Release 2.70.2

.github/.cspell/project-dictionary.txt

@@ -32,6 +32,7 @@ rdme
 rootfs
 sccache
 SHASUMS
+shortstat
 sigstore
 syft
 tombi

.github/dependabot.yml

@@ -1,6 +1,6 @@
 version: 2
 updates:
-  - package-ecosystem: cargo
+  - package-ecosystem: cargo # zizmor: ignore[dependabot-cooldown] # Unless dependencies are pinned/locked, the effect is limited.
     directory: /
     schedule:
       interval: daily
@@ -14,6 +14,8 @@ updates:
     directory: /
     schedule:
       interval: daily
+    cooldown:
+      default-days: 7
     commit-message:
       prefix: ''
     labels: []

.github/workflows/ci.yml

@@ -11,7 +11,7 @@ on:
       - dev
       - ci-*
   schedule:
-    - cron: '0 0 * * *'
+    - cron: '0 2 * * *'
   workflow_dispatch:
 
 env:
@@ -51,7 +51,8 @@ jobs:
       contents: write # for creating branch for pr
       pull-requests: write # unused (used in `codegen-automerge: true` case)
       security-events: write # for github/codeql-action/*
-    secrets: inherit
+    secrets:
+      PR_TOKEN_APP_PRIVATE_KEY: ${{ secrets.PR_TOKEN_APP_PRIVATE_KEY }}
 
   test:
     strategy:
@@ -99,7 +100,11 @@ jobs:
       - run: rm -- Cargo.toml
       - name: Generate tool list
         id: tool-list
-        run: tools/ci/tool-list.sh "${{ matrix.tool }}" "${{ matrix.os }}" "${{ matrix.bash }}" >>"${GITHUB_OUTPUT}"
+        run: tools/ci/tool-list.sh "${TOOL}" "${OS}" "${BASH}" >>"${GITHUB_OUTPUT}"
+        env:
+          TOOL: ${{ matrix.tool }}
+          OS: ${{ matrix.os }}
+          BASH: ${{ matrix.bash }}
       - run: |
           printf '%s\n' 'C:\msys64\mingw32\bin' >>"${GITHUB_PATH}"
           printf '%s\n' 'C:\msys64\usr\bin' >>"${GITHUB_PATH}"
@@ -155,7 +160,7 @@ jobs:
       - run: env
       - uses: ./
         with:
-          # NB: Update alias list in tools/publish.rs, case for aliases in main.sh,
+          # NB: Update alias list in release.yml, case for aliases in main.sh,
           # and match for alias for tools/codegen/src/tools-markdown.rs.
           tool: |
             nextest
@@ -215,6 +220,7 @@ jobs:
           - ubuntu:20.04 # glibc 2.31
           - ubuntu:22.04 # glibc 2.35
           - ubuntu:24.04 # glibc 2.39
+          - ubuntu:26.04 # glibc 2.42
           - debian:9-slim # glibc 2.24
           - debian:10-slim # glibc 2.28
           - debian:11-slim # glibc 2.31
@@ -263,7 +269,7 @@ jobs:
           sed -i /etc/yum.repos.d/*.repo -e 's!^mirrorlist!#mirrorlist!' \
             -e 's!^#baseurl=http://mirror.centos.org/!baseurl=https://vault.centos.org/!'
           sed -i 's/enabled=1/enabled=0/' /etc/yum/pluginconf.d/fastestmirror.conf
-          if [[ "${{ matrix.container }}" == "centos:6" ]]; then
+          if [[ "${CONTAINER}" == "centos:6" ]]; then
             # CentOS 6's curl (7.19.7) has no curl has no --proto/--tlsv1.2.
             yum install -y gcc openssl-devel
             curl -fsSL --retry 10 https://curl.se/download/curl-7.34.0.tar.gz | tar xzf -
@@ -277,13 +283,17 @@ jobs:
               https://vault.ius.io/el6/x86_64/packages/p/perl-Git18-1.8.5.5-4.ius.el6.noarch.rpm \
               https://vault.ius.io/el6/x86_64/packages/g/git18-1.8.5.5-4.ius.el6.x86_64.rpm
           fi
+        env:
+          CONTAINER: ${{ matrix.container }}
         if: startsWith(matrix.container, 'centos')
       - uses: taiki-e/checkout-action@v1
       # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
       - run: rm -- Cargo.toml
       - name: Generate tool list
         id: tool-list
-        run: tools/ci/tool-list.sh "" "${{ matrix.container }}" >>"${GITHUB_OUTPUT}"
+        run: tools/ci/tool-list.sh "" "${CONTAINER}" >>"${GITHUB_OUTPUT}"
+        env:
+          CONTAINER: ${{ matrix.container }}
       # remove bash installed by checkout-action
       - run: apk --no-cache del bash
         shell: sh

.github/workflows/manifest.yml

@@ -37,7 +37,8 @@ jobs:
     permissions:
       contents: write # for creating branch for pr
       pull-requests: write # for gh pr review --approve
-    secrets: inherit
+    secrets:
+      PR_TOKEN_APP_PRIVATE_KEY: ${{ secrets.PR_TOKEN_APP_PRIVATE_KEY }}
     with:
       script: tools/manifest.sh
       commit-script: tools/ci/manifest.sh

.github/workflows/release.yml

@@ -4,18 +4,212 @@ permissions:
   contents: read
 
 on:
-  push:
-    tags:
-      - v[0-9]+.[0-9]+.*
-      - install-action-manifest-schema-[0-9]+.[0-9]+.*
+  workflow_dispatch:
+    inputs:
+      target:
+        description: Package to be released
+        required: true
+        type: choice
+        options:
+          - install-action
+          - install-action-manifest-schema
+      version:
+        description: Version to be increased
+        required: true
+        type: choice
+        options:
+          - patch
+          - minor
+          - major
 
