Release 2.53.2

https://github.blog/changelog/2025-04-15-upcoming-breaking-changes-and-releases-for-github-actions/

.github/.cspell/project-dictionary.txt

@@ -32,3 +32,4 @@ watchexec
 worktree
 xbuild
 xscale
+zizmor

.github/workflows/ci.yml

@@ -72,11 +72,6 @@ jobs:
           - os: macos-13
           - os: macos-14
           - os: macos-15
-          - os: windows-2019
-          - os: windows-2019
-            bash: msys64
-          - os: windows-2019
-            bash: cygwin
           - os: windows-2022
           - os: windows-2022
             bash: msys64

CHANGELOG.md

@@ -10,6 +10,34 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [2.53.2] - 2025-06-18
+
+- Fix `cargo-nextest` installation failure on Ubuntu 24.04 due to HTTP 403 error on requests to crates.io. ([#1007](https://github.com/taiki-e/install-action/pull/1007))
+
+- Update `rclone@latest` to 1.70.0.
+
+## [2.53.1] - 2025-06-17
+
+- Support `typos` on AArch64 Linux. ([#1004](https://github.com/taiki-e/install-action/pull/1004), thanks @vivienm)
+
+- Update `cargo-nextest@latest` to 0.9.99.
+
+## [2.53.0] - 2025-06-16
+
+- Support `zizmor`. ([#1002](https://github.com/taiki-e/install-action/pull/1002), thanks @jayvdb)
+
+- Update `osv-scanner@latest` to 2.0.3.
+
+## [2.52.8] - 2025-06-13
+
+- Update `cargo-careful@latest` to 0.4.7.
+
+- Update `syft@latest` to 1.27.1.
+
+- Update `cargo-deny@latest` to 0.18.3.
+
+- Update `cargo-binstall@latest` to 1.13.0.
+
 ## [2.52.7] - 2025-06-07
 
 - Update `cargo-nextest@latest` to 0.9.98.
@@ -3974,7 +4002,11 @@ Note: This release is considered a breaking change because installing on version
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.52.7...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.53.2...HEAD
+[2.53.2]: https://github.com/taiki-e/install-action/compare/v2.53.1...v2.53.2
+[2.53.1]: https://github.com/taiki-e/install-action/compare/v2.53.0...v2.53.1
+[2.53.0]: https://github.com/taiki-e/install-action/compare/v2.52.8...v2.53.0
+[2.52.8]: https://github.com/taiki-e/install-action/compare/v2.52.7...v2.52.8
 [2.52.7]: https://github.com/taiki-e/install-action/compare/v2.52.6...v2.52.7
 [2.52.6]: https://github.com/taiki-e/install-action/compare/v2.52.5...v2.52.6
 [2.52.5]: https://github.com/taiki-e/install-action/compare/v2.52.4...v2.52.5

TOOLS.md

@@ -73,6 +73,7 @@ See the [Supported tools section in README.md](README.md#supported-tools) for ho
 | [**wasmtime**](https://github.com/bytecodealliance/wasmtime) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/bytecodealliance/wasmtime/releases) | Linux, macOS, Windows | [Apache-2.0 WITH LLVM-exception](https://github.com/bytecodealliance/wasmtime/blob/main/LICENSE) |
 | [**xbuild**](https://github.com/rust-mobile/xbuild) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/rust-mobile/xbuild/releases) | Linux, macOS, Windows | [Apache-2.0 OR MIT](https://github.com/rust-mobile/xbuild/blob/v0.2.0/xbuild/Cargo.toml#L7) |
 | [**xh**](https://github.com/ducaale/xh) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/ducaale/xh/releases) | Linux, macOS, Windows | [MIT](https://github.com/ducaale/xh/blob/master/LICENSE) |
+| [**zizmor**](https://github.com/zizmorcore/zizmor) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/zizmorcore/zizmor/releases) | Linux, macOS, Windows | [MIT](https://github.com/zizmorcore/zizmor/blob/main/LICENSE) |
 | [**zola**](https://github.com/getzola/zola) | `$CARGO_HOME/bin` | [GitHub Releases](https://github.com/getzola/zola/releases) | Linux, macOS, Windows | [MIT](https://github.com/getzola/zola/blob/master/LICENSE) |
 
 [cargo-binstall]: https://github.com/cargo-bins/cargo-binstall

main.sh

@@ -220,20 +220,22 @@ read_manifest() {
       # TODO: don't hardcode tool name and use 'immediate_yank_reflection' field in base manifest.
       case "${tool}" in
         cargo-nextest | nextest)
-          crate_info=$(retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 "https://crates.io/api/v1/crates/${rust_crate}")
-          while true; do
-            yanked=$(jq -r ".versions[] | select(.num == \"${exact_version}\") | .yanked" <<<"${crate_info}")
-            if [[ "${yanked}" != "true" ]]; then
-              break
-            fi
-            previous_stable_version=$(jq -r '.previous_stable_version' <<<"${manifest}")
-            if [[ "${previous_stable_version}" == "null" ]]; then
-              break
-            fi
-            info "${tool}@${exact_version} is yanked; downgrade to ${previous_stable_version}"
-            exact_version="${previous_stable_version}"
-            manifest=$(jq -r ".[\"${exact_version}\"]" "${manifest_dir}/${tool}.json")
-          done
+          crate_info=$(curl --proto '=https' --tlsv1.2 -fsSL --retry 10 "https://crates.io/api/v1/crates/${rust_crate}" || true)
+          if [[ -n "${crate_info}" ]]; then
+            while true; do
+              yanked=$(jq -r ".versions[] | select(.num == \"${exact_version}\") | .yanked" <<<"${crate_info}")
+              if [[ "${yanked}" != "true" ]]; then
+                break
+              fi
+              previous_stable_version=$(jq -r '.previous_stable_version' <<<"${manifest}")
+              if [[ "${previous_stable_version}" == "null" ]]; then
+                break
+              fi
+              info "${tool}@${exact_version} is yanked; downgrade to ${previous_stable_version}"
+              exact_version="${previous_stable_version}"
+              manifest=$(jq -r ".[\"${exact_version}\"]" "${manifest_dir}/${tool}.json")
+            done
+          fi
           ;;
       esac
     fi

