41103 Commits

Author SHA1 Message Date
Nanda H Krishna
d99c2bc890
Merge pull request #17899 from Homebrew/ww/no-version-sniffing 2024-07-29 14:08:39 -04:00
William Woodruff
107d57d220
extend/kernel: forward the latest: kwarg
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-29 13:43:42 -04:00
William Woodruff
5e0e0d56af
attestation: remove gh version detection
I'm declaring bankruptcy on this entire approach:

1. We can attempt to match on versions, but this will fail
   when the version of `gh` installed is built from `HEAD`
   or similar.
2. We can match on dates instead (since `gh --version` also includes
   the date), but this is even more brittle + implies a support
   contract we don't actually have (we don't actually want
   to say we support random dated builds between public releases
   of `gh`).

This moves us back to a simpler approach: if `gh` is present,
we use it. If `gh` is not present, we attempt to install it
with `ensure_executable!`. If the user's `gh` is present but too old,
it'll fail during attestation verification with a reasonable error,
which IMO is fine for now since this is all still in beta.

Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-29 13:13:55 -04:00
William Woodruff
38e47ea996
Merge pull request #17896 from Homebrew/ww/pypi-normalize 2024-07-29 10:38:14 -04:00
William Woodruff
de582fbdbf
resource_auditor: make typechecker happy
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-29 10:27:42 -04:00
William Woodruff
921fa5b6ed
resource_auditor: normalize PyPI names to kebab case before auditing
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-29 10:18:17 -04:00
Mike McQuaid
3b9bec8c95
Merge pull request #17893 from Homebrew/release_utils_github 4.3.11 2024-07-29 09:52:45 +01:00
Mike McQuaid
96cbc7bd6e
dev-cmd/release: add missing require. 2024-07-29 09:25:51 +01:00
Ruoyu Zhong
cab7ec960a
Merge pull request #17891 from Homebrew/sponsors-maintainers-man-completions 2024-07-29 08:34:50 +08:00
BrewTestBot
e9820fb1fe
Update sponsors.
Autogenerated by the [sponsors-maintainers-man-completions](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/sponsors-maintainers-man-completions.yml) workflow.
2024-07-29 00:06:52 +00:00
Patrick Linnane
c16f79aa10
Merge pull request #17889 from Homebrew/revert-17887-contributions-show-only-csv-in-csv-mode 2024-07-28 12:48:01 -07:00
Issy Long
9e98bbf59a
Revert "dev-cmd/contributions: Show only the CSV output for --csv" 2024-07-28 19:28:19 +01:00
Issy Long
df6b06c57e
Merge pull request #17888 from Homebrew/bin-pathname-audit-bugs
rubocops/text: Allow all "#{bin}/foo" interpolated strings with spaces
2024-07-28 17:44:59 +01:00
Patrick Linnane
6509dc1f29
Merge pull request #17883 from bevanjkay/unpack-strategy-types 2024-07-28 09:30:24 -07:00
Kevin
12d0d7b9c5
Merge pull request #17887 from Homebrew/contributions-show-only-csv-in-csv-mode
dev-cmd/contributions: Show only the CSV output for `--csv`
2024-07-28 09:25:21 -07:00
Issy Long
f0084e611a
rubocops/text: Allow all "#{bin}/foo" interpolated strings with spaces
- This was complaining about `shell_output("#{bin}/abricate-get_db --help 2>&1")` which it shouldn't have.
2024-07-28 17:18:35 +01:00
Issy Long
c880dd4350
dev-cmd/contributions: Show only the CSV output for --csv
- This was noisy when using `--csv` as it would print the text output
  and then the CSV output.
2024-07-28 16:17:07 +01:00
Sam Ford
a196898ad3
unpack_strategy/cab: align method order
This simply moves the `Cab#dependencies` method above
`#extract_to_dir`, to align it with the other strategies.
2024-07-28 10:17:23 -04:00
Sam Ford
6918160fd9
UnpackStrategy: Make #dependencies non-nilable
`T.nilable` was removed from the `P7Zip#dependencies` type signature