 defaults:
   run:
     shell: bash --noprofile --norc -CeEuxo pipefail {0}
 
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: false
+
 jobs:
-  create-release:
-    if: github.repository_owner == 'taiki-e' && !startsWith(github.ref_name, 'install-action-manifest-schema-')
+  prepare:
+    if: github.repository_owner == 'taiki-e' && inputs.target == 'install-action'
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: parse-changelog
+          fallback: none
+      - id: check
+        run: |
+          set +x
+          IFS=$'\n\t'
+          trap -- 's=$?; printf >&2 "%s\n" "${0##*/}:${LINENO}: \`${BASH_COMMAND}\` exit with ${s}"; exit ${s}' ERR
+          retry() {
+            for i in {1..10}; do
+              if "$@"; then
+                return 0
+              else
+                sleep "${i}"
+              fi
+            done
+            "$@"
+          }
+          bail() {
+            printf '::error::%s\n' "$*"
+            exit 1
+          }
+          normalize_comma_or_space_separated() {
+            # Normalize whitespace characters into space because it's hard to handle single input contains lines with POSIX sed alone.
+            local list="${1//[$'\r\n\t']/ }"
+            if [[ "${list}" == *","* ]]; then
+              # If a comma is contained, consider it is a comma-separated list.
+              # Drop leading and trailing whitespaces in each element.
+              sed -E 's/ *, */,/g; s/^.//' <<<",${list},"
+            else
+              # Otherwise, consider it is a whitespace-separated list.
+              # Convert whitespace characters into comma.
+              sed -E 's/ +/,/g; s/^.//' <<<" ${list} "
+            fi
+          }
+          if { sed --help 2>&1 || true; } | grep -Eq -e '-i extension'; then
+            in_place=(-i '')
+          else
+            in_place=(-i)
+          fi
+
+          # shellcheck disable=SC2153
+          version="${VERSION}"
+          printf '%s\n' "version(input): ${version}"
+          # shellcheck disable=SC2153
+          tag_prefix="${TAG_PREFIX}"
+          printf '%s\n' "tag_prefix: ${tag_prefix}"
+          # shellcheck disable=SC2153
+          changelog="${CHANGELOG}"
+          printf '%s\n' "changelog: ${changelog}"
+
+          # Get the current date.
+          release_date=$(date -u '+%Y-%m-%d')
+          printf '%s\n' "release-date: ${release_date}"
+          printf '%s\n' "release-date=${release_date}" >>"${GITHUB_OUTPUT}"
+
+          # Get the current revision.
+          rev=$(git rev-parse HEAD)
+          printf '%s\n' "rev: ${rev}"
+          printf '%s\n' "rev=${rev}" >>"${GITHUB_OUTPUT}"
+
+          prev_version=$(parse-changelog --title-no-link "${changelog}" | cut -d' ' -f1)
+
+          # Determine the new version number and tag name.
+          case "${version}" in
+            major | minor | patch)
+              if [[ ! "${prev_version}" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+                bail "pre-release/build-metadata"
+              fi
+              major="${prev_version%%.*}"
+              minor_patch="${prev_version#*.}"
+              minor="${minor_patch%%.*}"
+              patch="${minor_patch#*.}"
+              case "${version}" in
+                major) version="$((major+1)).0.0" ;;
+                minor) version="${major}.$((minor+1)).0" ;;
+                patch) version="${major}.${minor}.$((patch+1))" ;;
+              esac
+              ;;
+            *) version="${version#v}" ;;
+          esac
+          if [[ ! "${version}" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z\.-]+)?(\+[0-9A-Za-z\.-]+)?$ ]]; then
+            bail "invalid version format '${version}'"
+          fi
+          printf '%s\n' "version: ${version}"
+          printf '%s\n' "version=${version}" >>"${GITHUB_OUTPUT}"
+          tag="${tag_prefix}${version}"
+          printf '%s\n' "tag: ${tag}"
+          printf '%s\n' "tag=${tag}" >>"${GITHUB_OUTPUT}"
+
+          # Make sure the same release has not been created in the past.
+          if gh release view "${tag}" &>/dev/null; then
+            bail "tag '${tag}' has already been created and pushed"
+          fi
+          # Make sure that the release was created from an allowed branch.
+          if ! git branch | grep -Eq '\* '"${BRANCH}"'$'; then
+            bail "current branch is not '${BRANCH}'"
+          fi
+
+          changed_paths=()
+          retry git fetch origin --tags &>/dev/null
+          tags=$(git --no-pager tag | { grep -E "^${tag_prefix}[0-9]+" || true; })
+          if [[ -n "${tags}" ]]; then
+            printf 'has-tags=true\n' >>"${GITHUB_OUTPUT}"
+            # Make sure the same release does not exist in changelog.
+            if grep -Eq "^## \\[${version//./\\.}\\]" "${changelog}"; then
+              bail "release ${version} already exist in ${changelog}"
+            fi
+            if grep -Eq "^\\[${version//./\\.}\\]: " "${changelog}"; then
+              bail "link to ${version} already exist in ${changelog}"
+            fi
+
+            # Update changelog.
+            changed_paths+=("${changelog}")
+            remote_url=$(grep -E '^\[Unreleased\]: https://' "${changelog}" | sed -E 's/^\[Unreleased\]: //; s/\.\.\.HEAD$//')
+            prev_tag="${remote_url#*/compare/}"
+            remote_url="${remote_url%/compare/*}"
+            sed -E "${in_place[@]}" \
+              -e "s/^## \\[Unreleased\\]/## [Unreleased]\\n\\n## [${version}] - ${release_date}/" \
+              -e "s#^\[Unreleased\]: https://.*#[Unreleased]: ${remote_url}/compare/${tag}...HEAD\\n[${version}]: ${remote_url}/compare/${prev_tag}...${tag}#" "${changelog}"
+            if ! grep -Eq "^## \\[${version//./\\.}\\] - ${release_date}$" "${changelog}"; then
+              bail "failed to update ${changelog}"
+            fi
+            if ! grep -Eq "^\\[${version//./\\.}\\]: " "${changelog}"; then
+              bail "failed to update ${changelog}"
+            fi
+          else
+            # Make sure the release exists in changelog.
+            if ! grep -Eq "^## \\[${version//./\\.}\\] - ${release_date}$" "${changelog}"; then
+              bail "release ${version} does not exist in ${changelog} or has wrong release date"
+            fi
+            if ! grep -Eq "^\\[${version//./\\.}\\]: " "${changelog}"; then
+              bail "link to ${version} does not exist in ${changelog}"
+            fi
+          fi
+          # Make sure that a valid release note for this version exists.
+          # https://github.com/taiki-e/parse-changelog
+          changes=$(parse-changelog "${changelog}" "${version}")
+          if [[ -z "${changes}" ]]; then
+            bail "changelog for ${version} has no body"
+          fi
+          printf '============== CHANGELOG ==============\n'
+          printf '%s\n' "${changes}"
+          printf '=======================================\n'
+
+          if [[ -n "${tags}" ]]; then
+            git -c color.ui=always diff "${changed_paths[@]}"
+            git add "${changed_paths[@]}"
+          fi
+          # Make sure that there is no unintended change.
+          git add -N .
+          git -c color.ui=always diff --exit-code
+
+          (
+            set -x
+            git show HEAD --shortstat
+          )
+        env:
+          VERSION: ${{ inputs.version }}
+          TAG_PREFIX: v
+          CHANGELOG: CHANGELOG.md
+          BRANCH: main
+    outputs:
+      has-tags: ${{ steps.check.outputs.has-tags }}
+      release-date: ${{ steps.check.outputs.release-date }}
+      rev: ${{ steps.check.outputs.rev }}
+      tag: ${{ steps.check.outputs.tag }}
+      version: ${{ steps.check.outputs.version }}
+
+  release:
+    if: github.repository_owner == 'taiki-e' && inputs.target == 'install-action'
+    needs: prepare
     runs-on: ubuntu-latest
     timeout-minutes: 60
     environment:
@@ -25,23 +219,232 @@ jobs:
       contents: write # for taiki-e/create-gh-release-action
     steps:
       - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/install-action@v2
+        with:
+          tool: parse-changelog
+          fallback: none
+      - name: Create and push release commit and tag
+        id: push
+        run: |
+          set +x
+          IFS=$'\n\t'
+          trap -- 's=$?; printf >&2 "%s\n" "${0##*/}:${LINENO}: \`${BASH_COMMAND}\` exit with ${s}"; exit ${s}' ERR
+          retry() {
+            for i in {1..10}; do
+              if "$@"; then
+                return 0
+              else
+                sleep "${i}"
+              fi
+            done
+            "$@"
+          }
+          bail() {
+            printf '::error::%s\n' "$*"
+            exit 1
+          }
+          if { sed --help 2>&1 || true; } | grep -Eq -e '-i extension'; then
+            in_place=(-i '')
+          else
+            in_place=(-i)
+          fi
+
+          git config user.name 'Taiki Endo'
+          git config user.email 'te316e89@gmail.com'
+
+          # shellcheck disable=SC2153
+          version="${VERSION}"
+          # shellcheck disable=SC2153
+          tag="${TAG}"
+          # shellcheck disable=SC2153
+          changelog="${CHANGELOG}"
+          # shellcheck disable=SC2153
+          release_date="${RELEASE_DATE}"
+
+          # Make sure the current revision is same as prepare step.
+          # --unshallow is necessary to successfully push the
+          # "releases/${major_version_tag}" branch in the subsequent step.
+          retry git fetch origin --unshallow &>/dev/null
+          rev=$(git rev-parse HEAD)
+          if [[ "${rev}" != "${PREPARE_REV}" ]]; then
+            bail "revision difference between prepare step"
+          fi
+
+          # Make sure the same release has not been created in the past.
+          if gh release view "${tag}" &>/dev/null; then
+            bail "tag '${tag}' has already been created and pushed"
+          fi
+          # Make sure that the release was created from an allowed branch.
+          if ! git branch | grep -Eq '\* '"${BRANCH}"'$'; then
+            bail "current branch is not '${BRANCH}'"
+          fi
+
+          changed_paths=()
+          if [[ "${HAS_TAGS}" == "true" ]]; then
+            # Update changelog.
+            changed_paths+=("${changelog}")
+            remote_url=$(grep -E '^\[Unreleased\]: https://' "${changelog}" | sed -E 's/^\[Unreleased\]: //; s/\.\.\.HEAD$//')
+            prev_tag="${remote_url#*/compare/}"
+            remote_url="${remote_url%/compare/*}"
+            sed -E "${in_place[@]}" \
+              -e "s/^## \\[Unreleased\\]/## [Unreleased]\\n\\n## [${version}] - ${release_date}/" \
+              -e "s#^\[Unreleased\]: https://.*#[Unreleased]: ${remote_url}/compare/${tag}...HEAD\\n[${version}]: ${remote_url}/compare/${prev_tag}...${tag}#" "${changelog}"
+            if ! grep -Eq "^## \\[${version//./\\.}\\] - ${release_date}$" "${changelog}"; then
+              bail "failed to update ${changelog}"
+            fi
+            if ! grep -Eq "^\\[${version//./\\.}\\]: " "${changelog}"; then
+              bail "failed to update ${changelog}"
+            fi
+          fi
+          changes=$(parse-changelog "${changelog}" "${version}")
+          printf '============== CHANGELOG ==============\n'
+          printf '%s\n' "${changes}"
+          printf '=======================================\n'
+
+          if [[ "${HAS_TAGS}" == "true" ]]; then
+            # Create a release commit.
+            (
+              set -x
+              git add "${changed_paths[@]}"
+              git commit -m "Release ${version}"
+            )
+          fi
+
+          prev_credential_helper=$(git config get --global credential.helper || true)
+          if [[ -n "${prev_credential_helper}" ]]; then
+            printf 'credential helper is already set (%s)\n' "${prev_credential_helper}"
+          else
+            (
+              set -x
+              git config --global credential.helper store
+            )
+            protocol="${GITHUB_SERVER_URL%%://*}"
+            hostname="${GITHUB_SERVER_URL#*://}"
+            printf '%s\n' "${protocol}://${GITHUB_ACTOR}:${PUSH_TOKEN}@${hostname}" >~/.git-credentials
+            # Remove credential helper config on exit.
+            trap -- '(set -x; rm -f -- ~/.git-credentials; git config --global --unset credential.helper || true)' EXIT
+          fi
+
+          (
+            set -x
+            git tag "${tag}"
+            retry git push origin HEAD
+
+            major_version_tag="v${version%%.*}"
+            git branch "releases/${major_version_tag}"
+            git tag -f "${major_version_tag}"
+            refs=("refs/tags/${tag}" "refs/heads/releases/${major_version_tag}" "+refs/tags/${major_version_tag}")
+
+            tools=()
+            for tool in tools/codegen/base/*.json; do
+              tool="${tool##*/}"
+              tools+=("${tool%.*}")
+            done
+            # Aliases.
+            # NB: Update case for aliases in main.sh, tool input option in test-alias job
+            # in .github/workflows/ci.yml, and match for alias for tools/codegen/src/tools-markdown.rs.
+            tools+=(
+              nextest
+              taplo-cli
+              typos-cli
+              wasm-bindgen-cli
+              wasmtime-cli
+            )
+            # Non-manifest-based tools.
+            tools+=(valgrind)
+
+            branches=()
+            for tool in "${tools[@]}"; do
+              git checkout -b "releases/${tool}"
+              sed -E "${in_place[@]}" action.yml \
+                -e "s/required: true/required: false/g" \
+                -e "s/# default: #publish:tool/default: ${tool}/g"
+              git add action.yml
+              git commit -m "${tool}"
+              git tag -f "${tool}"
+              git checkout refs/tags/"${tag}"
+              refs+=("+refs/heads/releases/${tool}" "+refs/tags/${tool}")
+              branches+=("releases/${tool}")
+            done
+
+            retry git push origin --atomic "${refs[@]}"
+            git branch -d "releases/${major_version_tag}"
+            git branch -D "${branches[@]}"
+
+            schema_workspace=/tmp/workspace
+            rm -rf -- "${schema_workspace}"
+            # Checkout manifest-schema branch
+            schema_version="$(cargo metadata --format-version=1 --no-deps | jq -r '.packages[] | select(.name == "install-action-manifest-schema") | .version')"
+            if [[ "${schema_version}" == "0."* ]]; then
+              schema_version="0.$(cut -d. -f2 <<<"${schema_version}")"
+            else
+              schema_version="$(cut -d. -f1 <<<"${schema_version}")"
+            fi
+            schema_branch="manifest-schema-${schema_version}"
+
+            git worktree add --force "${schema_workspace}"
+            (
+              cd -- "${schema_workspace}"
+              if git fetch origin "${schema_branch}"; then
+                git checkout "origin/${schema_branch}" -B "${schema_branch}"
+              elif ! git checkout "${schema_branch}"; then
+                # New branch with no history. Credit: https://stackoverflow.com/a/13969482
+                git checkout --orphan "${schema_branch}"
+                git rm -rf -- . || true
+                git commit -m 'Initial commit' --allow-empty
+              fi
+            )
+
+            # Copy over schema
+            cp -- ./manifests/* "${schema_workspace}"
+
+            (
+              cd -- "${schema_workspace}"
+              # Stage changes
+              git add .
+              # Detect changes, then commit and push if changes exist
+              if [[ "$(git status --porcelain=v1 | LC_ALL=C wc -l)" != "0" ]]; then
+                git commit -m 'Update manifest schema'
+                retry git push origin HEAD
+              fi
+            )
+
+            rm -rf -- "${schema_workspace}"
+            git worktree prune
+            # TODO: get branch in schema_workspace dir instead
+            git branch -D "${schema_branch}" "${schema_workspace##*/}"
+          )
+        env:
+          VERSION: ${{ needs.prepare.outputs.version }}
+          RELEASE_DATE: ${{ needs.prepare.outputs.release-date }}
+          HAS_TAGS: ${{ needs.prepare.outputs.has-tags }}
+          TAG: ${{ needs.prepare.outputs.tag }}
+          CHANGELOG: CHANGELOG.md
+          BRANCH: main
+          PREPARE_REV: ${{ needs.prepare.outputs.rev }}
+          # Note that if we use secrets.GITHUB_TOKEN, the pushed commit/tag cannot trigger other workflows.
+          PUSH_TOKEN: ${{ secrets.PUSH_TOKEN }}
       - uses: taiki-e/create-gh-release-action@v1
         with:
           changelog: CHANGELOG.md
           title: $version
-          branch: 'main|v[0-9]+'
+          branch: main
           token: ${{ secrets.GITHUB_TOKEN }}
+          ref: refs/tags/${{ needs.prepare.outputs.tag }}
 
