Release 2.71.3

https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#defaultsrunshell

> This is the default shell used on Windows. The PowerShell Core. GitHub
  appends the extension .ps1 to your script name. If your self-hosted
  Windows runner does not have PowerShell Core installed, then
  PowerShell Desktop is used instead.

Fixes #1653

.github/.cspell/project-dictionary.txt

@@ -17,6 +17,7 @@ grcov
 gungraun
 insta
 knope
+LASTEXITCODE
 libicu
 linkcheck
 mdbook
@@ -38,6 +39,7 @@ sigstore
 syft
 tombi
 udeps
+USERPROFILE
 wasmtime
 watchexec
 worktree

.github/dependabot.yml

@@ -1,9 +1,11 @@
 version: 2
 updates:
-  - package-ecosystem: cargo # zizmor: ignore[dependabot-cooldown] # Unless dependencies are pinned/locked, the effect is limited.
+  - package-ecosystem: cargo
     directory: /
     schedule:
-      interval: daily
+      interval: weekly
+    cooldown:
+      default-days: 14 # Note: Unless dependencies are pinned/locked, the effect is limited.
     commit-message:
       prefix: ''
     ignore:
@@ -13,9 +15,9 @@ updates:
   - package-ecosystem: github-actions
     directory: /
     schedule:
-      interval: daily
+      interval: weekly
     cooldown:
-      default-days: 7
+      default-days: 14
     commit-message:
       prefix: ''
     labels: []

.github/workflows/release.yml

@@ -310,19 +310,24 @@ jobs:
             )
           fi
 
-          prev_credential_helper=$(git config get --global credential.helper || true)
+          prev_credential_helper=$(git config get --local credential.helper || true)
           if [[ -n "${prev_credential_helper}" ]]; then
             printf 'credential helper is already set (%s)\n' "${prev_credential_helper}"
           else
-            (
-              set -x
-              git config --global credential.helper store
-            )
             protocol="${GITHUB_SERVER_URL%%://*}"
             hostname="${GITHUB_SERVER_URL#*://}"
-            printf '%s\n' "${protocol}://${GITHUB_ACTOR}:${PUSH_TOKEN}@${hostname}" >~/.git-credentials
+            (
+              set -x
+              git config --local credential.helper cache
+            )
+            git credential approve <<EOF
+          protocol=${protocol}
+          host=${hostname}
+          username=${GITHUB_ACTOR}
+          password=${PUSH_TOKEN}
+          EOF
             # Remove credential helper config on exit.
-            trap -- '(set -x; rm -f -- ~/.git-credentials; git config --global --unset credential.helper || true)' EXIT
+            trap -- '(set -x; git credential-cache exit; git config --local --unset credential.helper || true)' EXIT
           fi
 
           (

.github/zizmor.yml

@@ -3,6 +3,7 @@
 
 rules:
   anonymous-definition: { disable: true }
+  dependabot-cooldown: { config: { days: 14 } }
   unpinned-uses:
     config:
       policies:

CHANGELOG.md

@@ -10,6 +10,28 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [2.71.3] - 2026-04-04
+
+- Update `wasm-tools@latest` to 1.246.2.
+
+- Update `mise@latest` to 2026.4.3.
+
+## [2.71.2] - 2026-04-02
+
+- Implement workaround for [windows-11-arm runner bug](https://github.com/actions/partner-runner-images/issues/169) which sometimes causes installation failure. ([#1657](https://github.com/taiki-e/install-action/pull/1657))
+
+  This addresses an issue that was attempted to be worked around in 2.71.0 but was insufficient.
+
+- Update `mise@latest` to 2026.4.1.
+
+- Update `uv@latest` to 0.11.3.
+
+## [2.71.1] - 2026-04-02
+
+- Fix a regression that caused an execution policy violation on self-hosted Windows runner due to use of non-default `powershell` shell, introduced in 2.71.0.
+
+- Update `dprint@latest` to 0.53.2.
+
 ## [2.71.0] - 2026-04-01
 
