/uvx"
+      ]
    },
    "riscv64_linux_gnu": {
      "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-riscv64gc-unknown-linux-gnu.tar.gz",
-      "bin": "uv-riscv64gc-unknown-linux-gnu/uv"
+      "bin": [
+        "uv-riscv64gc-unknown-linux-gnu/uv",
+        "uv-riscv64gc-unknown-linux-gnu/uvx"
+      ]
    },
    "s390x_linux_gnu": {
      "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-s390x-unknown-linux-gnu.tar.gz",
-      "bin": "uv-s390x-unknown-linux-gnu/uv"
+      "bin": [
+        "uv-s390x-unknown-linux-gnu/uv",
+        "uv-s390x-unknown-linux-gnu/uvx"
+      ]
    }
  },
  "license_markdown": "[Apache-2.0](https://github.com/astral-sh/uv/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/astral-sh/uv/blob/main/LICENSE-MIT)",
  "latest": {
-    "version": "0.11.1"
+    "version": "0.11.3"
  },
  "0.11": {
-    "version": "0.11.1"
+    "version": "0.11.3"
+  },
+  "0.11.3": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE9038B8911496",
+      "hash": "8b40cf16b849634b81a530a3d0a0bcae5f24996ef9ae782976fd69b6266d3b8e"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE9038B7D1F6CF",
+      "hash": "b0e05e0b43a000fdc2132ee3f3400ba5dee427bc2337d3ec4eb8cf4f3d5722af"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE9038B81129BB",
+      "hash": "ae681c0aaec7cc96af184648cb88d73f8393ed60fa5880abdd6bdb910f9b227c"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE9038B57D5EFC",
+      "hash": "8ecec82cb9a744d5fabff6d16d7777218a7730f699d2aa0d2f751c17858e2efa"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE9038B4CB51F3",
+      "hash": "2bc3d0c7bf2bd08325b1e170abac6f7e5b3346e1d4eab3370d17cefec934996f"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE9038B5421F3E",
+      "hash": "e99c56f9ab5e1e1ddcaea3e2389990c94baf38e0d7cb2148de08baf2d3261d49"
+    },
+    "powerpc64le_linux_gnu": {
+      "etag": "0x8DE9038B710B885",
+      "hash": "5cdcadf4d50a5354312bc8ef37c2a6cfab4e2f13ccdf8380d3012b927b4ded95"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE9038B746CDFF",
+      "hash": "8271e07ed9695870f4b0ae5ec722e3ae08fff280068f08bc6a8ca76c67d7fefa"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE9038B7AA292A",
+      "hash": "6dc4f555a5f6515f7fddb281422d2a8a3943853dae5de837bbb5d996d7576c71"
+    }
+  },
+  "0.11.2": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8B7F323A25EC",
+      "hash": "4700d9fc75734247587deb3e25dd2c6c24f4ac69e8fe91d6acad4a6013115c06"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8B7F31C027DB",
+      "hash": "a9c3653245031304c50dd60ac0301bf6c112e12c38c32302a71d4fa6a63ba2cb"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8B7F323790C2",
+      "hash": "171b7ccda1bbd562da6babeffcf533a1c6cc7862cf998da826e1db534fc43e48"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8B7F2F886D82",
+      "hash": "275d91dd1f1955136591e7ec5e1fa21e84d0d37ead7da7c35c3683df748d9855"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8B7F2EE6C8C0",
+      "hash": "4beaa9550f93ef7f0fc02f7c28c9c48cd61fe30db00f5ac8947e0a425c3fb282"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8B7F2F211F2C",
+      "hash": "ffdded8338205f53727b51d404563a5ac8eaa9aea53279a7b7c42177e11d478c"
+    },
+    "powerpc64le_linux_gnu": {
+      "etag": "0x8DE8B7F30FB6B17",
+      "hash": "3f3a50e99364efc8ff7add10e79757a2b8458700a38180ec5f313524481b9fbc"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE8B7F313C97AB",
+      "hash": "e56a93f0ff21d6908461a6ecbf465beae19ae22719f900284abb7680bd07ec41"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE8B7F3185D17B",
+      "hash": "42ebe40775f2a77a514fa47399fde86473bf35bd33b6896c6410a0309fc4d205"
+    }
  },
  "0.11.1": {
    "x86_64_linux_musl": {
--- a/manifests/vacuum.json
+++ b/manifests/vacuum.json
@@ -22,10 +22,88 @@
  },
  "license_markdown": "[MIT](https://github.com/daveshanley/vacuum/blob/main/LICENSE)",
  "latest": {
-    "version": "0.25.2"
+    "version": "0.25.5"
  },
  "0.25": {
-    "version": "0.25.2"
+    "version": "0.25.5"
+  },
+  "0.25.5": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8F75CFD30677",
+      "hash": "3a57b95dc9b7a1b9284960ece8f67d00dd5f60797603c86e0e691ec81ddac22e"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8F75CEF73215",
+      "hash": "94bb05d54b6531c7e1ec45bf510b4ac14889484b6f95b284e4e9f9638ec746b5"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8F75CF9054FD",
+      "hash": "cc0e8d39730b5fafff5ce03ec8922ab05dcd6e011ec4de07541948ee89414c45"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8F75CF41C9ED",
+      "hash": "b6b0657bdfff8c9fc88d1d2f9ceabe26ae9ff3be2667d4c8e205f50339c6c6d3"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8F75CEFBC0DD",
+      "hash": "f5908142b05ea00216a2dfc355b740bc11b2ac992e68c730968758aecb1b98cb"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8F75CF91D9E5",
+      "hash": "73f85e4d47c80e8a6a62e731c8440c822d22c701f6fe5fab2149b24e20e9cc3a"
+    }
+  },
+  "0.25.4": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8F73C968CC4B",
+      "hash": "7d9f7bafe07b05944f742003501e2bcd8c53f982b10115110285b71f0953858c"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8F73C8D5BD15",
+      "hash": "705579f63829e521012d5e8f9dbd74e459083406b9fe9fbb36372cc66b96facb"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8F73C95CA4ED",
+      "hash": "23ed2c24f0188470a620ff0533f33b1aa7c3355efe55dea32115e8fc8d36b793"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8F73C9D7B33F",
+      "hash": "03310fb5e120676eb37be9048a8c60fe8168218253253516a165be4738ba7dd7"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8F73C8C96ED4",
+      "hash": "5d55f77a76ca52c5a7bacc248a240996fb7ae1adb38de0fd31681537870118aa"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8F73C9A93662",
+      "hash": "9749e518ad1a7329d3b1abdd7ed976180436c103a09d13a284b0d1166b471d29"
+    }
+  },
