HyperWinX/brew
1
0
Fork 0
mirror of https://github.com/Homebrew/brew.git synced 2026-08-12 22:29:27 +04:00
Code Issues Packages Projects Releases Wiki Activity
51,770 Commits 13 Branches 526 Tags
eebfc7280760d375ee9aee45bebfcb4e770fc13a
Commit Graph
3331 Commits
Author SHA1 Message Date
Mike McQuaid 8b3a119e78 Allow cask runs to access the network 
Structured cask install steps run in a sandbox that denies network
access. This breaks casks whose upstream setup commands must retrieve
installation-time dependencies, including `gcloud-cli` virtualenv
creation.

- Add a serialised `network_access:` option to `run` steps.
- Omit the option from API data when it retains the default denial.
- Enable network access only when an explicit run requests it.
- Preserve network denial for existing steps and generated completions.
- Document the opt-in and cover both sandbox policies in tests.

This avoids disabling network restrictions for all cask operations while
giving affected casks an explicit, auditable escape hatch.

See #23495.
 2026-08-11 12:02:16 +01:00
Bevan Kay 6af7582df0 install_steps: add must_succeed to run 2026-08-10 11:56:06 +10:00
Mike McQuaid 601472bfda Enforce structured install step authoring 
- reject mixing formula install hooks in every tap
- autocorrect legacy step methods and keywords
- retain stable serialised API values for compatibility
- document canonical Formula and Cask step authoring
- remove the resolved Cask sandbox deprecation reminder
 2026-08-08 15:06:51 +01:00
Mike McQuaid f38b89391e Use bottled inputs and add RuboCop guard 
- Discover CPython wheels already packaged in each keg.
- Expand PyPy bootstrap archives packaged in `libexec`.
- Resolve dependency paths without loading formula source.
- Validate helper executables before attempting to run them.
- Enforce source independence with RuboCop and API-loaded tests.
- Keep the internal JSON API unchanged and minimal.
 2026-08-08 08:17:46 +01:00
Mike McQuaidandGitHub 0df0c9625a Merge pull request #23461 from Homebrew/sandbox-cask-install-step-commands 
Sandbox structured cask operations
 2026-08-08 04:10:10 +00:00
Mike McQuaidandGitHub 136ad7e229 Merge pull request #23451 from tftio/cargo-source-option 
bundle: install cargo packages from a git URL or path
 2026-08-07 14:08:40 +00:00
dependabot[bot]andGitHub 52dc53e244 build(deps): bump the bundler group across 2 directories with 8 updates 
Bumps the bundler group with 2 updates in the /Library/Homebrew directory: [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) and [json](https://github.com/ruby/json).
Bumps the bundler group with 3 updates in the /docs directory: [jekyll-optional-front-matter](https://github.com/benbalter/jekyll-optional-front-matter), [jekyll-relative-links](https://github.com/benbalter/jekyll-relative-links) and [jekyll-titles-from-headings](https://github.com/benbalter/jekyll-titles-from-headings).


Updates `sorbet-static-and-runtime` from 0.6.13365 to 0.6.13386
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `sorbet-runtime` from 0.6.13365 to 0.6.13386
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `json` from 2.21.1 to 2.21.2
- [Release notes](https://github.com/ruby/json/releases)
- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)
- [Commits](https://github.com/ruby/json/compare/v2.21.1...v2.21.2)

Updates `sorbet` from 0.6.13365 to 0.6.13386
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `sorbet-static` from 0.6.13365 to 0.6.13386
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `jekyll-optional-front-matter` from 0.3.2 to 0.3.3
- [Release notes](https://github.com/benbalter/jekyll-optional-front-matter/releases)
- [Changelog](https://github.com/benbalter/jekyll-optional-front-matter/blob/main/CHANGELOG.md)
- [Commits](https://github.com/benbalter/jekyll-optional-front-matter/compare/v0.3.2...v0.3.3)