manifests/cargo-binstall.json

@@ -22,32 +22,32 @@
   },
   "license_markdown": "[GPL-3.0](https://github.com/cargo-bins/cargo-binstall/blob/HEAD/crates/bin/LICENSE)",
   "latest": {
-    "version": "1.12.7"
+    "version": "1.13.0"
   },
-  "1.12.7": {
+  "1.13.0": {
     "x86_64_linux_musl": {
-      "etag": "0x8DDA512D81346D4",
-      "checksum": "c011c1735e0a6fc98e2ddc6f394b7276fdf8f01fe8cb606d029d578230b94d25"
+      "etag": "0x8DDA8291E356B17",
+      "checksum": "12ba6a4022bdf121701fbd6c01d8021d7f867993877b26582f0d7281bae7a1f9"
     },
     "x86_64_macos": {
-      "etag": "0x8DDA512861F5F05",
-      "checksum": "fe5403a08605f6fa05df004c37a94369bdb21d760c9bb1b515f9160ff199cb1d"
+      "etag": "0x8DDA828B2A2FA39",
+      "checksum": "9e5b08b6f4145580bf1f5c98c3b877493066b5e228c675150eb62fc9e0a83259"
     },
     "x86_64_windows": {
-      "etag": "0x8DDA5140EB0A631",
-      "checksum": "8b206ca337957fa1a812961f385919acb2da03ff45a15b9b56e8c3dc1ec049f0"
+      "etag": "0x8DDA829DE2DFEEC",
+      "checksum": "76eddc873105062022b1fd1b8ca090879325664d71635e94d59ce09fff3889b9"
     },
     "aarch64_linux_musl": {
-      "etag": "0x8DDA5128C495B81",
-      "checksum": "cf366bc74c0d822e62e3490d9c4dbd02b70a74f89a2c11f92a8d5af9b1827a30"
+      "etag": "0x8DDA82874CC35EB",
+      "checksum": "2be845b457aabfc66d68be77d69c0fd849edd446a4d23b2e3fd174ca502bd343"
     },
     "aarch64_macos": {
-      "etag": "0x8DDA512ECCF5603",
-      "checksum": "7c134843f4cf8625981a2e93f3b591687c405161cc0d4e0d8b9b96a277272209"
+      "etag": "0x8DDA82917C58C4C",
+      "checksum": "02d6ca67746aecb27fd4bb063b9be3e6f6bc67dcd6c3105941bff64e064f991a"
     },
     "aarch64_windows": {
-      "etag": "0x8DDA513A6BBB56C",
-      "checksum": "dd8b9333aba8704dddfb82a487360492167819d63ca171e1629e994856319c81"
+      "etag": "0x8DDA8299B758A49",
+      "checksum": "a57c01ae03825c44f946e8b773ebd018a0f3f1a4861a611c6cd61be180bd3cd6"
     }
   }
 }