-  create-release-manifest-schema:
-    if: github.repository_owner == 'taiki-e' && startsWith(github.ref_name, 'install-action-manifest-schema-')
-    # TODO: use new rust-release workflow
-    uses: taiki-e/github-actions/.github/workflows/create-release.yml@853cebf868aa2dce1470668df24176803e05adc8
+  release-manifest-schema:
+    if: github.repository_owner == 'taiki-e' && inputs.target == 'install-action-manifest-schema'
+    uses: taiki-e/github-actions/.github/workflows/rust-release.yml@main
+    permissions:
+      contents: write # for taiki-e/create-gh-release-action
+      id-token: write # for rust-lang/crates-io-auth-action
+      attestations: write # unused (used when options for uploading binaries are set)
+    secrets:
+      PUSH_TOKEN: ${{ secrets.PUSH_TOKEN }}
     with:
+      version: ${{ inputs.version }}
+      tag-prefix: install-action-manifest-schema-
       crates: tools/manifest-schema
       changelog: tools/manifest-schema/CHANGELOG.md
       title: $prefix $version
       prefix: install-action-manifest-schema
-    permissions:
-      contents: write # for taiki-e/create-gh-release-action
-      id-token: write # for rust-lang/crates-io-auth-action
-    secrets: inherit

.github/zizmor.yml

@@ -2,10 +2,8 @@
 # https://docs.zizmor.sh/configuration/
 
 rules:
-  dependabot-cooldown: { disable: true } # Unless dependencies are pinned/locked, the effect is limited.
-  secrets-inherit: { disable: true }
+  anonymous-definition: { disable: true }
   unpinned-uses:
     config:
       policies:
         taiki-e/*: any
-        '*': ref-pin

CHANGELOG.md

@@ -10,6 +10,78 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [2.70.2] - 2026-03-30
+
+- Update `vacuum@latest` to 0.25.3.
+
+- Update `tombi@latest` to 0.9.11.
+
+## [2.70.1] - 2026-03-29
+
+- Update `cargo-insta@latest` to 1.47.1.
+
+- Update `cargo-binstall@latest` to 1.17.9.
+
+- Update `tombi@latest` to 0.9.10.
+
+## [2.70.0] - 2026-03-28
+
+- Install `uv`, `uvw` (Windows-only), and `uvx` binaries when installing `uv`. Previously, only `uv` binary was installed. ([#1632](https://github.com/taiki-e/install-action/pull/1632))
+
+## [2.69.14] - 2026-03-28
+
+- Update `just@latest` to 1.48.1.
+
+- Update `wasm-bindgen@latest` to 0.2.115.
+
+## [2.69.13] - 2026-03-27
+
+- Update `mise@latest` to 2026.3.17.
+
+- Update `cargo-insta@latest` to 1.47.0.
+
+## [2.69.12] - 2026-03-27
+
+- Update `uv@latest` to 0.11.2.
+
+## [2.69.11] - 2026-03-26
+
+- Update `dprint@latest` to 0.53.1.
+
+- Update `mise@latest` to 2026.3.16.
+
+## [2.69.10] - 2026-03-25
+
+- Update `biome@latest` to 2.4.9.
+
+- Update `mise@latest` to 2026.3.15.
+
+## [2.69.9] - 2026-03-25
+
+- Update `uv@latest` to 0.11.1.
+
+- Update `osv-scanner@latest` to 2.3.5.
+
+- Update `mise@latest` to 2026.3.14.
+
+## [2.69.8] - 2026-03-24
+
+- Update `just@latest` to 1.48.0.
+
+- Update `uv@latest` to 0.11.0.
+
+- Update `rclone@latest` to 1.73.3.
+
+- Update `mise@latest` to 2026.3.13.
+
+## [2.69.7] - 2026-03-23
+
+- Update `prek@latest` to 0.3.8.
+
+- Update `mise@latest` to 2026.3.12.
+
+- Update `cargo-valgrind@latest` to 2.4.1.
+
 ## [2.69.6] - 2026-03-21
 
 - Support signature verification for `mise` and `syft`. ([#1611](https://github.com/taiki-e/install-action/pull/1611))
@@ -5999,7 +6071,18 @@ Note: This release is considered a breaking change because installing on version
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.69.6...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.70.2...HEAD
+[2.70.2]: https://github.com/taiki-e/install-action/compare/v2.70.1...v2.70.2
+[2.70.1]: https://github.com/taiki-e/install-action/compare/v2.70.0...v2.70.1
+[2.70.0]: https://github.com/taiki-e/install-action/compare/v2.69.14...v2.70.0
+[2.69.14]: https://github.com/taiki-e/install-action/compare/v2.69.13...v2.69.14
+[2.69.13]: https://github.com/taiki-e/install-action/compare/v2.69.12...v2.69.13
+[2.69.12]: https://github.com/taiki-e/install-action/compare/v2.69.11...v2.69.12
+[2.69.11]: https://github.com/taiki-e/install-action/compare/v2.69.10...v2.69.11
+[2.69.10]: https://github.com/taiki-e/install-action/compare/v2.69.9...v2.69.10
+[2.69.9]: https://github.com/taiki-e/install-action/compare/v2.69.8...v2.69.9
+[2.69.8]: https://github.com/taiki-e/install-action/compare/v2.69.7...v2.69.8
+[2.69.7]: https://github.com/taiki-e/install-action/compare/v2.69.6...v2.69.7
 [2.69.6]: https://github.com/taiki-e/install-action/compare/v2.69.5...v2.69.6
 [2.69.5]: https://github.com/taiki-e/install-action/compare/v2.69.4...v2.69.5
 [2.69.4]: https://github.com/taiki-e/install-action/compare/v2.69.3...v2.69.4

main.sh

@@ -56,7 +56,7 @@ download_and_checksum() {
     checksum=''
   fi
   info "downloading ${url}"
-  retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 "${url}" -o tmp
+  retry curl --proto '=https' --tlsv1.2 -fsSL "${url}" -o tmp
   if [[ -n "${checksum}" ]]; then
     info "verifying sha256 checksum for $(basename -- "${url}")"
     if type -P sha256sum >/dev/null; then
@@ -179,7 +179,7 @@ download_and_extract() {
     else
       case "${url}" in
         *.zip)
-          unzip -q tmp "${bin_in_archive#\./}"
+          unzip -q tmp
           for tmp in "${bin_in_archive[@]}"; do
             case "${tool}" in
               editorconfig-checker) mv -- "${tmp}" "${bin_dir}/${tool}${exe}" ;;
@@ -233,7 +233,7 @@ read_manifest() {
       # TODO: don't hardcode tool name and use 'immediate_yank_reflection' field in base manifest.
       case "${tool}" in
         cargo-nextest)
-          crate_info=$(curl -v --user-agent "${ACTION_USER_AGENT}" --proto '=https' --tlsv1.2 -fsSL --retry 10 "https://crates.io/api/v1/crates/${rust_crate}" || true)
+          crate_info=$(retry curl --user-agent "${ACTION_USER_AGENT}" --proto '=https' --tlsv1.2 -fsSL "https://crates.io/api/v1/crates/${rust_crate}" || true)
           if [[ -n "${crate_info}" ]]; then
             while true; do
               yanked=$(jq -r ".versions[] | select(.num == \"${exact_version}\") | .yanked" <<<"${crate_info}")
@@ -763,7 +763,7 @@ for tool in "${tools[@]}"; do
       ;;
     *)
       # Handle aliases.
-      # NB: Update alias list in tools/publish.rs, tool input option in test-alias in .github/workflows/ci.yml,
+      # NB: Update alias list in .github/workflows/release.yml, tool input option in test-alias in .github/workflows/ci.yml,
       # and match for alias for tools/codegen/src/tools-markdown.rs.
       # TODO(codegen): auto-detect cases where crate name and tool name are different.
       case "${tool}" in

manifests/biome.json

@@ -3,13 +3,51 @@
   "template": null,
   "license_markdown": "[Apache-2.0](https://github.com/biomejs/biome/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/biomejs/biome/blob/main/LICENSE-MIT)",
   "latest": {
-    "version": "2.4.8"
+    "version": "2.4.9"
   },
   "2": {
-    "version": "2.4.8"
+    "version": "2.4.9"
   },
   "2.4": {
-    "version": "2.4.8"
+    "version": "2.4.9"
+  },
+  "2.4.9": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.9/biome-linux-x64-musl",
+      "etag": "0x8DE8A6B77551800",
+      "hash": "fe2fd12c1e0b84f7e91d1357ed5ff1ebc8325b21bcf31935d3722fb3ae77889a",
+      "bin": "biome"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.9/biome-darwin-x64",
+      "etag": "0x8DE8A6B77782FF8",
+      "hash": "f5b7e584d1e993157638ce2d32335dbe754c4be94c4774f43aaf569918161c15",
+      "bin": "biome"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.9/biome-win32-x64.exe",
+      "etag": "0x8DE8A6B77E6A243",
+      "hash": "b33519e33e6807e37d57767f7c49fc8fe5205819d267924a8fe8a20d7ce296cf",
+      "bin": "biome.exe"
+    },
+    "aarch64_linux_musl": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.9/biome-linux-arm64-musl",
+      "etag": "0x8DE8A6B77627675",
+      "hash": "5a4040483af06396d5c687e03d2a7f1c6a4e1ca97a3d765c6beee4532debdd88",
+      "bin": "biome"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.9/biome-darwin-arm64",
+      "etag": "0x8DE8A6B77476BBF",
+      "hash": "8d40e92275fcbaf0a157b5146f71b8c71ce61e50102ac4385170022e76938d85",
+      "bin": "biome"
+    },
+    "aarch64_windows": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.9/biome-win32-arm64.exe",
+      "etag": "0x8DE8A6B77737A54",
+      "hash": "975f30393b2914d66e0d54eac9573dd27704922a8361c462cbb0521543f67691",
+      "bin": "biome.exe"
+    }
   },
   "2.4.8": {
     "x86_64_linux_musl": {

