Release 2.75.3

CHANGELOG.md

@@ -10,6 +10,12 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [2.75.3] - 2026-04-09
+
+- Enhance security when cargo-binstall fallback is disabled.
+
+- Update `rclone@latest` to 1.73.4.
+
 ## [2.75.2] - 2026-04-09
 
 - Update `uv@latest` to 0.11.4.
@@ -6179,7 +6185,8 @@ Note: This release is considered a breaking change because installing on version
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.75.2...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v2.75.3...HEAD
+[2.75.3]: https://github.com/taiki-e/install-action/compare/v2.75.2...v2.75.3
 [2.75.2]: https://github.com/taiki-e/install-action/compare/v2.75.1...v2.75.2
 [2.75.1]: https://github.com/taiki-e/install-action/compare/v2.75.0...v2.75.1
 [2.75.0]: https://github.com/taiki-e/install-action/compare/v2.74.1...v2.75.0

README.md

@@ -124,6 +124,8 @@ When installing with `tool: <tool_name>` or `tool: <tool_name>@<omitted_version>
 
 See the linked documentation for information on security when installed using [snap](https://snapcraft.io/docs) or [cargo-binstall](https://github.com/cargo-bins/cargo-binstall#faq).
 
+The default fallback (cargo-binstall) is often affected by GitHub's API rate limits, so we pass the `${{ github.token }}` to cargo-binstall. Disabling the cargo-binstall fallback prevent passing token so helps enhance security.
+
 See the [Supported tools section](#supported-tools) for how to ensure that fallback is not used.
 
 ## Compatibility

action.yml

@@ -47,7 +47,7 @@ runs:
         INPUT_TOOL: ${{ inputs.tool }}
         INPUT_CHECKSUM: ${{ inputs.checksum }}
         INPUT_FALLBACK: ${{ inputs.fallback }}
-        DEFAULT_GITHUB_TOKEN: ${{ github.token }}
+        DEFAULT_GITHUB_TOKEN: ${{ inputs.fallback == 'cargo-binstall' && github.token || '' }}
         ACTION_USER_AGENT: ${{ github.action_repository }} (${{ github.action_ref }})
       if: runner.os != 'Windows'
     # Use pwsh and retry on bash startup failure to work around windows-11-arm runner bug:
@@ -77,6 +77,6 @@ runs:
         INPUT_TOOL: ${{ inputs.tool }}
         INPUT_CHECKSUM: ${{ inputs.checksum }}
         INPUT_FALLBACK: ${{ inputs.fallback }}
-        DEFAULT_GITHUB_TOKEN: ${{ github.token }}
+        DEFAULT_GITHUB_TOKEN: ${{ inputs.fallback == 'cargo-binstall' && github.token || '' }}
         ACTION_USER_AGENT: ${{ github.action_repository }} (${{ github.action_ref }})
       if: runner.os == 'Windows'

manifests/biome.json

@@ -11,6 +11,44 @@
   "2.4": {
     "version": "2.4.10"
   },
+  "2.4.11": {
+    "x86_64_linux_musl": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.11/biome-linux-x64-musl",
+      "etag": "0x8DE9656A2924E77",
+      "hash": "f10d041ae17c8d4d659950941fec862dc342945ab3af811e3e90bd93770c08e6",
+      "bin": "biome"
+    },
+    "x86_64_macos": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.11/biome-darwin-x64",
+      "etag": "0x8DE9656A24F9CFE",
+      "hash": "9069156955cfd53efc273cfcd4ece85a7af2ed715d20a8717a63bde3e05b5a40",
+      "bin": "biome"
+    },
+    "x86_64_windows": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.11/biome-win32-x64.exe",
+      "etag": "0x8DE9656A2C64373",
+      "hash": "6c626fdf119215234cbe51455b07995eb67b24ada85819d9273a02b7c6770fbd",
+      "bin": "biome.exe"
+    },
+    "aarch64_linux_musl": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.11/biome-linux-arm64-musl",
+      "etag": "0x8DE9656A253B713",
+      "hash": "f58e2abd4fa737b90d1d9a4f2a3e87af1583df064b9ec14a10b34f4f34f61d88",
+      "bin": "biome"
+    },
+    "aarch64_macos": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.11/biome-darwin-arm64",
+      "etag": "0x8DE9656A22891CD",
+      "hash": "9de8fa513c170b33933f397e4906eb4f8af21890aa5f36a36db22df3d9ed1978",
+      "bin": "biome"
+    },
+    "aarch64_windows": {
+      "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.11/biome-win32-arm64.exe",
+      "etag": "0x8DE9656A280D5F1",
+      "hash": "a0b928f3894dfaea97906974e30785948e44e9fbab8b3d86897fb7da55ab36a9",
+      "bin": "biome.exe"
+    }
+  },
   "2.4.10": {
     "x86_64_linux_musl": {
       "url": "https://github.com/biomejs/biome/releases/download/%40biomejs/biome%402.4.10/biome-linux-x64-musl",

