Release 2.75.1

Same as 14ee01d8e3.

.github/workflows/ci.yml

@@ -95,7 +95,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     timeout-minutes: 60
     steps:
-      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1
+      - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
       # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
       - run: rm -- Cargo.toml
       - name: Generate tool list
@@ -154,7 +154,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
-      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1
+      - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
       # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
       - run: rm -- Cargo.toml
       - run: env
@@ -187,7 +187,7 @@ jobs:
     runs-on: ubuntu-24.04-arm
     timeout-minutes: 60
     steps:
-      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1
+      - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
       # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
       - run: rm -- Cargo.toml
       - run: env
@@ -298,7 +298,7 @@ jobs:
         env:
           CONTAINER: ${{ matrix.container }}
         if: startsWith(matrix.container, 'centos')
-      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1
+      - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
       # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
       - run: rm -- Cargo.toml
       - name: Generate tool list

.github/workflows/manifest.yml

@@ -33,7 +33,7 @@ concurrency:
 
 jobs:
   manifest:
-    uses: taiki-e/github-actions/.github/workflows/gen.yml@606d6c78d69927c489d319133073a03157928a7a # main
+    uses: taiki-e/github-actions/.github/workflows/gen.yml@7e4093bf4e87dd120ac0c3be2e47ebe7f737a47d # main
     permissions:
       contents: write # for creating branch for pr
       pull-requests: write # for gh pr review --approve
@@ -46,3 +46,4 @@ jobs:
       branch: update-manifest
       automerge: true
       install-rust: true
+      install-cosign: true

.github/workflows/release.yml

@@ -38,8 +38,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
-      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1
+      - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
-      - uses: taiki-e/install-action@7bc99eee1f1b8902a125006cf790a1f4c8461e63 # v2.69.8
+      - uses: taiki-e/install-action@7a562dfa955aa2e4d5b0fd6ebd57ff9715c07b0b # v2.73.0
         with:
           tool: parse-changelog
           fallback: none
@@ -207,8 +207,8 @@ jobs:
     permissions:
       contents: write # for taiki-e/create-gh-release-action
     steps:
-      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1
+      - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
-      - uses: taiki-e/install-action@7bc99eee1f1b8902a125006cf790a1f4c8461e63 # v2.69.8
+      - uses: taiki-e/install-action@7a562dfa955aa2e4d5b0fd6ebd57ff9715c07b0b # v2.73.0
         with:
           tool: parse-changelog
           fallback: none
@@ -423,7 +423,7 @@ jobs:
           PREPARE_REV: ${{ needs.prepare.outputs.rev }}
           # Note that if we use secrets.GITHUB_TOKEN, the pushed commit/tag cannot trigger other workflows.
           PUSH_TOKEN: ${{ steps.push-token.outputs.token }}
-      - uses: taiki-e/create-gh-release-action@c5baa0b5dc700cf06439d87935e130220a6882d9 # v1.9.3
+      - uses: taiki-e/create-gh-release-action@f67cf7b2dadd83d36b981e674a6b08063997ce68 # v1.10.0
         with:
           changelog: CHANGELOG.md
           title: $version

CHANGELOG.md

@@ -10,6 +10,12 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [2.75.1] - 2026-04-08
+
+- Update `shfmt@latest` to 3.13.1.
+
+- Update `cosign@latest` to 3.0.6.
+
 ## [2.75.0] - 2026-04-07
 
 - Support `cosign`. ([#1677](https://github.com/taiki-e/install-action/pull/1677))
@@ -6165,7 +6171,8 @@ Note: This release is considered a breaking change because installing on version
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.75.0...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.75.1...HEAD
+[2.75.1]: https://github.com/taiki-e/install-action/compare/v2.75.0...v2.75.1
 [2.75.0]: https://github.com/taiki-e/install-action/compare/v2.74.1...v2.75.0
 [2.74.1]: https://github.com/taiki-e/install-action/compare/v2.74.0...v2.74.1
 [2.74.0]: https://github.com/taiki-e/install-action/compare/v2.73.0...v2.74.0

manifests/cosign.json

@@ -28,13 +28,13 @@
   },
   "license_markdown": "[Apache-2.0](https://github.com/sigstore/cosign/blob/main/LICENSE)",
   "latest": {
-    "version": "3.0.5"
+    "version": "3.0.6"
   },
   "3": {
-    "version": "3.0.5"
+    "version": "3.0.6"
   },
   "3.0": {
-    "version": "3.0.5"
+    "version": "3.0.6"
   },
   "3.0.6": {
     "x86_64_linux_musl": {

manifests/mise.json

@@ -36,6 +36,32 @@
   "2026.4": {
     "version": "2026.4.5"
   },
+  "2026.4.6": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE9505278268D0",
+      "hash": "a99603adb9b185da342a1ff81e93390c42e6a90737086d130e929ddc6af774cc"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE950529B1EF40",
+      "hash": "8c38ef6bdbe87a007d4e428d3974ab4e7b657c5dcf61d288edb69882070e2d0b"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE95052A93FE38",
+      "hash": "1ccca1e747e1e5ddf0621b1a19cc02bd33f740542f0c3e5481ffa26062c05d01"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE950524131738",
+      "hash": "bf5877c2ff7fd734f22ab1ed055f557d4bc865a54810fb59c3ebb175b238e6e7"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE95052911F638",
+      "hash": "3f3e5584a9d563b62d07e0422100be5a9f7f56f0fc5555d4f0a17c3661757107"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE95052A84A627",
+      "hash": "a2bb99b42571471a6bc5ff333a50841b3c8965db79e1a79644082cc7c05904a6"
+    }
+  },
   "2026.4.5": {
     "x86_64_linux_musl": {
       "etag": "0x8DE93CF28627B72",

