Release 2.16.2

CHANGELOG.md

@@ -10,6 +10,36 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [2.16.2] - 2023-08-22
+
+- Update `cargo-llvm-cov@latest` to 0.5.28.
+
+## [2.16.1] - 2023-08-22
+
+- Update `wasmtime@latest` to 12.0.0.
+
+## [2.16.0] - 2023-08-19
+
+- Support `cargo-machete`. ([#196](https://github.com/taiki-e/install-action/pull/196), thanks @tgnottingham)
+
+## [2.15.6] - 2023-08-19
+
+- Update `protoc@latest` to 3.24.1.
+
+## [2.15.5] - 2023-08-18
+
+- Update `syft@latest` to 0.87.1.
+
+## [2.15.4] - 2023-08-15
+
+- Update `syft@latest` to 0.87.0.
+
+## [2.15.3] - 2023-08-14
+
+- Update `cargo-minimal-versions@latest` to 0.1.14.
+
+- Update `cargo-llvm-cov@latest` to 0.5.27.
+
 ## [2.15.2] - 2023-08-12
 
 - Update `cargo-llvm-cov@latest` to 0.5.26.
@@ -1069,7 +1099,14 @@ Note: This release is considered a breaking change because installing on version
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.15.2...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.16.2...HEAD
+[2.16.2]: https://github.com/taiki-e/install-action/compare/v2.16.1...v2.16.2
+[2.16.1]: https://github.com/taiki-e/install-action/compare/v2.16.0...v2.16.1
+[2.16.0]: https://github.com/taiki-e/install-action/compare/v2.15.6...v2.16.0
+[2.15.6]: https://github.com/taiki-e/install-action/compare/v2.15.5...v2.15.6
+[2.15.5]: https://github.com/taiki-e/install-action/compare/v2.15.4...v2.15.5
+[2.15.4]: https://github.com/taiki-e/install-action/compare/v2.15.3...v2.15.4
+[2.15.3]: https://github.com/taiki-e/install-action/compare/v2.15.2...v2.15.3
 [2.15.2]: https://github.com/taiki-e/install-action/compare/v2.15.1...v2.15.2
 [2.15.1]: https://github.com/taiki-e/install-action/compare/v2.15.0...v2.15.1
 [2.15.0]: https://github.com/taiki-e/install-action/compare/v2.14.3...v2.15.0

README.md

@@ -87,6 +87,7 @@ https://spdx.org/licenses
 | [**cargo-dinghy**](https://github.com/sonos/dinghy) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/sonos/dinghy/releases) | Linux, macOS | [Apache-2.0](https://github.com/sonos/dinghy/blob/HEAD/LICENSE-APACHE) OR [MIT](https://github.com/sonos/dinghy/blob/HEAD/LICENSE-MIT) |
 | [**cargo-hack**](https://github.com/taiki-e/cargo-hack) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/taiki-e/cargo-hack/releases) | Linux, macOS, Windows | [Apache-2.0](https://github.com/taiki-e/cargo-hack/blob/HEAD/LICENSE-APACHE) OR [MIT](https://github.com/taiki-e/cargo-hack/blob/HEAD/LICENSE-MIT) |
 | [**cargo-llvm-cov**](https://github.com/taiki-e/cargo-llvm-cov) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/taiki-e/cargo-llvm-cov/releases) | Linux, macOS, Windows | [Apache-2.0](https://github.com/taiki-e/cargo-llvm-cov/blob/HEAD/LICENSE-APACHE) OR [MIT](https://github.com/taiki-e/cargo-llvm-cov/blob/HEAD/LICENSE-MIT) |
+| [**cargo-machete**](https://github.com/bnjbvr/cargo-machete) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/bnjbvr/cargo-machete/releases) | Linux, macOS, Windows | [MIT](https://github.com/bnjbvr/cargo-machete/blob/HEAD/LICENSE.md) |
 | [**cargo-make**](https://github.com/sagiegurari/cargo-make) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/sagiegurari/cargo-make/releases) | Linux, macOS, Windows | [Apache-2.0](https://github.com/sagiegurari/cargo-make/blob/master/LICENSE) |
 | [**cargo-minimal-versions**](https://github.com/taiki-e/cargo-minimal-versions) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/taiki-e/cargo-minimal-versions/releases) | Linux, macOS, Windows | [Apache-2.0](https://github.com/taiki-e/cargo-minimal-versions/blob/HEAD/LICENSE-APACHE) OR [MIT](https://github.com/taiki-e/cargo-minimal-versions/blob/HEAD/LICENSE-MIT) |
 | [**cargo-no-dev-deps**](https://github.com/taiki-e/cargo-no-dev-deps) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/taiki-e/cargo-no-dev-deps/releases) | Linux, macOS, Windows | [Apache-2.0](https://github.com/taiki-e/cargo-no-dev-deps/blob/HEAD/LICENSE-APACHE) OR [MIT](https://github.com/taiki-e/cargo-no-dev-deps/blob/HEAD/LICENSE-MIT) |

