42276 Commits

Author SHA1 Message Date
dependabot[bot]
3a0035e85f
build(deps-dev): bump ruby-lsp in /Library/Homebrew
Bumps [ruby-lsp](https://github.com/Shopify/ruby-lsp) from 0.19.0 to 0.19.1.
- [Release notes](https://github.com/Shopify/ruby-lsp/releases)
- [Commits](https://github.com/Shopify/ruby-lsp/compare/v0.19.0...v0.19.1)

---
updated-dependencies:
- dependency-name: ruby-lsp
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-05 15:54:21 +00:00
Patrick Linnane
1e29665e62
Merge pull request #18505 from Homebrew/dependabot/github_actions/docker/setup-buildx-action-3.7.1 2024-10-04 07:13:41 -07:00
Patrick Linnane
051770cdb6
Merge pull request #18506 from Homebrew/dependabot/github_actions/github/codeql-action-3.26.11 2024-10-04 07:08:27 -07:00
dependabot[bot]
9fd0d9e720
build(deps): bump github/codeql-action from 3.26.10 to 3.26.11
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.10 to 3.26.11.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](e2b3eafc8d...6db8d6351f)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-04 13:59:37 +00:00
dependabot[bot]
6d23d4bdfd
build(deps): bump docker/setup-buildx-action from 3.7.0 to 3.7.1
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.7.0 to 3.7.1.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](8026d2bc36...c47758b77c)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-04 13:59:32 +00:00
Carlo Cabrera
77524574d8
Merge pull request #18502 from Homebrew/rm-upstream-rbi 2024-10-04 19:08:57 +08:00
Carlo Cabrera
bc9a3c4f16
Merge pull request #18503 from Homebrew/fix-stderr-redirections 2024-10-04 19:08:28 +08:00
Carlo Cabrera
d14accee39
brew.sh: fix some stderr redirections to /dev/null
The order matters here (in a way that I can't explain, unfortunately).

Example:

    bash-3.2$ read -r FOO <nonexistent 2>/dev/null
    bash: nonexistent: No such file or directory

    bash-3.2$ read -r FOO 2>/dev/null <nonexistent
    # no output

Fixes Homebrew/discussions#5653.
2024-10-04 16:36:35 +08:00
Carlo Cabrera
4671af4bb9
Merge pull request #18485 from Homebrew/non-fatal-invalid-attestations 2024-10-04 16:09:47 +08:00
Carlo Cabrera
7b74bf07fd
Fix attestation test failures 2024-10-04 16:00:29 +08:00
Carlo Cabrera
3f11462c14
Merge pull request #18501 from Homebrew/dependabot/bundler/Library/Homebrew/sorbet-0.5.11595 2024-10-04 15:35:28 +08:00
Mike McQuaid
c142f31577
Merge pull request #18497 from Homebrew/preserve-hardlinks
unpack_strategy/directory: try preserving hardlinks
2024-10-04 08:30:34 +01:00
Carlo Cabrera
4a6d8698ef
upstream.rbi: remove Fiddle constants
These should no longer be needed after #18501.
2024-10-04 15:28:27 +08:00
BrewTestBot
526e3c7bc8
brew vendor-gems: commit updates. 2024-10-04 07:25:43 +00:00
dependabot[bot]
58b18eae92
build(deps-dev): bump sorbet in /Library/Homebrew
Bumps [sorbet](https://github.com/sorbet/sorbet) from 0.5.11592 to 0.5.11595.
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: sorbet
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-04 07:23:06 +00:00
Carlo Cabrera
6b63660817
attestation: retry on InvalidAttestationError instead 2024-10-04 12:47:13 +08:00
Carlo Cabrera
d0e4aea853
attestion: make InvalidAttestationError non-fatal in CI
I don't think I've seen an `InvalidAttestationError` that wasn't some
sort of network problem (e.g., rate limit, connection timeout, 503).
Let's emit a warning instead of erroring out.

