dependabot[bot]
70d7e04f59
build(deps-dev): bump sorbet in /Library/Homebrew
...
Bumps [sorbet](https://github.com/sorbet/sorbet ) from 0.5.11595 to 0.5.11597.
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
---
updated-dependencies:
- dependency-name: sorbet
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-05 15:54:38 +00:00
dependabot[bot]
badec7d66b
build(deps): bump actions/cache from 4.0.2 to 4.1.0
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4.0.2 to 4.1.0.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](0c45773b62...2cdf405574
2024-10-05 15:54:27 +00:00
dependabot[bot]
3a0035e85f
build(deps-dev): bump ruby-lsp in /Library/Homebrew
...
Bumps [ruby-lsp](https://github.com/Shopify/ruby-lsp ) from 0.19.0 to 0.19.1.
- [Release notes](https://github.com/Shopify/ruby-lsp/releases )
- [Commits](https://github.com/Shopify/ruby-lsp/compare/v0.19.0...v0.19.1 )
---
updated-dependencies:
- dependency-name: ruby-lsp
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-05 15:54:21 +00:00
Patrick Linnane
1e29665e62
Merge pull request #18505 from Homebrew/dependabot/github_actions/docker/setup-buildx-action-3.7.1
2024-10-04 07:13:41 -07:00
Patrick Linnane
051770cdb6
Merge pull request #18506 from Homebrew/dependabot/github_actions/github/codeql-action-3.26.11
2024-10-04 07:08:27 -07:00
dependabot[bot]
9fd0d9e720
build(deps): bump github/codeql-action from 3.26.10 to 3.26.11
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.26.10 to 3.26.11.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e2b3eafc8d...6db8d6351f
2024-10-04 13:59:37 +00:00
dependabot[bot]
6d23d4bdfd
build(deps): bump docker/setup-buildx-action from 3.7.0 to 3.7.1
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 3.7.0 to 3.7.1.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](8026d2bc36...c47758b77c
2024-10-04 13:59:32 +00:00
Carlo Cabrera
77524574d8
Merge pull request #18502 from Homebrew/rm-upstream-rbi
2024-10-04 19:08:57 +08:00
Carlo Cabrera
bc9a3c4f16
Merge pull request #18503 from Homebrew/fix-stderr-redirections
2024-10-04 19:08:28 +08:00
Carlo Cabrera
d14accee39
brew.sh: fix some stderr redirections to /dev/null
...
The order matters here (in a way that I can't explain, unfortunately).
Example:
bash-3.2$ read -r FOO <nonexistent 2>/dev/null
bash: nonexistent: No such file or directory
bash-3.2$ read -r FOO 2>/dev/null <nonexistent
# no output
Fixes Homebrew/discussions#5653 .
2024-10-04 16:36:35 +08:00
Carlo Cabrera
4671af4bb9
Merge pull request #18485 from Homebrew/non-fatal-invalid-attestations
2024-10-04 16:09:47 +08:00
Carlo Cabrera
7b74bf07fd
Fix attestation test failures
2024-10-04 16:00:29 +08:00
Carlo Cabrera
3f11462c14
Merge pull request #18501 from Homebrew/dependabot/bundler/Library/Homebrew/sorbet-0.5.11595
2024-10-04 15:35:28 +08:00
Mike McQuaid
c142f31577
Merge pull request #18497 from Homebrew/preserve-hardlinks
...
unpack_strategy/directory: try preserving hardlinks
2024-10-04 08:30:34 +01:00
Carlo Cabrera
4a6d8698ef
upstream.rbi: remove Fiddle constants
...
These should no longer be needed after #18501 .
2024-10-04 15:28:27 +08:00
BrewTestBot
526e3c7bc8
brew vendor-gems: commit updates.
2024-10-04 07:25:43 +00:00
dependabot[bot]
58b18eae92
build(deps-dev): bump sorbet in /Library/Homebrew
...
Bumps [sorbet](https://github.com/sorbet/sorbet ) from 0.5.11592 to 0.5.11595.
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
---
updated-dependencies:
- dependency-name: sorbet
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-04 07:23:06 +00:00
Carlo Cabrera
6b63660817
attestation: retry on InvalidAttestationError instead
2024-10-04 12:47:13 +08:00
Carlo Cabrera
d0e4aea853
attestion: make InvalidAttestationError non-fatal in CI
...
