admin/brew
1
0
Fork 0
Code Issues Packages Projects Releases 6 Wiki Activity
29,638 Commits 15 Branches 471 Tags
Commit Graph

24187 Commits

Author SHA1 Message Date
Mike McQuaid
38d5524860
Merge pull request #12436 from Homebrew/dependabot/bundler/Library/Homebrew/sorbet-0.5.9319 
build(deps-dev): bump sorbet from 0.5.9318 to 0.5.9319 in /Library/Homebrew
 2021-11-16 12:04:48 +00:00
Mike McQuaid
06b653e968
Merge pull request #12427 from FnControlOption/pypi 
update-python-resources: skip dependencies of excluded packages
 2021-11-16 12:04:33 +00:00
Michka Popoff
1ce7f1fb7b
disable: allow to disable due to checksum mismatch 
The rationale is that a checksum mismatch is a huge security issue.
This means that the current source file, but maybe the initial one,
might have been compromised.

In the case upstream does not respond quickly to clarify what happened,
or fails to respond, we can now rev-bump the formula, disable and unbottle it,
making sure we stop delivering the potentially malicious code

Further improvements:
- Add the url of the project in the error message to redirect users to
the closed pull request where we disabled this, to centralize the discussion
and avoid the opening of multiple new issues
- Add a warning on brew-update that something is fishy upstream
 2021-11-15 20:25:37 +01:00
fn ⌃ ⌥
dddce0de74 Style fixes 2021-11-15 10:49:07 -08:00
BrewTestBot
62d0f14e3c
brew vendor-gems: commit updates. 2021-11-15 18:07:33 +00:00
dependabot[bot]
14a3b2dca2
build(deps-dev): bump sorbet in /Library/Homebrew 
Bumps [sorbet](https://github.com/sorbet/sorbet) from 0.5.9318 to 0.5.9319.
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: sorbet
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-11-15 18:03:27 +00:00
Carlo Cabrera
7bd5374dcc
Revert "linkage_checker: check variable references with dlopen" 
Trying to `dlopen` some Qt libraries causes Ruby to crash.

This reverts commit 0191a275ccc3e1a9377c956751bbc1c4ba7b0cea.
 2021-11-16 01:32:42 +08:00
Carlo Cabrera
b39fbc9c8c
Merge pull request #12429 from carlocab/variable-dlopen 
linkage_checker: check variable references with dlopen
 2021-11-15 23:09:56 +08:00
Mike McQuaid
819eea5669
Merge pull request #12426 from EricFromCanada/issues-url-condition 
Also show issues URL on macOS arm64
 2021-11-15 14:24:11 +00:00
BrewTestBot
d7395863c0
spdx: update license data. 
Autogenerated by [a scheduled GitHub Action](https://github.com/Homebrew/brew/blob/master/.github/workflows/spdx.yml).
 2021-11-15 00:07:49 +00:00
Carlo Cabrera
0191a275cc
linkage_checker: check variable references with dlopen 
The linkage check currently does nothing to check the validity of
variable-referenced libraries (prefixed with an `@`).

We could rectify that by mimicking the dynamic linker in looking up the
variable-referenced library, but this could get quite complicated.
Instead, let's let the linker do the hard work by checking if we can
`dlopen` libraries and bundles that contain variable linkage. The
`dlopen` will fail if the linker cannot resolve the variable reference.

There are at least two disadvantages to this approach relative to the
alternative suggested above:
1. This doesn't work for binary executables.
2. This doesn't identify which variable references are broken.

