dependabot[bot]
112e6dac60
build(deps): bump the all group across 1 directory with 4 updates
...
Bumps the all group with 1 update in the /Library/Homebrew directory: [sorbet-static-and-runtime](https://github.com/sorbet/sorbet ).
Updates `sorbet-static-and-runtime` from 0.5.12392 to 0.5.12401
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `sorbet-runtime` from 0.5.12392 to 0.5.12401
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `sorbet` from 0.5.12392 to 0.5.12401
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `sorbet-static` from 0.5.12392 to 0.5.12401
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
---
updated-dependencies:
- dependency-name: sorbet-static-and-runtime
dependency-version: 0.5.12401
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: sorbet-runtime
dependency-version: 0.5.12401
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: sorbet
dependency-version: 0.5.12401
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: sorbet-static
dependency-version: 0.5.12401
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-08-15 09:00:02 +00:00
Mike McQuaid
166fa896bd
Merge pull request #20470 from Homebrew/formulary_tighter_path_detection
...
formulary: tighter path rejection detection.
2025-08-15 07:36:32 +00:00
Mike McQuaid
6024ccf7dd
formulary: tighter path rejection detection.
...
We need to handle symlinks in both directions for formulae in the
cellar/taps/cache otherwise we can get the nonsensical situation of
telling people a formula must me in a tap when it already is (but is
symlinked from elsewhere).
2025-08-15 08:18:59 +01:00
Mike McQuaid
511cb44c71
Merge pull request #20468 from Homebrew/more_forbid_packages_fixes
...
Fix more HOMEBREW_FORBID_PACKAGES_FROM_PATHS issues
2025-08-14 18:49:40 +00:00
Mike McQuaid
c143b03280
Fix more HOMEBREW_FORBID_PACKAGES_FROM_PATHS issues
...
- Ensure that we're overriding it where necessary internally (but not
allowing this to be used as a public opt-out API)
- Better handle formulae from paths that look like taps
2025-08-14 19:35:11 +01:00
Ruoyu Zhong
b0b8e23856
Merge pull request #20463 from Homebrew/gnu-mirror-audit
...
Re-enable GNU mirror audit
2025-08-14 17:13:06 +00:00
Mike McQuaid
ba0e28bd87
Merge pull request #20467 from Homebrew/sync-shared-config
...
Synchronize shared configuration
2025-08-14 17:09:19 +00:00
Ruoyu Zhong
37d148526b
Merge pull request #20466 from Homebrew/dependabot/all-ffb3d49034
...
Bump the "all" group with 1 updates across multiple ecosystems
2025-08-14 16:53:01 +00:00
BrewTestBot
b455d5840a
actionlint.yml: update to match main configuration
2025-08-14 16:48:04 +00:00
BrewTestBot
f6a287da70
Update RBI files for all.
...
Autogenerated by the [vendor-gems](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/vendor-gems.yml ) workflow.
2025-08-14 16:37:22 +00:00
BrewTestBot
439df4ef20
brew vendor-gems: commit updates.
2025-08-14 16:37:11 +00:00
dependabot[bot]
d6fe05687f
build(deps): bump the all group across 1 directory with 4 updates
...
Bumps the all group with 1 update in the /Library/Homebrew directory: [sorbet-static-and-runtime](https://github.com/sorbet/sorbet ).
Updates `sorbet-static-and-runtime` from 0.5.12389 to 0.5.12392
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `sorbet-runtime` from 0.5.12389 to 0.5.12392
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `sorbet` from 0.5.12389 to 0.5.12392
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `sorbet-static` from 0.5.12389 to 0.5.12392
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
---
updated-dependencies:
- dependency-name: sorbet-static-and-runtime
dependency-version: 0.5.12392
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: sorbet-runtime
dependency-version: 0.5.12392
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: sorbet
dependency-version: 0.5.12392
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: sorbet-static
dependency-version: 0.5.12392
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-08-14 16:18:58 +00:00
Ruoyu Zhong
ecea7a675d
Merge pull request #20464 from Homebrew/sync-shared-config
...
Synchronize shared configuration
2025-08-14 15:56:38 +00:00
Ruoyu Zhong
3f4d19e87b
Re-enable GNU mirror audit
...
Follow-up to Homebrew/brew#20461 and #233493 .
2025-08-14 23:50:53 +08:00
BrewTestBot
69e4e66d83
actionlint.yml: update to match main configuration
2025-08-14 15:26:13 +00:00
BrewTestBot
f0fd69b3ef
dependabot.yml: update to match main configuration
2025-08-14 15:26:13 +00:00
Carlo Cabrera
5e17e569b3
Merge pull request #20462 from Homebrew/gnu-livecheck
...
livecheck/strategy/gnu: use `ftpmirror.gnu.org` too
2025-08-14 15:22:55 +00:00
Carlo Cabrera
635a36a879
livecheck/strategy/gnu: use ftpmirror.gnu.org too
...
Part of addressing #20456 .
See also #20461 and Homebrew/homebrew-core#233493 .
2025-08-14 23:07:04 +08:00
Ruoyu Zhong
eb114387fb
Merge pull request #20461 from Homebrew/gnumirror
...