in a previous commit, as `UnpackStrategy#dependencies` doesn't allow
for a nilable return type. This updates the type signature for the
other `#dependencies` methods to also remove `T.nilable`, as they
would produce a runtime error otherwise.
2024-07-28 10:15:02 -04:00
Bevan Kay
0a658a3290
unpack_strategy/p7zip: update types 2024-07-28 22:31:38 +10:00
Bevan Kay
98ec6a9722
unpack_strategy: update types 2024-07-28 22:31:38 +10:00
Bo Anderson
807a934574
Merge pull request #17885 from Homebrew/fix-uninit-constant-etc
utils/github/api: Fix uninitialized constant `Etc`
2024-07-28 02:24:10 +01:00
Issy Long
0af1ce866c
utils/github/api: Fix uninitialized constant Etc
- I saw this in:

```
Error: uninitialized constant GitHub::API::Etc
Warning: Removed Sorbet lines from backtrace!
Rerun with `--verbose` to see the original backtrace
/opt/homebrew/Library/Homebrew/utils/github/api.rb:140:in `uid_home'
/opt/homebrew/Library/Homebrew/utils/github/api.rb:154:in `block in github_cli_token'
/opt/homebrew/Library/Homebrew/utils/uid.rb:8:in `drop_euid'
/opt/homebrew/Library/Homebrew/utils/github/api.rb:150:in `github_cli_token'
/opt/homebrew/Library/Homebrew/utils/github/api.rb:194:in `credentials'
/opt/homebrew/Library/Homebrew/utils/github/api.rb:251:in `open_rest'
/opt/homebrew/Library/Homebrew/utils/github/api.rb:334:in `open_graphql'
/opt/homebrew/Library/Homebrew/utils/github.rb:414:in `members_by_team'
/opt/homebrew/Library/Homebrew/dev-cmd/contributions.rb:71:in `run'
/opt/homebrew/Library/Homebrew/brew.rb:95:in `<main>'
```
2024-07-27 23:45:16 +01:00
Patrick Linnane
99e2d93ea5
Merge pull request #17884 from Homebrew/dependabot/github_actions/ruby/setup-ruby-1.190.0 2024-07-27 12:52:36 -07:00
dependabot[bot]
388fd50c58
build(deps): bump ruby/setup-ruby from 1.188.0 to 1.190.0
Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.188.0 to 1.190.0.
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](50ba3386b0...a6e6f86333)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-27 17:10:40 +00:00
Mike McQuaid
3a07647890
Merge pull request #17882 from Homebrew/cask_forbidden_tweaks 2024-07-27 16:24:12 +01:00
Mike McQuaid
7abc6f4349
cask/installer: improve *_FORBIDDEN_* env handling.
- Improve the error message when a cask or formula is forbidden by an
  environment variable (fixes #17880)
- Move the `forbidden_tap_check` and `forbidden_cask_and_formula_check`
  methods to the top of the `install` method, so that they are checked
  before the main cask is downloaded.
2024-07-27 16:13:51 +01:00
Mike McQuaid
04621bab95
Merge pull request #17879 from Homebrew/kernel_require_utils 2024-07-26 20:02:00 +01:00
William Woodruff
0b2a74dcd9
Merge pull request #17878 from Homebrew/ww/mirrored-bottle-attestations 2024-07-26 14:48:54 -04:00
Mike McQuaid
42438f45ae
extend/kernel: add missing utils require.
Don't require this globally to avoid slowing down boot.
2024-07-26 19:48:51 +01:00
William Woodruff
6e2975d026
attestation: handle mirrored bottles correctly
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-26 14:26:45 -04:00
Mike McQuaid
7522ed3b9f
Merge pull request #17877 from Homebrew/maintainer_guidelines_automerge 2024-07-26 17:57:26 +01:00
Mike McQuaid
d9f4f0c4ec
Merge pull request #17876 from Homebrew/homebrew_version_maybe_dev 2024-07-26 17:48:43 +01:00
Mike McQuaid
9aaae260a9
docs/Maintainer-Guidelines: tweak auto-merging.
Now we require comments to be resolved: the flow is a bit nicer here.
2024-07-26 17:39:40 +01:00
Mike McQuaid
a901a9c389
sbom: ensure Homebrew versions are more consistent.
Avoid making bottles non-reproducible by ensuring that the Homebrew
version doesn't include the full commit hash but just a `-dev` suffix.