Updates `jekyll-relative-links` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/benbalter/jekyll-relative-links/releases)
- [Changelog](https://github.com/benbalter/jekyll-relative-links/blob/main/CHANGELOG.md)
- [Commits](https://github.com/benbalter/jekyll-relative-links/compare/v0.7.0...v0.8.0)

Updates `jekyll-titles-from-headings` from 0.5.3 to 0.5.4
- [Release notes](https://github.com/benbalter/jekyll-titles-from-headings/releases)
- [Changelog](https://github.com/benbalter/jekyll-titles-from-headings/blob/main/CHANGELOG.md)
- [Commits](https://github.com/benbalter/jekyll-titles-from-headings/compare/v0.5.3...v0.5.4)

---
updated-dependencies:
- dependency-name: sorbet-static-and-runtime
  dependency-version: 0.6.13386
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sorbet-runtime
  dependency-version: 0.6.13386
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: json
  dependency-version: 2.21.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sorbet
  dependency-version: 0.6.13386
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sorbet-static
  dependency-version: 0.6.13386
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: jekyll-optional-front-matter
  dependency-version: 0.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: jekyll-relative-links
  dependency-version: 0.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: jekyll-titles-from-headings
  dependency-version: 0.5.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-07 08:09:20 +00:00
Mike McQuaid f8fcbd88e0 Sandbox structured cask operations 
- Run each complete cask step block in one isolated subprocess and all
  generated completions in another phase-scoped sandbox.
- Share sandbox selection, fork fallback, install-hook rules and child
  error reporting with formula build, post-install and test processes.
- Restrict home, network and filesystem access while preserving `brew`
  and supporting explicit command write paths.
- Keep JSON payloads compact and independent of cask Ruby files.
- Remove the completed official-tap migration plan.
 2026-08-07 08:37:09 +01:00
James Felix BlackandGitHub b4a81cf9ab Merge branch 'main' into cargo-source-option 2026-08-06 11:55:15 -04:00
James Felix Black bc5662a7b6 bundle: accept only remote git URLs as cargo sources 
Neither a local path nor a file:// URL resolves on another machine, so
both are rejected when the Brewfile is parsed. A crate cargo reports as
installed from one is dumped as a registry crate rather than dropped,
with a warning naming the origin that could not be expressed.
 2026-08-06 11:51:28 -04:00
Harald Nordgren 225514741d Add quiet mode for automatic updates 2026-08-06 14:07:03 +02:00
James Felix Black 86ad0327e6 bundle: install cargo packages from a git URL or path 
`cargo "name"` could only install from crates.io. Accept a `source:`
option naming a git URL or a local path, mirroring the `uv` extension,
and install with `cargo install --git` or `cargo install --path`.

`cargo install --list` reports the origin of anything not installed
from a registry, so dumped Brewfiles round-trip. The resolved commit is
dropped, since a dumped entry has to compare equal to a hand-written
one, while a branch, tag or revision chosen at install time is carried
in the URL query and restored with `--branch`, `--tag` or `--rev`.
 2026-08-05 14:00:28 -04:00
Mike McQuaidandGitHub 4798afc8f1 Merge pull request #23447 from AlternateRT/fix-appimage-cask-dsl 
Fix AppImage's stanza name in cask DSL
 2026-08-05 15:16:59 +00:00
Mike McQuaidandGitHub 67658c8cf6 Merge pull request #23366 from Homebrew/install-step-26-official-hook-enforcement 
Reject official legacy install hooks (26/26)
 2026-08-05 11:33:49 +00:00
AltCode 497536f560 Fix AppImage's stanza name in cask DSL 2026-08-05 12:46:45 +02:00
Andrew NesbittandGitHub fd73448209 Merge branch 'main' into vulns-fix-available-flag 2026-08-05 08:33:53 +01:00
dependabot[bot]andGitHub 9eccee92ef build(deps): bump the bundler group across 2 directories with 11 updates 
Bumps the bundler group with 5 updates in the /Library/Homebrew directory:

| Package | From | To |
| --- | --- | --- |
| [simplecov](https://github.com/simplecov-ruby/simplecov) | `1.0.2` | `1.0.3` |
| [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) | `0.6.13359` | `0.6.13365` |
| [csv](https://github.com/ruby/csv) | `3.3.5` | `3.3.6` |
| [patchelf](https://github.com/Homebrew/patchelf.rb) | `1.5.2` | `1.6.2` |
| [rbs](https://github.com/ruby/rbs) | `4.0.3` | `4.1.2` |