Note that `MissingAttestationError` is still fatal, and that will still
produce errors in CI.
2024-10-04 12:28:22 +08:00
Michael Cho
cfb8ebb5d8
unpack_strategy/directory: try preserving hardlinks
Try running `cp -al` to preserve hardlinks on both macOS and Linux.

If that fails, fall back on `cp -a` which can preserve hardlinks on
Linux (but not macOS) assuming target filesystem supports them.
2024-10-03 20:30:41 -04:00
Patrick Linnane
8389f507ca
Merge pull request #18496 from Homebrew/dependabot/bundler/Library/Homebrew/rbi-0.2.1 2024-10-03 13:07:19 -07:00
BrewTestBot
f608e78cb4
Update RBI files for rbi.
Autogenerated by the [vendor-gems](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/vendor-gems.yml) workflow.
2024-10-03 19:55:45 +00:00
BrewTestBot
4efabb6749
brew vendor-gems: commit updates. 2024-10-03 19:55:33 +00:00
dependabot[bot]
65f5055a7c
build(deps-dev): bump rbi from 0.2.0 to 0.2.1 in /Library/Homebrew
Bumps [rbi](https://github.com/Shopify/rbi) from 0.2.0 to 0.2.1.
- [Release notes](https://github.com/Shopify/rbi/releases)
- [Commits](https://github.com/Shopify/rbi/compare/v0.2.0...v0.2.1)

---
updated-dependencies:
- dependency-name: rbi
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-03 19:53:18 +00:00
Patrick Linnane
d1a48b18de
Merge pull request #18491 from Homebrew/dependabot/bundler/Library/Homebrew/ruby-lsp-0.19.0 2024-10-03 12:38:45 -07:00
Patrick Linnane
7bb040c623
Merge pull request #18492 from Homebrew/dependabot/bundler/Library/Homebrew/sorbet-0.5.11592 2024-10-03 12:37:41 -07:00
Patrick Linnane
864d5baa70
Merge pull request #18495 from Homebrew/dependabot/bundler/Library/Homebrew/tapioca-0.16.3 2024-10-03 12:34:58 -07:00
BrewTestBot
92e5dfae1c
Update RBI files for ruby-lsp.
Autogenerated by the [vendor-gems](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/vendor-gems.yml) workflow.
2024-10-03 19:27:04 +00:00
Patrick Linnane
10ef03e001
Merge pull request #18490 from Homebrew/dependabot/github_actions/docker/setup-buildx-action-3.7.0 2024-10-03 12:26:46 -07:00
BrewTestBot
0b411405cf
Update RBI files for tapioca.
Autogenerated by the [vendor-gems](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/vendor-gems.yml) workflow.
2024-10-03 19:26:38 +00:00
BrewTestBot
0d257d4975
brew vendor-gems: commit updates. 2024-10-03 19:26:36 +00:00
BrewTestBot
6ac54aee21
brew vendor-gems: commit updates. 2024-10-03 19:26:29 +00:00
BrewTestBot
230e279d8e
brew vendor-gems: commit updates. 2024-10-03 19:26:06 +00:00
dependabot[bot]
297856940a
build(deps-dev): bump tapioca from 0.16.2 to 0.16.3 in /Library/Homebrew
Bumps [tapioca](https://github.com/Shopify/tapioca) from 0.16.2 to 0.16.3.
- [Release notes](https://github.com/Shopify/tapioca/releases)
- [Commits](https://github.com/Shopify/tapioca/compare/v0.16.2...v0.16.3)

---
updated-dependencies:
- dependency-name: tapioca
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-03 18:43:56 +00:00
dependabot[bot]
cc29ab5982
build(deps-dev): bump sorbet in /Library/Homebrew
Bumps [sorbet](https://github.com/sorbet/sorbet) from 0.5.11589 to 0.5.11592.
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: sorbet
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-03 18:43:23 +00:00
dependabot[bot]
cfeeb2cbbb
build(deps-dev): bump ruby-lsp in /Library/Homebrew
Bumps [ruby-lsp](https://github.com/Shopify/ruby-lsp) from 0.18.4 to 0.19.0.
- [Release notes](https://github.com/Shopify/ruby-lsp/releases)
- [Commits](https://github.com/Shopify/ruby-lsp/compare/v0.18.4...v0.19.0)

