40916 Commits

Author SHA1 Message Date
Mike McQuaid
c5dbd3ca24
Rearrange requires
This improves the load time of most brew commands. For an example of
one of the simplest commands this speeds up:

Without Bootsnap:
```
$ hyperfine 'git checkout master; brew help' 'git checkout optimise_requires; brew help'
Benchmark 1: git checkout master; brew help
  Time (mean ± σ):     525.0 ms ±  35.8 ms    [User: 229.9 ms, System: 113.1 ms]
  Range (min … max):   465.3 ms … 576.6 ms    10 runs

Benchmark 2: git checkout optimise_requires; brew help
  Time (mean ± σ):     383.3 ms ±  25.1 ms    [User: 133.0 ms, System: 72.1 ms]
  Range (min … max):   353.0 ms … 443.6 ms    10 runs

Summary
  git checkout optimise_requires; brew help ran
    1.37 ± 0.13 times faster than git checkout master; brew help
```

With Bootsnap:
```
$ hyperfine 'git checkout master; brew help' 'git checkout optimise_requires; brew help'
Benchmark 1: git checkout master; brew help
  Time (mean ± σ):     386.0 ms ±  30.9 ms    [User: 130.2 ms, System: 93.8 ms]
  Range (min … max):   359.5 ms … 469.3 ms    10 runs

Benchmark 2: git checkout optimise_requires; brew help
  Time (mean ± σ):     330.2 ms ±  32.4 ms    [User: 93.4 ms, System: 73.0 ms]
  Range (min … max):   302.9 ms … 413.9 ms    10 runs

Summary
  git checkout optimise_requires; brew help ran
    1.17 ± 0.15 times faster than git checkout master; brew help
```
2024-07-14 08:49:39 -04:00
Patrick Linnane
074a8e6a4b
Merge pull request #17714 from Homebrew/sorbet-files-update 2024-07-13 18:37:48 -07:00
BrewTestBot
456677a3f2
sorbet: Autobump sigils via Spoom
Autogenerated by the [sorbet](https://github.com/Homebrew/brew/blob/master/.github/workflows/sorbet.yml) workflow.
2024-07-14 00:24:16 +00:00
BrewTestBot
2201332d4d
sorbet: Update RBI files.
Autogenerated by the [sorbet](https://github.com/Homebrew/brew/blob/master/.github/workflows/sorbet.yml) workflow.
2024-07-14 00:24:16 +00:00
Mike McQuaid
b86515bb75
Merge pull request #17713 from Homebrew/MikeMcQuaid-patch-1 2024-07-13 18:08:25 -04:00
Patrick Linnane
99b278b66b
brew style --fix
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2024-07-13 14:58:07 -07:00
Mike McQuaid
5771c2f968
attestation: only enable for developers outside CI
Let's hold off on CI and devcmdrun for now.
2024-07-13 17:55:44 -04:00
Mike McQuaid
3ff8b65109
Merge pull request #17712 from Homebrew/homebrew_no_verify_attestations 2024-07-13 17:50:35 -04:00
Mike McQuaid
4366ade990
attestation: allow disabling verification.
Add the (for now undocumented) `HOMEBREW_NO_VERIFY_ATTESTATIONS` to
disable attestation verification if it's having issues or when doing
development.

