release: cargo-binstall v0.21.0

[github-actions]

This is a release PR for cargo-binstall version 0.21.0 (performing a minor bump).

Use squash merge.

Upon merging, this will automatically create the tag v0.21.0, build the CLI, and create a GitHub release with the release notes below.
You will still need to manually publish the cargo crate:

$ git switch main
$ git pull
$ git switch --detach v0.21.0
$ cargo publish -p cargo-binstall

To trigger builds initially, close and then immediately re-open this PR once.

---

Edit release notes into the section below:

Release notes

Binstall is a tool to fetch and install Rust-based executables as binaries. It aims to be a drop-in replacement for cargo install in most cases. Install it today with cargo install cargo-binstall, from the binaries below, or if you already have it, upgrade with cargo binstall cargo-binstall.

In this release:

• Massively reduce the amount of requests binstall does in most cases, which significantly improves performance (Supurious failure on CI: Failed to lookup address information #779 Retry http on error #791 Feature: Better retry policy in binstalk-downloader #794 Check url existence using GET instead of HEAD #835 Only use GET in remote::Client::remote_gettable #847 Speedup resolution process #776 Impl GhApiClient and use it in cargo-binstall to speedup resolution process #832 Extract GitHub token from file if --github-token or env variable GITHUB_TOKEN is not present #849 Read from env GH_TOKEN for github_token as a fallback #883)
• New option: --locked, passed to cargo-install when falling back (not used when installing from binary) (Use --locked when fallbacking to cargo install #746 Add new option --locked that is passed through to cargo-install #830)
• Support for TLS-intercepting HTTP proxies with a CLI option --root-certificates and environment variable BINSTALL_HTTPS_ROOT_CERTS. (corporate proxy got in the way and cannot specify a certificate bundle using en vars like such as CARGO_HTTP_CAINFO, SSL_CERT_FILE & SSL_CERT_PATH #759 Support adding root cert via env CARGO_HTTP_CAINFO, SSL_CERT_{FILE, PATH} #774 Add opt --root-ceritificates & env BINSTALL_HTTPS_ROOT_CERTS #820)

Bugfixes:

• x86_64 fallback for aarch64 MacOS (binstall installs x86_64 binaries on macOS aarch64 without Rosetta 2 enabled #857 Fix x86_64 fallback for aarch64 MacOS #875)
• Missing .exe suffix on Windows (cargo-binstall does not add an .exe suffix to the binary names in .crates.toml on Windows #801 Fix bin names in .crates.toml on win #802)
• Spurious "unexpected Eof" error (cargo-binstall spuriously fails in CI #777 Fix use of StreamReadable: Ensure no empty Bytes #799)

Other changes:

• QuickInstall's release naming scheme has changed (Use Quickinstall new release schema #867)
• Rename --roots to --root for cargo-install compatibility (with an alias to maintain backward-compatibility with ourselves) (Rename --roots to --root (with alias for back compat) #861), and pass it to cargo install when falling back (Fix: Pass value of --roots to cargo-install as --root #860).
• Increase default interval in --rate-limit to 10ms (Inc default interval in --rate-limit to 10ms #804)
• We no longer auto-discover artifacts which do not include the target in their filename, as we have no way to figure out if they're the right one to download. (Rm NOVERSION_FILENAMES "{ name }{ archive-suffix }" #795)
• Optimize release build: icf=safe on Linux and Windows, and cross-lang fat-lto on Linux.
• Our binaries (below) now embed their dependency list (via cargo-auditable), making them auditable by tools like cargo-audit.

[NobodyXu]

@passcod I am exhausted and has caught a cold, so feel free to modify the release message and do the cargo publish without me.

[passcod]

Oh no! Feel better soon 🌡️

[NobodyXu]

Oh no! Feel better soon 🌡️

Thanks, I took two panadol mini capsule yesterday and with a night's of sleep, I feel much better now.

[NobodyXu]

Hmmm, you forgot to cargo publish the crate and I've just published it cargo-binstall v0.21.0

[passcod]

Ahh I was just doing that now :) must have raced

[NobodyXu]

The title still seems wrong and needs some manual edit.

[NobodyXu]

I will let you do the edit to avoid the racing.