manifests/cargo-binstall.json

@@ -22,32 +22,32 @@
   },
   "license_markdown": "[GPL-3.0](https://github.com/cargo-bins/cargo-binstall/blob/HEAD/crates/bin/LICENSE)",
   "latest": {
-    "version": "1.17.8"
+    "version": "1.17.9"
   },
-  "1.17.8": {
+  "1.17.9": {
     "x86_64_linux_musl": {
-      "etag": "0x8DE8715DB8A1417",
-      "hash": "1da1ef72448db667cc4ae6d48e37451087602c8c07dc61782a4a5e538303e015"
+      "etag": "0x8DE8D54CBD7C8ED",
+      "hash": "bdea3fd820b118576316bf69c8240f454857287717809e6ecef010faace901ff"
     },
     "x86_64_macos": {
-      "etag": "0x8DE8715E03D9720",
-      "hash": "db353e01b582c97382178db9b4dfe22d81109782e480a38f3db953e62f569952"
+      "etag": "0x8DE8D54D0C7EA49",
+      "hash": "1d4fbd74c15274a029dd92e19a0ead8e1831b6e6b60f0f5c3690ef517022c41c"
     },
     "x86_64_windows": {
-      "etag": "0x8DE8715DEAA171B",
-      "hash": "fef07560d4e391812091bb30c6ed1bd5289f74403a0c947b47b8a8c7a597b51b"
+      "etag": "0x8DE8D54CF270B9E",
+      "hash": "d17b413a19592af2cf57f9f742d49bef8837099e1407d73e79de5bc7834c4fd6"
     },
     "aarch64_linux_musl": {
-      "etag": "0x8DE8715E6784BD0",
-      "hash": "81d6245bd1a7a89e914d29af81d82280540e94927e61492a0fc359820cd97abb"
+      "etag": "0x8DE8D54D9B48785",
+      "hash": "89df253cc00a307209daee7648272bba4d8a342fce084d5922f6b3f4e4db0e25"
     },
     "aarch64_macos": {
-      "etag": "0x8DE8715EBEC4A3F",
-      "hash": "af87346fdb186f0a2333bc0a30cfddd6faa98b31145ef1bb19c284aedea65972"
+      "etag": "0x8DE8D54DF4E885F",
+      "hash": "021d537caa2071bbcd8ec50b210ea45af68a6983cca7780918b3603ef68d2585"
     },
     "aarch64_windows": {
-      "etag": "0x8DE8715EA179DDA",
-      "hash": "2270a5a7a8b3e85bd5fe32ac3fbd48cfd32d6f468a8c35499af8b65b806d271d"
+      "etag": "0x8DE8D54DD746155",
+      "hash": "37295aa1c3aed07bda2b757f613477c8ca2de1208ec360c7d00238b6886de780"
     }
   }
 }

manifests/cargo-insta.json

@@ -20,10 +20,49 @@
   },
   "license_markdown": "[Apache-2.0](https://github.com/mitsuhiko/insta/blob/master/LICENSE)",
   "latest": {
-    "version": "1.46.3"
+    "version": "1.47.1"
   },
   "1": {
-    "version": "1.46.3"
+    "version": "1.47.1"
+  },
+  "1.47": {
+    "version": "1.47.1"
+  },
+  "1.47.1": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8D549F25E618",
+      "hash": "b5c162d25f477f0a7989edc5b82297a63c69d764c3c6f2839f12a546a00c188a"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8D549EDE5832",
+      "hash": "3197c099ca857e36211b7b10d383404f305e036181ca2cb42495c8d08e4dcc86"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8D549EF37620",
+      "hash": "7d6cad4a8768abc2bda8f0ea244f51ae077d426e6e7bc6561503876b4eba18e8"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8D549ED08513",
+      "hash": "b92971f37be1e22401de1187ee842a7e15f936838bdce06fb9d3582dd538efa7"
+    }
+  },
+  "1.47.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8B9FBE3D26E2",
+      "hash": "fcd8a57fb21e5446c12002c0f967e7630a9e4f317814427dbf35faff3797c1d9"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8B9FBDBE4C61",
+      "hash": "55db1160ab8db370d3a03491a291f04e52837b4bea13b2919068a10700b085b2"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8B9FBDFA9C5D",
+      "hash": "ecdab0fe43537a15ef6bd4628d91cddd3c26ddb3fd60f9c89d5d40904139649e"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8B9FBDB8AD65",
+      "hash": "579f62ab41187c8494ca8572b4d0db51e0c9b9275064758999b27fc900c9c60c"
+    }
   },
   "1.46": {
     "version": "1.46.3"

manifests/cargo-valgrind.json

@@ -13,13 +13,27 @@
   },
   "license_markdown": "[MIT](https://github.com/jfrimmel/cargo-valgrind/blob/master/LICENSE-MIT) OR [Apache-2.0](https://github.com/jfrimmel/cargo-valgrind/blob/master/LICENSE-APACHE)",
   "latest": {
-    "version": "2.4.0"
+    "version": "2.4.1"
   },
   "2": {
-    "version": "2.4.0"
+    "version": "2.4.1"
   },
   "2.4": {
-    "version": "2.4.0"
+    "version": "2.4.1"
+  },
+  "2.4.1": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE88031FA217E4",
+      "hash": "85f0aba2bdde0d30bafa814a02229a56fd63b27623c25dfba57f49c40eeda762"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE88031F98D375",
+      "hash": "80b1477c1eb35410b40b842aa655b37233416f9cad86f6a11c6107b8b97ddc22"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE88031F98D375",
+      "hash": "c9f36f03de6ae0cb773b3796f4dd738ebb85e00a59c1cb72bec49a267d83c5cf"
+    }
   },
   "2.4.0": {
     "x86_64_linux_musl": {

manifests/dprint.json

@@ -28,10 +28,36 @@
   },
   "license_markdown": "[MIT](https://github.com/dprint/dprint/blob/main/LICENSE)",
   "latest": {
-    "version": "0.53.0"
+    "version": "0.53.1"
   },
   "0.53": {
-    "version": "0.53.0"
+    "version": "0.53.1"
+  },
+  "0.53.1": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8B3F9B6F4770",
+      "hash": "f2815a5c217bb63ff54356c4a6e1e5393a126b29c46116ae57a08ec97c29cb85"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8B3F9B08E273",
+      "hash": "b35e91afe0f7f2217128b8edcebd63d789b00f9c1b0300e4907a115106d857fd"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8B3F9B1F10A2",
+      "hash": "db21e2f7a09dc9b3a2fbe2faac34a9f0733a4cc3cb8c78dd13dae6f081e13d4c"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8B3F9B268256",
+      "hash": "559cbd7aff707d461627c46f817cd06c28828458ef4a21eb18801f588bc94e89"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8B3F9B08E273",
+      "hash": "4c822f9d4c692b0f0cd53d14bc82057488e1c4db2df1122b1aceb0a660795ac8"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE8B3F9B259909",
+      "hash": "035c6e63d47b68f86b859dca7628cdb5006737b8b472df64cb51036594dd7247"
+    }
   },
   "0.53.0": {
     "x86_64_linux_musl": {

manifests/just.json

@@ -22,10 +22,65 @@
   },
   "license_markdown": "[CC0-1.0](https://github.com/casey/just/blob/master/LICENSE)",
   "latest": {
-    "version": "1.47.1"
+    "version": "1.48.1"
   },
   "1": {
-    "version": "1.47.1"
+    "version": "1.48.1"
+  },
+  "1.48": {
+    "version": "1.48.1"
+  },
+  "1.48.1": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8C6D748DA58F",
+      "hash": "9293e553ce401d1b524bf4e104918f72f268e3f9c6827e0055fe98d84a1b2522"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8C6D697B40B5",
+      "hash": "4c3e9c880b8fc93d7fc24abfde3c36b0cc59f6e9f8b31f7175095700f64125a7"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8C6DC96FB40D",
+      "hash": "368cd9ca827cba04d9e6fc00f7ad840773c4605b6f64b9f87bdb00325d351029"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8C6D791ED527",
+      "hash": "3308721b991cf88cf2b9bbb3b31ac40550ec61a0c9b6fc011564e25e87964030"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8C6D73E04DFD",
+      "hash": "03a73339ff55bcf7411a3c940cdcb0a726d98134b87203c83a9008575434e2a8"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8C6DB1FA1AAD",
+      "hash": "ed9cd54e46d65770bf0b79c051761b29f0b89a88e56e8cae4454ec7246c82160"
+    }
+  },
+  "1.48.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE893FDA35D240",
+      "hash": "a62e100de2922519ff3d6128f580837b4c0e197aa61a6fb448f43e50e7dd9b9b"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE893FD7207196",
+      "hash": "9c4a018665ede3167db8210a6c846e59b675ecce71a35d2f802035fbc9199627"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE89405E00E226",
+      "hash": "06000d1e1f97155c6dff316f20fad029aa70f69c4ecbe2fbe5b821d9bb79aef0"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE893FE55F2345",
+      "hash": "3c28914f0059161bc263c41db0ed3f786866cfb9632d1ee7809f529c8f18835e"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE893FEEDF61A3",
+      "hash": "507edd5cbe97e13f048f650e52ae6cf3fd6c7464b18abe64fb01eca1bd65f8a2"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE894023163D15",
+      "hash": "5fc53507e86334e3f0111b674c72fbcf7d9c53fe6a0f5d7dc6c6afc8903d44b2"
+    }
   },
   "1.47": {
     "version": "1.47.1"