manifests/cargo-careful.json

@@ -1,75 +1,128 @@
 {
   "rust_crate": "cargo-careful",
-  "template": {
-    "x86_64_linux_musl": {
-      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v${version}/cargo-careful.x86_64-unknown-linux-musl"
-    },
-    "x86_64_macos": {
-      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v${version}/cargo-careful.x86_64-apple-darwin"
-    },
-    "x86_64_windows": {
-      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v${version}/cargo-careful.exe"
-    }
-  },
+  "template": null,
   "license_markdown": "[MIT](https://github.com/RalfJung/cargo-careful/blob/master/LICENSE-MIT) OR [Apache-2.0](https://github.com/RalfJung/cargo-careful/blob/master/LICENSE-APACHE)",
   "latest": {
-    "version": "0.4.3"
+    "version": "0.4.7"
   },
   "0.4": {
-    "version": "0.4.3"
+    "version": "0.4.7"
+  },
+  "0.4.7": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.7/cargo-careful-x86_64-unknown-linux-musl",
+      "etag": "0x8DDA9EA18FE3BD8",
+      "checksum": "9a53546e2e038cc723439ad7ba1cce3774fc3fa229ee59d1b45929b8666d6cde"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.7/cargo-careful-x86_64-apple-darwin",
+      "etag": "0x8DDA9EA18FD04D6",
+      "checksum": "1d48f5f24ab5a0069b2f6772e1060d6ab8bbd652b09262576cfce5838490f2e3"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.7/cargo-careful-windows.exe",
+      "etag": "0x8DDA9EA190AB0F5",
+      "checksum": "854d2e191338145a948d87813a2ec9a8095ecca1eddc8911b1f4fe98345fa6b2"
+    }
+  },
+  "0.4.6": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.6/cargo-careful-x86_64-unknown-linux-musl",
+      "etag": "0x8DD9D21CC303869",
+      "checksum": "7486474f22bc719ba7ea57bb6b36e3a362ffa163d80878bfd8106a675339382f"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.6/cargo-careful-x86_64-apple-darwin",
+      "etag": "0x8DD9D21CC206BAE",
+      "checksum": "4dd7928eb69dd0839e8782da294db9c2e0c4f05277727d1c342870e8409898de"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.6/cargo-careful-windows.exe",
+      "etag": "0x8DD9D21CC26F3FC",
+      "checksum": "a187648862d4a4e63fe33c2675bd5281c506b96839711803be467b3fd5e23447"
+    }
+  },
+  "0.4.5": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.5/cargo-careful-x86_64-unknown-linux-musl",
+      "etag": "0x8DD8F0CCB92AD10",
+      "checksum": "1541426e95e779530c5770f98dd9adff5d376b555f8a97f1bf95728ecf281230"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.5/cargo-careful-x86_64-apple-darwin",
+      "etag": "0x8DD8F0CCB86D38F",
+      "checksum": "03abfdb85d35857c2ef14793b548f976318169bde7a856e830a3b84e84626200"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.5/cargo-careful-windows.exe",
+      "etag": "0x8DD8F0CCB9899CF",
+      "checksum": "d68b34d8fa1d6d97ab47a895d8beaf1f18634fce26beb2fa1f21af7cc20fbebf"
+    }
   },
   "0.4.3": {
     "x86_64_linux_musl": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.3/cargo-careful.x86_64-unknown-linux-musl",
       "etag": "0x8DCB92F10570A48",
       "checksum": "8a39c7c88744b7dec49fdedd08588e75343aabd466c9ec811832b65680c64e6d"
     },
     "x86_64_macos": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.3/cargo-careful.x86_64-apple-darwin",
       "etag": "0x8DCB92F104F71BD",
       "checksum": "c4d1b19bc243bd1d8ed5d99413d9a625b852e394e614b7871d71deb9557940e9"
     },
     "x86_64_windows": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.3/cargo-careful.exe",
       "etag": "0x8DCB92F104F4AD5",
       "checksum": "1a3bb682553c48cef478609a377e8f845929efad8c4c903ae4ad66348ac5b0c3"
     }
   },
   "0.4.2": {
     "x86_64_linux_musl": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.2/cargo-careful.x86_64-unknown-linux-musl",
       "etag": "0x8DC77FF17EF35B7",
       "checksum": "ee14c5796acab604714e358de11bf5204055410ae8fd4891df7f5d62461402c3"
     },
     "x86_64_macos": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.2/cargo-careful.x86_64-apple-darwin",
       "etag": "0x8DC77FF17F769E4",
       "checksum": "480efaf0a577161332b27ea13c8703ead1b6355b5c6541f5bd61d440440b4bde"
     },
     "x86_64_windows": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.2/cargo-careful.exe",
       "etag": "0x8DC77FF17F3EB5D",
       "checksum": "ac374b7799a37e3ef21c6bfe409583c3acbc57242fbb32e8534269b5e97b8ee9"
     }
   },
   "0.4.1": {
     "x86_64_linux_musl": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.1/cargo-careful.x86_64-unknown-linux-musl",
       "etag": "0x8DC0FA12501A132",
       "checksum": "ea403df41ca913e536f97b8a039343173abae399436570a16d271908af989808"
     },
     "x86_64_macos": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.1/cargo-careful.x86_64-apple-darwin",
       "etag": "0x8DC0FA124F8F869",
       "checksum": "ccbee4b5a0f5bf235c038b89d6046c08b2bff405ffa7289f4194f5402ea96c15"
     },
     "x86_64_windows": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.1/cargo-careful.exe",
       "etag": "0x8DC0FA124FEBE49",
       "checksum": "655ac5c504b2f54f11807edc6d9a19cea668bfb119ea086c5848504f7d09071c"
     }
   },
   "0.4.0": {
     "x86_64_linux_musl": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.0/cargo-careful.x86_64-unknown-linux-musl",
       "etag": "0x8DBBB2F3DD23635",
       "checksum": "54cd7e1972e9faf085e3d0798c02054d064bc72de051a2636ece6f5b0ce0176d"
     },
     "x86_64_macos": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.0/cargo-careful.x86_64-apple-darwin",
       "etag": "0x8DBBB2F3D8053BA",
       "checksum": "70d92ad8adf84192caa2066ba981780df926c8aa6cbd398fe489f87af336fe61"
     },
     "x86_64_windows": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.4.0/cargo-careful.exe",
       "etag": "0x8DBBB2F40025764",
       "checksum": "01ebcae79d9ba0cbb56e5c6bb5757d9cd074a3635704d15b0ef62a000c5d03a8"
     }
@@ -79,28 +132,34 @@
   },
   "0.3.4": {
     "x86_64_linux_musl": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.3.4/cargo-careful.x86_64-unknown-linux-musl",
       "etag": "0x8DB4E18D54BDD62",
       "checksum": "a9cfc7775546bd646a9e9252527c5caa56c429d854c6d8664ab4d63ed87827bd"
     },
     "x86_64_macos": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.3.4/cargo-careful.x86_64-apple-darwin",
       "etag": "0x8DB4E18D554FADC",
       "checksum": "b29d263648fc287250a413ebf53ddb37310564ac44bfd71c5a35ca8eaddac22f"
     },
     "x86_64_windows": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.3.4/cargo-careful.exe",
       "etag": "0x8DB4E18D5625959",
       "checksum": "50cebcb95cda4fa3b4d5010ed6252be92de2748d3f5c00aff3bc6fe5f39c0906"
     }
   },
   "0.3.3": {
     "x86_64_linux_musl": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.3.3/cargo-careful.x86_64-unknown-linux-musl",
       "etag": "0x8DB44A8B737767B",
       "checksum": "bb2b06f4df62110c8ae89a006b548a10a4da36d0f8f3ff67f7417fb51ed96b0a"
     },
     "x86_64_macos": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.3.3/cargo-careful.x86_64-apple-darwin",
       "etag": "0x8DB44A8B749B17A",
       "checksum": "c396bae85ad4b414976ea6943bdb6fb666e56735ad51255ab615399e40641fec"
     },
     "x86_64_windows": {
+      "url": "https://github.com/RalfJung/cargo-careful/releases/download/v0.3.3/cargo-careful.exe",
       "etag": "0x8DB44A8B7333585",
       "checksum": "87b35993b38fc60c069c45d58e79bae6c8f5253ce2459dff6a6b0b629c7aeb4c"
     }