manifests/cargo-llvm-cov.json

@@ -18,10 +18,44 @@
     }
   },
   "latest": {
-    "version": "0.5.26"
+    "version": "0.5.28"
   },
   "0.5": {
-    "version": "0.5.26"
+    "version": "0.5.28"
+  },
+  "0.5.28": {
+    "x86_64_linux_musl": {
+      "checksum": "2e615725d904a4372f8613b8fc2012f392e22e8ce1190b3ad38a63ef25958f9e"
+    },
+    "x86_64_macos": {
+      "checksum": "56cc1e4c456b560608edea0871b7d5c0f6b61abe2eab6dcfdf66ef5dc32849c9"
+    },
+    "x86_64_windows": {
+      "checksum": "60d1c6253a6ac1d33127d22f9520237229422f9c91102e02134d9ec2f40d21fa"
+    },
+    "aarch64_linux_musl": {
+      "checksum": "a944fb36384a8baf9625c26f5232a82e344be38075be9175d50acf1128c418e3"
+    },
+    "aarch64_macos": {
+      "checksum": "035f1d632073d90d4b7986e9392b6659552d83759e154697d6032d2eb5fb7557"
+    }
+  },
+  "0.5.27": {
+    "x86_64_linux_musl": {
+      "checksum": "74e554fb069ee0410422158d293f91eddf1f126c59801df5474d79c39c6c63af"
+    },
+    "x86_64_macos": {
+      "checksum": "8f86128ef90534f1ccdb033ec05f37447e5861eceacb12871598a9f7b1097a1d"
+    },
+    "x86_64_windows": {
+      "checksum": "f9f0eadbe325594dc5b45cf226fa8c738635539a6a93fce39783876c0f6b4344"
+    },
+    "aarch64_linux_musl": {
+      "checksum": "20161f2a1f8322ec98281bd818219a9c9cb4744b2dbe95bf073af29b1e47cc83"
+    },
+    "aarch64_macos": {
+      "checksum": "43ad8e2bcd3a394f08c6e1582253ea759b611b0b94774933b7ebcc91a23f82e8"
+    }
   },
   "0.5.26": {
     "x86_64_linux_musl": {