+  "0.25.3": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8DEA35C78445",
+      "hash": "dbcd9ea50b0ac74c181d905a1d162e2457f8bbc619d0f8e974ff3b38dcd23384"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8DEA3675C50B",
+      "hash": "450964b9f2cbe9b63403bfe7b07cd2b3fb16eded4668c9e5749b9b469d288290"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8DEA35DB442D",
+      "hash": "00a1a230fe2dbd45ee11e579d7d8d00daf83fa83a083fd66044514fdfd73e993"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8DEA35C7AB2A",
+      "hash": "a2db87faa3e04c2e0f8b5dd2c9162a33829eda0a1196ed49e3562a1a9434d3e0"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8DEA367A7AB1",
+      "hash": "9ab96a00628c69c6aa4a62fcafb6d8cb8de792db94adb53c00344d19ff0c4af6"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8DEA36512824",
+      "hash": "ed70ee1e9af46ba69c79b8d4bddea59c0bcc37613f92d12a77fe327f4832089d"
+    }
  },
  "0.25.2": {
    "x86_64_linux_musl": {
--- a/manifests/wasm-bindgen.json
+++ b/manifests/wasm-bindgen.json
@@ -44,10 +44,76 @@
  },
  "license_markdown": "[MIT](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/LICENSE-MIT) OR [Apache-2.0](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/LICENSE-APACHE)",
  "latest": {
-    "version": "0.2.114"
+    "version": "0.2.117"
  },
  "0.2": {
-    "version": "0.2.114"
+    "version": "0.2.117"
+  },
+  "0.2.117": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8F7E2EE60139",
+      "hash": "97f527f7c7956f69a88a4bdb5176142ebc4e255c2dbe3805ec4f373421028240"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8F7E2EE9CD88",
+      "hash": "17d991583d7036cd773b62eb8c0f295dd31cde7bf9ab250276be56f9138723d3"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8F7E2EFCCAF2",
+      "hash": "54d52650adcf93e332d1d02c94c81925dfbda1f1292cecf276a0507263a4936f"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE8F7E2EEADDCE",
+      "hash": "27f9914864d02240e62e460860b015293e540217d9da2d8e699a1a6ee88bb326"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8F7E2EBEF61F",
+      "hash": "d7691b221163d68884ef0a893cb57d3372f1100789dbf0cc2c9260a7f253a497"
+    }
+  },
+  "0.2.116": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8EBB3A19D512",
+      "hash": "f10d233eb87aaaed4a6a3af3d52ab9a3420ab35103c18fe2c6a69527bfbf7035"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8EBB3A196060",
+      "hash": "811350ef3e971a1a34b2a1bcf37de7fd9918f335179a016f7ea9cc1334127c3a"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8EBB39E62DFC",
+      "hash": "5316001ffb87739b41fe9f82804ea5e35e8ef6545687ffef2453120f479702e4"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE8EBB3A270C9F",
+      "hash": "87627d66c72d43521a69dac489ba1cc2ab241c3281755a9f0e9f0e1a2c9ff3a6"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8EBB39FF65FE",
+      "hash": "f101dfe093f1e7462c4157a1db0f121f07883009b5159a1b6bd997cf7f4341a6"
+    }
+  },
+  "0.2.115": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8C5096D0CA3A",
+      "hash": "494df943e4e30a48ea2832e5a299e0e0f52d23f1e037b052cf401f467b820316"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8C5096BDCCC1",
+      "hash": "bc9ba4f200a7a7132b61a28d0fc93692caeb880c1547fb4369f18baa3285eb91"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8C5096A81344",
+      "hash": "370ebd36ffc110346956407793064e3d0b5e77c83ca69ef127a286a665d13636"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE8C5096CD7296",
+      "hash": "f4cc35232554e04d72b61158bcd314ef2b1aa28e7c45d7aad8e76eb01b42c299"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8C5096F6C51A",
+      "hash": "1184392b5468ca63b65f75f95f38110005aa168f6d9c39ca70c0585044d6508b"
+    }
  },
  "0.2.114": {
    "x86_64_linux_musl": {
--- a/manifests/wasm-tools.json
+++ b/manifests/wasm-tools.json
@@ -0,0 +1,395 @@
+{
+  "rust_crate": "wasm-tools",
+  "template": {
+    "x86_64_linux_gnu": {
+      "url": "https://github.com/bytecodealliance/wasm-tools/releases/download/v${version}/wasm-tools-${version}-x86_64-linux.tar.gz",
+      "bin": "wasm-tools-${version}-x86_64-linux/wasm-tools"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/bytecodealliance/wasm-tools/releases/download/v${version}/wasm-tools-${version}-x86_64-macos.tar.gz",
+      "bin": "wasm-tools-${version}-x86_64-macos/wasm-tools"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/bytecodealliance/wasm-tools/releases/download/v${version}/wasm-tools-${version}-x86_64-windows.zip",
+      "bin": "wasm-tools-${version}-x86_64-windows/wasm-tools.exe"
+    },
+    "aarch64_linux_gnu": {
+      "url": "https://github.com/bytecodealliance/wasm-tools/releases/download/v${version}/wasm-tools-${version}-aarch64-linux.tar.gz",
+      "bin": "wasm-tools-${version}-aarch64-linux/wasm-tools"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/bytecodealliance/wasm-tools/releases/download/v${version}/wasm-tools-${version}-aarch64-macos.tar.gz",
+      "bin": "wasm-tools-${version}-aarch64-macos/wasm-tools"
+    }
+  },
+  "license_markdown": "[Apache-2.0 WITH LLVM-exception](https://github.com/bytecodealliance/wasm-tools/blob/main/LICENSE-APACHE) OR [Apache-2.0](https://github.com/bytecodealliance/wasm-tools/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/bytecodealliance/wasm-tools/blob/main/LICENSE-MIT)",
+  "latest": {
+    "version": "1.246.1"
+  },
+  "1": {
+    "version": "1.246.1"
+  },
+  "1.246": {
+    "version": "1.246.1"
+  },
+  "1.246.1": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DE8F6E41036B0B",
+      "hash": "b134a86561f006e6772dc2d7798f266bd079a1a178113ac2580f54e51fe5e516"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8F6E41150A68",
+      "hash": "aee9a6ba67d6f3190d20c20cefc5d220801bbb11bf1a7996847000b27b1ef16a"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8F6E415E1D2D",