I don't think I've seen an `InvalidAttestationError` that wasn't some
sort of network problem (e.g., rate limit, connection timeout, 503).
Let's emit a warning instead of erroring out.
Note that `MissingAttestationError` is still fatal, and that will still
produce errors in CI.
2024-10-04 12:28:22 +08:00
Michael Cho
cfb8ebb5d8
unpack_strategy/directory: try preserving hardlinks
...
Try running `cp -al` to preserve hardlinks on both macOS and Linux.
If that fails, fall back on `cp -a` which can preserve hardlinks on
Linux (but not macOS) assuming target filesystem supports them.
2024-10-03 20:30:41 -04:00
Patrick Linnane
8389f507ca
Merge pull request #18496 from Homebrew/dependabot/bundler/Library/Homebrew/rbi-0.2.1
2024-10-03 13:07:19 -07:00
BrewTestBot
f608e78cb4
Update RBI files for rbi.
...
Autogenerated by the [vendor-gems](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/vendor-gems.yml ) workflow.
2024-10-03 19:55:45 +00:00
BrewTestBot
4efabb6749
brew vendor-gems: commit updates.
2024-10-03 19:55:33 +00:00
dependabot[bot]
65f5055a7c
build(deps-dev): bump rbi from 0.2.0 to 0.2.1 in /Library/Homebrew
...
Bumps [rbi](https://github.com/Shopify/rbi ) from 0.2.0 to 0.2.1.
- [Release notes](https://github.com/Shopify/rbi/releases )
- [Commits](https://github.com/Shopify/rbi/compare/v0.2.0...v0.2.1 )
---
updated-dependencies:
- dependency-name: rbi
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-03 19:53:18 +00:00
Patrick Linnane
d1a48b18de
Merge pull request #18491 from Homebrew/dependabot/bundler/Library/Homebrew/ruby-lsp-0.19.0
2024-10-03 12:38:45 -07:00
Patrick Linnane
7bb040c623
Merge pull request #18492 from Homebrew/dependabot/bundler/Library/Homebrew/sorbet-0.5.11592
2024-10-03 12:37:41 -07:00
Patrick Linnane
864d5baa70
Merge pull request #18495 from Homebrew/dependabot/bundler/Library/Homebrew/tapioca-0.16.3
2024-10-03 12:34:58 -07:00
BrewTestBot
92e5dfae1c
Update RBI files for ruby-lsp.
...
Autogenerated by the [vendor-gems](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/vendor-gems.yml ) workflow.
2024-10-03 19:27:04 +00:00
Patrick Linnane
10ef03e001
Merge pull request #18490 from Homebrew/dependabot/github_actions/docker/setup-buildx-action-3.7.0
2024-10-03 12:26:46 -07:00
BrewTestBot
0b411405cf
Update RBI files for tapioca.
...
Autogenerated by the [vendor-gems](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/vendor-gems.yml ) workflow.
2024-10-03 19:26:38 +00:00
BrewTestBot
0d257d4975
brew vendor-gems: commit updates.
2024-10-03 19:26:36 +00:00
BrewTestBot
6ac54aee21
brew vendor-gems: commit updates.
2024-10-03 19:26:29 +00:00
BrewTestBot
230e279d8e
brew vendor-gems: commit updates.
2024-10-03 19:26:06 +00:00
dependabot[bot]
297856940a
build(deps-dev): bump tapioca from 0.16.2 to 0.16.3 in /Library/Homebrew
...
Bumps [tapioca](https://github.com/Shopify/tapioca ) from 0.16.2 to 0.16.3.
- [Release notes](https://github.com/Shopify/tapioca/releases )
- [Commits](https://github.com/Shopify/tapioca/compare/v0.16.2...v0.16.3 )
---
updated-dependencies:
- dependency-name: tapioca
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-03 18:43:56 +00:00
dependabot[bot]
cc29ab5982
build(deps-dev): bump sorbet in /Library/Homebrew
...
Bumps [sorbet](https://github.com/sorbet/sorbet ) from 0.5.11589 to 0.5.11592.