manifests/cargo-deny.json

@@ -24,10 +24,32 @@
   },
   "license_markdown": "[MIT](https://github.com/EmbarkStudios/cargo-deny/blob/main/LICENSE-MIT) OR [Apache-2.0](https://github.com/EmbarkStudios/cargo-deny/blob/main/LICENSE-APACHE)",
   "latest": {
-    "version": "0.18.2"
+    "version": "0.18.3"
   },
   "0.18": {
-    "version": "0.18.2"
+    "version": "0.18.3"
+  },
+  "0.18.3": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DDA8DAC7EAA910",
+      "checksum": "5037f3c167a8da8cea04c34a89e74cef95c646f2a537750b2db58e54f6a788e7"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDA8D9FF4A71E8",
+      "checksum": "bb819f7e2b7ac74e38fb61ccdf2cf741c653c5f506d29dfd1941604abb4e4ac0"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDA8DC0758B698",
+      "checksum": "a28b4401f92500da7014b06f4204efb31da8c134ef3eefd4194c7d61e11fb619"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DDA8DEAF1BDC1E",
+      "checksum": "8d82b10962ccd64e82744ccedc77209d728393b5be2c66300ba9009705901041"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDA8DC8DD2DE57",
+      "checksum": "9af127b035c25e2a8bce212d8e40d6e22f25361868fcd740db6096320762ed56"
+    }
   },
   "0.18.2": {
     "x86_64_linux_musl": {

manifests/cargo-nextest.json

@@ -19,10 +19,33 @@
   },
   "license_markdown": "[Apache-2.0](https://github.com/nextest-rs/nextest/blob/main/LICENSE-APACHE) OR [MIT](https://github.com/nextest-rs/nextest/blob/main/LICENSE-MIT)",
   "latest": {
-    "version": "0.9.98"
+    "version": "0.9.99"
   },
   "0.9": {
-    "version": "0.9.98"
+    "version": "0.9.99"
+  },
+  "0.9.99": {
+    "previous_stable_version": "0.9.98",
+    "x86_64_linux_gnu": {
+      "etag": "0x8DDAD1AE536D65C",
+      "checksum": "49442ae3f03e56e04581a251ace3edf700095aa7c1bba89fd16a1386295a70df"
+    },
+    "x86_64_linux_musl": {
+      "etag": "0x8DDAD1AC4058DCF",
+      "checksum": "f556a73ae1f748f1500f6c414259cc87b27c2396e419e6728cb53879474e55a8"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDAD1A8D46B839",
+      "checksum": "fb1e9fb9a6da22972182d96e62f6664d325db3788775c96a07dacaf04cfed244"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDAD1AA9EB3EA5",
+      "checksum": "754486e3fbe21e8fb10965af0c48a071010f3e001b8da0917dadfaae5ff2ebc5"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DDAD1AFEB67D5C",
+      "checksum": "2097164de24b364c9a518fb583bcc822577d29fa0083168126d0c9c3684e149f"
+    }
   },
   "0.9.98": {
     "previous_stable_version": "0.9.97",

manifests/osv-scanner.json

@@ -3,13 +3,45 @@
   "template": null,
   "license_markdown": "[Apache-2.0](https://github.com/google/osv-scanner/blob/main/LICENSE)",
   "latest": {
-    "version": "2.0.2"
+    "version": "2.0.3"
   },
   "2": {
-    "version": "2.0.2"
+    "version": "2.0.3"
   },
   "2.0": {
-    "version": "2.0.2"
+    "version": "2.0.3"
+  },
+  "2.0.3": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.0.3/osv-scanner_linux_amd64",
+      "etag": "0x8DDAC7B6CADDC11",
+      "checksum": "9acf365f60abd1c8cefeea4db897b0a6afdfe1e1f56776f634bc7bce64be5149"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.0.3/osv-scanner_darwin_amd64",
+      "etag": "0x8DDAC7B6DEFC790",
+      "checksum": "a8580cf56fe24c2a41b902c371d2faa450a6c8011708fc91483aac27d2c10c8e"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.0.3/osv-scanner_windows_amd64.exe",
+      "etag": "0x8DDAC7B6C92838D",
+      "checksum": "b37ec1b56f2620c2ba84bf165f4186495041baf73caa5fe2a6d16eafff74ccea"
+    },
+    "aarch64_linux_musl": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.0.3/osv-scanner_linux_arm64",
+      "etag": "0x8DDAC7B6C88A395",
+      "checksum": "de20c4334325937a6cef9534967c83e2e77362654d71c66c2709f8108ec587ea"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.0.3/osv-scanner_darwin_arm64",
+      "etag": "0x8DDAC7B6C8021A2",
+      "checksum": "e32f6144d2a49ae68321b3827270f8fd1cf5d226d6938ea1090f1aefd209cef7"
+    },
+    "aarch64_windows": {
+      "url": "https://github.com/google/osv-scanner/releases/download/v2.0.3/osv-scanner_windows_arm64.exe",
+      "etag": "0x8DDAC7B6DCED010",
+      "checksum": "9920eed2ba989407459cd03e50d639207047373a68574ae2b08ba3967db1c237"
+    }
   },
   "2.0.2": {
     "x86_64_linux_musl": {