+      "hash": "09909207b995fe940667b23b0f9a137c20c9673d5bff956bc096308b2a2145f9"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE8F6E4033E566",
+      "hash": "80b26cf8893657cc45d6d5a471ab7615d50e60d51929a096ac5464c3994d8033"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8F6E4051108F",
+      "hash": "62f08a654cbba6c4d40dd2df08ecdf1d4e1f3ab926c77dcb13ecb1d02ce49f06"
+    }
+  },
+  "1.246.0": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DE8F5B051AEE3B",
+      "hash": "6c4427fff69243c61dce646dd238e3847b4344029207556394dd8f583ebed9be"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8F5B050FD72D",
+      "hash": "5400e0fad94610b7791829d1e403b8e4329fba67a7771c36250af8ae195684ce"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8F5B051748D8",
+      "hash": "5422b1831e8ccd0e475d9478ff0ca8cfa99ad030bb84e059ea4e5d3af7138d3c"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE8F5B0496E9A0",
+      "hash": "eec3e0efe0f2a0e66a5c444a03309c908289fee700f328ff60113e61821c847a"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8F5B048B1021",
+      "hash": "7cdedad6cfce5a92048571b18af92a3399f7b5f113559c60425caec198928584"
+    }
+  },
+  "1.245": {
+    "version": "1.245.1"
+  },
+  "1.245.1": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DE6A81DCF9BB03",
+      "hash": "b171e20fd107e63e89ef6c936b5581597666a086af677d7818de92b7cdd5a86d"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE6A81DD24926E",
+      "hash": "dd718c5c9c6044f97e2d6ee076e91f6e448c8a3b31d3c5397b16f03c461857b7"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE6A81DD209F3D",
+      "hash": "3d7896b11b419b64a5f1cf81cef92a8da3371babc620eaf75fba4bca4670a75b"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE6A81DC9B3C87",
+      "hash": "e01ef74b8e7b4a819d91122fdd87084fb25a938e4bfa4179cc5524b961468c85"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE6A81DCA51C6D",
+      "hash": "d69043b13f8ad4bc07c993e9630e795a7f2c2af488e5688d15044a1448dfa139"
+    }
+  },
+  "1.245.0": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DE68D3CFB43024",
+      "hash": "811edaad5ca41b95fe747826a033bbf9c4bb636ad0e51ece0b69631dfd8b8f50"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE68D3CFD9B65A",
+      "hash": "48f1f841f0fe4923d8e6b9ee151db194259fd3f730b42935290c5aec4e2e72a7"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE68D3CFE175CD",
+      "hash": "78afc765c038f24c905863daaed4d7fff811fba8fd5d05376e8ca31585034bd9"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE68D3CF454938",
+      "hash": "c9ad9b6687b76a10b4ba045ae28defef491bc35241ad61d761a8055f53792016"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE68D3CF3DD770",
+      "hash": "7e02ec4d988242c9177dc3017645ffd644a583b541b508e44dbbb2fe126fa605"
+    }
+  },
+  "1.244": {
+    "version": "1.244.0"
+  },
+  "1.244.0": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DE4D553E80067A",
+      "hash": "c3bf279c10e8ca37262773c829efd45423b5efeeb93ba1dc17baf25d9479074c"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE4D553E864113",
+      "hash": "5727c2b88956447088b1f62fceea19491749e5bc2d5920bb08b9608633965b7d"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE4D553E97E07F",
+      "hash": "15a160e4ea993672d331b585d439794628a7c2bc751ec0f6fdad1e972cd179c6"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE4D553E1C5D75",
+      "hash": "3c1ed0cc86186b98f45aad0dd406cbd10e4356686fa4ed81e63463e55bcb9052"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE4D553E09FB88",
+      "hash": "9926b364fb7b8b42806cfdcf652ff6f7609d9317d5b05646559967a615eb677b"
+    }
+  },
+  "1.243": {
+    "version": "1.243.0"
+  },
+  "1.243.0": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DE320FD9F73D59",
+      "hash": "f261622f8015d38ebe9c3345cc2f7bb5de055d3a66ab44efdf78f11068ed9d9f"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE320FDA51C8A3",
+      "hash": "3d03bc02fed63998e0ee8d88eb86d90bdb8e32e7cadc77d2f9e792b9dff8433a"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE320FDA662413",
+      "hash": "bb04533ff517f6c90df129f2a358b18ca45b7400a3676ba935bbd787908ff6b8"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE320FD9F32344",
+      "hash": "ad06ba3c527992a1e6e9a7e807cc2bb914072f0a0ae6ce71680de91b1054d2e9"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE320FD9FF717C",
+      "hash": "6690a33a06ef705a63dbc066210bc0f09b1c08a82952d3cde9fbebd0d484b46f"
+    }
+  },
+  "1.242": {
+    "version": "1.242.0"
+  },
+  "1.242.0": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DE2D045D935315",
+      "hash": "6029fb83a418f9f1cba831209a2c61eccd0078438a0b5aa6e2e1a2c3ba153763"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE2D045E0239DC",
+      "hash": "c05c3a660aacc49e6280b477026327944c3a7280d6941e57ae6145fe3354bae4"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE2D045E2B3E8A",
+      "hash": "c35cc6c38175c44f012c45c50c866cd41479bb82019c6b2ee3e281ffa58ceaa1"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE2D045D94FEDD",
+      "hash": "25b5d4472f84b7b5a1e69339c4340fb737e7ffe2b138d6c01015e7b662431d90"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE2D045DA58E02",
+      "hash": "bb41fbeb74ce19ca19ec1ffd57c69c73eeb20551426ab15104ec45f5132aaeaa"
+    }
+  },
+  "1.241": {
+    "version": "1.241.2"
+  },
+  "1.241.2": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DE23B698B3D3B2",
+      "hash": "5ead4459eef50f4b83b47151332f22e4bcfea9c1917e816273b807b2d6567199"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE23B69901E9D3",
+      "hash": "ded5228bd4f7b06c7ec7bee31b570daa72022c28fdd890d23cd2837e3914d117"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE23B69934F54D",
+      "hash": "9eb1af8331ec073d37bb025598426dcb747bd51db085861066e123b9e823fa52"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE23B698B385E2",
+      "hash": "abc5a70c5cade497805998fd0b5cd545df9b484c62f16d33dd6a4cad135302aa"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE23B698A8E38B",