This is similar to the approach we use for analytics.
2024-07-26 17:37:05 +01:00
Patrick Linnane
d79fa417b8
Merge pull request #17872 from Homebrew/dependabot/bundler/Library/Homebrew/rubocop-sorbet-0.8.5 2024-07-26 08:38:27 -07:00
Patrick Linnane
b4d2fafafb
Merge pull request #17870 from Homebrew/dependabot/bundler/Library/Homebrew/docile-1.4.1 2024-07-26 08:38:23 -07:00
Patrick Linnane
c1d02ae67c
Merge pull request #17871 from Homebrew/dependabot/github_actions/github/codeql-action-3.25.15 2024-07-26 08:37:59 -07:00
Patrick Linnane
e410c119e1
Merge pull request #17874 from Homebrew/dependabot/bundler/Library/Homebrew/sorbet-0.5.11495 2024-07-26 08:37:41 -07:00
BrewTestBot
d117a286b5
Update RBI files for docile.
Autogenerated by the [vendor-gems](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/vendor-gems.yml) workflow.
2024-07-26 15:26:31 +00:00
BrewTestBot
e852990eda
brew vendor-gems: commit updates. 2024-07-26 15:26:19 +00:00
BrewTestBot
7476c6c6b3
Update RBI files for rubocop-sorbet.
Autogenerated by the [vendor-gems](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/vendor-gems.yml) workflow.
2024-07-26 15:25:41 +00:00
BrewTestBot
ed9cf4eec1
Update RBI files for sorbet.
Autogenerated by the [vendor-gems](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/vendor-gems.yml) workflow.
2024-07-26 15:25:32 +00:00
BrewTestBot
ce7b44fb8a
brew vendor-gems: commit updates. 2024-07-26 15:25:31 +00:00
BrewTestBot
c1b2ef4df6
brew vendor-gems: commit updates. 2024-07-26 15:25:21 +00:00
dependabot[bot]
ce9f5e43c1
build(deps-dev): bump sorbet in /Library/Homebrew
Bumps [sorbet](https://github.com/sorbet/sorbet) from 0.5.11493 to 0.5.11495.
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: sorbet
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-26 15:16:21 +00:00
dependabot[bot]
123ca51cac
build(deps-dev): bump rubocop-sorbet in /Library/Homebrew
Bumps [rubocop-sorbet](https://github.com/shopify/rubocop-sorbet) from 0.8.4 to 0.8.5.
- [Release notes](https://github.com/shopify/rubocop-sorbet/releases)
- [Commits](https://github.com/shopify/rubocop-sorbet/compare/v0.8.4...v0.8.5)

---
updated-dependencies:
- dependency-name: rubocop-sorbet
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-26 15:15:48 +00:00
dependabot[bot]
0cdf1132b1
build(deps): bump github/codeql-action from 3.25.14 to 3.25.15
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.14 to 3.25.15.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](5cf07d8b70...afb54ba388)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-26 15:15:32 +00:00
dependabot[bot]
d111d82dd9
build(deps-dev): bump docile from 1.4.0 to 1.4.1 in /Library/Homebrew
Bumps [docile](https://github.com/ms-ati/docile) from 1.4.0 to 1.4.1.
- [Changelog](https://github.com/ms-ati/docile/blob/main/HISTORY.md)
- [Commits](https://github.com/ms-ati/docile/compare/v1.4.0...v1.4.1)

---
updated-dependencies:
- dependency-name: docile
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-26 15:15:19 +00:00
Mike McQuaid
e1b4f8c536
Merge pull request #17868 from branchvincent/npm_audit 2024-07-26 15:38:40 +01:00