Update and temporarily disable GNU mirror audit
2025-08-14 14:40:30 +00:00
Ruoyu Zhong
da6619616b
rubocops/urls_spec: simplify
2025-08-14 22:26:02 +08:00
Ruoyu Zhong
049e8cc61c
Update and temporarily disable GNU mirror audit
...
Update the audit to prefer ftpmirror.gnu.org over ftp.gnu.org as
suggested by GNU [1]:
> We recommend using this generic ftpmirror.gnu.org address wherever
> possible in links, documentation, etc., to reduce load on the main GNU
> server.
The audit is temporarily disabled to allow migrating all homebrew/core
formulae first.
Should help to address #20456 .
[1]: https://www.gnu.org/server/mirror.en.html
2025-08-14 22:03:13 +08:00
Mike McQuaid
df84f7a264
Merge pull request #20460 from Homebrew/test_bot_tweaks
...
Fix some test-bot failures/bad output
2025-08-14 14:03:05 +00:00
Mike McQuaid
b73b1edd1b
Fix some test-bot failures/bad output
...
Noticed these when perusing the test-bot output from a third-party tap.
2025-08-14 14:45:50 +01:00
Mike McQuaid
fbac21da54
Merge pull request #20458 from Homebrew/tweak_copilot_instructions
...
Tweak copilot instructions
2025-08-14 10:40:18 +00:00
Mike McQuaid
9fc7517325
Tweak copilot instructions
...
Adjust based on recently behaviours I've seen from Copilot.
2025-08-14 11:15:09 +01:00
Mike McQuaid
7634fe375e
Merge pull request #20455 from Homebrew/copilot/fix-20454
...
Fix audit_signing to skip when quarantine attribute is missing
2025-08-14 09:45:36 +00:00
copilot-swe-agent[bot]
51565f97ae
Remove unnecessary comments that duplicate debug messages
...
Co-authored-by: MikeMcQuaid <125011+MikeMcQuaid@users.noreply.github.com>
2025-08-14 09:30:23 +00:00
Mike McQuaid
5602f0e11e
Merge pull request #20451 from Homebrew/dependabot/all-dbdec0a9b9
...
Bump the "all" group with 2 updates across multiple ecosystems
2025-08-14 09:10:26 +00:00
copilot-swe-agent[bot]
d0ad96a9b3
Fix audit_signing to check quarantine availability and attributes
...
Co-authored-by: bevanjkay <40621599+bevanjkay@users.noreply.github.com>
2025-08-14 19:09:57 +10:00
Mike McQuaid
8ef6814dd1
rubocop.yml: temporarily disable Layout/EmptyLinesAfterModuleInclusion
2025-08-14 09:56:07 +01:00
Mike McQuaid
7dd47ca89a
Merge pull request #20421 from Homebrew/cask-rename-stanza
...
cask/dsl/rename: add new `rename` dsl
2025-08-14 08:51:45 +00:00
Mike McQuaid
31f1b4aa3f
Merge pull request #20457 from Homebrew/formulary_improve_path_detection
...
formulary: improve/loosen path rejection logic.
2025-08-14 08:43:14 +00:00
Mike McQuaid
c00413f0e9
formulary: improve/loosen path rejection logic.
...
- Don't check if the `realpath` includes `/`: it always will.
Instead, see if the originally user-passed `ref` includes `/` or ends
with `.rb`.
- Always raise an error message, don't silently return.
2025-08-14 08:41:35 +01:00
Bevan Kay
10b9da2d4d
Merge pull request #20453 from Homebrew/fix-quarantine
...
cask/quarantine: fix quarantine support
2025-08-14 03:15:28 +00:00
Bevan Kay
ce49855b3e
cask/quarantine: fix quarantine support
2025-08-14 12:51:59 +10:00
Patrick Linnane
bdfe5f4c45
workflows/actionlint: correct upload-sarif tag
...
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2025-08-13 12:26:14 -07:00
Patrick Linnane
2605529a90
brew style --fix
2025-08-13 12:23:12 -07:00
BrewTestBot
6b10f65cb7
Update RBI files for all.
...
Autogenerated by the [vendor-gems](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/vendor-gems.yml ) workflow.
2025-08-13 19:19:10 +00:00
BrewTestBot
b47125625a
brew vendor-gems: commit updates.
2025-08-13 19:18:40 +00:00
dependabot[bot]
316b848d18
build(deps): bump the all group across 1 directory with 11 updates
...