+      "hash": "96dbe14cde4a1e48781af959b623e045a2cab106756476039309f8e6266906a3"
+    }
+  },
+  "1.240": {
+    "version": "1.240.0"
+  },
+  "1.240.0": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DE06A3DD0C10CF",
+      "hash": "b6ad301b8ac65e283703d1a5cf79280058a5f5699f8ff1fcaf66dbcf80a9efae"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE06A3DD102AE0",
+      "hash": "8959eb9f494af13868af9e13e74e4fa0fa6c9306b492a9ce80f0e576eb10c0c6"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE06A3DD056197",
+      "hash": "81f012832e80fe09d384d86bb961d4779f6372a35fa965cc64efe318001ab27e"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE06A3DD016E63",
+      "hash": "e3d497196bf99a31a62c885d2f5c3aa1e4d4a6bc02c1bff735ffa6a4c7aa9c2f"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE06A3DD13A960",
+      "hash": "ecdce0140b4b6394b4fa6deab53f19037ce08e8d618e6a7d108b455504ab03e7"
+    }
+  },
+  "1.239": {
+    "version": "1.239.0"
+  },
+  "1.239.0": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DDEFC004D7789B",
+      "hash": "be1764c1718a2ed90cdd3e1ed2fe6e4c6b3e2b69fb6ba9a85bcafdca5146a3b9"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDEFC004CF6B58",
+      "hash": "d62482e2bfe65a05f4c313f2d57b09736054e37f4dfe94b4bdf7b4713b03fa02"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDEFC004C957B4",
+      "hash": "039b1eaa170563f762355a23c5ee709790199433e35e5364008521523e9e3398"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DDEFC004DE75AA",
+      "hash": "54bb0fdad016a115bde8dd7d2cd63e88d0b136a44ab23ae9c3ff4d4d48d5fa4d"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDEFC004C6E969",
+      "hash": "b65777dcb9873b404e50774b54b61b703eb980cadb20ada175a8bf74bfe23706"
+    }
+  },
+  "1.238": {
+    "version": "1.238.1"
+  },
+  "1.238.1": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DDEA6100C8765B",
+      "hash": "0d9f807c8d49ea632f253b07411468d42e669f1902dfb59ee52f5bba111aa7db"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDEA6100CBCDF3",
+      "hash": "4551072a936ad3bc6fedf3cb9af100c8fe78b6df4fa761a48520e4e7106a5c47"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDEA6100BDFAD1",
+      "hash": "daa292ff1d0ae360c5be009c3a9520077dde16b99279f1e15fdeeda4857562e5"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DDEA6100C17952",
+      "hash": "30a7a48c536f9dfc10e7146e275c178fc9ff1e9f2fa2ad923c11447f6f3ac5bc"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDEA6100C214E6",
+      "hash": "a35d9a88852d0715c02280d9c0fa61cd5be1746ea837a88eccee7603cbe1f367"
+    }
+  },
+  "1.238.0": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DDE4C8585DFC98",
+      "hash": "bb9805c427a3bc19eb68028a15c8a0220b207c230cd41ac6091f35e1bc6b5ec8"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDE4C8585F0CE0",
+      "hash": "9db2ac9b4758891887eba58f69bfed68224fd324de2b3d4d0595e61929c5a2c7"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDE4C858579B34",
+      "hash": "c6e55de7e89c3d567a66e15bb7e044c1141caf4df9236c2f5c30f6122f6aa68e"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DDE4C8585C0306",
+      "hash": "49cc4d3527bac9d2bcdd18dfc1527c718f12589747e2aae5241a99a7439a1d0d"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDE4C858682A5D",
+      "hash": "4d989ab1caff40cdad9de06665740d4cd6c953ded0f5247e770e0a629b180587"
+    }
+  },
+  "1.237": {
+    "version": "1.237.0"
+  },
+  "1.237.0": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DDE0F200DE63E2",
+      "hash": "272785606e44bb1601f6781a87896d2c57fd0f81d422980dc5f528a76805f5d6"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDE0F200E7CF32",
+      "hash": "eede423e0361ac5130027715364e9a8b4b9792bd2b07897948d57de9859634d3"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDE0F200DB5A11",
+      "hash": "4e5bb9684fdffbeedd84af5e81a7e4d583f483408b23b590916757593a6614b7"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DDE0F200F506C3",
+      "hash": "de4d6d4d278081c1d07a134ea40bfa0fd1f51342be682f031b5f27c4749de5b9"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDE0F200E0F90D",
+      "hash": "53c8c889129f483b8b4c5c5e9916a208926214d145989464cfa48ffa9cb6b119"
+    }
+  },
+  "1.236": {
+    "version": "1.236.1"
+  },
+  "1.236.1": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DDDB6E0C293976",
+      "hash": "2ea92231826976cb001c6c6d8708ff54e1ef1ea7229968a75a2119ff26c4cd6f"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDDB6E0C1AF1B6",
+      "hash": "4e93ef5fa12d4762380ce6340c67c872359217d42343082312b0bfe2dde708af"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDDB6E0C1D5FE0",
+      "hash": "53a1b82477fe2523dd95cd6f5cbae24bb75c222d635bc1a777d5276c2e7c0c70"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DDDB6E0C1D5FE0",
+      "hash": "0766ba3e0ac0a74c0f52c8ee9db84b9cbdaa3d353dafd29dceeef7a7043a58ab"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDDB6E0C28500E",
+      "hash": "b6dcd40af0e82d16bebe303cb2970e14dca1dcdc7bead7ab0cb75ae6185ff8a4"
+    }
+  },
+  "1.236.0": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DDCDFAF0C10D0F",
+      "hash": "a4fe8101d98f4efeb4854fde05d7c6a36a9a61e8249d4c72afcda4a4944723fb"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDCDFAF0B2EC1F",
+      "hash": "d9356a9de047598d6c2b8ff4a5318c9305485152430e85ceec78052a9bd08828"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDCDFAF0B0A4C3",
+      "hash": "a7918bc6b900f8cbfc442c3d569f9408de6d9fd24738cb8e378aa6e9b504e8bc"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DDCDFAF0A2AACE",
+      "hash": "c11b4d02bd730a8c3e60f4066602ce4264a752013d6c9ec58d70b7f276c3b794"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDCDFAF0A25CFC",
+      "hash": "d3094124e18f17864bd0e0de93f1938a466aca374c180962b2ba670a5ec9c8cf"
+    }
+  }
+}
--- a/tools/ci/tool-list.sh