manifests/mise.json

@@ -28,13 +28,169 @@
   },
   "license_markdown": "[MIT](https://github.com/jdx/mise/blob/main/LICENSE)",
   "latest": {
-    "version": "2026.3.10"
+    "version": "2026.3.17"
   },
   "2026": {
-    "version": "2026.3.10"
+    "version": "2026.3.17"
   },
   "2026.3": {
-    "version": "2026.3.10"
+    "version": "2026.3.17"
+  },
+  "2026.3.17": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8BF1812CA605",
+      "hash": "f416a2d27f69173b22551429d2bc712c40fc3fb639112cf76ae817baae3772e2"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8BF1834954DF",
+      "hash": "bd120908c1476f6f27ae27f4214bdbc3fb0e81b9671aaba720b994a217d28e39"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8BF1841058BD",
+      "hash": "a5e0a77fe5ac6397d6bd3413b6c9b39ac06f24649a88eed526173062960f7b85"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8BF17E0B455B",
+      "hash": "7ef20440c3e1d9f0db69e57e68e6833a9cade44fd1e97384a279660e48091f97"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8BF18293F06F",
+      "hash": "6d98cedb9c92bd7a1694c9efedc035288da87f6e19c79d15bf91449474c37ce9"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8BF183D566EE",
+      "hash": "98772d1d68d23e8f1040c62501bcd0d136cf2db3b995a5e7b6f77aca93aef060"
+    }
+  },
+  "2026.3.16": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8B299B139FB6",
+      "hash": "7b10cc988cdfdc434791a6102bdc18edbd1909243e05ed5a37ddc12c9ed53167"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8B299E855DE3",
+      "hash": "a6f6f320b547dec3eff321e301fa05268dfc73a620d35ec3292603fbab1c4c29"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8B299F39B21C",
+      "hash": "a7b6aaa23804418799d5d33e77e1d08144fec0efadcc38d138b68eaa214080f5"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8B2995D2AD4D",
+      "hash": "1d33037f6eb3c6e67b62e951825764836b530213b8acce8667ab2c2bcf3775e9"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8B299D508381",
+      "hash": "9d6e2bfea3e00ffb566ad1a369914cb029c32a28eb4b699e8655cf3c3d4ef87e"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8B299EFE726F",
+      "hash": "f6293578bae263614c8af6c1664bd4c28f741f902f45bcbdad922bee6d04d7e6"
+    }
+  },
+  "2026.3.15": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8A614808BB17",
+      "hash": "4e70734eeef3e664f1616be83ed0d2ee6114ecd10539ca6abdb1f6d66c29559d"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8A614A5EFDC6",
+      "hash": "4dbc8750ce3833050321b0c0deb61db7fc76681aa958df6786b999b588e42d1d"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8A614AD83926",
+      "hash": "ad1229ef84f664bc8a1a6b3fb96245ce29cb6f735ab6f512a12573a95ab53d6f"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8A61442166F3",
+      "hash": "25d1f0d880e47f7478d93ee0e8344e25b7eb9cbd841ddb6231836c9ff86868bc"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8A6149A11766",
+      "hash": "e500c437e4b8679b4c65e91925f86c17e6be76d0e218012bd40ec695ae4cf78e"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8A614AC8BA38",
+      "hash": "cab591781d7d3e2cba9b719a2e9c525424d4bafda0b52e091bc0f4a4d3953a8f"
+    }
+  },
+  "2026.3.14": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE89F2A845625B",
+      "hash": "b34d9179dcf3622b9aa1aa9c4d8361cce743314612b11bf62fa8589a4d52a5db"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE89F2ABB3F018",
+      "hash": "8ab0deb1e839b9a12b6520fe7e7377523de2140811baa90b98aef27cfe2ffc32"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE89F2ACEC2233",
+      "hash": "fc91b0b301dc4d2f914afb6f71ef46b01eee47ba1f5ec1084413c2e197480509"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE89F2A3C1BA78",
+      "hash": "42c80e03ac14591a9fc73864da0b46e9529822c84e0b6d7834fc65d5fe3ff1f7"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE89F2AA7AFB84",
+      "hash": "dd9296e67a58cd119dba83e8ed4c6c4d566ae94827c4ee4a24c7b7001f6054ec"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE89F2AC9479C3",
+      "hash": "7c3bddf4ef2206ef08aa0e73426f6619ea5ccd7f0d92dfafb6ff482a88e14dde"
+    }
+  },
+  "2026.3.13": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE88EB0574D86B",
+      "hash": "2b409c40dc02bd3b1ba4061760aa81f3b4734fa7d7de8c5e1db4c6ca5ede70d8"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE88EB09453B8C",
+      "hash": "af5610f5abbc67581d04559f65ea2afbf04c5a15d1eef1eb27ca985f52424153"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE88EB09D4CBF0",
+      "hash": "8879a21bdaab28f52f8981a452cb67c83de9cac863eabe878574076f986ad6ba"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE88EAFF42F4FF",
+      "hash": "d98665273a14eb2c599ec0fc66f4a5e6ac0b9fad624d55d8a32b7dc9017693c5"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE88EB07D092EF",
+      "hash": "14de0cc332f4effae9c06e201b32adc17368a169485ce1cbfa2e25c3a006d6a7"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE88EB09C2DEBC",
+      "hash": "f55ce0e157606ae20c3ea5f91c7b8c5390888bb00143d043ed58131c89161f5d"
+    }
+  },
+  "2026.3.12": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE886122F1FBF4",
+      "hash": "b6bdc23b08bccfcc77b61d35b286e20de1e0192447e8fda64b2bf60c5328b452"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE88612512C4AA",
+      "hash": "4f65f7f72c14641ad78670ec2c403d3eb9a4681e2fa064385e80a22a109bfe2c"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE886125F154A2",
+      "hash": "528d5f9bfabb8eae06964c0e112f9711a4af4315bfed96f6f50b6c4b67ec6f37"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE88611FFB72E8",
+      "hash": "c27dd6a06053f6884c3f46763b64ef9c5e95fac7a9af89edea087b13cc68c521"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE88612449EE2B",
+      "hash": "c9622be7ea2badc7bf3501cd9b5600e0bf993bf33c162844a4a6d79a2209e1f8"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8861257AFC36",
+      "hash": "a65bea150a477f21faa62e24d45f811d2ede69da20aac43ad17ef3134bc516f4"
+    }
   },
   "2026.3.10": {
     "x86_64_linux_musl": {

manifests/osv-scanner.json

@@ -3,13 +3,45 @@
   "template": null,
   "license_markdown": "[Apache-2.0](https://github.com/google/osv-scanner/blob/main/LICENSE)",
   "latest": {
-    "version": "2.3.3"
+    "version": "2.3.5"
   },
   "2": {
-    "version": "2.3.3"
+    "version": "2.3.5"
   },
   "2.3": {
-    "version": "2.3.3"
+    "version": "2.3.5"
+  },
+  "2.3.5": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.3.5/osv-scanner_linux_amd64",
+      "etag": "0x8DE896B96DE50D8",
+      "hash": "bb30c580afe5e757d3e959f4afd08a4795ea505ef84c46962b9a738aa573b41b"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.3.5/osv-scanner_darwin_amd64",
+      "etag": "0x8DE896B96B9DA4A",
+      "hash": "3b1c72d59dcbad99fa4eb2c72bf2e82017f83e0268340e4b00af76a1fea32c85"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.3.5/osv-scanner_windows_amd64.exe",
+      "etag": "0x8DE896B94AF3EDE",
+      "hash": "b165d33c08bda663119a459f5187e096d2525f888503495f5f34925741e981a2"
+    },
+    "aarch64_linux_musl": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.3.5/osv-scanner_linux_arm64",
+      "etag": "0x8DE896B94B77302",
+      "hash": "fa46ad2b3954db5d5335303d45de921613393285d9a93c140b63b40e35e9ce50"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.3.5/osv-scanner_darwin_arm64",
+      "etag": "0x8DE896B94F4856E",
+      "hash": "b740efe0b08fb817865e818a498997d5f042f14b8eeafb6393176ce84dd09cf6"
+    },
+    "aarch64_windows": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.3.5/osv-scanner_windows_arm64.exe",
+      "etag": "0x8DE896B94B1AD12",
+      "hash": "a3d2ffa712fd2376e88a02c98b917a87885c761d0d21980b8f5eabfb910cbcb8"
+    }
   },
   "2.3.3": {
     "x86_64_linux_musl": {

manifests/prek.json

@@ -40,10 +40,44 @@
   },
   "license_markdown": "[MIT](https://github.com/j178/prek/blob/master/LICENSE)",
   "latest": {
-    "version": "0.3.6"
+    "version": "0.3.8"
   },
   "0.3": {
-    "version": "0.3.6"
+    "version": "0.3.8"
+  },
+  "0.3.8": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE88B58DEC3E03",
+      "hash": "732cfb03960e6dfd5df2cb67906797aa8831750ef3a6f6340ec2b90ee8b7a59f"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE88B58D79B1EF",
+      "hash": "010198daf4e99a76d03a911973320542ffd7a04091cf7e86c60ac861187577f6"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE88B58DA4B02B",
+      "hash": "1da2735c31548dacd2751f90c15b5f643aa72f3053f366636f95153ee2c7186e"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE88B58C3D8D01",
+      "hash": "b88d96aef4ea84999d12958c390611d3a26194ee57225fe2ff15a9855e3a71bf"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE88B58BFA193A",
+      "hash": "702fde4399fafb054ce85d0a64367689e3668b6475d732c4a46aae50cec0a4be"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE88B58BF4A12E",
+      "hash": "5ceb73fe9e18a987a498ced9b98a183d4110e3fdb534070d2d9911f860319e9f"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE88B58D4F0179",
+      "hash": "4c3677090f90f325b1f472e8b2db6f56647db794333ab0ee2656a91139ce9a27"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE88B58D875E2B",
+      "hash": "cec915a22e4385110e2de8498d14c199ce6936d03d9d8340d166c57071ac1de8"
+    }
   },
   "0.3.6": {
     "x86_64_linux_musl": {