Bumps the bundler group with 4 updates in the /docs directory: [csv](https://github.com/ruby/csv), [sorbet-runtime](https://github.com/sorbet/sorbet), [rbs](https://github.com/ruby/rbs) and [html-proofer](https://github.com/gjtorikian/html-proofer).


Updates `simplecov` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)
- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)
- [Commits](https://github.com/simplecov-ruby/simplecov/compare/v1.0.2...v1.0.3)

Updates `sorbet-static-and-runtime` from 0.6.13359 to 0.6.13365
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `csv` from 3.3.5 to 3.3.6
- [Release notes](https://github.com/ruby/csv/releases)
- [Changelog](https://github.com/ruby/csv/blob/main/NEWS.md)
- [Commits](https://github.com/ruby/csv/compare/v3.3.5...v3.3.6)

Updates `patchelf` from 1.5.2 to 1.6.2
- [Release notes](https://github.com/Homebrew/patchelf.rb/releases)
- [Commits](https://github.com/Homebrew/patchelf.rb/compare/v1.5.2...v1.6.2)

Updates `sorbet-runtime` from 0.6.13359 to 0.6.13365
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `rbs` from 4.0.3 to 4.1.2
- [Release notes](https://github.com/ruby/rbs/releases)
- [Changelog](https://github.com/ruby/rbs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ruby/rbs/compare/v4.0.3...v4.1.2)

Updates `sorbet` from 0.6.13359 to 0.6.13365
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `sorbet-static` from 0.6.13359 to 0.6.13365
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `csv` from 3.3.5 to 3.3.6
- [Release notes](https://github.com/ruby/csv/releases)
- [Changelog](https://github.com/ruby/csv/blob/main/NEWS.md)
- [Commits](https://github.com/ruby/csv/compare/v3.3.5...v3.3.6)

Updates `sorbet-runtime` from 0.6.13359 to 0.6.13403
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `rbs` from 4.0.3 to 4.1.2
- [Release notes](https://github.com/ruby/rbs/releases)
- [Changelog](https://github.com/ruby/rbs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ruby/rbs/compare/v4.0.3...v4.1.2)

Updates `html-proofer` from 5.2.1 to 5.2.2
- [Release notes](https://github.com/gjtorikian/html-proofer/releases)
- [Changelog](https://github.com/gjtorikian/html-proofer/blob/main/CHANGELOG.md)
- [Commits](https://github.com/gjtorikian/html-proofer/compare/v5.2.1...v5.2.2)

Updates `async` from 2.44.0 to 2.44.1
- [Release notes](https://github.com/socketry/async/releases)
- [Changelog](https://github.com/socketry/async/blob/main/releases.md)
- [Commits](https://github.com/socketry/async/compare/v2.44.0...v2.44.1)

Updates `zeitwerk` from 2.8.2 to 2.8.3
- [Changelog](https://github.com/fxn/zeitwerk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/fxn/zeitwerk/compare/v2.8.2...v2.8.3)