manifests/rclone.json

@@ -28,10 +28,39 @@
   },
   "license_markdown": "[MIT](https://github.com/rclone/rclone/blob/master/COPYING)",
   "latest": {
-    "version": "1.69.3"
+    "version": "1.70.0"
   },
   "1": {
-    "version": "1.69.3"
+    "version": "1.70.0"
+  },
+  "1.70": {
+    "version": "1.70.0"
+  },
+  "1.70.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DDAE5236E90A0D",
+      "checksum": "bc6ae0c3f19ea4bf24fa265804fd38a4ad8cf4e5013db228d3d6e09ca20bf6cf"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDAE53054A54EC",
+      "checksum": "cf02d719ac04c9aba63d53494ee13c2c1dde31fbed0d89163a27b38c3851e174"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDAE533E40DB55",
+      "checksum": "34b0a43502e508708f279108114e7e77a0a2ad94b41b27f02264b2a934201746"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DDAE524EE0254A",
+      "checksum": "3d27c6c30a6fa34fe99bcaa021de0c948059af4e76486fb022b24315d5c2841e"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDAE530DFA451C",
+      "checksum": "2357aac1ae7bfd76532306bf11cd139fc4609467820b91c7517b25de2ceb018e"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DDAE5346123BDE",
+      "checksum": "4b0ef37414c3ee5ad4a1e2577078263b44385a8073b450234c63023344ff3f32"
+    }
   },
   "1.69": {
     "version": "1.69.3"

manifests/syft.json

@@ -24,10 +24,57 @@
   },
   "license_markdown": "[Apache-2.0](https://github.com/anchore/syft/blob/main/LICENSE)",
   "latest": {
-    "version": "1.26.1"
+    "version": "1.27.1"
   },
   "1": {
-    "version": "1.26.1"
+    "version": "1.27.1"
+  },
+  "1.27": {
+    "version": "1.27.1"
+  },
+  "1.27.1": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DDA9B8265DB50F",
+      "checksum": "c2cb5867a238baf41adf15f7e01e28cbd886378859eed81e52c080ca0346eefe"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDA9B82744C6C3",
+      "checksum": "6b7acfea1441f2f4e4740a60ebd7fe8e151e618ed29c3765aa58e58c47f9363b"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDA9B8276659BD",
+      "checksum": "50ac4d381e58fb16a115a7458aa3f1ba48e54cecdb6a632417439bbc553bc6f7"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DDA9B8265705D2",
+      "checksum": "797d2b57110be185fefa2eb9f2b0bfd2fa5aa153910d33f7da67f5ade28f6254"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDA9B827438F9E",
+      "checksum": "4e155573140c8962c9aa9e7d303a972ac7a3cb6784a7b57c1ada7c6b225a7245"
+    }
+  },
+  "1.27.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DDA785C5ABEDDA",
+      "checksum": "2cee2128b0a05dfadec34676def064979b3098bfa447679c38ce3bb69e9321f3"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DDA785C6BC79B1",
+      "checksum": "b7dc7baa22facb5d9f3fac52587c902c8244eba71069cbb6d62612e551d341ca"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DDA785C6C0BAA7",
+      "checksum": "8d418ec4c1cb9efb6cc6c1a1216a8efd070895740d99c4acddd98d79ea9e1890"
+    },
+    "aarch64_linux_musl": {
+      "etag": "0x8DDA785C5A69CA5",
+      "checksum": "0774bfbff7d3fd6858396a0b4a8b671d6a9d00630f463fd082527d241c151059"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DDA785C6AA17CA",
+      "checksum": "06eb48ffd2e2ee02c28b631ad92e6cc27ecbab4d7298e257ef9cac95253fc257"
+    }
   },
   "1.26": {
     "version": "1.26.1"