manifests/rclone.json

@@ -28,13 +28,39 @@
   },
   "license_markdown": "[MIT](https://github.com/rclone/rclone/blob/master/COPYING)",
   "latest": {
-    "version": "1.73.2"
+    "version": "1.73.3"
   },
   "1": {
-    "version": "1.73.2"
+    "version": "1.73.3"
   },
   "1.73": {
-    "version": "1.73.2"
+    "version": "1.73.3"
+  },
+  "1.73.3": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE892EC705086A",
+      "hash": "70278c22b98c7d02aed01828b70053904dbce4c8a1a15d7781d836c6fdb036ea"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE892FB5F06D97",
+      "hash": "aaf209187baf40a4f6b732104121f81eedc0264aaa91186952ec3e78b82025b1"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE892FF61A990A",
+      "hash": "1c51142576194d124ffa9654f45bab972530da22a3a339509bf9bed399f9dea3"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE892EE33A9BF9",
+      "hash": "ed2a638b4cb15abe4f01d6d9c015f3a1cb41aa7a17c96db2725542c61f353b8e"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE892FBFE9C4F0",
+      "hash": "ef046e9facd10d1fb39d0ef865d7fab9b5c6ca1597ac7c9167f3aa0c7747393f"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE892FFEC4A4E3",
+      "hash": "1ecc1da556965f678909390e723e52a5d53fa783fe0a4f224cfa818697c7a6c5"
+    }
   },
   "1.73.2": {
     "x86_64_linux_musl": {

manifests/tombi.json

@@ -22,10 +22,62 @@
   },
   "license_markdown": "[MIT](https://github.com/tombi-toml/tombi/blob/main/LICENSE)",
   "latest": {
-    "version": "0.9.9"
+    "version": "0.9.11"
   },
   "0.9": {
-    "version": "0.9.9"
+    "version": "0.9.11"
+  },
+  "0.9.11": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8D9EC510FD7C",
+      "hash": "a26165a20198b7af772c1abafebac31fe70ea76de438cdc14975d451ef9282a3"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8D9EC4ABF6BC",
+      "hash": "80c70ef17dc76a0f997d8284911a178f90d4c3d04354eaa653b5dd3e15efff44"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8D9EC53C498A",
+      "hash": "f073c5aa5cfdf291023207a58390a4593b7774ccd8a49d12fdefa2d859285f95"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8D9EC4A89F22",
+      "hash": "1a4cdb63e5ab57d0eb12f170493a7902c3244572b6a3052ae894d06c082d4ddc"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8D9EC4AC1DA5",
+      "hash": "1c3b3335f3feeda3f7676d90ffb6463ee2bca5a5393b1bbae76926e3fdb2b514"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8D9EC4BA8C4E",
+      "hash": "85624e7e2f0bac43d8267c88a767afbb18ca338b72cf45c879046fc3a23a2e89"
+    }
+  },
+  "0.9.10": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8CEDFE4FEBC7",
+      "hash": "eddad889a7194e6b993015475ccd6303edb06f076b632b3a1b134936e280b103"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8CEDFECFAF7A",
+      "hash": "8421af429bec96ec09b621267d3ad505d202dc1ac8e3e5f2677dca0efa348395"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8CEDFE5E3394",
+      "hash": "f6a722ef9f1a5d3656338cf45f88a35aebd29d6bf045b1dd2e91d0dcb356a92e"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8CEDFE539126",
+      "hash": "5373de8f10af1e626bbedc2beb46fbc7dd8bb3ccd73517b45108e165469e69e6"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8CEDFE6E9BDE",
+      "hash": "1c7fcccf0c14d4c3189cfc405357f524b8db0ac7278bee434212f6c113070eb4"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8CEDFED8CCF3",
+      "hash": "e3a5ce5bb2f4071974250b27dd8cc9df76c1feaa1be7c5a7e814191d9999311f"
+    }
   },
   "0.9.9": {
     "x86_64_linux_musl": {

manifests/uv.json

@@ -1,46 +1,192 @@
 {
-  "rust_crate": null,
+  "rust_crate": "uv",
   "template": {
     "x86_64_linux_musl": {
       "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-x86_64-unknown-linux-musl.tar.gz",
-      "bin": "uv-x86_64-unknown-linux-musl/uv"
+      "bin": [
+        "uv-x86_64-unknown-linux-musl/uv",
+        "uv-x86_64-unknown-linux-musl/uvx"
+      ]
     },
     "x86_64_macos": {
       "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-x86_64-apple-darwin.tar.gz",
-      "bin": "uv-x86_64-apple-darwin/uv"
+      "bin": [
+        "uv-x86_64-apple-darwin/uv",
+        "uv-x86_64-apple-darwin/uvx"
+      ]
     },
     "x86_64_windows": {
       "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-x86_64-pc-windows-msvc.zip",
-      "bin": "uv.exe"
+      "bin": [
+        "uv.exe",
+        "uvw.exe",
+        "uvx.exe"
+      ]
     },
     "aarch64_linux_musl": {
       "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-aarch64-unknown-linux-musl.tar.gz",
-      "bin": "uv-aarch64-unknown-linux-musl/uv"
+      "bin": [
+        "uv-aarch64-unknown-linux-musl/uv",
+        "uv-aarch64-unknown-linux-musl/uvx"
+      ]
     },
     "aarch64_macos": {
       "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-aarch64-apple-darwin.tar.gz",
-      "bin": "uv-aarch64-apple-darwin/uv"
+      "bin": [
+        "uv-aarch64-apple-darwin/uv",
+        "uv-aarch64-apple-darwin/uvx"
+      ]
     },
     "aarch64_windows": {
       "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-aarch64-pc-windows-msvc.zip",
-      "bin": "uv.exe"
+      "bin": [
+        "uv.exe",
+        "uvw.exe",
+        "uvx.exe"
+      ]
     },
     "powerpc64le_linux_gnu": {
       "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-powerpc64le-unknown-linux-gnu.tar.gz",
-      "bin": "uv-powerpc64le-unknown-linux-gnu/uv"
+      "bin": [
+        "uv-powerpc64le-unknown-linux-gnu/uv",
+        "uv-powerpc64le-unknown-linux-gnu/uvx"
+      ]
     },
     "riscv64_linux_gnu": {
       "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-riscv64gc-unknown-linux-gnu.tar.gz",
-      "bin": "uv-riscv64gc-unknown-linux-gnu/uv"
+      "bin": [
+        "uv-riscv64gc-unknown-linux-gnu/uv",
+        "uv-riscv64gc-unknown-linux-gnu/uvx"
+      ]
     },
     "s390x_linux_gnu": {
       "url": "https://github.com/astral-sh/uv/releases/download/${version}/uv-s390x-unknown-linux-gnu.tar.gz",
-      "bin": "uv-s390x-unknown-linux-gnu/uv"
+      "bin": [
+        "uv-s390x-unknown-linux-gnu/uv",
+        "uv-s390x-unknown-linux-gnu/uvx"
+      ]
     }
   },
   "license_markdown": "[Apache-2.0](https://github.com/astral-sh/uv/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/astral-sh/uv/blob/main/LICENSE-MIT)",
   "latest": {
-    "version": "0.10.12"
+    "version": "0.11.2"
+  },
+  "0.11": {
+    "version": "0.11.2"
+  },
+  "0.11.2": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8B7F323A25EC",
+      "hash": "4700d9fc75734247587deb3e25dd2c6c24f4ac69e8fe91d6acad4a6013115c06"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8B7F31C027DB",
+      "hash": "a9c3653245031304c50dd60ac0301bf6c112e12c38c32302a71d4fa6a63ba2cb"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8B7F323790C2",
+      "hash": "171b7ccda1bbd562da6babeffcf533a1c6cc7862cf998da826e1db534fc43e48"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8B7F2F886D82",
+      "hash": "275d91dd1f1955136591e7ec5e1fa21e84d0d37ead7da7c35c3683df748d9855"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8B7F2EE6C8C0",
+      "hash": "4beaa9550f93ef7f0fc02f7c28c9c48cd61fe30db00f5ac8947e0a425c3fb282"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8B7F2F211F2C",
+      "hash": "ffdded8338205f53727b51d404563a5ac8eaa9aea53279a7b7c42177e11d478c"
+    },
+    "powerpc64le_linux_gnu": {
+      "etag": "0x8DE8B7F30FB6B17",
+      "hash": "3f3a50e99364efc8ff7add10e79757a2b8458700a38180ec5f313524481b9fbc"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE8B7F313C97AB",
+      "hash": "e56a93f0ff21d6908461a6ecbf465beae19ae22719f900284abb7680bd07ec41"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE8B7F3185D17B",
+      "hash": "42ebe40775f2a77a514fa47399fde86473bf35bd33b6896c6410a0309fc4d205"
+    }
+  },
+  "0.11.1": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE89FB8460A78F",
+      "hash": "4e949471a95b37088a1ff1a585f69abed4d3cd3f921f50709a46b6ba62986d38"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE89FB83BE673F",
+      "hash": "2103670e8e949605e51926c7b953923ff6f6befbfb55aee928f5e760c9c910f8"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE89FB83DC2E07",
+      "hash": "6659250cebbd3bb6ee48bcb21a3f0c6656450d63fb97f0f069bcb532bdb688ed"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE89FB817388B2",
+      "hash": "bd04ffce77ee8d77f39823c13606183581847c2f5dcd704f2ea0f15e376b1a27"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE89FB80F6A7B9",
+      "hash": "f7815f739ed5d0e4202e6292acedb8659b9ae7de663d07188d8c6cbd7f96303f"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE89FB8121316A",
+      "hash": "b789db0c1504dd3b02c090bd5783487497cc46cc2eb71754874cdd1ef59eb52a"
+    },
+    "powerpc64le_linux_gnu": {
+      "etag": "0x8DE89FB82F0DAD3",
+      "hash": "e42d2abfac46f57564789e2bfa6dbea4ae3135892e36ae066ba0ae77b69bb676"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE89FB8329D330",
+      "hash": "5e2c757b35dab015ad37f74ee3e060208390b5f4defb6684876f1be0664f3f6e"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE89FB838E8C5E",
+      "hash": "4208173c74e29572b799178709b5ed5828b24888659f944a4b47c0aaf78b42d2"
+    }
+  },
+  "0.11.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8928B52FBBAD",
+      "hash": "bf6b0757c73d1726faa2a819b155d4d864919a95766720215d78fdcd09d42d26"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8928B4D6406A",
+      "hash": "31aaec764166af8885cf99321fd6ed24fef80225a6f26ed1ae8ce04111688a7e"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8928B4E8A258",
+      "hash": "e21d00b172df83531564a95e75a2bdc0c59b471dbb3515f0c1b4d6ef657dc451"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8928B283EFC0",
+      "hash": "658be4b8ec905635f1295468d4d5120d9e1ab1722eec9a104473ce993590babe"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8928B1C32610",
+      "hash": "0c0f32c6a3473c5928aff96c3233715edfc79290e892f255cac93710cde7b91a"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8928B21C538F",
+      "hash": "95419e04a3ef5f13fb2a06bd6d787ba80a9d8981d6f097780e5a979817a2879d"
+    },
+    "powerpc64le_linux_gnu": {
+      "etag": "0x8DE8928B425DF0C",
+      "hash": "29f17fb43595492b1a36cda57df7adad74183132df32799d32897268ff4e26dd"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE8928B411AA71",
+      "hash": "84ef37dda1003c5b65fa6c8f84242d35a7fcc84cc5ea9490d702edc36cad1f67"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE8928B46BC14C",
+      "hash": "b25be62f3b642348a2fece5c658624586661b8d1103891ab6903768b0529edc4"
+    }
   },
   "0.10": {
     "version": "0.10.12"