It's still better than not checking them at all, which is what we do
currently, and saves us from having to carry around code that parses and
verifies variable references directly.
 2021-11-15 02:24:16 +08:00
Dawid Dziurla
55244c845b
rubocops/text: forbid "go get" only in install method 2021-11-14 14:04:14 +01:00
fn ⌃ ⌥
e6e730f49d update-python-resources: skip dependencies of excluded packages 2021-11-14 03:52:44 -08:00
EricFromCanada
3515059941
Also show issues URL on macOS arm64 2021-11-13 15:00:10 -05:00
BrewTestBot
b4fd89c811
Update RBI files for mechanize. 2021-11-12 18:09:43 +00:00
BrewTestBot
4fda2c335c
brew vendor-gems: commit updates. 2021-11-12 18:05:53 +00:00
dependabot[bot]
234cd2e664
build(deps): bump mechanize from 2.8.1 to 2.8.3 in /Library/Homebrew 
Bumps [mechanize](https://github.com/sparklemotion/mechanize) from 2.8.1 to 2.8.3.
- [Release notes](https://github.com/sparklemotion/mechanize/releases)
- [Changelog](https://github.com/sparklemotion/mechanize/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/mechanize/compare/v2.8.1...v2.8.3)

---
updated-dependencies:
- dependency-name: mechanize
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-11-12 18:03:22 +00:00
XuehaiPan
50cde98fd3 utils/shfmt.sh: allow single line if blocks 2021-11-12 19:57:32 +08:00
XuehaiPan
391e7e22f8 utils/shfmt.sh: add != and =~ to within test regex 2021-11-12 19:57:28 +08:00
XuehaiPan
2345a34095 utils/shfmt.sh: rename regex variables 2021-11-12 19:29:09 +08:00
EricFromCanada
6e0e96eb1d
list: raise NoSuchKegError if formula exists but isn't installed 2021-11-11 17:40:32 -05:00
EricFromCanada
dd439b4c11
bump: skip PR check if livecheck does not return a version 2021-11-11 10:02:30 -05:00
Carlo Cabrera
3b41be9983
Merge pull request #12417 from carlocab/rosetta-arm 
vendor-install: handle native ARM running under Rosetta
 2021-11-11 18:00:44 +08:00
Carlo Cabrera
f114b89750
brew.sh: move comment closer to code it references 2021-11-11 17:33:28 +08:00
Carlo Cabrera
49de2b0c1a
Check arch instead of the brand string 2021-11-11 17:30:02 +08:00
Carlo Cabrera
98b33e6732
Remove another redundant conditional 
This condition is always true when we've reached this branch.
 2021-11-11 16:28:15 +08:00
Mike McQuaid
449d0430cb
Merge pull request #12414 from alebcay/create_github_pr_redact_secrets 
GitHub.create_bump_pr: don't leak GitHub token if set via environment variable
 2021-11-11 08:27:46 +00:00
Carlo Cabrera
fd1ca7e2b7
Remove redundant conditionals 
Whenever the `sysctl` call does not match `"Apple"*`, we can be sure
that `HOMEBREW_PROCESSOR` is `Intel`, so there's no need for this
additional check.
 2021-11-11 16:24:59 +08:00
Carlo Cabrera
51ab1649fb
Install Portable Ruby on native ARM installs 
The previous commit only prevented the installation of an Intel Portable
Ruby into `/opt/homebrew` prefix. Let's actually install an ARM64
Portable Ruby there too.
 2021-11-11 16:21:35 +08:00
Carlo Cabrera
8aeb28781c
vendor-install: handle native ARM running under Rosetta 
Since `HOMEBREW_PROCESSOR` is populated using `uname -m`, this will
register as `Intel` even when a native ARM install is running under
Rosetta.

Let's work around this by checking `sysctl -n machdep.cpu.brand_string`.
On my Intel machine:

    ❯ sysctl -n machdep.cpu.brand_string
    Intel(R) Core(TM) i3-1000NG4 CPU @ 1.10GHz

On Apple Silicon:

    brew@HMBRW-A-001-M1-001 ~ % sysctl -n machdep.cpu.brand_string
    Apple M1

The case of a Rosetta installation of Homebrew is already handled below
the proposed change.