manifests/shfmt.json

@@ -19,13 +19,13 @@
   },
   "license_markdown": "[BSD-3-Clause](https://github.com/mvdan/sh/blob/master/LICENSE)",
   "latest": {
-    "version": "3.13.0"
+    "version": "3.13.1"
   },
   "3": {
-    "version": "3.13.0"
+    "version": "3.13.1"
   },
   "3.13": {
-    "version": "3.13.0"
+    "version": "3.13.1"
   },
   "3.13.1": {
     "x86_64_linux_musl": {

manifests/tombi.json

@@ -27,6 +27,32 @@
   "0.9": {
     "version": "0.9.15"
   },
+  "0.9.16": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE95275403B11A",
+      "hash": "93f0b5febc18f60c172a7d4008325183f6b90d3c2a2454e27bbc7aaa662c25de"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE952753DFFD89",
+      "hash": "847a696cf655e642d7402560badde15c6fbb2b34a7e21fa33ba2614d74816a4e"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE952754763D72",
+      "hash": "a08e144e55fa8b998e46bf2923c9d8fae1f454771c6411fd213febd9e182ae48"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE952754627D8A",
+      "hash": "0549ee34fbbaf462ae8b17c41fc30dbfdada8e2adadc058b1f92d6d0070ca70e"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE952753D14101",
+      "hash": "4a33dff421e644c03708b26cf73b235f7f146ef6af9ba631b66aa97cb10244ae"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE952753D6E00A",
+      "hash": "1002d0cff2b146eb70d6670e20f8417a31a15a620755ec7b182f35b4f8816f68"
+    }
+  },
   "0.9.15": {
     "x86_64_linux_musl": {
       "etag": "0x8DE93A3FAF30C3B",

manifests/uv.json

@@ -74,6 +74,44 @@
   "0.11": {
     "version": "0.11.3"
   },
+  "0.11.4": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE9512CAD2F111",
+      "hash": "36ce1c5d8997db9b6a24d0f41646d5509b6d1d8b9448c7325f8248a6ea5d4b00"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE9512CA554DA7",
+      "hash": "c326edaf3fd492f53d1c58777f3459c0d87bf9dae8d89e80aec4b0da6622dcf3"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE9512CAABBF06",
+      "hash": "26d84455a40b0272b2ab4785cad298ff2c89cd0765b482e9f85b5a1bd880a863"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE9512C842305D",
+      "hash": "a02ec7667d7bb1d33cdb7e1de22f7e4242967e3df7e350bac6212515e3bce8ac"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE9512C7959B5C",
+      "hash": "9b9cb6c6f58c3246dbf3351ed4e97c500bc3266f5f237d2fd620b66e1c31dc56"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE9512C7C21EA2",
+      "hash": "708b1c210109e50ff520bcd9b6d29cbd8cee584bb55e84d3d1941bf75ab0893d"
+    },
+    "powerpc64le_linux_gnu": {
+      "etag": "0x8DE9512C9A51354",
+      "hash": "3ddb764538a5dcb4967d7375fde193ce5391e37ddd4d1242012d04cf3848479f"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE9512C9D2A6CB",
+      "hash": "93db93607a824d677c47003ee828936913cfdeb2c871bb34cd79c3ec4481e2b1"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE9512CA14BCB1",
+      "hash": "07361e1fb32e870841a27d3d7b0b20c4a81e0cc25eeb8b9115425bfd227d2d05"
+    }
+  },
   "0.11.3": {
     "x86_64_linux_musl": {
       "etag": "0x8DE9038B8911496",

tools/codegen/base/coreutils.json

@@ -5,7 +5,7 @@
   "asset_name": "${package}-${version}-${rust_target}.tar.gz",
   "bin": "${package}-${version}-${rust_target}/${package}${exe}",
   "version_range": ">= 0.1.0",
-  "broken": ["0.7.0"],
+  "broken": ["0.7.0", "0.8.0"],
   "platform": {
     "x86_64_linux_musl": {},
     "x86_64_macos": {},

tools/manifest.sh

@@ -11,11 +11,6 @@ cd -- "$(dirname -- "$0")"/..
 #    ./tools/manifest.sh [PACKAGE [VERSION_REQ]]
 #    ./tools/manifest.sh full
 
-if [[ -n "${GITHUB_ACTIONS:-}" ]] && ! type -P cosign; then
-  go install github.com/sigstore/cosign/v3/cmd/cosign@latest
-  sudo mv -- ~/go/bin/cosign /usr/local/bin
-fi
-
 if [[ $# -eq 1 ]] && [[ "$1" == "full" ]]; then
   for manifest in tools/codegen/base/*.json; do
     package="${manifest##*/}"