manifests/vacuum.json

@@ -22,10 +22,36 @@
   },
   "license_markdown": "[MIT](https://github.com/daveshanley/vacuum/blob/main/LICENSE)",
   "latest": {
-    "version": "0.25.2"
+    "version": "0.25.3"
   },
   "0.25": {
-    "version": "0.25.2"
+    "version": "0.25.3"
+  },
+  "0.25.3": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8DEA35C78445",
+      "hash": "dbcd9ea50b0ac74c181d905a1d162e2457f8bbc619d0f8e974ff3b38dcd23384"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8DEA3675C50B",
+      "hash": "450964b9f2cbe9b63403bfe7b07cd2b3fb16eded4668c9e5749b9b469d288290"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8DEA35DB442D",
+      "hash": "00a1a230fe2dbd45ee11e579d7d8d00daf83fa83a083fd66044514fdfd73e993"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8DEA35C7AB2A",
+      "hash": "a2db87faa3e04c2e0f8b5dd2c9162a33829eda0a1196ed49e3562a1a9434d3e0"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8DEA367A7AB1",
+      "hash": "9ab96a00628c69c6aa4a62fcafb6d8cb8de792db94adb53c00344d19ff0c4af6"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8DEA36512824",
+      "hash": "ed70ee1e9af46ba69c79b8d4bddea59c0bcc37613f92d12a77fe327f4832089d"
+    }
   },
   "0.25.2": {
     "x86_64_linux_musl": {

manifests/wasm-bindgen.json

@@ -44,10 +44,32 @@
   },
   "license_markdown": "[MIT](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/LICENSE-MIT) OR [Apache-2.0](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/LICENSE-APACHE)",
   "latest": {
-    "version": "0.2.114"
+    "version": "0.2.115"
   },
   "0.2": {
-    "version": "0.2.114"
+    "version": "0.2.115"
+  },
+  "0.2.115": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8C5096D0CA3A",
+      "hash": "494df943e4e30a48ea2832e5a299e0e0f52d23f1e037b052cf401f467b820316"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8C5096BDCCC1",
+      "hash": "bc9ba4f200a7a7132b61a28d0fc93692caeb880c1547fb4369f18baa3285eb91"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8C5096A81344",
+      "hash": "370ebd36ffc110346956407793064e3d0b5e77c83ca69ef127a286a665d13636"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE8C5096CD7296",
+      "hash": "f4cc35232554e04d72b61158bcd314ef2b1aa28e7c45d7aad8e76eb01b42c299"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8C5096F6C51A",
+      "hash": "1184392b5468ca63b65f75f95f38110005aa168f6d9c39ca70c0585044d6508b"
+    }
   },
   "0.2.114": {
     "x86_64_linux_musl": {

tools/codegen/base/uv.json

@@ -2,6 +2,7 @@
   "repository": "https://github.com/astral-sh/uv",
   "license_markdown": "[Apache-2.0](https://github.com/astral-sh/uv/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/astral-sh/uv/blob/main/LICENSE-MIT)",
   "tag_prefix": "",
+  "rust_crate": "${package}",
   "version_range": ">= 0.8.16",
   "signing": {
     "version_range": ">= 0.9.13",
@@ -11,42 +12,26 @@
       }
     }
   },
+  "asset_name": "${package}-${rust_target}.tar.gz",
+  "bin": [
+    "${package}-${rust_target}/${package}${exe}",
+    "${package}-${rust_target}/${package}x${exe}"
+  ],
   "platform": {
-    "x86_64_linux_musl": {
-      "asset_name": "${package}-x86_64-unknown-linux-musl.tar.gz",
-      "bin": "${package}-x86_64-unknown-linux-musl/${package}${exe}"
-    },
-    "x86_64_macos": {
-      "asset_name": "${package}-x86_64-apple-darwin.tar.gz",
-      "bin": "${package}-x86_64-apple-darwin/${package}${exe}"
-    },
+    "x86_64_linux_musl": {},
+    "x86_64_macos": {},
     "x86_64_windows": {
-      "asset_name": "${package}-x86_64-pc-windows-msvc.zip",
-      "bin": "${package}${exe}"
-    },
-    "aarch64_linux_musl": {
-      "asset_name": "${package}-aarch64-unknown-linux-musl.tar.gz",
-      "bin": "${package}-aarch64-unknown-linux-musl/${package}${exe}"
-    },
-    "aarch64_macos": {
-      "asset_name": "${package}-aarch64-apple-darwin.tar.gz",
-      "bin": "${package}-aarch64-apple-darwin/${package}${exe}"
+      "asset_name": "${package}-${rust_target}.zip",
+      "bin": ["${package}${exe}", "${package}w${exe}", "${package}x${exe}"]
     },
+    "aarch64_linux_musl": {},
+    "aarch64_macos": {},
     "aarch64_windows": {
-      "asset_name": "${package}-aarch64-pc-windows-msvc.zip",
-      "bin": "${package}${exe}"
+      "asset_name": "${package}-${rust_target}.zip",
+      "bin": ["${package}${exe}", "${package}w${exe}", "${package}x${exe}"]
     },
-    "powerpc64le_linux_gnu": {
-      "asset_name": "${package}-powerpc64le-unknown-linux-gnu.tar.gz",
-      "bin": "${package}-powerpc64le-unknown-linux-gnu/${package}${exe}"
-    },
-    "riscv64_linux_gnu": {
-      "asset_name": "${package}-riscv64gc-unknown-linux-gnu.tar.gz",
-      "bin": "${package}-riscv64gc-unknown-linux-gnu/${package}${exe}"
-    },
-    "s390x_linux_gnu": {
-      "asset_name": "${package}-s390x-unknown-linux-gnu.tar.gz",
-      "bin": "${package}-s390x-unknown-linux-gnu/${package}${exe}"
-    }
+    "powerpc64le_linux_gnu": {},
+    "riscv64_linux_gnu": {},
+    "s390x_linux_gnu": {}
   }
 }

tools/codegen/src/main.rs

@@ -446,7 +446,7 @@ fn main() {
                         || asset.name.contains(".pub")
                 }) {
                     eprintln!(
-                        "{package} may supports other signature verification method using {}",
+                        "{package} may support other signature verification methods using {}",
                         asset.name
                     );
                 }

