Release 2.75.3

Same as 14ee01d8e3.

.github/workflows/ci.yml

@@ -95,7 +95,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     timeout-minutes: 60
     steps:
-      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1
+      - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
       # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
       - run: rm -- Cargo.toml
       - name: Generate tool list
@@ -154,7 +154,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
-      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1
+      - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
       # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
       - run: rm -- Cargo.toml
       - run: env
@@ -187,7 +187,7 @@ jobs:
     runs-on: ubuntu-24.04-arm
     timeout-minutes: 60
     steps:
-      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1
+      - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
       # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
       - run: rm -- Cargo.toml
       - run: env
@@ -298,7 +298,7 @@ jobs:
         env:
           CONTAINER: ${{ matrix.container }}
         if: startsWith(matrix.container, 'centos')
-      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1
+      - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
       # cross attempts to install rust-src when Cargo.toml is available even if `cross --version`
       - run: rm -- Cargo.toml
       - name: Generate tool list

.github/workflows/manifest.yml

@@ -33,7 +33,7 @@ concurrency:
 
 jobs:
   manifest:
-    uses: taiki-e/github-actions/.github/workflows/gen.yml@606d6c78d69927c489d319133073a03157928a7a # main
+    uses: taiki-e/github-actions/.github/workflows/gen.yml@7e4093bf4e87dd120ac0c3be2e47ebe7f737a47d # main
     permissions:
       contents: write # for creating branch for pr
       pull-requests: write # for gh pr review --approve
@@ -46,3 +46,4 @@ jobs:
       branch: update-manifest
       automerge: true
       install-rust: true
+      install-cosign: true

.github/workflows/release.yml

@@ -38,8 +38,8 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
-      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1
-      - uses: taiki-e/install-action@7bc99eee1f1b8902a125006cf790a1f4c8461e63 # v2.69.8
+      - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
+      - uses: taiki-e/install-action@7a562dfa955aa2e4d5b0fd6ebd57ff9715c07b0b # v2.73.0
         with:
           tool: parse-changelog
           fallback: none
@@ -207,8 +207,8 @@ jobs:
     permissions:
       contents: write # for taiki-e/create-gh-release-action
     steps:
-      - uses: taiki-e/checkout-action@83ed61bfbe2b8abbb3c66e8b65b1335484c70009 # v1.4.1
-      - uses: taiki-e/install-action@7bc99eee1f1b8902a125006cf790a1f4c8461e63 # v2.69.8
+      - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
+      - uses: taiki-e/install-action@7a562dfa955aa2e4d5b0fd6ebd57ff9715c07b0b # v2.73.0
         with:
           tool: parse-changelog
           fallback: none
@@ -423,7 +423,7 @@ jobs:
           PREPARE_REV: ${{ needs.prepare.outputs.rev }}
           # Note that if we use secrets.GITHUB_TOKEN, the pushed commit/tag cannot trigger other workflows.
           PUSH_TOKEN: ${{ steps.push-token.outputs.token }}
-      - uses: taiki-e/create-gh-release-action@c5baa0b5dc700cf06439d87935e130220a6882d9 # v1.9.3
+      - uses: taiki-e/create-gh-release-action@f67cf7b2dadd83d36b981e674a6b08063997ce68 # v1.10.0
         with:
           changelog: CHANGELOG.md
           title: $version

CHANGELOG.md

@@ -10,6 +10,26 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [2.75.3] - 2026-04-09
+
+- Enhance security when cargo-binstall fallback is disabled.
+
+- Update `rclone@latest` to 1.73.4.
+
+## [2.75.2] - 2026-04-09
+
+- Update `uv@latest` to 0.11.4.
+
+- Update `tombi@latest` to 0.9.16.
+
+- Update `mise@latest` to 2026.4.6.
+
+## [2.75.1] - 2026-04-08
+
+- Update `shfmt@latest` to 3.13.1.
+
+- Update `cosign@latest` to 3.0.6.
+
 ## [2.75.0] - 2026-04-07
 
