Release 2.70.4

CHANGELOG.md

@@ -10,6 +10,26 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [2.70.4] - 2026-04-01
+
+- Update `wasm-bindgen@latest` to 0.2.117.
+
+- Update `vacuum@latest` to 0.25.5.
+
+- Update `tombi@latest` to 0.9.13.
+
+- Update `mise@latest` to 2026.3.18.
+
+## [2.70.3] - 2026-03-31
+
+- Update `wasm-bindgen@latest` to 0.2.116.
+
+- Update `cargo-insta@latest` to 1.47.2.
+
+- Update `tombi@latest` to 0.9.12.
+
+- Update `biome@latest` to 2.4.10.
+
 ## [2.70.2] - 2026-03-30
 
 - Update `vacuum@latest` to 0.25.3.
@@ -6071,7 +6091,9 @@ Note: This release is considered a breaking change because installing on version
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.70.2...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.70.4...HEAD
+[2.70.4]: https://github.com/taiki-e/install-action/compare/v2.70.3...v2.70.4
+[2.70.3]: https://github.com/taiki-e/install-action/compare/v2.70.2...v2.70.3
 [2.70.2]: https://github.com/taiki-e/install-action/compare/v2.70.1...v2.70.2
 [2.70.1]: https://github.com/taiki-e/install-action/compare/v2.70.0...v2.70.1
 [2.70.0]: https://github.com/taiki-e/install-action/compare/v2.69.14...v2.70.0

README.md

@@ -100,6 +100,12 @@ See the [development guide](DEVELOPMENT.md) for how to add support for new tool.
 
 ## Security
 
+The `@v<major>` and `@<tool_name>` tags are updated with each release. To enhance workflow stability and security against supply chain attacks, use the `@v<major>.<minor>.<patch>` tag or their hash to pin the version. Since all releases are immutable, pinning the version in either way should have the same effect.
+
+When installing the tool from GitHub Releases, the tool version that install-action installs with `tool: <tool_name>@latest` or `tool: <tool_name>@<omitted_version>` is associated with the install-action version, so pinning install-action version with the above ways also pins the version of the tool being installed. This also means that if a [dependency cooldown](https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns) applies to the action itself, a cooldown of the same duration or a few days longer will apply to the tools installed by that action.
+
+### Security on tool installation
+
 When installing the tool from GitHub Releases, this action will download the tool or its installer from GitHub Releases using HTTPS with tlsv1.2+. This is basically considered to be the same level of security as [the recommended installation of rustup](https://www.rust-lang.org/tools/install).
 
 Additionally, this action will also verify SHA256 checksums for downloaded files in all tools installed from GitHub Releases. This is enabled by default and can be disabled by setting the `checksum` input option to `false`.

manifests/biome.json

@@ -3,13 +3,51 @@
   "template": null,
   "license_markdown": "[Apache-2.0](https://github.com/biomejs/biome/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/biomejs/biome/blob/main/LICENSE-MIT)",
   "latest": {
-    "version": "2.4.9"
+    "version": "2.4.10"
   },
   "2": {
-    "version": "2.4.9"
+    "version": "2.4.10"
   },
   "2.4": {
-    "version": "2.4.9"
+    "version": "2.4.10"
+  },
+  "2.4.10": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.10/biome-linux-x64-musl",
+      "etag": "0x8DE8E7705F6C243",
+      "hash": "897a1eb7be2bcc6dfa596f4c786014f82fd60615c7a2726241eb0bafc228f82c",
+      "bin": "biome"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.10/biome-darwin-x64",
+      "etag": "0x8DE8E7705A3CF6D",
+      "hash": "8269b5ef30bbc1fcf0cff5695bdc3733d417744ae638df70e7dabc3b82590fca",
+      "bin": "biome"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.10/biome-win32-x64.exe",
+      "etag": "0x8DE8E77063F8765",
+      "hash": "a2bdc915914114c09a6f38ea092af2e450953bf3ace76bc143f2ab4d5a17b238",
+      "bin": "biome.exe"
+    },
+    "aarch64_linux_musl": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.10/biome-linux-arm64-musl",
+      "etag": "0x8DE8E7705851F43",
+      "hash": "dfabcbc165bd077464244fe2f73eceb7148219566a3ad94ddf7510e663675045",
+      "bin": "biome"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.10/biome-darwin-arm64",
+      "etag": "0x8DE8E7705839A5F",
+      "hash": "c6782336dff872beec7d34e1b801c533bd296b5dcf2a30d3cf6335bca975e984",
+      "bin": "biome"
+    },
+    "aarch64_windows": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.10/biome-win32-arm64.exe",
+      "etag": "0x8DE8E77061B8612",
+      "hash": "4285a020237cdb93e6c42cf8af12b3bb2614ecccaeec283dc89f4e092577a3b7",
+      "bin": "biome.exe"
+    }
   },
   "2.4.9": {
     "x86_64_linux_musl": {