---
updated-dependencies:
- dependency-name: simplecov
  dependency-version: 1.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sorbet-static-and-runtime
  dependency-version: 0.6.13365
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: csv
  dependency-version: 3.3.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: patchelf
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: sorbet-runtime
  dependency-version: 0.6.13365
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: rbs
  dependency-version: 4.1.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: sorbet
  dependency-version: 0.6.13365
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sorbet-static
  dependency-version: 0.6.13365
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: csv
  dependency-version: 3.3.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sorbet-runtime
  dependency-version: 0.6.13403
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: rbs
  dependency-version: 4.1.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: html-proofer
  dependency-version: 5.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: async
  dependency-version: 2.44.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: zeitwerk
  dependency-version: 2.8.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-05 04:34:27 +00:00
BrewTestBot 08e1a05b30 bootstrap: update to match main configuration 2026-08-05 01:33:32 +00:00
BrewTestBot 4a1a9f04dd jekyll: update to match main configuration 2026-08-05 01:33:32 +00:00
Mike McQuaid 9f3bf077be Reject official legacy install hooks 
- block legacy hooks in Homebrew-owned taps
- retain safe autocorrection and third-party compatibility
- reject `brew ruby` steps that enable developer mode
- prepare runtime call sites for next-release deprecation
- verify internal API and runtime DSL coverage
 2026-08-04 18:36:46 +01:00
Mike McQuaidandGitHub 64356cb673 Merge pull request #23405 from Homebrew/enforce-cask-stanza-ordering 
Complete Cask stanza ordering coverage
 2026-08-04 15:16:48 +00:00
Mike McQuaid 6decfd55f2 Enforce complete Cask stanza ordering 
Once homebrew/cask is migrated, the style cops can enforce the intended
order for platform blocks and generated artifact DSLs.

- register platform blocks, system variables and generated artifacts
- keep system variables after versions so interpolation remains valid
- remove the temporary completion-grouping migration allowance
- update affected fixtures, documentation and regression coverage
 2026-08-04 12:11:22 +01:00
Mike McQuaid 377e4f740b Remove Bubblewrap, use Landlock for Linux sandbox 
- Landlock needs no separate executable, installation or `sysctl`
  configuration, so use it as the only Linux sandbox implementation
  rather than an opt-in behind `$HOMEBREW_SANDBOX_LINUX_LANDLOCK`.
- Delete `Sandbox::Bubblewrap`, the `brew setup-sandbox` command and
  the implicit `bubblewrap` dependency, none of which Landlock needs.
- Remove the Bubblewrap-era `Sandbox` API (`ensure_sandbox_installed!`,
  `configure!`, `configuration_commands`, `sandbox_install_command`)
  and its call sites now that no backend needs installing or
  configuring.
- Simplify `brew doctor`'s `check_linux_sandbox` to report the
  Landlock failure reason with the `$HOMEBREW_NO_SANDBOX_LINUX`
  workaround.
 2026-08-04 11:55:32 +01:00
Mike McQuaidandGitHub 20cd7ecdf9 Merge pull request #23412 from Homebrew/bundle-cleanup-opt-in-trust-reset 
bundle cleanup: document trust store reset
 2026-08-04 08:31:32 +00:00
Patrick Linnane 518dd044c0 docs/MCP-Server: update Cursor URL 
Signed-off-by: Patrick Linnane <patrick@linnane.io>
 2026-08-03 13:11:24 -07:00
Patrick Linnane 494a08f7ca bundle cleanup: document trust store reset 
Signed-off-by: Patrick Linnane <patrick@linnane.io>
 2026-08-03 12:52:55 -07:00
SakutaroandGitHub 428c2a0d53 Merge branch 'main' into contributions-readme-fallback 2026-08-03 17:14:55 +09:00
Mike McQuaidandGitHub 68c924500d Merge pull request #23372 from Homebrew/install-step-explicit-var-compat 
Make formula install-step var bases explicit
 2026-08-02 15:48:20 +00:00
Sakutaro Shiina 499a1486d7 contributions: clarify Maintainer team access 2026-08-02 23:10:08 +09:00
Kyle Marek-Spartz 88746e955d vulns: add --fix-available and --no-fix-available flags 2026-08-01 14:21:14 -05:00
BrewTestBot 9c005ba8dc Update manpage and completions. 
Autogenerated by the [sponsors-maintainers-man-completions](https://github.com/Homebrew/brew/blob/HEAD/.github/workflows/sponsors-maintainers-man-completions.yml) workflow.
 2026-08-01 07:12:36 +00:00
Patrick Linnane 18fe3f190c Gemfile.lock: add checksums 
Signed-off-by: Patrick Linnane <patrick@linnane.io>
 2026-07-31 20:57:50 -07:00
Douglas Eichelberger b81e00685f docs: fix errors reported by Vale 3.17.0 
The Documentation workflow installs Vale unpinned, and 3.17.0 reports two
errors that 3.16.0 did not, so every pull request built after its release
fails the docs job on unchanged content. Both are real violations of our
own styles rather than new false positives.