manifests/cargo-machete.json

@@ -0,0 +1,82 @@
+{
+  "rust_crate": "cargo-machete",
+  "template": null,
+  "latest": {
+    "version": "0.5.0"
+  },
+  "0.5": {
+    "version": "0.5.0"
+  },
+  "0.5.0": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/bnjbvr/cargo-machete/releases/download/v0.5.0/cargo-machete-v0.5.0-x86_64-unknown-linux-musl.tar.gz",
+      "checksum": "1ce5cf9fa24f6861a14318fb96db59011865d0adf979c2240d006407815ca174",
+      "bin": "cargo-machete-v0.5.0-x86_64-unknown-linux-musl/cargo-machete"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/bnjbvr/cargo-machete/releases/download/v0.5.0/cargo-machete-v0.5.0-x86_64-apple-darwin.tar.gz",
+      "checksum": "0550b85e43905fe8bfe0e83cb04d220a80f7aa898aaa3be0fe7a96f8ffd5e7f5",
+      "bin": "cargo-machete-v0.5.0-x86_64-apple-darwin/cargo-machete"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/bnjbvr/cargo-machete/releases/download/v0.5.0/cargo-machete-v0.5.0-x86_64-pc-windows-msvc.tar.gz",
+      "checksum": "fd5ebb959cc214e8dab2661c65562eb0ec3d1da72d5f5a746f6bb6111b1854f8",
+      "bin": "cargo-machete-v0.5.0-x86_64-pc-windows-msvc/cargo-machete.exe"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/bnjbvr/cargo-machete/releases/download/v0.5.0/cargo-machete-v0.5.0-aarch64-apple-darwin.tar.gz",
+      "checksum": "0386aa9ace17f6d96244b1315f8e996325ab81584a37fd3bc1d300a84455e55f",
+      "bin": "cargo-machete-v0.5.0-aarch64-apple-darwin/cargo-machete"
+    }
+  },
+  "0.4": {
+    "version": "0.4.0"
+  },
+  "0.4.0": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/bnjbvr/cargo-machete/releases/download/v0.4.0/cargo-machete-v0.4.0-x86_64-unknown-linux-musl.tar.gz",
+      "checksum": "92e77b38b91e30e9d7383779b71035c5eebd8d874e1683db19239062d0dd1000",
+      "bin": "cargo-machete-v0.4.0-x86_64-unknown-linux-musl/cargo-machete"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/bnjbvr/cargo-machete/releases/download/v0.4.0/cargo-machete-v0.4.0-x86_64-apple-darwin.tar.gz",
+      "checksum": "db1f036bafc424af7247aa27748c08b3174b85b414e774cad51689f3e01ec64e",
+      "bin": "cargo-machete-v0.4.0-x86_64-apple-darwin/cargo-machete"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/bnjbvr/cargo-machete/releases/download/v0.4.0/cargo-machete-v0.4.0-x86_64-pc-windows-msvc.tar.gz",
+      "checksum": "0c31b0b4d7a3092dc84375d3993947cbdbf9db7f4d81128aca8a13e268cfe49c",
+      "bin": "cargo-machete-v0.4.0-x86_64-pc-windows-msvc/cargo-machete.exe"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/bnjbvr/cargo-machete/releases/download/v0.4.0/cargo-machete-v0.4.0-aarch64-apple-darwin.tar.gz",
+      "checksum": "5f8a3004642535c78d2b7a49cb0e1fc6287643bc5c52d10e77ae3e79b558e190",
+      "bin": "cargo-machete-v0.4.0-aarch64-apple-darwin/cargo-machete"
+    }
+  },
+  "0.3": {
+    "version": "0.3.1"
+  },
+  "0.3.1": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/bnjbvr/cargo-machete/releases/download/v0.3.1/cargo-machete-0.3.1-x86_64-unknown-linux-musl.tar.gz",
+      "checksum": "d5e15a4c1926296746e0da4d52d8c7203acc1d453c8874c6b6f56a0ae52d4d87",
+      "bin": "cargo-machete-0.3.1-x86_64-unknown-linux-musl/cargo-machete"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/bnjbvr/cargo-machete/releases/download/v0.3.1/cargo-machete-0.3.1-x86_64-apple-darwin.tar.gz",
+      "checksum": "83431f27f24f59d47385497d1a19ebe7c6e32f36dd163d804aa5b1337ca1489b",
+      "bin": "cargo-machete-0.3.1-x86_64-apple-darwin/cargo-machete"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/bnjbvr/cargo-machete/releases/download/v0.3.1/cargo-machete-0.3.1-x86_64-pc-windows-msvc.tar.gz",
+      "checksum": "28aa111b283bc97f9259b0644b99e0109dde6414a5a672e00347d8cbb6e83804",
+      "bin": "cargo-machete-0.3.1-x86_64-pc-windows-msvc/cargo-machete.exe"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/bnjbvr/cargo-machete/releases/download/v0.3.1/cargo-machete-0.3.1-aarch64-apple-darwin.tar.gz",
+      "checksum": "3ac0cee2102d74c71c831af1c7b8e229b254d3318927baed340728ddc61a10a8",
+      "bin": "cargo-machete-0.3.1-aarch64-apple-darwin/cargo-machete"
+    }
+  }
+}

manifests/cargo-minimal-versions.json

@@ -21,10 +21,30 @@
     }
   },
   "latest": {
-    "version": "0.1.13"
+    "version": "0.1.14"
   },
   "0.1": {
-    "version": "0.1.13"
+    "version": "0.1.14"
+  },
+  "0.1.14": {
+    "x86_64_linux_musl": {
+      "checksum": "f7284ada48677bef2acb9348a6bfe86705246b57681db178a28634e25c61459d"
+    },
+    "x86_64_macos": {
+      "checksum": "d5121056830331b512e3648f7edca3d86cc84e1621f2d3369d24bef549b2c0f0"
+    },
+    "x86_64_windows": {
+      "checksum": "00a478f561c25db3009d14aba8d0dc8a9e5c9e4f114fd9522a6a09e5de289f55"
+    },
+    "aarch64_linux_musl": {
+      "checksum": "8915fdcde61536c740b885ce83cd2f38a607bf5d7121d8535e8be43bd820b0d6"
+    },
+    "aarch64_macos": {
+      "checksum": "7c737c7ade8f4080d04dacec82b9b94752d3b98fd179a2f51af986fc26d273ba"
+    },
+    "aarch64_windows": {
+      "checksum": "d87025a5881f0c24ecb52061bc0b3c7fca9ca7beee3b75566392dce759ecd7a5"
+    }
   },
   "0.1.13": {
     "x86_64_linux_musl": {