 - Support `cosign`. ([#1677](https://github.com/taiki-e/install-action/pull/1677))
@@ -6165,7 +6185,10 @@ Note: This release is considered a breaking change because installing on version
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.75.0...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.75.3...HEAD
+[2.75.3]: https://github.com/taiki-e/install-action/compare/v2.75.2...v2.75.3
+[2.75.2]: https://github.com/taiki-e/install-action/compare/v2.75.1...v2.75.2
+[2.75.1]: https://github.com/taiki-e/install-action/compare/v2.75.0...v2.75.1
 [2.75.0]: https://github.com/taiki-e/install-action/compare/v2.74.1...v2.75.0
 [2.74.1]: https://github.com/taiki-e/install-action/compare/v2.74.0...v2.74.1
 [2.74.0]: https://github.com/taiki-e/install-action/compare/v2.73.0...v2.74.0

README.md

@@ -124,6 +124,8 @@ When installing with `tool: <tool_name>` or `tool: <tool_name>@<omitted_version>
 
 See the linked documentation for information on security when installed using [snap](https://snapcraft.io/docs) or [cargo-binstall](https://github.com/cargo-bins/cargo-binstall#faq).
 
+The default fallback (cargo-binstall) is often affected by GitHub's API rate limits, so we pass the `${{ github.token }}` to cargo-binstall. Disabling the cargo-binstall fallback prevent passing token so helps enhance security.
+
 See the [Supported tools section](#supported-tools) for how to ensure that fallback is not used.
 
 ## Compatibility

action.yml

@@ -47,7 +47,7 @@ runs:
         INPUT_TOOL: ${{ inputs.tool }}
         INPUT_CHECKSUM: ${{ inputs.checksum }}
         INPUT_FALLBACK: ${{ inputs.fallback }}
-        DEFAULT_GITHUB_TOKEN: ${{ github.token }}
+        DEFAULT_GITHUB_TOKEN: ${{ inputs.fallback == 'cargo-binstall' && github.token || '' }}
         ACTION_USER_AGENT: ${{ github.action_repository }} (${{ github.action_ref }})
       if: runner.os != 'Windows'
     # Use pwsh and retry on bash startup failure to work around windows-11-arm runner bug:
@@ -77,6 +77,6 @@ runs:
         INPUT_TOOL: ${{ inputs.tool }}
         INPUT_CHECKSUM: ${{ inputs.checksum }}
         INPUT_FALLBACK: ${{ inputs.fallback }}
-        DEFAULT_GITHUB_TOKEN: ${{ github.token }}
+        DEFAULT_GITHUB_TOKEN: ${{ inputs.fallback == 'cargo-binstall' && github.token || '' }}
         ACTION_USER_AGENT: ${{ github.action_repository }} (${{ github.action_ref }})
       if: runner.os == 'Windows'

manifests/biome.json

@@ -11,6 +11,44 @@
   "2.4": {
     "version": "2.4.10"
   },
+  "2.4.11": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.11/biome-linux-x64-musl",
+      "etag": "0x8DE9656A2924E77",
+      "hash": "f10d041ae17c8d4d659950941fec862dc342945ab3af811e3e90bd93770c08e6",
+      "bin": "biome"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.11/biome-darwin-x64",
+      "etag": "0x8DE9656A24F9CFE",
+      "hash": "9069156955cfd53efc273cfcd4ece85a7af2ed715d20a8717a63bde3e05b5a40",
+      "bin": "biome"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.11/biome-win32-x64.exe",
+      "etag": "0x8DE9656A2C64373",
+      "hash": "6c626fdf119215234cbe51455b07995eb67b24ada85819d9273a02b7c6770fbd",
+      "bin": "biome.exe"
+    },
+    "aarch64_linux_musl": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.11/biome-linux-arm64-musl",
+      "etag": "0x8DE9656A253B713",
+      "hash": "f58e2abd4fa737b90d1d9a4f2a3e87af1583df064b9ec14a10b34f4f34f61d88",
+      "bin": "biome"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.11/biome-darwin-arm64",
+      "etag": "0x8DE9656A22891CD",
+      "hash": "9de8fa513c170b33933f397e4906eb4f8af21890aa5f36a36db22df3d9ed1978",
+      "bin": "biome"
+    },
+    "aarch64_windows": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.11/biome-win32-arm64.exe",
+      "etag": "0x8DE9656A280D5F1",
+      "hash": "a0b928f3894dfaea97906974e30785948e44e9fbab8b3d86897fb7da55ab36a9",
+      "bin": "biome.exe"
+    }
+  },
   "2.4.10": {
     "x86_64_linux_musl": {
       "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.10/biome-linux-x64-musl",