manifests/gungraun-runner.json

@@ -26,6 +26,28 @@
   "latest": {
     "version": "0.17.2"
   },
+  "0.18.0": {
+    "x86_64_linux_musl": {
+      "etag": "0x8DE9642F0CF107C",
+      "hash": "6bc46e9b0b9df0a13897c277c9c529488e1746b5f6ad6fa33b966f4f395bec28"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE9642F5351AC4",
+      "hash": "9ffe79ab8523c1ada9a52c1352333d6499cd26fabb60d9ba6a8eeb1ab4102dc2"
+    },
+    "powerpc64le_linux_gnu": {
+      "etag": "0x8DE9642F38861F9",
+      "hash": "6b2ddd799fec1517aee95fd03eb021e125b46690c679d29d54824b87b97c61fe"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE9642EC2FBFDC",
+      "hash": "8bf2263ac4a41cb9132df94d4e570eb3e310e2afc970ff6581ccc6a32fc66c22"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE9642EE460E79",
+      "hash": "e540f51a2621fe1a69cf9e7d0acf97d0e1c8b11866ba1ef08564614c496c5259"
+    }
+  },
   "0.17": {
     "version": "0.17.2"
   },

manifests/rclone.json

@@ -28,13 +28,13 @@
   },
   "license_markdown": "[MIT](https://github.com/rclone/rclone/blob/master/COPYING)",
   "latest": {
-    "version": "1.73.3"
+    "version": "1.73.4"
   },
   "1": {
-    "version": "1.73.3"
+    "version": "1.73.4"
   },
   "1.73": {
-    "version": "1.73.3"
+    "version": "1.73.4"
   },
   "1.73.4": {
     "x86_64_linux_musl": {

manifests/wasmtime.json

@@ -44,6 +44,40 @@
   "43.0": {
     "version": "43.0.0"
   },
+  "43.0.1": {
+    "x86_64_linux_gnu": {
+      "etag": "0x8DE96545D60CB65",
+      "hash": "9f3cf977fc29e2ccab2d198435265b066dce3d608fc6692d700ed1b9b74c35a1"
+    },
+    "x86_64_macos": {
+      "etag": "0x8DE96545D950E1A",
+      "hash": "c6ac5b23b52cb78ea7759ce9bd33985c515f2b620b9385021e32e4f51cdc0aa7"
+    },
+    "x86_64_windows": {
+      "etag": "0x8DE96545EE43160",
+      "hash": "cb627546a9f0f2f24f3d68fce34b40f13d6b1abe4b70f3afde0038ad9fe4e6ea"
+    },
+    "aarch64_linux_gnu": {
+      "etag": "0x8DE96545A4D6347",
+      "hash": "dbf36d4e9108df377ddfb88f2d8db4e07efce9726b68da53ae78ed5579293923"
+    },
+    "aarch64_macos": {
+      "etag": "0x8DE96545A9C6308",
+      "hash": "c93751ee2f0ecd34c0e799c6261b06c6efeb3c35f2bdb884569ba37931144980"
+    },
+    "aarch64_windows": {
+      "etag": "0x8DE96545AFDC4A6",
+      "hash": "0e8dc6155bda65e780279853af147b312fe62673e745a81a413b7a95be76c7ae"
+    },
+    "riscv64_linux_gnu": {
+      "etag": "0x8DE96545C448CDB",
+      "hash": "8ba5d2c2a9b613de09933998a91cae40a47fde78892f29144358f35ccf7e57c0"
+    },
+    "s390x_linux_gnu": {
+      "etag": "0x8DE96545C86C9A4",
+      "hash": "d19c7662bf478d46c235442a2ea2f230b6cb1d98bf99dfe4fc8f8892d43a8fdf"
+    }
+  },
   "43.0.0": {
     "x86_64_linux_gnu": {
       "etag": "0x8DE864C1EE9A6EC",