 - Support `wasm-tools`. ([#1642](https://github.com/taiki-e/install-action/pull/1642), thanks @crepererum)
@@ -6105,7 +6127,10 @@ Note: This release is considered a breaking change because installing on version
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.71.0...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.71.3...HEAD
+[2.71.3]: https://github.com/taiki-e/install-action/compare/v2.71.2...v2.71.3
+[2.71.2]: https://github.com/taiki-e/install-action/compare/v2.71.1...v2.71.2
+[2.71.1]: https://github.com/taiki-e/install-action/compare/v2.71.0...v2.71.1
 [2.71.0]: https://github.com/taiki-e/install-action/compare/v2.70.4...v2.71.0
 [2.70.4]: https://github.com/taiki-e/install-action/compare/v2.70.3...v2.70.4
 [2.70.3]: https://github.com/taiki-e/install-action/compare/v2.70.2...v2.70.3

action.yml

@@ -45,20 +45,35 @@ runs:
     - run: bash --noprofile --norc "${GITHUB_ACTION_PATH:?}/main.sh"
       shell: bash
       env:
-        # NB: Sync with non-Windows case.
+        # NB: Sync with Windows case.
         INPUT_TOOL: ${{ inputs.tool }}
         INPUT_CHECKSUM: ${{ inputs.checksum }}
         INPUT_FALLBACK: ${{ inputs.fallback }}
         DEFAULT_GITHUB_TOKEN: ${{ github.token }}
         ACTION_USER_AGENT: ${{ github.action_repository }} (${{ github.action_ref }})
       if: runner.os != 'Windows'
-    # Workaround for https://github.com/actions/partner-runner-images/issues/169
+    # Use pwsh and retry on bash startup failure to work around windows-11-arm runner bug:
-    # TODO: Is it necessary to retry for main.sh call? Or is this sufficient? https://github.com/taiki-e/install-action/pull/1647
+    # https://github.com/actions/partner-runner-images/issues/169
     - run: |
         Set-StrictMode -Version Latest
-        $action_path = $env:GITHUB_ACTION_PATH
+        for ($i=1; $i -le 10; $i++) {
-        & bash --noprofile --norc "${action_path}/main.sh"
+          $prev_err_action = $ErrorActionPreference
-      shell: powershell
+          $ErrorActionPreference = "Continue"
+          & bash --noprofile --norc "$env:GITHUB_ACTION_PATH/main.sh"
+          $code = $LASTEXITCODE
+          $ErrorActionPreference = "$prev_err_action"
+          if (Test-Path "$env:USERPROFILE\.install-action\init") {
+            # If bash started successfully, main.sh creates init file.
+            Remove-Item "$env:USERPROFILE\.install-action\init" -Force
+            exit $code
+          }
+          if ($i -lt 10) {
+            Write-Output "::warning::installation failed due to bash startup failure (<https://github.com/actions/partner-runner-images/issues/169>); retrying..."
+          }
+        }
+        Write-Output "::error::installation failed due to bash startup failure (<https://github.com/actions/partner-runner-images/issues/169>); this maybe resolved by re-running job"
+        exit 1
+      shell: pwsh
       env:
         # NB: Sync with non-Windows case.
         INPUT_TOOL: ${{ inputs.tool }}