manifests/cosign.json

@@ -28,13 +28,13 @@
   },
   "license_markdown": "[Apache-2.0](https://github.com/sigstore/cosign/blob/main/LICENSE)",
   "latest": {
-    "version": "3.0.5"
+    "version": "3.0.6"
   },
   "3": {
-    "version": "3.0.5"
+    "version": "3.0.6"
   },
   "3.0": {
-    "version": "3.0.5"
+    "version": "3.0.6"
   },
   "3.0.6": {
     "x86_64_linux_musl": {

manifests/dprint.json

@@ -30,6 +30,32 @@
   "latest": {
     "version": "0.53.2"
   },
+  "0.54.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE95A483BDB8E6",
+      "hash": "859ae94e596105201faa59a3fb4bedc8316e226e3e154ae410f9373461e1e41c"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE95A483D34B85",
+      "hash": "fdbffa16cf0890ca30e958ffdabe7748e733867651a438ede1501f0e1a7b5e91"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE95A483BAAF19",
+      "hash": "3fd881acaf7fd4fbc5d07c3030ce79b965a4cb7128fe0eb1ebe725188ccd2715"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE95A483BBBF52",
+      "hash": "9a66b5931ca30402a3dd2933c432c6b6316eedd08037ab0aeb8d24cd17b2a301"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE95A483BA138A",
+      "hash": "1d6a8fb14d66cba0f049738edd4ab3b1afc1de6d936cd32e483e33284cfd1ade"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE95A483C85B52",
+      "hash": "9aa7df605ade001ada4154e24f2806527d0be45ba0f465422efa62a23316f305"
+    }
+  },
   "0.53": {
     "version": "0.53.2"
   },

manifests/gungraun-runner.json

@@ -26,6 +26,28 @@
   "latest": {
     "version": "0.17.2"
   },
+  "0.18.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE9642F0CF107C",
+      "hash": "6bc46e9b0b9df0a13897c277c9c529488e1746b5f6ad6fa33b966f4f395bec28"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE9642F5351AC4",
+      "hash": "9ffe79ab8523c1ada9a52c1352333d6499cd26fabb60d9ba6a8eeb1ab4102dc2"
+    },
+    "powerpc64le_linux_gnu": {
+      "etag": "0x8DE9642F38861F9",
+      "hash": "6b2ddd799fec1517aee95fd03eb021e125b46690c679d29d54824b87b97c61fe"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE9642EC2FBFDC",
+      "hash": "8bf2263ac4a41cb9132df94d4e570eb3e310e2afc970ff6581ccc6a32fc66c22"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE9642EE460E79",
+      "hash": "e540f51a2621fe1a69cf9e7d0acf97d0e1c8b11866ba1ef08564614c496c5259"
+    }
+  },
   "0.17": {
     "version": "0.17.2"
   },