manifests/typos.json

@@ -10,6 +10,9 @@
     "x86_64_windows": {
       "url": "https://github.com/crate-ci/typos/releases/download/v${version}/typos-v${version}-x86_64-pc-windows-msvc.zip"
     },
+    "aarch64_linux_musl": {
+      "url": "https://github.com/crate-ci/typos/releases/download/v${version}/typos-v${version}-aarch64-unknown-linux-musl.tar.gz"
+    },
     "aarch64_macos": {
       "url": "https://github.com/crate-ci/typos/releases/download/v${version}/typos-v${version}-aarch64-apple-darwin.tar.gz"
     }
@@ -37,6 +40,10 @@
       "etag": "0x8DDA1FF3E510EF5",
       "checksum": "e2ec599862e5d5eda5c365cba8babb0594ca0fc180549163504766f687e01990"
     },
+    "aarch64_linux_musl": {
+      "etag": "0x8DDA1FEAF61FC49",
+      "checksum": "9a0a3b70b36b0726d52a80da51af10bb9bf22532bf71b779fea07cd5b011b5bb"
+    },
     "aarch64_macos": {
       "etag": "0x8DDA1FE94187E62",
       "checksum": "a537968e6ab0a6845bd18a889105cf6f67b605cceaa18cc6afbe5785bbb9ee5b"
@@ -55,6 +62,10 @@
       "etag": "0x8DDA1F8B5FEF420",
       "checksum": "e9b6ee3faef1947935c59439c62ab3ddd2c071a65c62db3312adc0a546815d9d"
     },
+    "aarch64_linux_musl": {
+      "etag": "0x8DDA1F84F0D59C6",
+      "checksum": "aad652154c2d804908f108a8c5e83229df45fc3591d497bc06c901660499adc1"
+    },
     "aarch64_macos": {
       "etag": "0x8DDA1F8AA37A91A",
       "checksum": "f3cb2b4c34f252d09055ae6cb647d21cb3d00ac2b0124259b005b1b18d6d5787"
@@ -76,6 +87,10 @@
       "etag": "0x8DD89895B206129",
       "checksum": "18dd1d26dbd674eb467ab2bc1af26d3ee2210f8620297f38949a364bbad47541"
     },
+    "aarch64_linux_musl": {
+      "etag": "0x8DD8989341F35A4",
+      "checksum": "53404115fe58e196506f0a5dcf7d9060cb462429458faee0ab3f6dd7ea461c37"
+    },
     "aarch64_macos": {
       "etag": "0x8DD8988ED3A3774",
       "checksum": "9da6598cc38a800273bb5d3c7866ad19995d65d69bd399d8b49a97f770c5f0db"
@@ -97,6 +112,10 @@
       "etag": "0x8DD86688BF17827",
       "checksum": "4c48d861eca575be03d9433be937c4daa4c6264934f92a56298e7af474457f95"
     },
+    "aarch64_linux_musl": {
+      "etag": "0x8DD8667D09522A0",
+      "checksum": "87e53661ec8bd6f466191ac76d543482e86e1e55a3611d85cc110a3e7c0e6d0f"
+    },
     "aarch64_macos": {
       "etag": "0x8DD866821C90B83",
       "checksum": "f9d75d8cbbd479db5d060e9b666422f03fa20f31d213443f7a73e15a8875aa5d"
@@ -115,6 +134,10 @@
       "etag": "0x8DD706045F84954",
       "checksum": "1a8b5a2f2f7aaf9d07ac9b4a2039b9ae38722e12fd4afd5a08d6bdc8435f4279"
     },
+    "aarch64_linux_musl": {
+      "etag": "0x8DD705FF4BFA51B",
+      "checksum": "9bdb063d808db42c1dcae8184fc9be5f10d11e91140114e18485092684276f40"
+    },
     "aarch64_macos": {
       "etag": "0x8DD705FFA9F5B5F",
       "checksum": "a172195e1b1f1e011b3034913d1c87f0bbf0552a096b4ead0e3fa0620f4329cd"
@@ -133,6 +156,10 @@
       "etag": "0x8DD6E1DF2C8E1CD",
       "checksum": "d1e38e393fefd8e9092b83772726337d44b742e5f17908a84da610426f584f29"
     },
+    "aarch64_linux_musl": {
+      "etag": "0x8DD6E1DA51E8E3B",
+      "checksum": "3b9339fd9022f7f995f60d788e4fe643c2bb77dedc4a5ca6736baed5803f46fe"
+    },
     "aarch64_macos": {
       "etag": "0x8DD6E1D52F48457",
       "checksum": "96684058f88bd8343aa992223c9937f399254eb5277f0d297d2ac7b022d990b7"
@@ -154,6 +181,10 @@
       "etag": "0x8DD6B0F7183706C",
       "checksum": "008bbfe96ab4fbec343cc0a761367c90de42d6049f471f8c0feb1666bd319d02"
     },
+    "aarch64_linux_musl": {
+      "etag": "0x8DD6B0F13568F27",
+      "checksum": "b75ad91db7cc89f845bae5f640dde7480599d3f39a2922708191709d2c6b9319"
+    },
     "aarch64_macos": {
       "etag": "0x8DD6B0F40621A3E",
       "checksum": "4a62e43c3474ab82818d19982f624b2201595de04737046091e1cde71ad74370"
@@ -172,6 +203,10 @@
       "etag": "0x8DD5FF1BEDC01B7",
       "checksum": "937b2b45104a70f275579f90ec9f811e891097f5bb789a5a2b66f426f0f938b0"
     },
+    "aarch64_linux_musl": {
+      "etag": "0x8DD5FF1785F72F0",
+      "checksum": "59b2f82f02a7cd0cff95a5bbfab0989bfc74832c55d4a47706f55053cad0d8bb"
+    },
     "aarch64_macos": {
       "etag": "0x8DD5FF15BE62448",
       "checksum": "6f6efbc9d8c248eb82f4df125fa4a4c9e79e4d42cf8f7a27cdcdd3f6be9c3f10"
@@ -190,6 +225,10 @@
       "etag": "0x8DD5AC388693F7F",
       "checksum": "4f2fc7fc2001cf34a7bbc03e232cbdceed8963ab9250c18bc3d819c46d7a0056"
     },
+    "aarch64_linux_musl": {
+      "etag": "0x8DD5AC32EFF69CA",
+      "checksum": "257fb8f6c9f87d5886800bafdf8914bedb064fe3f7d0e8faef964ccb626062c2"
+    },
     "aarch64_macos": {
       "etag": "0x8DD5AC30E280C31",
       "checksum": "9cf515928d1cbf5412127548b1cb723f2971c4f26265fcea738ee14f1c3bc115"
@@ -208,6 +247,10 @@
       "etag": "0x8DD586CD7D654FE",
       "checksum": "ca2f1620393ec2dfd62668ca7d9e6753443582aedaf46ab1da154a012eaa9a31"
     },
+    "aarch64_linux_musl": {
+      "etag": "0x8DD586C9A3A3394",
+      "checksum": "55478569c7c5c5b461d560f2ea1c900c393bd18e9aa461b9d097c6341865fd49"
+    },
     "aarch64_macos": {
       "etag": "0x8DD586C9BCC2DE2",
       "checksum": "dbb1ff5c308f6328efb6f2c9d60d84b0e3a8bda963f63ecda5c62af1765902e1"
@@ -229,6 +272,10 @@
       "etag": "0x8DD55AC5A390B2C",
       "checksum": "795daf8175179d2b1ab992fa3d5c45bae6818d07b62b2f82a664a4787eb02326"
     },
+    "aarch64_linux_musl": {
+      "etag": "0x8DD55AC552BBE8B",
+      "checksum": "eb2260a1e722c30a94093c67cfd283ebedba65c2bb5ce6f8262550fbab5daf51"
+    },
     "aarch64_macos": {
       "etag": "0x8DD55AC2283CA7B",
       "checksum": "789537a84b40034cde80637baf989e6d3866f41155e16c22659d9ca929015348"
@@ -247,6 +294,10 @@
       "etag": "0x8DD51BF1E2DE6DA",
       "checksum": "8e85bf422026ee15b9464796c48bfb26b53a040132ed5cdf905cbf60d4283764"
     },
+    "aarch64_linux_musl": {
+      "etag": "0x8DD51BEEF35AA90",
+      "checksum": "40dc4bf763fd38aa5998f10c1fe82a592ada9fc03e239877e9222cc2ffabfeb9"
+    },
     "aarch64_macos": {
       "etag": "0x8DD51BEDDC55FCA",
       "checksum": "d8cdf714be02e1b5ea78376d257ebd8776e5bf2bd9ea92954b6289e7f5f041f9"
@@ -265,6 +316,10 @@
       "etag": "0x8DD50FFEAD694DD",
       "checksum": "b4590074a208bc62a4194a3ab35fbb776c785c135cb7bd6f9689c920761b962d"
     },
+    "aarch64_linux_musl": {
+      "etag": "0x8DD50FFBB29AFCF",
+      "checksum": "3eacad9990bbc9d8f0b8bb177b2f15962a2f344a6638cf946afc54821a2a8293"
+    },
     "aarch64_macos": {
       "etag": "0x8DD50FF9B929E8E",
       "checksum": "f30be4284ca2780e999dcbe54c58671dcff38e715cfedd2c3c526123054f5715"

