Markus Reiter
05f07953fe
Create Resource::BottleManifest.
2024-07-13 16:47:00 -04:00
William Woodruff
92ef6ef763
Merge pull request #17708 from Homebrew/sandbox-chmod
2024-07-13 16:38:44 -04:00
William Woodruff
46c156660b
Merge pull request #17694 from SMillerDev/feat/general/invalidate_sudo
2024-07-13 16:35:00 -04:00
Rylan Polster
e054a3ccf6
Also restrict SUID/GSID writes in sandbox
2024-07-13 16:28:17 -04:00
Sean Molenaar
2adf25dcaf
feat: do not use existing sudo authentication in brew commands
2024-07-13 22:24:00 +02:00
Mike McQuaid
f466fca000
Merge pull request #17706 from Homebrew/ww/fix-local-bottles
2024-07-13 16:15:53 -04:00
Thierry Moisan
74bb9fb193
Add test
2024-07-13 16:14:12 -04:00
Mike McQuaid
06daff1621
formula_installer: tweak style.
2024-07-13 16:05:35 -04:00
William Woodruff
e56fde6584
formula_installer: skip attestations on local_bottle_path
...
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-13 16:02:12 -04:00
Rylan Polster
ea364210f2
Remove unecessary directory check
2024-07-13 15:58:41 -04:00
Mike McQuaid
0f9ca1d627
Merge pull request #17699 from Homebrew/ww/rm-marshal-from-spec
2024-07-13 15:53:00 -04:00
Mike McQuaid
2ee6f29934
Merge pull request #17700 from Homebrew/filter-special-chars-from-sandbox
2024-07-13 15:52:33 -04:00
Bo Anderson
37883714f5
Merge pull request #17704 from Homebrew/ww/silence-stderr
...
attestation: don't dupe stderr
2024-07-13 20:40:57 +01:00
William Woodruff
2d216174fb
Merge branch 'master' into ww/rm-marshal-from-spec
2024-07-13 15:36:51 -04:00
William Woodruff
419d4f7ab6
curl_spec: use deep_dup
...
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-13 15:36:34 -04:00
William Woodruff
695f080ba8
Revert "curl_spec: remove no-op Marshal use"
...
This reverts commit f3847d263f69a9a36e004c75c4969f939a66de3b.
2024-07-13 15:33:16 -04:00
William Woodruff
6cfe118ae3
attestation: don't dupe stderr
...
Silences `system_command!`'s own stderr handling,
since we do it independently.
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-13 15:30:21 -04:00
Rylan Polster
ab46965d95
Deny file mode changes outside of specified paths in sandbox
2024-07-13 15:23:39 -04:00
William Woodruff
6a5bcb339d
Merge pull request #17692 from Homebrew/ww/attestations-for-dev
2024-07-13 15:09:30 -04:00
Rylan Polster
f4e5e0c716
Don't allow special characters in sandbox rule paths
...
Co-authored-by: Thierry Moisan <thierry.moisan@gmail.com>
2024-07-13 14:41:05 -04:00
William Woodruff
f3847d263f
curl_spec: remove no-op Marshal use
...
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-13 14:38:57 -04:00
Ruoyu Zhong
7c90c2df92
Merge pull request #17698 from Homebrew/better-input-handling
...
workflows/vendor-gems: handle input string more robustly
2024-07-13 14:24:23 -04:00
Ruoyu Zhong
5d6be12732
workflows/vendor-gems: handle input string more robustly
...
See also: Homebrew/actions#562 .
2024-07-13 14:10:18 -04:00
Mike McQuaid
d4b7ed66e8
Merge pull request #17696 from Homebrew/portable_ruby_3.3.4
2024-07-13 14:06:35 -04:00
William Woodruff
255e75068e
Merge branch 'master' into ww/attestations-for-dev
2024-07-13 14:05:15 -04:00
William Woodruff
c7d5e02334
workflows/tests: drop my changes
...
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-13 13:59:16 -04:00
Mike McQuaid
f45eefdb38
Merge pull request #17697 from Homebrew/restrict-install-from-url
2024-07-13 13:42:30 -04:00
Rylan Polster
8b0a4a98bf
Restrict direct url installs to the file:// scheme
2024-07-13 13:30:36 -04:00
Mike McQuaid
ab7e49c462
Merge pull request #17695 from reitermarkus/from-bottle-loader-downloadable
2024-07-13 13:13:36 -04:00
Markus Reiter
2601551f3a
Only allow loading local bottles.