+++ b/tools/ci/tool-list.sh
@@ -30,6 +30,7 @@ glibc_pre_2_31_incompat=(
 # version `GLIBC_2.28' not found
 glibc_pre_2_28_incompat=(
  "${glibc_pre_2_31_incompat[@]}"
+  wasm-tools
  wasmtime
 )
 # version `GLIBC_2.27' not found
--- a/tools/codegen/base/covgate.json
+++ b/tools/codegen/base/covgate.json
@@ -0,0 +1,22 @@
+{
+  "repository": "https://github.com/jesse-black/covgate",
+  "tag_prefix": "v",
+  "rust_crate": "${package}",
+  "asset_name": "${package}-v${version}-${rust_target}.tar.gz",
+  "bin": "${package}-v${version}-${rust_target}/${package}${exe}",
+  "signing": {
+    "kind": {
+      "gh-attestation": {
+        "signer-workflow": "${repo}/.github/workflows/release.yml"
+      }
+    }
+  },
+  "platform": {
+    "x86_64_linux_musl": {},
+    "x86_64_windows": {
+      "asset_name": "${package}-v${version}-${rust_target}.zip"
+    },
+    "aarch64_linux_musl": {},
+    "aarch64_macos": {}
+  }
+}
--- a/tools/codegen/base/uv.json
+++ b/tools/codegen/base/uv.json
@@ -2,6 +2,7 @@
  "repository": "https://github.com/astral-sh/uv",
  "license_markdown": "[Apache-2.0](https://github.com/astral-sh/uv/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/astral-sh/uv/blob/main/LICENSE-MIT)",
  "tag_prefix": "",
+  "rust_crate": "${package}",
  "version_range": ">= 0.8.16",
  "signing": {
    "version_range": ">= 0.9.13",
@@ -11,42 +12,26 @@
      }
    }
  },
+  "asset_name": "${package}-${rust_target}.tar.gz",
+  "bin": [
+    "${package}-${rust_target}/${package}${exe}",
+    "${package}-${rust_target}/${package}x${exe}"
+  ],
  "platform": {
-    "x86_64_linux_musl": {
-      "asset_name": "${package}-x86_64-unknown-linux-musl.tar.gz",
-      "bin": "${package}-x86_64-unknown-linux-musl/${package}${exe}"
-    },
-    "x86_64_macos": {
-      "asset_name": "${package}-x86_64-apple-darwin.tar.gz",
-      "bin": "${package}-x86_64-apple-darwin/${package}${exe}"
-    },
+    "x86_64_linux_musl": {},
+    "x86_64_macos": {},
    "x86_64_windows": {
-      "asset_name": "${package}-x86_64-pc-windows-msvc.zip",
-      "bin": "${package}${exe}"
-    },
-    "aarch64_linux_musl": {
-      "asset_name": "${package}-aarch64-unknown-linux-musl.tar.gz",
-      "bin": "${package}-aarch64-unknown-linux-musl/${package}${exe}"
-    },
-    "aarch64_macos": {
-      "asset_name": "${package}-aarch64-apple-darwin.tar.gz",
-      "bin": "${package}-aarch64-apple-darwin/${package}${exe}"
+      "asset_name": "${package}-${rust_target}.zip",
+      "bin": ["${package}${exe}", "${package}w${exe}", "${package}x${exe}"]
    },
+    "aarch64_linux_musl": {},
+    "aarch64_macos": {},
    "aarch64_windows": {
-      "asset_name": "${package}-aarch64-pc-windows-msvc.zip",
-      "bin": "${package}${exe}"
+      "asset_name": "${package}-${rust_target}.zip",
+      "bin": ["${package}${exe}", "${package}w${exe}", "${package}x${exe}"]
    },
-    "powerpc64le_linux_gnu": {
-      "asset_name": "${package}-powerpc64le-unknown-linux-gnu.tar.gz",
-      "bin": "${package}-powerpc64le-unknown-linux-gnu/${package}${exe}"
-    },
-    "riscv64_linux_gnu": {
-      "asset_name": "${package}-riscv64gc-unknown-linux-gnu.tar.gz",
-      "bin": "${package}-riscv64gc-unknown-linux-gnu/${package}${exe}"
-    },
-    "s390x_linux_gnu": {
-      "asset_name": "${package}-s390x-unknown-linux-gnu.tar.gz",
-      "bin": "${package}-s390x-unknown-linux-gnu/${package}${exe}"
-    }
+    "powerpc64le_linux_gnu": {},
+    "riscv64_linux_gnu": {},
+    "s390x_linux_gnu": {}
  }
 }
--- a/tools/codegen/base/wasm-tools.json
+++ b/tools/codegen/base/wasm-tools.json
@@ -0,0 +1,31 @@
+{
+  "repository": "https://github.com/bytecodealliance/wasm-tools",
+  "tag_prefix": "v",
+  "rust_crate": "${package}",
+  "asset_name": "${package}-${version}-${rust_target_arch}-${rust_target_os}.tar.gz",
+  "version_range": ">= 1.236.0",
+  "bin": "${package}-${version}-${rust_target_arch}-${rust_target_os}/${package}${exe}",
+  "signing": {
+    "version_range": ">= 1.241.2",
+    "kind": {
+      "gh-attestation": {
+        "signer-workflow": "${repo}/.github/workflows/publish.yml"
+      }
+    }
+  },
+  "platform": {
+    "aarch64_macos": {},
+    "aarch64_linux_gnu": {
+      "asset_name": "${package}-${version}-${rust_target_arch}-linux.tar.gz",
+      "bin": "${package}-${version}-${rust_target_arch}-linux/${package}"
+    },
+    "x86_64_macos": {},
+    "x86_64_linux_gnu": {
+      "asset_name": "${package}-${version}-${rust_target_arch}-linux.tar.gz",
+      "bin": "${package}-${version}-${rust_target_arch}-linux/${package}"
+    },
+    "x86_64_windows": {
+      "asset_name": "${package}-${version}-${rust_target_arch}-${rust_target_os}.zip"
+    }
+  }
+}
--- a/tools/publish.sh
+++ b/tools/publish.sh
@@ -1,204 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-set -CeEuo pipefail
-IFS=$'\n\t'
-trap -- 's=$?; printf >&2 "%s\n" "${0##*/}:${LINENO}: \`${BASH_COMMAND}\` exit with ${s}"; exit ${s}' ERR
-cd -- "$(dirname -- "$0")"/..
-
-# Publish a new release.
-#
-# USAGE:
-#    ./tools/publish.sh <VERSION>
-#
-# Note: This script requires the following tools:
-# - parse-changelog <https://github.com/taiki-e/parse-changelog>
-
-retry() {
-  for i in {1..10}; do
-    if "$@"; then
-      return 0
-    else
-      sleep "${i}"
-    fi
-  done
-  "$@"
-}
-bail() {
-  printf >&2 'error: %s\n' "$*"
-  exit 1
-}
-
-version="${1:?}"
-version="${version#v}"
-tag_prefix="v"
-tag="${tag_prefix}${version}"
-changelog="CHANGELOG.md"
-if [[ ! "${version}" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z\.-]+)?(\+[0-9A-Za-z\.-]+)?$ ]]; then
-  bail "invalid version format '${version}'"
-fi
-if [[ $# -gt 1 ]]; then
-  bail "invalid argument '$2'"
-fi
-if { sed --help 2>&1 || true; } | grep -Eq -e '-i extension'; then
-  in_place=(-i '')
-else
-  in_place=(-i)
-fi
-
-# Make sure there is no uncommitted change.