manifests/martin.json

@@ -37,6 +37,24 @@
   "1": {
     "version": "1.4.0"
   },
+  "1.5.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE9606A16881B6",
+      "hash": "29cebebba0bc6bc8cd3f089d4c8e06abecef1a1754b9c816ef4dbf6ae41b6f63"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE9606A093D120",
+      "hash": "c50589f9fd2ad018adb3c085b9f31fe73b9b5587949cc04f6ae37c18cd0cc390"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE9606A0994946",
+      "hash": "11b9305afc987e71d0edc0a7454d1b3f9a7b42d3b2603870729c21bba924ad20"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE9606A08CFAF6",
+      "hash": "c52a2851aae177cfdcd2adf019e391ac4512eaa1566c4f7de3bd4a4746bb60d7"
+    }
+  },
   "1.4": {
     "version": "1.4.0"
   },

manifests/mise.json

@@ -28,13 +28,65 @@
   },
   "license_markdown": "[MIT](https://github.com/jdx/mise/blob/main/LICENSE)",
   "latest": {
-    "version": "2026.4.5"
+    "version": "2026.4.6"
   },
   "2026": {
-    "version": "2026.4.5"
+    "version": "2026.4.6"
   },
   "2026.4": {
-    "version": "2026.4.5"
+    "version": "2026.4.6"
+  },
+  "2026.4.7": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE962B67CA1C09",
+      "hash": "494865907326bb864a31e4ca22bf6ed7572ceedea14ff8e82c783f604551dde3"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE962B6A6B1EA5",
+      "hash": "fdffa9feeba79fd0d87494fa61af0d8b32b9e54c8200d5157a0365302ad531c1"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE962B6B48C5C8",
+      "hash": "86ee64104d1d4202cc2347a325ed22b53fe28462519079b005d95a144de73933"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE962B6482E5D0",
+      "hash": "58040a3fd0d8ac18ce99e7e5ebe79be50d49dc8a5a57f7e48441ab42c083cde0"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE962B698763DB",
+      "hash": "311c41004d74519f97d180f404a623f8945366d9747d3c7b1c545a291d2c168e"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE962B6AD54FFD",
+      "hash": "98ab2597f455e8e114445e30547a89007188cb57a4a2d3211cd7ae159cd2f72a"
+    }
+  },
+  "2026.4.6": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE9505278268D0",
+      "hash": "a99603adb9b185da342a1ff81e93390c42e6a90737086d130e929ddc6af774cc"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE950529B1EF40",
+      "hash": "8c38ef6bdbe87a007d4e428d3974ab4e7b657c5dcf61d288edb69882070e2d0b"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE95052A93FE38",
+      "hash": "1ccca1e747e1e5ddf0621b1a19cc02bd33f740542f0c3e5481ffa26062c05d01"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE950524131738",
+      "hash": "bf5877c2ff7fd734f22ab1ed055f557d4bc865a54810fb59c3ebb175b238e6e7"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE95052911F638",
+      "hash": "3f3e5584a9d563b62d07e0422100be5a9f7f56f0fc5555d4f0a17c3661757107"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE95052A84A627",
+      "hash": "a2bb99b42571471a6bc5ff333a50841b3c8965db79e1a79644082cc7c05904a6"
+    }
   },
   "2026.4.5": {
     "x86_64_linux_musl": {

manifests/rclone.json

@@ -28,13 +28,39 @@
   },
   "license_markdown": "[MIT](https://github.com/rclone/rclone/blob/master/COPYING)",
   "latest": {
-    "version": "1.73.3"
+    "version": "1.73.4"
   },
   "1": {
-    "version": "1.73.3"
+    "version": "1.73.4"
   },
   "1.73": {
-    "version": "1.73.3"
+    "version": "1.73.4"
+  },
+  "1.73.4": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE9573A5AC74E7",
+      "hash": "abc0e6e0f275a469d94645f7ef92c7c7673eed20b6558acec5ff48b74641213c"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE957478A87CEE",
+      "hash": "4ef15279d857372f3ff84b967ad68fc1c3b113d631effb9c09a18e40f8a78fa7"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE9574B24AE740",
+      "hash": "4ad32977eec7f77aef98c035865c333f2005be2478dd6b04c9456d1df7b326bf"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE9573BDB7D24C",
+      "hash": "00c9e230f0004ab5e3b45c00edf7238ba5bff5fc7ea80f5a86a7da5568de6d1c"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE9574816FB321",
+      "hash": "8cfffacc3ce732b1960645a2f7d2ce97c2ac9ba4f2221c13af6378c199a078f9"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE9574BA07586F",
+      "hash": "db0cbec2eee4e852762d65afc5fe1c06cee5ba246c0ea8b765f4a5cf2aaa009a"
+    }
   },
   "1.73.3": {
     "x86_64_linux_musl": {