2024-07-13 11:57:44 -04:00
Mike McQuaid
6abdbd1fe0
vendor-install: cleanup bootsnap.
2024-07-13 11:57:37 -04:00
Mike McQuaid
b25cdbabba
Portable Ruby 3.3.4
...
Update to the latest and greatest Ruby version.
2024-07-13 11:43:17 -04:00
Markus Reiter
643fa83a28
Use Downloadable API in FromBottleLoader.
2024-07-13 11:36:13 -04:00
Issy Long
0a7b61a0a9
Merge pull request #17691 from Moisan/pin_workflows
...
workflows: pin actions
2024-07-13 11:24:41 -04:00
Ruoyu Zhong
57588408ec
Merge pull request #17693 from Homebrew/sponsors-maintainers-man-completions
...
Update manpage and completions.
2024-07-13 11:09:07 -04:00
William Woodruff
6d8067dc2f
workflows/tests: add some tokens
...
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-13 10:58:00 -04:00
BrewTestBot
ff02bc46f8
Update manpage and completions.
...
Autogenerated by the [sponsors-maintainers-man-completions](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/sponsors-maintainers-man-completions.yml ) workflow.
2024-07-13 14:55:53 +00:00
Mike McQuaid
f39b5c1426
Merge pull request #17554 from Homebrew/cask-install-receipt
2024-07-13 10:55:06 -04:00
William Woodruff
570cf65523
attestations: widen the beta
...
This widens the beta to include people with developer mode enabled,
as well as those with HOMEBREW_DEVELOPER set in their environment.
Signed-off-by: William Woodruff <william@yossarian.net>
2024-07-13 10:51:49 -04:00
Thierry Moisan
e2e9565984
workflows: pin actions
2024-07-13 10:50:43 -04:00
Sam Ford
f5adff9d90
Merge pull request #17690 from Homebrew/sponsors-maintainers-man-completions
...
Update maintainers.
2024-07-12 21:08:55 -04:00
BrewTestBot
d42fc2e04e
Update maintainers.
...
Autogenerated by the [sponsors-maintainers-man-completions](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/sponsors-maintainers-man-completions.yml ) workflow.
2024-07-13 00:57:09 +00:00
Ruoyu Zhong
a9d4b7284e
Merge pull request #17689 from Homebrew/sponsors-maintainers-man-completions
2024-07-13 08:56:33 +08:00
BrewTestBot
072047779a
Update manpage and completions.
...
Autogenerated by the [sponsors-maintainers-man-completions](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/sponsors-maintainers-man-completions.yml ) workflow.
2024-07-13 00:07:00 +00:00
Issy Long
9383cfa67b
Merge pull request #17688 from Homebrew/boo-more-type-errors
...
formula_assertions: Fix type of `cmd` param in `shell_output`
2024-07-12 16:43:15 -04:00
Carlo Cabrera
85625f5516
Merge pull request #17683 from Homebrew/one-more-sorbet-strict-unpack-strategy
2024-07-12 22:35:21 +02:00
Issy Long
ecdd45e73e
formula_assertions: Fix type of cmd param in shell_output
...
- This can be either a String or a Pathname, per
the part of the `noseyparker` test that failed
(in a different part of the test, the command is
passed as a string).
```
==> Testing noseyparker
==> /opt/homebrew/Cellar/noseyparker/0.18.1/bin/noseyparker -V
Error: noseyparker: failed
An exception occurred within a child process:
TypeError: Parameter 'cmd': Expected type String, got type Pathname with value #<Pathname:/opt/homebrew/Ce...ps://github.com/Homebrew/brew>
Caller: /opt/homebrew/Library/Taps/homebrew/homebrew-core/Formula/n/noseyparker.rb:35
```
2024-07-12 16:28:35 -04:00
Patrick Linnane
0bd23979cb
Merge pull request #17684 from Homebrew/dependabot/bundler/Library/Homebrew/sorbet-0.5.11481
2024-07-12 12:58:23 -07:00
Issy Long
fb2fcc47c2
Merge pull request #17686 from Homebrew/dependabot/bundler/Library/Homebrew/rubocop-rspec-3.0.3
...
build(deps-dev): bump rubocop-rspec from 3.0.2 to 3.0.3 in /Library/Homebrew
2024-07-12 15:18:31 -04:00
BrewTestBot
d8fb35e075
brew vendor-gems: commit updates.
2024-07-12 18:56:54 +00:00