-git diff --exit-code
-git diff --exit-code --staged
-
-# Make sure the same release has not been created in the past.
-if gh release view "${tag}" &>/dev/null; then
-  bail "tag '${tag}' has already been created and pushed"
-fi
-
-# Make sure that the release was created from an allowed branch.
-if ! git branch | grep -Eq '\* main$'; then
-  bail "current branch is not 'main'"
-fi
-if ! git remote -v | grep -F origin | grep -Eq 'github\.com[:/]taiki-e/'; then
-  bail "cannot publish a new release from fork repository"
-fi
-
-release_date=$(date -u '+%Y-%m-%d')
-tags=$(git --no-pager tag | { grep -E "^${tag_prefix}[0-9]+" || true; })
-if [[ -n "${tags}" ]]; then
-  # Make sure the same release does not exist in changelog.
-  if grep -Eq "^## \\[${version//./\\.}\\]" "${changelog}"; then
-    bail "release ${version} already exist in ${changelog}"
-  fi
-  if grep -Eq "^\\[${version//./\\.}\\]: " "${changelog}"; then
-    bail "link to ${version} already exist in ${changelog}"
-  fi
-  # Update changelog.
-  remote_url=$(grep -E '^\[Unreleased\]: https://' "${changelog}" | sed -E 's/^\[Unreleased\]: //; s/\.\.\.HEAD$//')
-  prev_tag="${remote_url#*/compare/}"
-  remote_url="${remote_url%/compare/*}"
-  sed -E "${in_place[@]}" \
-    -e "s/^## \\[Unreleased\\]/## [Unreleased]\\n\\n## [${version}] - ${release_date}/" \
-    -e "s#^\[Unreleased\]: https://.*#[Unreleased]: ${remote_url}/compare/${tag}...HEAD\\n[${version}]: ${remote_url}/compare/${prev_tag}...${tag}#" "${changelog}"
-  if ! grep -Eq "^## \\[${version//./\\.}\\] - ${release_date}$" "${changelog}"; then
-    bail "failed to update ${changelog}"
-  fi
-  if ! grep -Eq "^\\[${version//./\\.}\\]: " "${changelog}"; then
-    bail "failed to update ${changelog}"
-  fi
-else
-  # Make sure the release exists in changelog.
-  if ! grep -Eq "^## \\[${version//./\\.}\\] - ${release_date}$" "${changelog}"; then
-    bail "release ${version} does not exist in ${changelog} or has wrong release date"
-  fi
-  if ! grep -Eq "^\\[${version//./\\.}\\]: " "${changelog}"; then
-    bail "link to ${version} does not exist in ${changelog}"
-  fi
-fi
-
-# Make sure that a valid release note for this version exists.
-# https://github.com/taiki-e/parse-changelog
-changes=$(parse-changelog "${changelog}" "${version}")
-if [[ -z "${changes}" ]]; then
-  bail "changelog for ${version} has no body"
-fi
-printf '============== CHANGELOG ==============\n'
-printf '%s\n' "${changes}"
-printf '=======================================\n'
-
-if [[ -n "${tags}" ]]; then
-  # Create a release commit.
-  (
-    set -x
-    git add "${changelog}"
-    git commit -m "Release ${version}"
-  )
-fi
-
-set -x
-
-git tag "${tag}"
-retry git push origin refs/heads/main
-retry git push origin refs/tags/"${tag}"
-
-major_version_tag="v${version%%.*}"
-git branch "releases/${major_version_tag}"
-git tag -f "${major_version_tag}"
-refs=("refs/heads/releases/${major_version_tag}" "+refs/tags/${major_version_tag}")
-
-tools=()
-for tool in tools/codegen/base/*.json; do
-  tool="${tool##*/}"
-  tools+=("${tool%.*}")
-done
-# Aliases.
-# NB: Update case for aliases in main.sh, tool input option in test-alias job
-# in .github/workflows/ci.yml, and match for alias for tools/codegen/src/tools-markdown.rs.
-tools+=(
-  nextest
-  taplo-cli
-  typos-cli
-  wasm-bindgen-cli
-  wasmtime-cli
-)
-# Non-manifest-based tools.
-tools+=(valgrind)
-
-branches=()
-for tool in "${tools[@]}"; do
-  git checkout -b "releases/${tool}"
-  sed -E "${in_place[@]}" action.yml \
-    -e "s/required: true/required: false/g" \
-    -e "s/# default: #publish:tool/default: ${tool}/g"
-  git add action.yml
-  git commit -m "${tool}"
-  git tag -f "${tool}"
-  git checkout main
-  refs+=("+refs/heads/releases/${tool}" "+refs/tags/${tool}")
-  branches+=("releases/${tool}")
-done
-retry git push origin --atomic "${refs[@]}"
-git branch -d "releases/${major_version_tag}"
-git branch -D "${branches[@]}"
-
-schema_workspace=/tmp/workspace
-rm -rf -- "${schema_workspace}"
-# Checkout manifest-schema branch
-schema_version="$(cargo metadata --format-version=1 --no-deps | jq -r '.packages[] | select(.name == "install-action-manifest-schema") | .version')"
-if [[ "${schema_version}" == "0."* ]]; then
-  schema_version="0.$(cut -d. -f2 <<<"${schema_version}")"
-else
-  schema_version="$(cut -d. -f1 <<<"${schema_version}")"
-fi
-schema_branch="manifest-schema-${schema_version}"
-
-git worktree add --force "${schema_workspace}"
-(
-  cd -- "${schema_workspace}"
-  if git fetch origin "${schema_branch}"; then
-    git checkout "origin/${schema_branch}" -B "${schema_branch}"
-  elif ! git checkout "${schema_branch}"; then
-    # New branch with no history. Credit: https://stackoverflow.com/a/13969482
-    git checkout --orphan "${schema_branch}"
-    git rm -rf -- . || true
-    git commit -m 'Initial commit' --allow-empty
-  fi
-)
-
-# Copy over schema
-cp -- ./manifests/* "${schema_workspace}"
-
-(
-  cd -- "${schema_workspace}"
-  # Stage changes
-  git add .