manifests/shfmt.json

@@ -19,13 +19,13 @@
   },
   "license_markdown": "[BSD-3-Clause](https://github.com/mvdan/sh/blob/master/LICENSE)",
   "latest": {
-    "version": "3.13.0"
+    "version": "3.13.1"
   },
   "3": {
-    "version": "3.13.0"
+    "version": "3.13.1"
   },
   "3.13": {
-    "version": "3.13.0"
+    "version": "3.13.1"
   },
   "3.13.1": {
     "x86_64_linux_musl": {

manifests/syft.json

@@ -44,6 +44,40 @@
   "1.42": {
     "version": "1.42.3"
   },
+  "1.42.4": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE95AFF8B22211",
+      "hash": "590650c2743b83f327d1bf9bec64f6f83b7fec504187bb84f500c862bf8f2a0f"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE95AFF8BA2F4D",
+      "hash": "4a14affad1b90f0bfa38fdb784279f01598b6099df40686391d814620e9de226"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE95AFF8B46965",
+      "hash": "a712f912e8fc83ce2bf6a7cea213c2d5185778d66ea2e07d42c767817f77e381"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE95AFF85E45C7",
+      "hash": "5029bad1ed372649527b1e443cbceef7f5d6ae1cfe52c16e721559f94267128b"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE95AFF7CD5703",
+      "hash": "0797b64cf8841c904682e6007a695f9cd3e72103f064dd286723c0a56a2273e2"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE95AFF8296773",
+      "hash": "6596227b24729d54e727917d5d59e3a6a49fc59cd505aae5a6d7eb630d871e82"
+    },
+    "powerpc64le_linux_musl": {
+      "etag": "0x8DE95AFF78EE682",
+      "hash": "9a54460ae5f6c3484c6f9913187306e4996ba21267e185434783872856dc836d"
+    },
+    "s390x_linux_musl": {
+      "etag": "0x8DE95AFF8AF65FA",
+      "hash": "8b2d019bbed41cc991be32f5c2a630b3dfb8cd76f8c45d815f18c4afd56b280e"
+    }
+  },
   "1.42.3": {
     "x86_64_linux_musl": {
       "etag": "0x8DE85DA2631AC06",

manifests/tombi.json

@@ -22,10 +22,36 @@
   },
   "license_markdown": "[MIT](https://github.com/tombi-toml/tombi/blob/main/LICENSE)",
   "latest": {
-    "version": "0.9.15"
+    "version": "0.9.16"
   },
   "0.9": {
-    "version": "0.9.15"
+    "version": "0.9.16"
+  },
+  "0.9.16": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE95275403B11A",
+      "hash": "93f0b5febc18f60c172a7d4008325183f6b90d3c2a2454e27bbc7aaa662c25de"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE952753DFFD89",
+      "hash": "847a696cf655e642d7402560badde15c6fbb2b34a7e21fa33ba2614d74816a4e"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE952754763D72",
+      "hash": "a08e144e55fa8b998e46bf2923c9d8fae1f454771c6411fd213febd9e182ae48"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE952754627D8A",
+      "hash": "0549ee34fbbaf462ae8b17c41fc30dbfdada8e2adadc058b1f92d6d0070ca70e"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE952753D14101",
+      "hash": "4a33dff421e644c03708b26cf73b235f7f146ef6af9ba631b66aa97cb10244ae"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE952753D6E00A",
+      "hash": "1002d0cff2b146eb70d6670e20f8417a31a15a620755ec7b182f35b4f8816f68"
+    }
   },
   "0.9.15": {
     "x86_64_linux_musl": {