---
updated-dependencies:
- dependency-name: ruby-lsp
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-03 18:43:01 +00:00
dependabot[bot]
1efa41e704
build(deps): bump docker/setup-buildx-action from 3.6.1 to 3.7.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.6.1 to 3.7.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](988b5a0280...8026d2bc36)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-03 18:03:50 +00:00
Carlo Cabrera
993d8c21fd
Merge pull request #18486 from Homebrew/replace-dlopen-with-libc-call 2024-10-03 23:40:57 +08:00
Carlo Cabrera
d77c0392ef
linkage_checker: replace Fiddle.dlopen with libSystem call
`dlopen`ing a library executes potentially untrusted code (e.g. if the
library has initialisers). We can avoid the `dlopen` call by asking
`libSystem` directly about whether a library can be found in the shared
cache.

Of course, the `dlopen` happens after a `ENOENT`, so the attack surface here
is relatively small. But relying on this still exposes us to a potential
TOCTOU[^1] bug. Let's avoid it entirely by skipping `dlopen` altogether.

Also: add RBI for `Fiddle` constants used in `linkage_checker`

Upstream don't have these definitions yet, so I've added an RBI for them
in the meantime.

[^1]: https://en.wikipedia.org/wiki/Time-of-check_to_time-of-use
2024-10-03 23:20:52 +08:00
Patrick Linnane
3994768349
Merge pull request #18483 from Homebrew/sorbet-files-update 2024-10-02 17:45:41 -07:00
BrewTestBot
fb11abeea7
sorbet: Update RBI files.
Autogenerated by the [sorbet](https://github.com/Homebrew/brew/blob/master/.github/workflows/sorbet.yml) workflow.
2024-10-03 00:24:39 +00:00
Douglas Eichelberger
a1613426f2
Merge pull request #18255 from Homebrew/dependabot/bundler/Library/Homebrew/rubocop-1.66.1
build(deps-dev): bump rubocop from 1.65.0 to 1.66.1 in /Library/Homebrew
2024-10-02 11:51:27 -07:00
Mike McQuaid
a54e9c5a4f
Merge pull request #18480 from khipp/fix-auto-bump
dev-cmd/bump: fix comparison of versions with comma-separated values
2024-10-02 19:46:03 +01:00
Patrick Linnane
ada5e2d219
brew style --fix
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2024-10-02 10:03:48 -07:00
Douglas Eichelberger
693960dd06
brew tc --update 2024-10-02 10:03:16 -07:00
Douglas Eichelberger
46e209f1b0
Un-exclude rubocop-rspec from rbi generation 2024-10-02 10:03:16 -07:00
Patrick Linnane
c2e2b23c50
brew style --fix
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2024-10-02 10:03:12 -07:00
BrewTestBot
ce806dcb89
Update RBI files for rubocop.
Autogenerated by the [vendor-gems](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/vendor-gems.yml) workflow.
2024-10-02 10:02:42 -07:00
BrewTestBot
28ae01a654
brew vendor-gems: commit updates. 2024-10-02 10:02:39 -07:00
dependabot[bot]
3ab2ee9dc3
build(deps-dev): bump rubocop from 1.65.0 to 1.66.1 in /Library/Homebrew
Bumps [rubocop](https://github.com/rubocop/rubocop) from 1.65.0 to 1.66.1.
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop/compare/v1.65.0...v1.66.1)

---
updated-dependencies:
- dependency-name: rubocop
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-02 10:01:32 -07:00
Patrick Linnane
3a9ca63bc7
Merge pull request #18482 from Homebrew/dependabot/bundler/Library/Homebrew/rspec-mocks-3.13.2 2024-10-02 09:52:39 -07:00
BrewTestBot
582b68e029
brew vendor-gems: commit updates. 2024-10-02 16:38:43 +00:00