-  # Detect changes, then commit and push if changes exist
-  if [[ "$(git status --porcelain=v1 | LC_ALL=C wc -l)" != "0" ]]; then
-    git commit -m 'Update manifest schema'
-    retry git push origin HEAD
-  fi
-)
-
-rm -rf -- "${schema_workspace}"
-git worktree prune
-# TODO: get branch in schema_workspace dir instead
-git branch -D "${schema_branch}" "${schema_workspace##*/}"
--- a/tools/tidy.sh
+++ b/tools/tidy.sh
@@ -7,13 +7,13 @@ trap -- 'printf >&2 "%s\n" "${0##*/}: trapped SIGINT"; exit 1' SIGINT
 cd -- "$(dirname -- "$0")"/..

 # USAGE:
-#    GH_TOKEN=$(gh auth token) ./tools/tidy.sh
+#    GITHUB_TOKEN=$(gh auth token) ./tools/tidy.sh
 #
 # Note: This script requires the following tools:
 # - git 1.8+
 # - jq 1.6+
 # - npm (node 18+)
-# - python 3.6+, pipx
+# - python 3.6+, uv
 # - shfmt
 # - shellcheck
 # - zizmor
@@ -86,11 +86,6 @@ check_config() {
 check_install() {
  for tool in "$@"; do
    if ! type -P "${tool}" >/dev/null; then
-      if [[ "${tool}" == 'python3' ]]; then
-        if type -P python >/dev/null; then
-          continue
-        fi
-      fi
      error "'${tool}' is required to run this check"
      return 1
    fi
@@ -132,12 +127,8 @@ EOF
  exit 1
 fi

-py_suffix=''
-if type -P python3 >/dev/null; then
-  py_suffix=3
-fi
-yq() { pipx run yq "$@"; }
-tomlq() { pipx run --spec yq tomlq "$@"; }
+yq() { uvx yq "$@"; }
+tomlq() { uvx --from yq tomlq "$@"; }
 case "$(uname -s)" in
  Linux)
    if [[ "$(uname -o)" == 'Android' ]]; then
@@ -190,8 +181,8 @@ case "$(uname -s)" in
        else
          jq() { command jq "$@" | tr -d '\r'; }
        fi
-        yq() { pipx run yq "$@" | tr -d '\r'; }
-        tomlq() { pipx run --spec yq tomlq "$@" | tr -d '\r'; }
+        yq() { uvx yq "$@" | tr -d '\r'; }
+        tomlq() { uvx --from yq tomlq "$@" | tr -d '\r'; }
      fi
    fi
    ;;
@@ -248,7 +239,7 @@ if [[ ${#rust_files[@]} -gt 0 ]]; then
  info "checking Rust code style"
  check_config .rustfmt.toml "; consider adding with reference to https://github.com/taiki-e/cargo-hack/blob/HEAD/.rustfmt.toml"
  check_config .clippy.toml "; consider adding with reference to https://github.com/taiki-e/cargo-hack/blob/HEAD/.clippy.toml"
-  if check_install cargo jq pipx; then
+  if check_install cargo jq uv; then
    # `cargo fmt` cannot recognize files not included in the current workspace and modules
    # defined inside macros, so run rustfmt directly.
    # We need to use nightly rustfmt because we use the unstable formatting options of rustfmt.
@@ -700,7 +691,7 @@ elif check_install shellcheck; then
    # Exclude SC2096 due to the way the temporary script is created.
    shellcheck_exclude=SC2096
    info "running \`shellcheck --exclude ${shellcheck_exclude}\` for scripts in \`\$(git ls-files '*Dockerfile*')\`"
-    if check_install jq python3 parse-dockerfile; then
+    if check_install jq parse-dockerfile; then
      shellcheck_for_dockerfile() {
        local text=$1
        local shell=$2
@@ -833,7 +824,7 @@ elif check_install shellcheck; then
    # Exclude SC2096 due to the way the temporary script is created.
    shellcheck_exclude=SC2086,SC2096,SC2129
    info "running \`shellcheck --exclude ${shellcheck_exclude}\` for scripts in .github/workflows/*.yml and **/action.yml"
-    if check_install jq python3 pipx; then
+    if check_install jq uv; then
      shellcheck_for_gha() {
        local text=$1
        local shell=$2
@@ -846,16 +837,8 @@ elif check_install shellcheck; then
          *) return ;;
        esac
        text="#!/usr/bin/env ${shell%' {0}'}"$'\n'"${text}"
-        # Use python because sed doesn't support .*?.
-        text=$(
-          "python${py_suffix}" - <<EOF
-import re
-text = re.sub(r"\\\${{.*?}}", "\${__GHA_SYNTAX__}", r'''${text}''')
-print(text)
-EOF
-        )
        case "${ostype}" in
-          windows) text=${text//$'\r'/} ;; # Python print emits \r\n.
+          windows) text=${text//$'\r'/} ;; # Parse error on git bash/msys2 bash.
        esac
        local color=auto
        if [[ -t 1 ]] || [[ -n "${GITHUB_ACTIONS:-}" ]]; then
@@ -988,11 +971,12 @@ if [[ ${#zizmor_targets[@]} -gt 0 ]]; then
  if [[ "${ostype}" =~ ^(netbsd|openbsd|dragonfly|illumos|solaris)$ ]] && [[ -n "${CI:-}" ]] && ! type -P zizmor >/dev/null; then
    warn "this check is skipped on NetBSD/OpenBSD/Dragonfly/illumos/Solaris due to installing zizmor is hard on these platform"
  elif check_install zizmor; then
-    # zizmor can also be used via pipx, but old version will be installed if glibc version is old.
+    # zizmor can also be used via uvx, but old version will be installed if glibc version is old.
+    # Do not use `zizmor .` here because it also attempts to check submodules.