While we're here, do a little style cleanup too.
2024-07-13 17:39:40 -04:00
Patrick Linnane
6b99ac5868
Merge pull request #17711 from Homebrew/dependabot/github_actions/github/codeql-action-4fa2a7953630fd2f3fb380f21be14ede0169dd4f 2024-07-13 14:28:28 -07:00
dependabot[bot]
95310d8c65
build(deps): bump github/codeql-action
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 319cdb9fa619417d07cc37a964f0502bfbc5e8a9 to 4fa2a7953630fd2f3fb380f21be14ede0169dd4f.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](319cdb9fa6...4fa2a79536)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-13 21:17:29 +00:00
Mike McQuaid
919530c154
Merge pull request #17709 from reitermarkus/from-bottle-loader-downloadable 2024-07-13 17:01:14 -04:00
Markus Reiter
ae6f43921a
Implement verify_download_integrity for bottle manifests. 2024-07-13 16:50:53 -04:00
Markus Reiter
05f07953fe
Create Resource::BottleManifest. 2024-07-13 16:47:00 -04:00
William Woodruff
92ef6ef763
Merge pull request #17708 from Homebrew/sandbox-chmod 2024-07-13 16:38:44 -04:00
William Woodruff
46c156660b
Merge pull request #17694 from SMillerDev/feat/general/invalidate_sudo 2024-07-13 16:35:00 -04:00
Rylan Polster
e054a3ccf6
Also restrict SUID/GSID writes in sandbox 2024-07-13 16:28:17 -04:00
Sean Molenaar
2adf25dcaf feat: do not use existing sudo authentication in brew commands 2024-07-13 22:24:00 +02:00
Mike McQuaid
f466fca000
Merge pull request #17706 from Homebrew/ww/fix-local-bottles 2024-07-13 16:15:53 -04:00
Thierry Moisan
74bb9fb193
Add test 2024-07-13 16:14:12 -04:00
Mike McQuaid
06daff1621
formula_installer: tweak style. 2024-07-13 16:05:35 -04:00
William Woodruff
e56fde6584
formula_installer: skip attestations on local_bottle_path
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-13 16:02:12 -04:00
Rylan Polster
ea364210f2
Remove unecessary directory check 2024-07-13 15:58:41 -04:00
Mike McQuaid
0f9ca1d627
Merge pull request #17699 from Homebrew/ww/rm-marshal-from-spec 2024-07-13 15:53:00 -04:00
Mike McQuaid
2ee6f29934
Merge pull request #17700 from Homebrew/filter-special-chars-from-sandbox 2024-07-13 15:52:33 -04:00
Bo Anderson
37883714f5
Merge pull request #17704 from Homebrew/ww/silence-stderr
attestation: don't dupe stderr
2024-07-13 20:40:57 +01:00
William Woodruff
2d216174fb
Merge branch 'master' into ww/rm-marshal-from-spec 2024-07-13 15:36:51 -04:00
William Woodruff
419d4f7ab6
curl_spec: use deep_dup
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-13 15:36:34 -04:00
William Woodruff
695f080ba8
Revert "curl_spec: remove no-op Marshal use"
This reverts commit f3847d263f69a9a36e004c75c4969f939a66de3b.
2024-07-13 15:33:16 -04:00
William Woodruff
6cfe118ae3
attestation: don't dupe stderr
Silences `system_command!`'s own stderr handling,
since we do it independently.

Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-13 15:30:21 -04:00
Rylan Polster
ab46965d95
Deny file mode changes outside of specified paths in sandbox 2024-07-13 15:23:39 -04:00
William Woodruff
6a5bcb339d
Merge pull request #17692 from Homebrew/ww/attestations-for-dev 2024-07-13 15:09:30 -04:00
Rylan Polster
f4e5e0c716
Don't allow special characters in sandbox rule paths
Co-authored-by: Thierry Moisan <thierry.moisan@gmail.com>
2024-07-13 14:41:05 -04:00
William Woodruff
f3847d263f
curl_spec: remove no-op Marshal use
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-13 14:38:57 -04:00
Ruoyu Zhong
7c90c2df92
Merge pull request #17698 from Homebrew/better-input-handling
workflows/vendor-gems: handle input string more robustly
2024-07-13 14:24:23 -04:00
Ruoyu Zhong
5d6be12732
workflows/vendor-gems: handle input string more robustly
See also: Homebrew/actions#562.
2024-07-13 14:10:18 -04:00
Mike McQuaid
d4b7ed66e8
Merge pull request #17696 from Homebrew/portable_ruby_3.3.4 2024-07-13 14:06:35 -04:00
William Woodruff
255e75068e
Merge branch 'master' into ww/attestations-for-dev 2024-07-13 14:05:15 -04:00
William Woodruff
c7d5e02334
workflows/tests: drop my changes
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-13 13:59:16 -04:00
Mike McQuaid
f45eefdb38
Merge pull request #17697 from Homebrew/restrict-install-from-url 2024-07-13 13:42:30 -04:00
Rylan Polster
8b0a4a98bf
Restrict direct url installs to the file:// scheme 2024-07-13 13:30:36 -04:00
Mike McQuaid
ab7e49c462
Merge pull request #17695 from reitermarkus/from-bottle-loader-downloadable 2024-07-13 13:13:36 -04:00
Markus Reiter
2601551f3a
Only allow loading local bottles. 2024-07-13 11:57:44 -04:00
Mike McQuaid
6abdbd1fe0
vendor-install: cleanup bootsnap. 2024-07-13 11:57:37 -04:00
Mike McQuaid
b25cdbabba
Portable Ruby 3.3.4
Update to the latest and greatest Ruby version.
2024-07-13 11:43:17 -04:00
Markus Reiter
643fa83a28
Use Downloadable API in FromBottleLoader. 2024-07-13 11:36:13 -04:00
Issy Long
0a7b61a0a9
Merge pull request #17691 from Moisan/pin_workflows
workflows: pin actions
2024-07-13 11:24:41 -04:00
Ruoyu Zhong
57588408ec
Merge pull request #17693 from Homebrew/sponsors-maintainers-man-completions
Update manpage and completions.
2024-07-13 11:09:07 -04:00
William Woodruff
6d8067dc2f
workflows/tests: add some tokens
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-13 10:58:00 -04:00
BrewTestBot
ff02bc46f8
Update manpage and completions.
Autogenerated by the [sponsors-maintainers-man-completions](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/sponsors-maintainers-man-completions.yml) workflow.
2024-07-13 14:55:53 +00:00