manifests/cargo-insta.json

@@ -20,13 +20,31 @@
   },
   "license_markdown": "[Apache-2.0](https://github.com/mitsuhiko/insta/blob/master/LICENSE)",
   "latest": {
-    "version": "1.47.1"
+    "version": "1.47.2"
   },
   "1": {
-    "version": "1.47.1"
+    "version": "1.47.2"
   },
   "1.47": {
-    "version": "1.47.1"
+    "version": "1.47.2"
+  },
+  "1.47.2": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8E9EE7357F8F",
+      "hash": "1c2a2e82200b430f6fa27b6d0ba0059573eae2f32b0b8aa54446184ab7b46ee7"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8E9EE6D41E0F",
+      "hash": "62efa25c4e9f8182c16ae46f58bc3e9c8fdbe74aaf0409d3ed06909a70d128a5"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8E9EE705F287",
+      "hash": "2f2ffcdda5608f78de53509bdd6a5feba185dad9490b5aad951c35bf8c37fa9e"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8E9EE6D1FDA1",
+      "hash": "4876319b5201b875188351445b754db09f7674b506daa983634c95d6d44ca51e"
+    }
   },
   "1.47.1": {
     "x86_64_linux_musl": {

manifests/mise.json

@@ -28,13 +28,39 @@
   },
   "license_markdown": "[MIT](https://github.com/jdx/mise/blob/main/LICENSE)",
   "latest": {
-    "version": "2026.3.17"
+    "version": "2026.3.18"
   },
   "2026": {
-    "version": "2026.3.17"
+    "version": "2026.3.18"
   },
   "2026.3": {
-    "version": "2026.3.17"
+    "version": "2026.3.18"
+  },
+  "2026.3.18": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8F16236336C0",
+      "hash": "46c5c69eb04b8695189d530782a8778c390c3fbcea04bbe01eb321f1fb0f09ab"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8F1625C18807",
+      "hash": "55ca4c1b201dff443e9d12119c957874ff61915bf297eeacda8ec5e3ed7f931d"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8F16267EAC4F",
+      "hash": "7c50c4588f1b85944a5d9e5640998459b8a1360574a1617a5590f055e1b3caea"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8F161FB2DF40",
+      "hash": "2cae8fe34edab073f7e8794d30bc7419bebd0391fdc73decc51b4ed1d3f62a32"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8F1625132034",
+      "hash": "f387b7ed21afede268daccceb54d62905e2b7bab081bc17dc37c1077f0d17e69"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8F162692E0ED",
+      "hash": "7ee025648c1efbf7fd927079b07af26a7bc89e62fea8c889c4186cabe22ab671"
+    }
   },
   "2026.3.17": {
     "x86_64_linux_musl": {

manifests/tombi.json

@@ -22,10 +22,62 @@
   },
   "license_markdown": "[MIT](https://github.com/tombi-toml/tombi/blob/main/LICENSE)",
   "latest": {
-    "version": "0.9.11"
+    "version": "0.9.13"
   },
   "0.9": {
-    "version": "0.9.11"
+    "version": "0.9.13"
+  },
+  "0.9.13": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8F7844A7DC4C",
+      "hash": "55023b6a24f12c5be2fb6dd826a5f3763e701d4175352619518ac5092540d61a"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8F7844169FFC",
+      "hash": "00232564a55f84a19b571769207ce319056b96800e25ed2fab44203e71e38443"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8F78442C32A0",
+      "hash": "b886f817ea20a561ca330c9bc4097392c5d6471d94faabad41283763044b79cc"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8F78441175B8",
+      "hash": "db2bf291f42193a4bd5aebbddd37f1154f7a179b8952ea1ca20290800f0d344d"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8F784480359A",
+      "hash": "608e397c0b1a874814113cd337464589db858364aad26146ce5c778d4cbcbdea"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8F784435C4C1",
+      "hash": "21d83ec6a1526c601bfcafdd7a5890d96710d80a2b84e62c6edacdc9a1c92f70"
+    }
+  },
+  "0.9.12": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8E7577C157C6",
+      "hash": "79236f1175331e3d189e54103d12ed957eed53d4ccc0a0eb9299f30102c7dda1"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8E7577BA0D09",
+      "hash": "9a1b1463135f88493500dc1abfea9777a6e2f4f980dcfbe7b150cc41f4ccb474"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8E7577D14B62",
+      "hash": "f60bd33e0bddaaa4ca556d82229ff7a833119b63accfca14f62c0175a2f5b4d0"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8E7577C413D4",
+      "hash": "e0d333c04d75980a6f28d1f476e8b2182e03f58c74cfbe0706e2249d1d666dc8"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8E7578A33F60",
+      "hash": "98c6d08b6102ce0498208ef55d14861c197f131a42a9add020aa0d076636d166"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8E7578703417",
+      "hash": "55b186788381c89ad1a18b8bf0c2ffe9cb0eb270efe1cab406edb845b3743a50"
+    }
   },
   "0.9.11": {
     "x86_64_linux_musl": {