Fixes Homebrew/discussions#2434.
 2021-11-11 16:06:33 +08:00
Rylan Polster
6c341516d3
Merge pull request #12416 from Homebrew/dependabot/bundler/Library/Homebrew/sorbet-0.5.9318 
build(deps-dev): bump sorbet from 0.5.9309 to 0.5.9318 in /Library/Homebrew
 2021-11-10 16:21:51 -05:00
BrewTestBot
749a66343d
Update RBI files for unparser. 2021-11-10 18:12:12 +00:00
BrewTestBot
2c60e7f237
brew vendor-gems: commit updates. 2021-11-10 18:11:27 +00:00
BrewTestBot
8222e77460
brew vendor-gems: commit updates. 2021-11-10 18:07:38 +00:00
dependabot[bot]
5d704a0ecc
build(deps-dev): bump sorbet in /Library/Homebrew 
Bumps [sorbet](https://github.com/sorbet/sorbet) from 0.5.9309 to 0.5.9318.
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: sorbet
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-11-10 18:05:12 +00:00
dependabot[bot]
1ee4758009
build(deps): bump unparser from 0.6.1 to 0.6.2 in /Library/Homebrew 
Bumps [unparser](https://github.com/mbj/unparser) from 0.6.1 to 0.6.2.
- [Release notes](https://github.com/mbj/unparser/releases)
- [Changelog](https://github.com/mbj/unparser/blob/main/Changelog.md)
- [Commits](https://github.com/mbj/unparser/commits/v0.6.2)

---
updated-dependencies:
- dependency-name: unparser
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-11-10 18:04:32 +00:00
Caleb Xu
333f44f84e
github: use system_command when pushing bump PR 2021-11-10 12:42:14 -05:00
Caleb Xu
227b8148eb
system_command: redact secrets in stdout/stderr 
We already redact secrets when printing the command-line invocation
itself. Make sure that stdout/stderr doesn't leak secrets either.
 2021-11-10 10:36:16 -05:00
Carlo Cabrera
df2ded4e96
Merge pull request #12386 from FnControlOption/search 
search: split up command into multiple methods
 2021-11-10 20:57:04 +08:00
Evan Phoenix
b5ccf8aac2 Do not pass -Wl,-headerpad_max_install_names to b-linux-path 
One of the more curious bugs, if you use
-Wl,-headerpad_max_install_names on linux, it tries to link a library
named "eaderpath_max_install_names" in, which causes all kinds of weird
havoc.

Most notably, gtester inside glib fails to run for bizarre reasons.
-Wl,-headerpad_max_install_names is not an option anywhere outside macos
anyway, so move it to macos only and avoid the heartache of extremely
weild bugs.
 2021-11-09 20:38:26 -08:00
Rylan Polster
ec1e077631
Merge pull request #12405 from Homebrew/dependabot/bundler/Library/Homebrew/sorbet-0.5.9309 
build(deps-dev): bump sorbet from 0.5.9307 to 0.5.9309 in /Library/Homebrew
 2021-11-09 22:15:34 -05:00
EricFromCanada
508b48d19e
formula_installer: preinstall any pre-fetch dependencies 2021-11-09 13:56:40 -05:00
EricFromCanada
d0de6ac249
svn: always install brewed version on macOS if required 
Stock SVN on macOS 10.14 and earlier now throws errors with some certificate providers.
 2021-11-09 13:56:40 -05:00
EricFromCanada
093e6e11da
svn: add flags if needed for :trust_cert or remote_exists? 2021-11-09 13:56:40 -05:00
BrewTestBot
d97798e805
Update RBI files for sorbet. 2021-11-09 18:11:47 +00:00
BrewTestBot
27cadab6e0
brew vendor-gems: commit updates. 2021-11-09 18:07:23 +00:00
dependabot[bot]
3869c8cb70
build(deps-dev): bump sorbet in /Library/Homebrew 
Bumps [sorbet](https://github.com/sorbet/sorbet) from 0.5.9307 to 0.5.9309.
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: sorbet
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-11-09 18:03:36 +00:00
Mike McQuaid
0e0593418d
Merge pull request #12404 from FnControlOption/bump-cask-pr 
bump-cask-pr: use version substring before comma unless they match
 2021-11-09 16:11:20 +00:00
Rylan Polster
0730fa74f6
Merge pull request #12395 from Rylan12/fix-relocation-regex 
`Keg::Relocation`: allow `-F`, `-I`, `-L`, `-isystem` prefixes
 2021-11-08 20:39:41 -05:00
Rylan Polster
ee898b1309
Fix tests 2021-11-08 20:18:25 -05:00