    IFS=' '
-    info "running \`zizmor -q ${zizmor_targets[*]}\`"
+    info "running \`zizmor -q --pedantic ${zizmor_targets[*]}\`"
    IFS=$'\n\t'
-    zizmor -q "${zizmor_targets[@]}"
+    zizmor -q --pedantic "${zizmor_targets[@]}"
  fi
 fi
 printf '\n'
@@ -1045,7 +1029,7 @@ fi
 if [[ -f .cspell.json ]]; then
  info "spell checking"
  project_dictionary=.github/.cspell/project-dictionary.txt
-  if check_install npm jq pipx; then
+  if check_install npm jq uv; then
    has_rust=''
    if [[ -n "$(ls_files '*Cargo.toml')" ]]; then
      has_rust=1
Author	SHA1	Message	Date
Taiki Endo	d858f81139	Release 2.71.2	2026-04-02 12:27:25 +00:00
Taiki Endo	beb0949bbd	Retry on bash startup failure on Windows	2026-04-02 21:10:55 +09:00
Taiki Endo	3e95df35e0	Update `mise@latest` to 2026.4.1	2026-04-02 11:52:13 +00:00
Taiki Endo	27a3f68117	Update `uv@latest` to 0.11.3	2026-04-02 00:57:46 +00:00
Taiki Endo	0cccd59f03	Release 2.71.1	2026-04-02 00:37:25 +00:00
Taiki Endo	01b93a891a	Use pwsh instead of powershell https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#defaultsrunshell > This is the default shell used on Windows. The PowerShell Core. GitHub appends the extension .ps1 to your script name. If your self-hosted Windows runner does not have PowerShell Core installed, then PowerShell Desktop is used instead. Fixes #1653	2026-04-02 09:28:57 +09:00
Taiki Endo	8ae92145e3	Update `dprint@latest` to 0.53.2	2026-04-01 18:40:30 +00:00
Taiki Endo	a1df912038	Release 2.71.0	2026-04-01 15:41:38 +00:00
Taiki Endo	099c3807b1	Update changelog	2026-04-02 00:36:48 +09:00
Taiki Endo	6c82c85552	Update `covgate@latest` to 0.1.3	2026-04-01 15:35:13 +00:00
Jesse Black	dbccc502f2	Support covgate (#1613 )	2026-04-02 00:17:21 +09:00
Taiki Endo	ac12c97c0b	Update changelog	2026-04-02 00:04:22 +09:00
Taiki Endo	3516136df0	Call main.sh from powershell on Windows to work around windows-11-arm runner bug	2026-04-02 00:02:25 +09:00
Taiki Endo	284fb88fcd	Update `typos@latest` to 1.45.0	2026-04-01 14:24:25 +00:00
Marco Neumann	80f622f7ce	Support wasm-tools (#1642 )	2026-04-01 23:06:25 +09:00
Taiki Endo	0d198c45dd	Update `mise@latest` to 2026.4.0	2026-04-01 12:44:48 +00:00
Taiki Endo	1e30eaa758	Update `cargo-careful@latest` to 0.4.10	2026-04-01 09:48:56 +00:00
Taiki Endo	bfadeaba21	Release 2.70.4	2026-04-01 01:30:37 +00:00
Taiki Endo	c77713608e	Update `wasm-bindgen@latest` to 0.2.117	2026-04-01 01:28:55 +00:00
Taiki Endo	655a676340	Update `vacuum@latest` to 0.25.5	2026-04-01 01:28:55 +00:00
Taiki Endo	fd449f1a63	Update `tombi@latest` to 0.9.13	2026-04-01 01:28:55 +00:00
Taiki Endo	cc7ef4ba64	Update readme	2026-04-01 10:13:37 +09:00
Taiki Endo	61a0be6151	Update `mise@latest` to 2026.3.18	2026-03-31 15:51:46 +00:00
Taiki Endo	6ef672efc2	Release 2.70.3	2026-03-31 01:29:33 +00:00
Taiki Endo	f89faaa961	Update `wasm-bindgen@latest` to 0.2.116	2026-03-31 00:54:19 +00:00
Taiki Endo	9adcff1382	Update `cargo-insta@latest` to 1.47.2	2026-03-30 21:33:53 +00:00
Taiki Endo	a322a79ed4	Update `tombi@latest` to 0.9.12	2026-03-30 18:41:33 +00:00
Taiki Endo	875d0e5764	Update `biome@latest` to 2.4.10	2026-03-30 18:41:33 +00:00
Taiki Endo	e9e8e031bc	Release 2.70.2	2026-03-30 01:34:03 +00:00
Taiki Endo	f225969a9e	Update `vacuum@latest` to 0.25.3	2026-03-30 00:57:06 +00:00
Taiki Endo	2e8700ad0b	Update `tombi@latest` to 0.9.11	2026-03-29 19:25:13 +00:00
Taiki Endo	41213fbc0e	zizmor: Apply more lints	2026-03-30 01:56:27 +09:00
Taiki Endo	fd0f63e180	Release 2.70.1	2026-03-29 08:34:38 +00:00
Taiki Endo	7487d4091f	Update `cargo-insta@latest` to 1.47.1	2026-03-29 06:46:40 +00:00
Taiki Endo	ea3bdd400e	Update `cargo-binstall@latest` to 1.17.9	2026-03-29 06:46:40 +00:00
Taiki Endo	7d31177690	ci: Test ubuntu 26.04 container	2026-03-29 12:55:04 +09:00
Taiki Endo	b933e429e1	Update `tombi@latest` to 0.9.10	2026-03-28 21:25:56 +00:00
Taiki Endo	3eeb0f944d	tools: Update tidy.sh	2026-03-29 02:56:38 +09:00
Taiki Endo	0fde6d128a	Release 2.70.0	2026-03-28 16:26:52 +00:00
Taiki Endo	6abbc18f77	Install uv, uvw, and uvx binaries when installing uv	2026-03-29 01:20:06 +09:00
Taiki Endo	cd20062255	ci: Update config	2026-03-29 00:12:26 +09:00
Taiki Endo	a164de717a	Release 2.69.14	2026-03-28 05:53:56 +00:00
Taiki Endo	cd919aa8c5	Update `just@latest` to 1.48.1	2026-03-28 05:43:54 +00:00
Taiki Endo	8f41066dca	Update `wasm-bindgen@latest` to 0.2.115	2026-03-28 00:50:38 +00:00
Taiki Endo	704f92c11d	Release 2.69.13	2026-03-27 14:39:03 +00:00
Taiki Endo	38b59bc959	ci: Fix release workflow	2026-03-27 23:22:50 +09:00
Taiki Endo	a20bdf712d	Update `mise@latest` to 2026.3.17	2026-03-27 12:35:37 +00:00
Taiki Endo	cc73724b43	Update `cargo-insta@latest` to 1.47.0	2026-03-27 01:51:56 +00:00
Taiki Endo	80a23c5ba9	Release 2.69.12	2026-03-27 01:37:17 +00:00
Taiki Endo	5c17a3192f	Update `uv@latest` to 0.11.2	2026-03-27 00:57:43 +00:00
Taiki Endo	4bb73acd2d	ci: Fix release workflow	2026-03-27 02:22:49 +09:00
Taiki Endo	80779d0b81	Release 2.69.11	2026-03-26 17:17:31 +00:00
Taiki Endo	a69eea0c9b	ci: Update to new release workflow	2026-03-27 02:00:56 +09:00
Taiki Endo	0ce9fed251	Update `dprint@latest` to 0.53.1	2026-03-26 16:00:50 +00:00
Taiki Endo	c0f7516d26	Update `mise@latest` to 2026.3.16	2026-03-26 12:39:38 +00:00