main.sh

@@ -436,46 +436,6 @@ canonicalize_windows_path() {
   esac
 }
 
-# cargo-binstall may call `cargo install` on their fallback: https://github.com/taiki-e/install-action/pull/54#issuecomment-1383140833
-# cross calls rustup on `cross --version` if the current directly is cargo workspace.
-export CARGO_NET_RETRY=10
-export RUSTUP_MAX_RETRIES=10
-
-if [[ $# -gt 0 ]]; then
-  bail "invalid argument '$1'"
-fi
-
-export DEBIAN_FRONTEND=noninteractive
-manifest_dir="$(dirname -- "$0")/manifests"
-
-# Inputs
-tool="${INPUT_TOOL:-}"
-tools=()
-if [[ -n "${tool}" ]]; then
-  while read -rd,; do
-    tools+=("${REPLY}")
-  done < <(normalize_comma_or_space_separated "${tool}")
-fi
-if [[ ${#tools[@]} -eq 0 ]]; then
-  warn "no tool specified; this could be caused by a dependabot bug where @<tool_name> tags on this action are replaced by @<version> tags"
-  # Exit with 0 for backward compatibility.
-  # TODO: We want to reject it in the next major release.
-  exit 0
-fi
-
-enable_checksum="${INPUT_CHECKSUM:-}"
-case "${enable_checksum}" in
-  true) ;;
-  false) enable_checksum='' ;;
-  *) bail "'checksum' input option must be 'true' or 'false': '${enable_checksum}'" ;;
-esac
-
-fallback="${INPUT_FALLBACK:-}"
-case "${fallback}" in
-  none | cargo-binstall | cargo-install) ;;
-  *) bail "'fallback' input option must be 'none', 'cargo-binstall', or 'cargo-install': '${fallback}'" ;;
-esac
-
 # Refs: https://github.com/rust-lang/rustup/blob/HEAD/rustup-init.sh
 base_distro=''
 exe=''
@@ -590,6 +550,9 @@ cargo_bin="${CARGO_HOME:-"${home}/.cargo"}/bin"
 # is used ($CARGO_HOME/bin is most likely not included in the PATH), fallback to
 # $install_action_dir/bin.
 if [[ "${host_os}" == "windows" ]]; then
+  mkdir -p -- "${install_action_dir}"
+  # See action.yml.
+  touch -- "${install_action_dir}"/init
   if type -P cargo >/dev/null; then
     info "cargo is located at $(type -P cargo)"
     cargo_bin=$(dirname -- "$(type -P cargo)")
@@ -604,6 +567,46 @@ elif [[ ! -e "${cargo_bin}" ]] || [[ "$(type -P cargo || true)" != "${cargo_bin}
   cargo_bin="${install_action_dir}/bin"
 fi
 
+# cargo-binstall may call `cargo install` on their fallback: https://github.com/taiki-e/install-action/pull/54#issuecomment-1383140833
+# cross calls rustup on `cross --version` if the current directly is cargo workspace.
+export CARGO_NET_RETRY=10
+export RUSTUP_MAX_RETRIES=10
+
+if [[ $# -gt 0 ]]; then
+  bail "invalid argument '$1'"
+fi
+
+export DEBIAN_FRONTEND=noninteractive
+manifest_dir="$(dirname -- "$0")/manifests"
+
+# Inputs
+tool="${INPUT_TOOL:-}"
+tools=()
+if [[ -n "${tool}" ]]; then
+  while read -rd,; do
+    tools+=("${REPLY}")
+  done < <(normalize_comma_or_space_separated "${tool}")
+fi
+if [[ ${#tools[@]} -eq 0 ]]; then
+  warn "no tool specified; this could be caused by a dependabot bug where @<tool_name> tags on this action are replaced by @<version> tags"
+  # Exit with 0 for backward compatibility.
+  # TODO: We want to reject it in the next major release.
+  exit 0
+fi
+
+enable_checksum="${INPUT_CHECKSUM:-}"
+case "${enable_checksum}" in
+  true) ;;
+  false) enable_checksum='' ;;
+  *) bail "'checksum' input option must be 'true' or 'false': '${enable_checksum}'" ;;
+esac
+
+fallback="${INPUT_FALLBACK:-}"
+case "${fallback}" in
+  none | cargo-binstall | cargo-install) ;;
+  *) bail "'fallback' input option must be 'none', 'cargo-binstall', or 'cargo-install': '${fallback}'" ;;
+esac
+
 case "${host_os}" in
   linux)
     if ! type -P jq >/dev/null || ! type -P curl >/dev/null || ! type -P tar >/dev/null; then