manifests/protoc.json

@@ -2,13 +2,35 @@
   "rust_crate": null,
   "template": null,
   "latest": {
-    "version": "3.24.0"
+    "version": "3.24.1"
   },
   "3": {
-    "version": "3.24.0"
+    "version": "3.24.1"
   },
   "3.24": {
-    "version": "3.24.0"
+    "version": "3.24.1"
+  },
+  "3.24.1": {
+    "x86_64_linux_gnu": {
+      "url": "https://github.com/protocolbuffers/protobuf/releases/download/v24.1/protoc-24.1-linux-x86_64.zip",
+      "checksum": "1b9d1467205530986d58d24d2b89b9db3c8a9e3c31ed40b2a223913480ca8987"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/protocolbuffers/protobuf/releases/download/v24.1/protoc-24.1-osx-x86_64.zip",
+      "checksum": "476782d4220ff7b2d8b333a648a1f8a52c200211db85e76347e668d9d4c07515"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/protocolbuffers/protobuf/releases/download/v24.1/protoc-24.1-win64.zip",
+      "checksum": "dad1efed75cb772a0c9e5d4646006bf87e1e051191473a2a30c9db66ee223cfd"
+    },
+    "aarch64_linux_gnu": {
+      "url": "https://github.com/protocolbuffers/protobuf/releases/download/v24.1/protoc-24.1-linux-aarch_64.zip",
+      "checksum": "676a38ff5584c913bbab3991bb1a515b8cbd22a12c029e24c440d9b05c816f1c"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/protocolbuffers/protobuf/releases/download/v24.1/protoc-24.1-osx-aarch_64.zip",
+      "checksum": "e7c622512ad2133f25bc6369e1330809daa7ae2742611bf596bbc904e18ca8d5"
+    }
   },
   "3.24.0": {
     "x86_64_linux_gnu": {

manifests/syft.json

@@ -23,7 +23,44 @@
     }
   },
   "latest": {
-    "version": "0.86.1"
+    "version": "0.87.1"
+  },
+  "0.87": {
+    "version": "0.87.1"
+  },
+  "0.87.1": {
+    "x86_64_linux_musl": {
+      "checksum": "1f6f5aa0bb5682f8db74cb5adf00fac9bddec40f6fcde808b71c43d3593e3cf5"
+    },
+    "x86_64_macos": {
+      "checksum": "c24990a01127bfe512351bb65694460629a6c83828e02aef9f8e7ece5d0b3c8a"
+    },
+    "x86_64_windows": {
+      "checksum": "ec89bf68571238a67b83c26a32371b67efa6daeaa819d67a9f281a69cb2e0cd0"
+    },
+    "aarch64_linux_musl": {
+      "checksum": "5570eb42a9a2b696d4d8398a9733f7f2dda0e4a243413960aeab44a1183a6f47"
+    },
+    "aarch64_macos": {
+      "checksum": "eeae4d4ed97f9519697027d658deab72fcdc94a6f2c4d77354a82085fb8db1f4"
+    }
+  },
+  "0.87.0": {
+    "x86_64_linux_musl": {
+      "checksum": "9567007466ae6c5c893abd680258f8781b0709188fb0aab59eb1eb35c64ea6b6"
+    },
+    "x86_64_macos": {
+      "checksum": "60137a14c6a1340e7405baa07876b5e442e756b208fd9b5b3cb2f9a14a410e19"
+    },
+    "x86_64_windows": {
+      "checksum": "2fe288c607b1d2febac30b5997b76aa83b40694b8af7af6690d9f64385212f3c"
+    },
+    "aarch64_linux_musl": {
+      "checksum": "14f5876c6543d084fa0f91ec928af8bd0dba7ea09f5848528c6402b20ff72041"
+    },
+    "aarch64_macos": {
+      "checksum": "2b68cefc0b51781fdf2669ef3633904fe057740b6752d2704db34ba380238387"
+    }
   },
   "0.86": {
     "version": "0.86.1"