Bumps the all group with 6 updates in the /Library/Homebrew directory:
| Package | From | To |
| --- | --- | --- |
| [rubocop](https://github.com/rubocop/rubocop ) | `1.78.0` | `1.79.2` |
| [parallel_tests](https://github.com/grosser/parallel_tests ) | `5.3.1` | `5.4.0` |
| [simplecov-cobertura](https://github.com/jessebs/simplecov-cobertura ) | `2.1.0` | `3.0.0` |
| [sorbet-static-and-runtime](https://github.com/sorbet/sorbet ) | `0.5.12357` | `0.5.12389` |
| [spoom](https://github.com/Shopify/spoom ) | `1.7.5` | `1.7.6` |
| [ruby-lsp](https://github.com/Shopify/ruby-lsp ) | `0.25.0` | `0.26.1` |
Updates `rubocop` from 1.78.0 to 1.79.2
- [Release notes](https://github.com/rubocop/rubocop/releases )
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rubocop/rubocop/compare/v1.78.0...v1.79.2 )
Updates `parallel_tests` from 5.3.1 to 5.4.0
- [Changelog](https://github.com/grosser/parallel_tests/blob/master/CHANGELOG.md )
- [Commits](https://github.com/grosser/parallel_tests/compare/v5.3.1...v5.4.0 )
Updates `simplecov-cobertura` from 2.1.0 to 3.0.0
- [Release notes](https://github.com/jessebs/simplecov-cobertura/releases )
- [Commits](https://github.com/jessebs/simplecov-cobertura/compare/v2.1.0...v3.0.0 )
Updates `sorbet-static-and-runtime` from 0.5.12357 to 0.5.12389
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `spoom` from 1.7.5 to 1.7.6
- [Release notes](https://github.com/Shopify/spoom/releases )
- [Commits](https://github.com/Shopify/spoom/compare/v1.7.5...v1.7.6 )
Updates `ruby-lsp` from 0.25.0 to 0.26.1
- [Release notes](https://github.com/Shopify/ruby-lsp/releases )
- [Commits](https://github.com/Shopify/ruby-lsp/compare/v0.25.0...v0.26.1 )
Updates `sorbet-runtime` from 0.5.12357 to 0.5.12389
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `json` from 2.13.0 to 2.13.2
- [Release notes](https://github.com/ruby/json/releases )
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md )
- [Commits](https://github.com/ruby/json/compare/v2.13.0...v2.13.2 )
Updates `regexp_parser` from 2.10.0 to 2.11.2
- [Changelog](https://github.com/ammar/regexp_parser/blob/master/CHANGELOG.md )
- [Commits](https://github.com/ammar/regexp_parser/compare/v2.10.0...v2.11.2 )
Updates `sorbet` from 0.5.12357 to 0.5.12389
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
Updates `sorbet-static` from 0.5.12357 to 0.5.12389
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
build(deps): bump the all group with 6 updates
Bumps the all group with 6 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `4.2.2` | `5.0.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact ) | `4.3.0` | `5.0.0` |
| [github/codeql-action](https://github.com/github/codeql-action ) | `3.29.4` | `3.29.9` |
| [actions/cache](https://github.com/actions/cache ) | `4.2.3` | `4.2.4` |
| [docker/login-action](https://github.com/docker/login-action ) | `3.4.0` | `3.5.0` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token ) | `2.0.6` | `2.1.1` |
Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](11bd71901b...08c6903cd8https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v4.3.0...634f93cb2916e3fdff6788551b99b062d0335ce0 )
Updates `github/codeql-action` from 3.29.4 to 3.29.9
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v3.29.4...df559355d593797519d70b90fc8edd5db049e7a2 )
Updates `actions/cache` from 4.2.3 to 4.2.4
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](5a3ec84eff...0400d5f644https://github.com/docker/login-action/releases )
- [Commits](74a5d14239...184bdaa072https://github.com/actions/create-github-app-token/releases )
- [Commits](df432ceedc...a8d6161485
2025-08-13 19:15:31 +00:00
Patrick Linnane
ac160c7f88
Merge pull request #20450 from Homebrew/remove-dependabot-cooldowns
...
dependabot: remove cooldowns
2025-08-13 18:55:47 +00:00
Patrick Linnane
d772221bda
Merge branch 'main' into remove-dependabot-cooldowns
2025-08-13 11:36:42 -07:00
Patrick Linnane
27b980d9f9
dependabot: remove cooldowns
...
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2025-08-13 11:09:02 -07:00
Mike McQuaid
56b85a1547
Merge pull request #20444 from Homebrew/copilot/fix-20441
...
Add warning for formula installation from forbidden paths
2025-08-13 17:58:31 +00:00
Patrick Linnane
aa4eaf4542
Merge pull request #20449 from Homebrew/formula-analytics-deps
...
formula-analytics: update dependencies
2025-08-13 17:37:16 +00:00
Patrick Linnane
790c327c5b
.python-version: bump to 3.13
...
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2025-08-13 10:12:39 -07:00
Patrick Linnane
c1341c2800
formula-analytics: update dependencies
...
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2025-08-13 10:06:50 -07:00
copilot-swe-agent[bot]
cfa7326620
Improve error message for local formula file installation attempts
...
Co-authored-by: MikeMcQuaid <125011+MikeMcQuaid@users.noreply.github.com>
2025-08-13 17:29:43 +01:00
Patrick Linnane
211b749462
Merge pull request #20447 from Homebrew/bump-setup-ruby-v1.255.0
...
workflows: manually bump setup-ruby
2025-08-13 15:52:09 +00:00
Mike McQuaid
c2fbebb96d
Merge pull request #20420 from Homebrew/copilot/fix-19743
...
Implement selective path replacement for /usr/local to fix bottle creation issues
2025-08-13 15:42:49 +00:00