manifests/dprint.json

@@ -28,10 +28,36 @@
   },
   "license_markdown": "[MIT](https://github.com/dprint/dprint/blob/main/LICENSE)",
   "latest": {
-    "version": "0.53.1"
+    "version": "0.53.2"
   },
   "0.53": {
-    "version": "0.53.1"
+    "version": "0.53.2"
+  },
+  "0.53.2": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE9007EE1278D0",
+      "hash": "7ff2cf9b25c687bd59867528ae9a5526c17e75e82e9788bf1f84a0e3ca7163b6"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE9007EE1EC70A",
+      "hash": "902a9cff86a0ce643d5f1bb53e3e2434096511542363924e18016ee7bedb769f"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE9007EDFFA241",
+      "hash": "f18910879d6796b05b0666513391ab7963b346723c041dc4d777d3f43179e416"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE9007EE226C77",
+      "hash": "c3843a4604dac7428f41f762c4c352e409c63bd634172765bbac482dc59773ba"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE9007EE116890",
+      "hash": "a185ba53f74e1e3a8ccdaf03a5d6f96b67d3fdf3f86d0d0f98950d15817eb0c4"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE9007EE210E69",
+      "hash": "9fe90a2e414cfd59c6df984a3910ce11e0c349d5326ab7debec06682f3ba1150"
+    }
   },
   "0.53.1": {
     "x86_64_linux_musl": {

manifests/mise.json

@@ -28,13 +28,65 @@
   },
   "license_markdown": "[MIT](https://github.com/jdx/mise/blob/main/LICENSE)",
   "latest": {
-    "version": "2026.4.0"
+    "version": "2026.4.3"
   },
   "2026": {
-    "version": "2026.4.0"
+    "version": "2026.4.3"
   },
   "2026.4": {
-    "version": "2026.4.0"
+    "version": "2026.4.3"
+  },
+  "2026.4.3": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE918787D0FCD3",
+      "hash": "b700ef056f6671a738d824ed5b02b17615b470d6659adf548a49eda1f51bb770"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE91878B96BFCE",
+      "hash": "f7dd16c3ad36e3b631a3f4c85c24be4c2577bfe693858df85bef46aff6f8acec"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE91878C86A1E4",
+      "hash": "a564ed07eb2c41c403a59ac03238d053d0f250aa4e55225dc0456d63bb6589cb"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE91878239E45C",
+      "hash": "1678e69b2fdbc9e0b8eea0c6e091922a1873a3c42e4a87bb13805a4f2613a7b5"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE91878A44E083",
+      "hash": "c00791c18b8e1192685e995fd5b6ba136a19b01d16256a0367155274056a3aa8"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE91878C56793B",
+      "hash": "02a27c60b23c5fb8d894a82af01d2ceb1f2e6d1d14db7463cb6ddb30489b0f5f"
+    }
+  },
+  "2026.4.1": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE90A9CD760EC0",
+      "hash": "fdbe9804c76f6e223a662cbd7356fefc42e791f5752cc0d5a621ffee81b735e5"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE90A9CFC11483",
+      "hash": "8673b9b846d247ba13ccde1bf95b3b8b53fb3eb464f82c59d9787562222e7fd8"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE90A9D0A67B10",
+      "hash": "5d2cdf8ed9901a92840154cd2e2046400c03b26f35906c4e9e1a60318b2af83a"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE90A9C9F9D36E",
+      "hash": "faca5c453001dafd6caf1f9186cf8640103fabbc29b3218cbac5d8c69f0422d2"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE90A9CEFE9F12",
+      "hash": "b7696c98581ffcc45989a777e75982495f23be5cdbfe092523c2915eb196272c"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE90A9D04E84B7",
+      "hash": "6d268edf452acd93af983da2a803180987b85140698541a4a587fe17200e8858"
+    }
   },
   "2026.4.0": {
     "x86_64_linux_musl": {