manifests/uv.json

@@ -69,10 +69,124 @@
   },
   "license_markdown": "[Apache-2.0](https://github.com/astral-sh/uv/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/astral-sh/uv/blob/main/LICENSE-MIT)",
   "latest": {
-    "version": "0.11.3"
+    "version": "0.11.4"
   },
   "0.11": {
-    "version": "0.11.3"
+    "version": "0.11.4"
+  },
+  "0.11.6": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE963141E5ABBF",
+      "hash": "aa342a53abe42364093506d7704214d2cdca30b916843e520bc67759a5d20132"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE96314155CD4C",
+      "hash": "8e0ed5035eaa28c7c8cd2a46b5b9a05bfff1ef01dbdc090a010eb8fdf193a457"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE9631418497F4",
+      "hash": "99aa60edd017a256dbf378f372d1cff3292dbc6696e0ea01716d9158d773ab77"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE96313E817163",
+      "hash": "d14ebd6f200047264152daaf97b8bd36c7885a5033e9e8bba8366cb0049c0d00"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE96313DD22057",
+      "hash": "4b69a4e366ec38cd5f305707de95e12951181c448679a00dce2a78868dfc9f5b"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE96313E396EC1",
+      "hash": "bee7b25a7a999f17291810242b47565c3ef2b9205651a0fd02a086f261a7e167"
+    },
+    "powerpc64le_linux_gnu": {
+      "etag": "0x8DE9631407C196A",
+      "hash": "153397d3d82e45e68fb1f4a40ee9898245ec8ed86fd03fcaacaf6e793316acf7"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE963140D2B1B5",
+      "hash": "0e3ead8667b51b07b5fb9d114bcd1914a5fe3159e6959a584dc2f89c6724e123"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE963140E38EA9",
+      "hash": "6e3d4338da2db2c63326721f1eb3b4f32d9bde24aeff11208d397e1aeba8678e"
+    }
+  },
+  "0.11.5": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE95AE7EB11D35",
+      "hash": "ee8a52743ce3979e52872b49c5e58ffa541048cb95132142bff23fe5608d73ea"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE95AE7DE783E0",
+      "hash": "b8964bed538143f9016d807e421e28f0237a29589851fc79e8159751ac64779a"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE95AE7E0A74F6",
+      "hash": "3fa5b6ea9de9256a035e0471f5ef0bb5d95344659723d6eb063e27c76431515d"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE95AE7B8822B5",
+      "hash": "d73860013061c62d6a89f3370527d4c407214038af331147773ae2fd8f6394c1"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE95AE7A8FE593",
+      "hash": "470993e87503874c7c48861daa308b48a7c367e117235bbecf19368b9fdd35b2"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE95AE7AE8EC23",
+      "hash": "9b9b99a985cccf249225aaad76412823e9d9736d605dc2252151172a7f6ab3db"
+    },
+    "powerpc64le_linux_gnu": {
+      "etag": "0x8DE95AE7D14317E",
+      "hash": "c4dabaaa36a13989ab04389263064ca5c27093eb2e7c851ab62d50b6312d9800"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE95AE7D2FD7C9",
+      "hash": "6ae3ec3cf1aab72604bc6aa8486faf4b473066422c49d9c42ea8366ff3039de4"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE95AE7E0B8533",
+      "hash": "1309f1e462462dab2da6a55c37012a228d1c06a55c5b43f8ef901ba1599d9e12"
+    }
+  },
+  "0.11.4": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE9512CAD2F111",
+      "hash": "36ce1c5d8997db9b6a24d0f41646d5509b6d1d8b9448c7325f8248a6ea5d4b00"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE9512CA554DA7",
+      "hash": "c326edaf3fd492f53d1c58777f3459c0d87bf9dae8d89e80aec4b0da6622dcf3"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE9512CAABBF06",
+      "hash": "26d84455a40b0272b2ab4785cad298ff2c89cd0765b482e9f85b5a1bd880a863"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DE9512C842305D",
+      "hash": "a02ec7667d7bb1d33cdb7e1de22f7e4242967e3df7e350bac6212515e3bce8ac"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE9512C7959B5C",
+      "hash": "9b9cb6c6f58c3246dbf3351ed4e97c500bc3266f5f237d2fd620b66e1c31dc56"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE9512C7C21EA2",
+      "hash": "708b1c210109e50ff520bcd9b6d29cbd8cee584bb55e84d3d1941bf75ab0893d"
+    },
+    "powerpc64le_linux_gnu": {
+      "etag": "0x8DE9512C9A51354",
+      "hash": "3ddb764538a5dcb4967d7375fde193ce5391e37ddd4d1242012d04cf3848479f"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE9512C9D2A6CB",
+      "hash": "93db93607a824d677c47003ee828936913cfdeb2c871bb34cd79c3ec4481e2b1"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE9512CA14BCB1",
+      "hash": "07361e1fb32e870841a27d3d7b0b20c4a81e0cc25eeb8b9115425bfd227d2d05"
+    }
   },
   "0.11.3": {
     "x86_64_linux_musl": {