manifests/vacuum.json

@@ -22,10 +22,62 @@
   },
   "license_markdown": "[MIT](https://github.com/daveshanley/vacuum/blob/main/LICENSE)",
   "latest": {
-    "version": "0.25.3"
+    "version": "0.25.5"
   },
   "0.25": {
-    "version": "0.25.3"
+    "version": "0.25.5"
+  },
+  "0.25.5": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8F75CFD30677",
+      "hash": "3a57b95dc9b7a1b9284960ece8f67d00dd5f60797603c86e0e691ec81ddac22e"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8F75CEF73215",
+      "hash": "94bb05d54b6531c7e1ec45bf510b4ac14889484b6f95b284e4e9f9638ec746b5"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8F75CF9054FD",
+      "hash": "cc0e8d39730b5fafff5ce03ec8922ab05dcd6e011ec4de07541948ee89414c45"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8F75CF41C9ED",
+      "hash": "b6b0657bdfff8c9fc88d1d2f9ceabe26ae9ff3be2667d4c8e205f50339c6c6d3"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8F75CEFBC0DD",
+      "hash": "f5908142b05ea00216a2dfc355b740bc11b2ac992e68c730968758aecb1b98cb"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8F75CF91D9E5",
+      "hash": "73f85e4d47c80e8a6a62e731c8440c822d22c701f6fe5fab2149b24e20e9cc3a"
+    }
+  },
+  "0.25.4": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8F73C968CC4B",
+      "hash": "7d9f7bafe07b05944f742003501e2bcd8c53f982b10115110285b71f0953858c"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8F73C8D5BD15",
+      "hash": "705579f63829e521012d5e8f9dbd74e459083406b9fe9fbb36372cc66b96facb"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8F73C95CA4ED",
+      "hash": "23ed2c24f0188470a620ff0533f33b1aa7c3355efe55dea32115e8fc8d36b793"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE8F73C9D7B33F",
+      "hash": "03310fb5e120676eb37be9048a8c60fe8168218253253516a165be4738ba7dd7"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8F73C8C96ED4",
+      "hash": "5d55f77a76ca52c5a7bacc248a240996fb7ae1adb38de0fd31681537870118aa"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE8F73C9A93662",
+      "hash": "9749e518ad1a7329d3b1abdd7ed976180436c103a09d13a284b0d1166b471d29"
+    }
   },
   "0.25.3": {
     "x86_64_linux_musl": {

manifests/wasm-bindgen.json

@@ -44,10 +44,54 @@
   },
   "license_markdown": "[MIT](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/LICENSE-MIT) OR [Apache-2.0](https://github.com/wasm-bindgen/wasm-bindgen/blob/main/LICENSE-APACHE)",
   "latest": {
-    "version": "0.2.115"
+    "version": "0.2.117"
   },
   "0.2": {
-    "version": "0.2.115"
+    "version": "0.2.117"
+  },
+  "0.2.117": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8F7E2EE60139",
+      "hash": "97f527f7c7956f69a88a4bdb5176142ebc4e255c2dbe3805ec4f373421028240"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8F7E2EE9CD88",
+      "hash": "17d991583d7036cd773b62eb8c0f295dd31cde7bf9ab250276be56f9138723d3"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8F7E2EFCCAF2",
+      "hash": "54d52650adcf93e332d1d02c94c81925dfbda1f1292cecf276a0507263a4936f"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE8F7E2EEADDCE",
+      "hash": "27f9914864d02240e62e460860b015293e540217d9da2d8e699a1a6ee88bb326"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8F7E2EBEF61F",
+      "hash": "d7691b221163d68884ef0a893cb57d3372f1100789dbf0cc2c9260a7f253a497"
+    }
+  },
+  "0.2.116": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE8EBB3A19D512",
+      "hash": "f10d233eb87aaaed4a6a3af3d52ab9a3420ab35103c18fe2c6a69527bfbf7035"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE8EBB3A196060",
+      "hash": "811350ef3e971a1a34b2a1bcf37de7fd9918f335179a016f7ea9cc1334127c3a"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE8EBB39E62DFC",
+      "hash": "5316001ffb87739b41fe9f82804ea5e35e8ef6545687ffef2453120f479702e4"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE8EBB3A270C9F",
+      "hash": "87627d66c72d43521a69dac489ba1cc2ab241c3281755a9f0e9f0e1a2c9ff3a6"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE8EBB39FF65FE",
+      "hash": "f101dfe093f1e7462c4157a1db0f121f07883009b5159a1b6bd997cf7f4341a6"
+    }
   },
   "0.2.115": {
     "x86_64_linux_musl": {