manifests/uv.json

@@ -69,10 +69,48 @@
   },
   "license_markdown": "[Apache-2.0](https://github.com/astral-sh/uv/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/astral-sh/uv/blob/main/LICENSE-MIT)",
   "latest": {
-    "version": "0.11.2"
+    "version": "0.11.3"
   },
   "0.11": {
-    "version": "0.11.2"
+    "version": "0.11.3"
+  },
+  "0.11.3": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE9038B8911496",
+      "hash": "8b40cf16b849634b81a530a3d0a0bcae5f24996ef9ae782976fd69b6266d3b8e"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE9038B7D1F6CF",
+      "hash": "b0e05e0b43a000fdc2132ee3f3400ba5dee427bc2337d3ec4eb8cf4f3d5722af"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE9038B81129BB",
+      "hash": "ae681c0aaec7cc96af184648cb88d73f8393ed60fa5880abdd6bdb910f9b227c"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE9038B57D5EFC",
+      "hash": "8ecec82cb9a744d5fabff6d16d7777218a7730f699d2aa0d2f751c17858e2efa"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE9038B4CB51F3",
+      "hash": "2bc3d0c7bf2bd08325b1e170abac6f7e5b3346e1d4eab3370d17cefec934996f"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE9038B5421F3E",
+      "hash": "e99c56f9ab5e1e1ddcaea3e2389990c94baf38e0d7cb2148de08baf2d3261d49"
+    },
+    "powerpc64le_linux_gnu": {
+      "etag": "0x8DE9038B710B885",
+      "hash": "5cdcadf4d50a5354312bc8ef37c2a6cfab4e2f13ccdf8380d3012b927b4ded95"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE9038B746CDFF",
+      "hash": "8271e07ed9695870f4b0ae5ec722e3ae08fff280068f08bc6a8ca76c67d7fefa"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE9038B7AA292A",
+      "hash": "6dc4f555a5f6515f7fddb281422d2a8a3943853dae5de837bbb5d996d7576c71"
+    }
   },
   "0.11.2": {
     "x86_64_linux_musl": {

manifests/wasm-tools.json

@@ -24,13 +24,35 @@
   },
   "license_markdown": "[Apache-2.0 WITH LLVM-exception](https://github.com/bytecodealliance/wasm-tools/blob/main/LICENSE-APACHE) OR [Apache-2.0](https://github.com/bytecodealliance/wasm-tools/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/bytecodealliance/wasm-tools/blob/main/LICENSE-MIT)",
   "latest": {
-    "version": "1.246.1"
+    "version": "1.246.2"
   },
   "1": {
-    "version": "1.246.1"
+    "version": "1.246.2"
   },
   "1.246": {
-    "version": "1.246.1"
+    "version": "1.246.2"
+  },
+  "1.246.2": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DE91C3E7F1C282",
+      "hash": "f0df9428792225322e9b4344ca581f03b1740d509d6bdad33d14a810009be9ec"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE91C3E7EB3A2E",
+      "hash": "fd89fb34457e7d2f7e221f3971b023674fa1ca5ac650b9685320a3324082ddb6"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE91C3E7FDE9D4",
+      "hash": "1be1934e9a630ff95ab869eba85bba30d652b61b0e6bfb88aac76d0ee3892035"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE91C3E7887ABE",
+      "hash": "cd28f8086297b491d857a5a8118d0de3b910f785d0b465defb4ca4d3826937dc"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE91C3E77F0F87",
+      "hash": "0ff7b4594d6ef643df282f8672ee2af6cec85d006bb83fa9d69c805b8cc6eabf"
+    }
   },
   "1.246.1": {
     "x86_64_linux_gnu": {