manifests/zizmor.json

@@ -0,0 +1,52 @@
+{
+  "rust_crate": "zizmor",
+  "template": {
+    "x86_64_linux_gnu": {
+      "url": "https://github.com/zizmorcore/zizmor/releases/download/v${version}/zizmor-x86_64-unknown-linux-gnu.tar.gz"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/zizmorcore/zizmor/releases/download/v${version}/zizmor-x86_64-apple-darwin.tar.gz"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/zizmorcore/zizmor/releases/download/v${version}/zizmor-x86_64-pc-windows-msvc.zip"
+    },
+    "aarch64_linux_gnu": {
+      "url": "https://github.com/zizmorcore/zizmor/releases/download/v${version}/zizmor-aarch64-unknown-linux-gnu.tar.gz"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/zizmorcore/zizmor/releases/download/v${version}/zizmor-aarch64-apple-darwin.tar.gz"
+    }
+  },
+  "license_markdown": "[MIT](https://github.com/zizmorcore/zizmor/blob/main/LICENSE)",
+  "latest": {
+    "version": "1.9.0"
+  },
+  "1": {
+    "version": "1.9.0"
+  },
+  "1.9": {
+    "version": "1.9.0"
+  },
+  "1.9.0": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DD9FC256DC942D",
+      "checksum": "7ec3b5d0796324245eab6acf9223cc04b01ab5357e32bc89f5f42972082bb955"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DD9FC25670B70E",
+      "checksum": "bcdded3b6692a7030d59bfff58c20548b2ac9ec9ac34ed975645bd7cac6d3cb4"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DD9FC2566AA363",
+      "checksum": "8012a860749c7ebb76a4bed1c039759d05fd898b1e5b41eedb540583833ca4d1"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DD9FC2566FF49D",
+      "checksum": "4dec6688af284fff10d84846771999df00085d107e8cb8dc8d6a1c6cdc4a9640"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DD9FC2566C284B",
+      "checksum": "dd9233c82889e37c271fd9f615aeed670c4c3bdac014fb58ce64552468ac3afb"
+    }
+  }
+}

tools/ci/tool-list.sh

@@ -7,7 +7,11 @@ cd -- "$(dirname -- "$0")"/../..
 