manifests/wasmtime.json

@@ -44,6 +44,40 @@
   "43.0": {
     "version": "43.0.0"
   },
+  "43.0.1": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DE96545D60CB65",
+      "hash": "9f3cf977fc29e2ccab2d198435265b066dce3d608fc6692d700ed1b9b74c35a1"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE96545D950E1A",
+      "hash": "c6ac5b23b52cb78ea7759ce9bd33985c515f2b620b9385021e32e4f51cdc0aa7"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE96545EE43160",
+      "hash": "cb627546a9f0f2f24f3d68fce34b40f13d6b1abe4b70f3afde0038ad9fe4e6ea"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE96545A4D6347",
+      "hash": "dbf36d4e9108df377ddfb88f2d8db4e07efce9726b68da53ae78ed5579293923"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE96545A9C6308",
+      "hash": "c93751ee2f0ecd34c0e799c6261b06c6efeb3c35f2bdb884569ba37931144980"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE96545AFDC4A6",
+      "hash": "0e8dc6155bda65e780279853af147b312fe62673e745a81a413b7a95be76c7ae"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE96545C448CDB",
+      "hash": "8ba5d2c2a9b613de09933998a91cae40a47fde78892f29144358f35ccf7e57c0"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE96545C86C9A4",
+      "hash": "d19c7662bf478d46c235442a2ea2f230b6cb1d98bf99dfe4fc8f8892d43a8fdf"
+    }
+  },
   "43.0.0": {
     "x86_64_linux_gnu": {
       "etag": "0x8DE864C1EE9A6EC",

tools/codegen/base/coreutils.json

@@ -5,7 +5,7 @@
   "asset_name": "${package}-${version}-${rust_target}.tar.gz",
   "bin": "${package}-${version}-${rust_target}/${package}${exe}",
   "version_range": ">= 0.1.0",
-  "broken": ["0.7.0"],
+  "broken": ["0.7.0", "0.8.0"],
   "platform": {
     "x86_64_linux_musl": {},
     "x86_64_macos": {},

tools/manifest.sh

@@ -11,11 +11,6 @@ cd -- "$(dirname -- "$0")"/..
 #    ./tools/manifest.sh [PACKAGE [VERSION_REQ]]
 #    ./tools/manifest.sh full
 
-if [[ -n "${GITHUB_ACTIONS:-}" ]] && ! type -P cosign; then
-  go install github.com/sigstore/cosign/v3/cmd/cosign@latest
-  sudo mv -- ~/go/bin/cosign /usr/local/bin
-fi
-
 if [[ $# -eq 1 ]] && [[ "$1" == "full" ]]; then
   for manifest in tools/codegen/base/*.json; do
     package="${manifest##*/}"