tools/publish.sh

@@ -1,204 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-set -CeEuo pipefail
-IFS=$'\n\t'
-trap -- 's=$?; printf >&2 "%s\n" "${0##*/}:${LINENO}: \`${BASH_COMMAND}\` exit with ${s}"; exit ${s}' ERR
-cd -- "$(dirname -- "$0")"/..
-
-# Publish a new release.
-#
-# USAGE:
-#    ./tools/publish.sh <VERSION>
-#
-# Note: This script requires the following tools:
-# - parse-changelog <https://github.com/taiki-e/parse-changelog>
-
-retry() {
-  for i in {1..10}; do
-    if "$@"; then
-      return 0
-    else
-      sleep "${i}"
-    fi
-  done
-  "$@"
-}
-bail() {
-  printf >&2 'error: %s\n' "$*"
-  exit 1
-}
-
-version="${1:?}"
-version="${version#v}"
-tag_prefix="v"
-tag="${tag_prefix}${version}"
-changelog="CHANGELOG.md"
-if [[ ! "${version}" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z\.-]+)?(\+[0-9A-Za-z\.-]+)?$ ]]; then
-  bail "invalid version format '${version}'"
-fi
-if [[ $# -gt 1 ]]; then
-  bail "invalid argument '$2'"
-fi
-if { sed --help 2>&1 || true; } | grep -Eq -e '-i extension'; then
-  in_place=(-i '')
-else
-  in_place=(-i)
-fi
-
-# Make sure there is no uncommitted change.
-git diff --exit-code
-git diff --exit-code --staged
-
-# Make sure the same release has not been created in the past.
-if gh release view "${tag}" &>/dev/null; then
-  bail "tag '${tag}' has already been created and pushed"
-fi
-
-# Make sure that the release was created from an allowed branch.
-if ! git branch | grep -Eq '\* main$'; then
-  bail "current branch is not 'main'"
-fi
-if ! git remote -v | grep -F origin | grep -Eq 'github\.com[:/]taiki-e/'; then
-  bail "cannot publish a new release from fork repository"
-fi
-
-release_date=$(date -u '+%Y-%m-%d')
-tags=$(git --no-pager tag | { grep -E "^${tag_prefix}[0-9]+" || true; })
-if [[ -n "${tags}" ]]; then
-  # Make sure the same release does not exist in changelog.
-  if grep -Eq "^## \\[${version//./\\.}\\]" "${changelog}"; then
-    bail "release ${version} already exist in ${changelog}"
-  fi
-  if grep -Eq "^\\[${version//./\\.}\\]: " "${changelog}"; then
-    bail "link to ${version} already exist in ${changelog}"
-  fi
-  # Update changelog.
-  remote_url=$(grep -E '^\[Unreleased\]: https://' "${changelog}" | sed -E 's/^\[Unreleased\]: //; s/\.\.\.HEAD$//')
-  prev_tag="${remote_url#*/compare/}"
-  remote_url="${remote_url%/compare/*}"
-  sed -E "${in_place[@]}" \
-    -e "s/^## \\[Unreleased\\]/## [Unreleased]\\n\\n## [${version}] - ${release_date}/" \
-    -e "s#^\[Unreleased\]: https://.*#[Unreleased]: ${remote_url}/compare/${tag}...HEAD\\n[${version}]: ${remote_url}/compare/${prev_tag}...${tag}#" "${changelog}"
-  if ! grep -Eq "^## \\[${version//./\\.}\\] - ${release_date}$" "${changelog}"; then
-    bail "failed to update ${changelog}"
-  fi
-  if ! grep -Eq "^\\[${version//./\\.}\\]: " "${changelog}"; then
-    bail "failed to update ${changelog}"
-  fi
-else
-  # Make sure the release exists in changelog.
-  if ! grep -Eq "^## \\[${version//./\\.}\\] - ${release_date}$" "${changelog}"; then
-    bail "release ${version} does not exist in ${changelog} or has wrong release date"
-  fi
-  if ! grep -Eq "^\\[${version//./\\.}\\]: " "${changelog}"; then
-    bail "link to ${version} does not exist in ${changelog}"
-  fi
-fi
-
-# Make sure that a valid release note for this version exists.
-# https://github.com/taiki-e/parse-changelog
-changes=$(parse-changelog "${changelog}" "${version}")
-if [[ -z "${changes}" ]]; then
-  bail "changelog for ${version} has no body"
-fi
-printf '============== CHANGELOG ==============\n'
-printf '%s\n' "${changes}"
-printf '=======================================\n'
-
-if [[ -n "${tags}" ]]; then
-  # Create a release commit.
-  (
-    set -x
-    git add "${changelog}"
-    git commit -m "Release ${version}"
-  )
-fi
-
-set -x
-
-git tag "${tag}"
-retry git push origin refs/heads/main
-retry git push origin refs/tags/"${tag}"
-
-major_version_tag="v${version%%.*}"
-git branch "releases/${major_version_tag}"
-git tag -f "${major_version_tag}"
-refs=("refs/heads/releases/${major_version_tag}" "+refs/tags/${major_version_tag}")
-
-tools=()
-for tool in tools/codegen/base/*.json; do
-  tool="${tool##*/}"
-  tools+=("${tool%.*}")
-done
-# Aliases.
-# NB: Update case for aliases in main.sh, tool input option in test-alias job
-# in .github/workflows/ci.yml, and match for alias for tools/codegen/src/tools-markdown.rs.
-tools+=(
-  nextest
-  taplo-cli
-  typos-cli
-  wasm-bindgen-cli
-  wasmtime-cli
-)
-# Non-manifest-based tools.
-tools+=(valgrind)
-
-branches=()
-for tool in "${tools[@]}"; do
-  git checkout -b "releases/${tool}"
-  sed -E "${in_place[@]}" action.yml \
-    -e "s/required: true/required: false/g" \
-    -e "s/# default: #publish:tool/default: ${tool}/g"
-  git add action.yml
-  git commit -m "${tool}"
-  git tag -f "${tool}"
-  git checkout main
-  refs+=("+refs/heads/releases/${tool}" "+refs/tags/${tool}")
-  branches+=("releases/${tool}")
-done
-retry git push origin --atomic "${refs[@]}"
-git branch -d "releases/${major_version_tag}"
-git branch -D "${branches[@]}"
-
-schema_workspace=/tmp/workspace
-rm -rf -- "${schema_workspace}"
-# Checkout manifest-schema branch
-schema_version="$(cargo metadata --format-version=1 --no-deps | jq -r '.packages[] | select(.name == "install-action-manifest-schema") | .version')"
-if [[ "${schema_version}" == "0."* ]]; then
-  schema_version="0.$(cut -d. -f2 <<<"${schema_version}")"
-else
-  schema_version="$(cut -d. -f1 <<<"${schema_version}")"
-fi
-schema_branch="manifest-schema-${schema_version}"
-
-git worktree add --force "${schema_workspace}"
-(
-  cd -- "${schema_workspace}"
-  if git fetch origin "${schema_branch}"; then
-    git checkout "origin/${schema_branch}" -B "${schema_branch}"
-  elif ! git checkout "${schema_branch}"; then
-    # New branch with no history. Credit: https://stackoverflow.com/a/13969482
-    git checkout --orphan "${schema_branch}"
-    git rm -rf -- . || true
-    git commit -m 'Initial commit' --allow-empty
-  fi
-)
-
-# Copy over schema
-cp -- ./manifests/* "${schema_workspace}"
-
-(
-  cd -- "${schema_workspace}"
-  # Stage changes
-  git add .
-  # Detect changes, then commit and push if changes exist
-  if [[ "$(git status --porcelain=v1 | LC_ALL=C wc -l)" != "0" ]]; then
-    git commit -m 'Update manifest schema'
-    retry git push origin HEAD
-  fi
-)
-
-rm -rf -- "${schema_workspace}"
-git worktree prune
-# TODO: get branch in schema_workspace dir instead
-git branch -D "${schema_branch}" "${schema_workspace##*/}"

tools/tidy.sh

@@ -7,13 +7,13 @@ trap -- 'printf >&2 "%s\n" "${0##*/}: trapped SIGINT"; exit 1' SIGINT
 cd -- "$(dirname -- "$0")"/..
 
 # USAGE:
-#    GH_TOKEN=$(gh auth token) ./tools/tidy.sh
+#    GITHUB_TOKEN=$(gh auth token) ./tools/tidy.sh
 #
 # Note: This script requires the following tools:
 # - git 1.8+
 # - jq 1.6+
 # - npm (node 18+)
-# - python 3.6+, pipx
+# - python 3.6+, uv
 # - shfmt
 # - shellcheck
 # - zizmor
@@ -86,11 +86,6 @@ check_config() {
 check_install() {
   for tool in "$@"; do
     if ! type -P "${tool}" >/dev/null; then
-      if [[ "${tool}" == 'python3' ]]; then
-        if type -P python >/dev/null; then
-          continue
-        fi
-      fi
       error "'${tool}' is required to run this check"
       return 1
     fi
@@ -132,12 +127,8 @@ EOF
   exit 1
 fi
 
-py_suffix=''
-if type -P python3 >/dev/null; then
-  py_suffix=3
-fi
-yq() { pipx run yq "$@"; }
-tomlq() { pipx run --spec yq tomlq "$@"; }
+yq() { uvx yq "$@"; }
+tomlq() { uvx --from yq tomlq "$@"; }
 case "$(uname -s)" in
   Linux)
     if [[ "$(uname -o)" == 'Android' ]]; then
@@ -190,8 +181,8 @@ case "$(uname -s)" in
         else
           jq() { command jq "$@" | tr -d '\r'; }
         fi
-        yq() { pipx run yq "$@" | tr -d '\r'; }
-        tomlq() { pipx run --spec yq tomlq "$@" | tr -d '\r'; }
+        yq() { uvx yq "$@" | tr -d '\r'; }
+        tomlq() { uvx --from yq tomlq "$@" | tr -d '\r'; }
       fi
     fi
     ;;
@@ -248,7 +239,7 @@ if [[ ${#rust_files[@]} -gt 0 ]]; then
   info "checking Rust code style"
   check_config .rustfmt.toml "; consider adding with reference to https://github.com/taiki-e/cargo-hack/blob/HEAD/.rustfmt.toml"
   check_config .clippy.toml "; consider adding with reference to https://github.com/taiki-e/cargo-hack/blob/HEAD/.clippy.toml"
-  if check_install cargo jq pipx; then
+  if check_install cargo jq uv; then
     # `cargo fmt` cannot recognize files not included in the current workspace and modules
     # defined inside macros, so run rustfmt directly.
     # We need to use nightly rustfmt because we use the unstable formatting options of rustfmt.
@@ -700,7 +691,7 @@ elif check_install shellcheck; then
     # Exclude SC2096 due to the way the temporary script is created.
     shellcheck_exclude=SC2096
     info "running \`shellcheck --exclude ${shellcheck_exclude}\` for scripts in \`\$(git ls-files '*Dockerfile*')\`"
-    if check_install jq python3 parse-dockerfile; then
+    if check_install jq parse-dockerfile; then
       shellcheck_for_dockerfile() {
         local text=$1
         local shell=$2
@@ -833,7 +824,7 @@ elif check_install shellcheck; then
     # Exclude SC2096 due to the way the temporary script is created.
     shellcheck_exclude=SC2086,SC2096,SC2129
     info "running \`shellcheck --exclude ${shellcheck_exclude}\` for scripts in .github/workflows/*.yml and **/action.yml"
-    if check_install jq python3 pipx; then
+    if check_install jq uv; then
       shellcheck_for_gha() {
         local text=$1
         local shell=$2
@@ -846,16 +837,8 @@ elif check_install shellcheck; then
           *) return ;;
         esac
         text="#!/usr/bin/env ${shell%' {0}'}"$'\n'"${text}"
-        # Use python because sed doesn't support .*?.
-        text=$(
-          "python${py_suffix}" - <<EOF
-import re
-text = re.sub(r"\\\${{.*?}}", "\${__GHA_SYNTAX__}", r'''${text}''')
-print(text)
-EOF
-        )
         case "${ostype}" in
-          windows) text=${text//$'\r'/} ;; # Python print emits \r\n.
+          windows) text=${text//$'\r'/} ;; # Parse error on git bash/msys2 bash.
         esac
         local color=auto
         if [[ -t 1 ]] || [[ -n "${GITHUB_ACTIONS:-}" ]]; then
@@ -988,11 +971,12 @@ if [[ ${#zizmor_targets[@]} -gt 0 ]]; then
   if [[ "${ostype}" =~ ^(netbsd|openbsd|dragonfly|illumos|solaris)$ ]] && [[ -n "${CI:-}" ]] && ! type -P zizmor >/dev/null; then
     warn "this check is skipped on NetBSD/OpenBSD/Dragonfly/illumos/Solaris due to installing zizmor is hard on these platform"
   elif check_install zizmor; then
-    # zizmor can also be used via pipx, but old version will be installed if glibc version is old.
+    # zizmor can also be used via uvx, but old version will be installed if glibc version is old.
+    # Do not use `zizmor .` here because it also attempts to check submodules.
     IFS=' '
-    info "running \`zizmor -q ${zizmor_targets[*]}\`"
+    info "running \`zizmor -q --pedantic ${zizmor_targets[*]}\`"
     IFS=$'\n\t'
-    zizmor -q "${zizmor_targets[@]}"
+    zizmor -q --pedantic "${zizmor_targets[@]}"
   fi
 fi
 printf '\n'
@@ -1045,7 +1029,7 @@ fi
 if [[ -f .cspell.json ]]; then
   info "spell checking"
   project_dictionary=.github/.cspell/project-dictionary.txt
-  if check_install npm jq pipx; then
+  if check_install npm jq uv; then
     has_rust=''
     if [[ -n "$(ls_files '*Cargo.toml')" ]]; then
       has_rust=1