 # They don't provide prebuilt binaries for musl or old glibc host.
 # version `GLIBC_2.35' not found
+glibc_pre_2_39_incompat=(
+  zizmor
+)
 glibc_pre_2_35_incompat=(
+  "${glibc_pre_2_39_incompat[@]}"
   zola
 )
 # version `GLIBC_2.34' not found
@@ -44,9 +48,6 @@ glibc_pre_2_17_incompat=(
 musl_incompat=(
   "${glibc_pre_2_17_incompat[@]}"
 )
-win2019_gnu_incompat=(
-  cargo-spellcheck
-)
 
 incompat_tools=()
 case "${1:-}" in
@@ -61,8 +62,6 @@ case "${1:-}" in
     exit 1
     ;;
 esac
-runner="${2:-}"
-bash="${3:-}"
 case "$(uname -s)" in
   Linux)
     host_os=linux
@@ -71,33 +70,38 @@ case "$(uname -s)" in
       incompat_tools+=("${musl_incompat[@]}")
     else
       host_glibc_version=$(grep -E "GLIBC|GNU libc" <<<"${ldd_version}" | sed "s/.* //g")
-      higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.35"$'\n'"${host_glibc_version}" | tail -1)
+      higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.39"$'\n'"${host_glibc_version}" | tail -1)
       if [[ "${higher_glibc_version}" != "${host_glibc_version}" ]]; then
-        higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.34"$'\n'"${host_glibc_version}" | tail -1)
+        higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.35"$'\n'"${host_glibc_version}" | tail -1)
         if [[ "${higher_glibc_version}" != "${host_glibc_version}" ]]; then
-          higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.31"$'\n'"${host_glibc_version}" | tail -1)
+          higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.34"$'\n'"${host_glibc_version}" | tail -1)
           if [[ "${higher_glibc_version}" != "${host_glibc_version}" ]]; then
-            higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.28"$'\n'"${host_glibc_version}" | tail -1)
+            higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.31"$'\n'"${host_glibc_version}" | tail -1)
             if [[ "${higher_glibc_version}" != "${host_glibc_version}" ]]; then
-              higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.27"$'\n'"${host_glibc_version}" | tail -1)
+              higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.28"$'\n'"${host_glibc_version}" | tail -1)
               if [[ "${higher_glibc_version}" != "${host_glibc_version}" ]]; then
-                higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.17"$'\n'"${host_glibc_version}" | tail -1)
+                higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.27"$'\n'"${host_glibc_version}" | tail -1)
                 if [[ "${higher_glibc_version}" != "${host_glibc_version}" ]]; then
-                  incompat_tools+=("${glibc_pre_2_17_incompat[@]}")
+                  higher_glibc_version=$(LC_ALL=C sort -Vu <<<"2.17"$'\n'"${host_glibc_version}" | tail -1)
+                  if [[ "${higher_glibc_version}" != "${host_glibc_version}" ]]; then
+                    incompat_tools+=("${glibc_pre_2_17_incompat[@]}")
+                  else
+                    incompat_tools+=("${glibc_pre_2_27_incompat[@]}")
+                  fi
                 else
-                  incompat_tools+=("${glibc_pre_2_27_incompat[@]}")
+                  incompat_tools+=("${glibc_pre_2_28_incompat[@]}")
                 fi
               else
-                incompat_tools+=("${glibc_pre_2_28_incompat[@]}")
+                incompat_tools+=("${glibc_pre_2_31_incompat[@]}")
               fi
             else
-              incompat_tools+=("${glibc_pre_2_31_incompat[@]}")
+              incompat_tools+=("${glibc_pre_2_34_incompat[@]}")
             fi
           else
-            incompat_tools+=("${glibc_pre_2_34_incompat[@]}")
+            incompat_tools+=("${glibc_pre_2_35_incompat[@]}")
           fi
         else
-          incompat_tools+=("${glibc_pre_2_35_incompat[@]}")
+          incompat_tools+=("${glibc_pre_2_39_incompat[@]}")
         fi
       fi
     fi
@@ -106,16 +110,7 @@ case "$(uname -s)" in
     fi
     ;;
   Darwin) host_os=macos ;;
-  MINGW* | MSYS* | CYGWIN* | Windows_NT)
-    host_os=windows
-    case "${bash}" in
-      msys64 | cygwin)
-        if [[ "${runner}" == "windows-2019" ]]; then
-          incompat_tools+=("${win2019_gnu_incompat[@]}")
-        fi
-        ;;
-    esac
-    ;;
+  MINGW* | MSYS* | CYGWIN* | Windows_NT) host_os=windows ;;
   *) bail "unrecognized OS type '$(uname -s)'" ;;
 esac
 # See main.sh

tools/codegen/base/cargo-careful.json

@@ -2,12 +2,12 @@
   "repository": "https://github.com/RalfJung/cargo-careful",
   "tag_prefix": "v",
   "rust_crate": "${package}",
-  "asset_name": "${package}.${rust_target}",
+  "asset_name": "${package}-${rust_target}",
   "platform": {
     "x86_64_linux_musl": {},
     "x86_64_macos": {},
     "x86_64_windows": {
-      "asset_name": "${package}${exe}"
+      "asset_name": "${package}-windows${exe}"
     }
   }
 }

tools/codegen/base/typos.json

@@ -10,6 +10,7 @@
     "x86_64_windows": {
       "asset_name": "${package}-v${version}-${rust_target}.zip"
     },
+    "aarch64_linux_musl": {},
     "aarch64_macos": {}
   }
 }

tools/codegen/base/zizmor.json

@@ -0,0 +1,16 @@
+{
+  "repository": "https://github.com/zizmorcore/zizmor",
+  "tag_prefix": "v",
+  "rust_crate": "${package}",
+  "asset_name": "${package}-${rust_target}.tar.gz",
+  "version_range": ">= 1.9.0",
+  "platform": {
+    "x86_64_linux_gnu": {},
+    "x86_64_macos": {},
+    "x86_64_windows": {
+      "asset_name": "${package}-${rust_target}.zip"
+    },
+    "aarch64_linux_gnu": {},
+    "aarch64_macos": {}
+  }
+}