- [Release notes](https://github.com/sorbet/sorbet/releases )
- [Commits](https://github.com/sorbet/sorbet/commits )
---
updated-dependencies:
- dependency-name: sorbet
dependency-type: indirect
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-03 18:43:23 +00:00
dependabot[bot]
cfeeb2cbbb
build(deps-dev): bump ruby-lsp in /Library/Homebrew
...
Bumps [ruby-lsp](https://github.com/Shopify/ruby-lsp ) from 0.18.4 to 0.19.0.
- [Release notes](https://github.com/Shopify/ruby-lsp/releases )
- [Commits](https://github.com/Shopify/ruby-lsp/compare/v0.18.4...v0.19.0 )
---
updated-dependencies:
- dependency-name: ruby-lsp
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-03 18:43:01 +00:00
dependabot[bot]
1efa41e704
build(deps): bump docker/setup-buildx-action from 3.6.1 to 3.7.0
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 3.6.1 to 3.7.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](988b5a0280...8026d2bc36
2024-10-03 18:03:50 +00:00
Carlo Cabrera
993d8c21fd
Merge pull request #18486 from Homebrew/replace-dlopen-with-libc-call
2024-10-03 23:40:57 +08:00
Carlo Cabrera
d77c0392ef
linkage_checker: replace Fiddle.dlopen with libSystem call
...
`dlopen`ing a library executes potentially untrusted code (e.g. if the
library has initialisers). We can avoid the `dlopen` call by asking
`libSystem` directly about whether a library can be found in the shared
cache.
Of course, the `dlopen` happens after a `ENOENT`, so the attack surface here
is relatively small. But relying on this still exposes us to a potential
TOCTOU[^1] bug. Let's avoid it entirely by skipping `dlopen` altogether.
Also: add RBI for `Fiddle` constants used in `linkage_checker`
Upstream don't have these definitions yet, so I've added an RBI for them
in the meantime.
[^1]: https://en.wikipedia.org/wiki/Time-of-check_to_time-of-use
2024-10-03 23:20:52 +08:00
Patrick Linnane
3994768349
Merge pull request #18483 from Homebrew/sorbet-files-update
2024-10-02 17:45:41 -07:00
BrewTestBot
fb11abeea7
sorbet: Update RBI files.
...
Autogenerated by the [sorbet](https://github.com/Homebrew/brew/blob/master/.github/workflows/sorbet.yml ) workflow.
2024-10-03 00:24:39 +00:00
Douglas Eichelberger
a1613426f2
Merge pull request #18255 from Homebrew/dependabot/bundler/Library/Homebrew/rubocop-1.66.1
...
build(deps-dev): bump rubocop from 1.65.0 to 1.66.1 in /Library/Homebrew
2024-10-02 11:51:27 -07:00
Mike McQuaid
a54e9c5a4f
Merge pull request #18480 from khipp/fix-auto-bump
...
dev-cmd/bump: fix comparison of versions with comma-separated values
2024-10-02 19:46:03 +01:00
Patrick Linnane
ada5e2d219
brew style --fix
...
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2024-10-02 10:03:48 -07:00
Douglas Eichelberger
693960dd06
brew tc --update
2024-10-02 10:03:16 -07:00
Douglas Eichelberger
46e209f1b0
Un-exclude rubocop-rspec from rbi generation
2024-10-02 10:03:16 -07:00
Patrick Linnane
c2e2b23c50
brew style --fix
...
Signed-off-by: Patrick Linnane <patrick@linnane.io>
2024-10-02 10:03:12 -07:00
BrewTestBot
ce806dcb89
Update RBI files for rubocop.
...
Autogenerated by the [vendor-gems](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/vendor-gems.yml ) workflow.
2024-10-02 10:02:42 -07:00
BrewTestBot
28ae01a654
brew vendor-gems: commit updates.
2024-10-02 10:02:39 -07:00
dependabot[bot]
3ab2ee9dc3
build(deps-dev): bump rubocop from 1.65.0 to 1.66.1 in /Library/Homebrew
...
Bumps [rubocop](https://github.com/rubocop/rubocop ) from 1.65.0 to 1.66.1.
- [Release notes](https://github.com/rubocop/rubocop/releases )
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rubocop/rubocop/compare/v1.65.0...v1.66.1 )
---
updated-dependencies:
- dependency-name: rubocop
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-02 10:01:32 -07:00