manifests/wasmtime.json

@@ -2,7 +2,40 @@
   "rust_crate": "wasmtime-cli",
   "template": null,
   "latest": {
-    "version": "11.0.1"
+    "version": "12.0.0"
+  },
+  "12": {
+    "version": "12.0.0"
+  },
+  "12.0": {
+    "version": "12.0.0"
+  },
+  "12.0.0": {
+    "x86_64_linux_gnu": {
+      "url": "https://github.com/bytecodealliance/wasmtime/releases/download/v12.0.0/wasmtime-v12.0.0-x86_64-linux.tar.xz",
+      "checksum": "c31e0d8eb2797627ba1f72b313315da960016f87ccec3cce2ae67654060a8f04",
+      "bin": "wasmtime-v12.0.0-x86_64-linux/wasmtime"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/bytecodealliance/wasmtime/releases/download/v12.0.0/wasmtime-v12.0.0-x86_64-macos.tar.xz",
+      "checksum": "27a649593f3106f256c227d26ce8f3d03b360a267d89b094537217104fa05e88",
+      "bin": "wasmtime-v12.0.0-x86_64-macos/wasmtime"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/bytecodealliance/wasmtime/releases/download/v12.0.0/wasmtime-v12.0.0-x86_64-windows.zip",
+      "checksum": "fb0c6e981f2d1997174ef198819091bdca517c20ecd727762e0b38d2643b1b4d",
+      "bin": "wasmtime-v12.0.0-x86_64-windows/wasmtime.exe"
+    },
+    "aarch64_linux_gnu": {
+      "url": "https://github.com/bytecodealliance/wasmtime/releases/download/v12.0.0/wasmtime-v12.0.0-aarch64-linux.tar.xz",
+      "checksum": "3693fd9db6ad37e6937c5fdc003f0038bbfde9eec0ad33ee7cc611a85cac29c4",
+      "bin": "wasmtime-v12.0.0-aarch64-linux/wasmtime"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/bytecodealliance/wasmtime/releases/download/v12.0.0/wasmtime-v12.0.0-aarch64-macos.tar.xz",
+      "checksum": "64d594618e47e0b5b70a3b38c943e6d79c145ea281defef1ad13c92faafc3e8c",
+      "bin": "wasmtime-v12.0.0-aarch64-macos/wasmtime"
+    }
   },
   "11": {
     "version": "11.0.1"

tools/codegen/base/cargo-machete.json

@@ -0,0 +1,13 @@
+{
+  "repository": "https://github.com/bnjbvr/cargo-machete",
+  "tag_prefix": "v",
+  "rust_crate": "${package}",
+  "asset_name": "${package}-v${version}-${rust_target}.tar.gz",
+  "bin": "${package}-v${version}-${rust_target}/${package}${exe}",
+  "platform": {
+    "x86_64_linux_musl": {},
+    "x86_64_macos": {},
+    "x86_64_windows": {},
+    "aarch64_macos": {}
+  }
+}

tools/tidy.sh

@@ -112,6 +112,49 @@ if [[ -n "$(git ls-files '*.rs')" ]]; then
         echo "${new}" >"${lib}"
         check_diff "${lib}"
     done
+    # Make sure that public Rust crates don't contain executables.
+    failed_files=''
+    metadata=$(cargo metadata --format-version=1 --all-features --no-deps)
+    has_public_crate=''
+    for id in $(jq <<<"${metadata}" '.workspace_members[]'); do
+        pkg=$(jq <<<"${metadata}" ".packages[] | select(.id == ${id})")
+        publish=$(jq <<<"${pkg}" -r '.publish')
+        # Publishing is unrestricted if null, and forbidden if an empty array.
+        if [[ "${publish}" == "[]" ]]; then
+            continue
+        fi
+        has_public_crate='1'
+    done
+    if [[ -n "${has_public_crate}" ]]; then
+        info "checking file permissions"
+        if [[ -f Cargo.toml ]] && grep -Eq '^\[package\]' Cargo.toml && ! grep -Eq '^publish = false' Cargo.toml; then
+            if ! grep -Eq '^exclude = \[.*\.\*.*\]' Cargo.toml; then
+                error "top-level Cargo.toml of real manifest should have exclude field with \"/.*\" and \"/tools\""
+            elif ! grep -Eq '^exclude = \[.*/tools.*\]' Cargo.toml; then
+                error "top-level Cargo.toml of real manifest should have exclude field with \"/.*\" and \"/tools\""
+            fi
+        fi
+        for p in $(git ls-files); do
+            # Skip directories.
+            if [[ -d "${p}" ]]; then
+                continue
+            fi
+            # Top-level hidden files/directories and tools/* are excluded from crates.io (ensured by the above check).
+            # TODO: fully respect exclude field in Cargo.toml.
+            case "${p}" in
+                .* | tools/*) continue ;;
+            esac
+            if [[ -x "${p}" ]]; then
+                failed_files+="${p}"$'\n'
+            fi
+        done
+        if [[ -n "${failed_files}" ]]; then
+            error "file-permissions-check failed: executable should be in tools/ directory"
+            echo "======================================="
+            echo -n "${failed_files}"
+            echo "======================================="
+        fi
+    fi
 fi
 
 # C/C++ (if exists)