Drop an Oxford comma in the conference reimbursement list, and link to
How-To-Open-a-Homebrew-Pull-Request.md by the name Homebrew.Terms exempts,
which is also how every other page refers to it.
 2026-07-31 14:51:00 -07:00
Mike McQuaid dbee8fb6f0 Make formula var bases explicit in docs 
- Stop documenting the temporary implicit `var` base for formula steps.
- Update examples to specify their intended path base.
- Record the official-tap migration, RuboCop enforcement and runtime
  default removal as separate follow-up changes.
 2026-07-31 20:32:03 +01:00
Mike McQuaid 7e3b7b186f Document canonical install steps 
Formula and cask authors need one current reference while released
aliases remain an implementation-only compatibility bridge.

- document shared names, defaults, guards, tokens and command behaviour
- remove compatibility-only methods and values from the cookbooks
- explain ordered coexistence with legacy hooks during tap migration
 2026-07-31 17:01:53 +01:00
Mike McQuaidandGitHub 60afcb80a8 Merge pull request #23192 from Homebrew/install-step-17-python-bootstrap 
Add Python bootstrap action (17/24)
 2026-07-31 15:31:34 +00:00
Mike McQuaidandGitHub 171a09d8ca Merge pull request #23191 from Homebrew/install-step-16-php-configuration 
Add PHP configuration action (16/24)
 2026-07-31 15:31:33 +00:00
Mike McQuaid 431a27c15c Add Python bootstrap action 
Five CPython and PyPy formulae share packaging bootstrap work that
depends on resources and implementation-specific install layouts.

- rebuild CPython site-packages, pip and wheel links from resources
- safely replace pre-existing Cellar site-packages directories
- preserve writable CPython venv activation templates
- preserve the Python 3.9 compatibility configuration
- stage PyPy resources and links for the required ABI
 2026-07-31 09:22:18 +01:00
Mike McQuaid 0e956148e5 Add PHP configuration action 
Five PHP formulae share PEAR, PECL and versioned extension configuration
that must be rebuilt after installation.

- preserve PEAR directory traversal and repair stale PECL links
- create the common PECL extension layout from `php-config`
- rewrite versioned opcache paths without changing commented settings
- cover the shared filesystem and command behaviour end to end
 2026-07-31 09:22:13 +01:00
dependabot[bot]andGitHub 9c0cd90420 build(deps): bump the bundler group across 2 directories with 12 updates 
Bumps the bundler group with 6 updates in the /Library/Homebrew directory:

| Package | From | To |
| --- | --- | --- |
| [test-prof](https://github.com/test-prof/test-prof) | `1.6.2` | `1.6.3` |
| [simplecov](https://github.com/simplecov-ruby/simplecov) | `1.0.1` | `1.0.2` |
| [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) | `0.6.13342` | `0.6.13359` |
| [concurrent-ruby](https://github.com/ruby-concurrency/concurrent-ruby) | `1.3.7` | `1.3.8` |
| [require-hooks](https://github.com/ruby-next/require-hooks) | `0.4.0` | `0.4.1` |
| [rubydex](https://github.com/Shopify/rubydex) | `0.2.9` | `0.3.0` |

Bumps the bundler group with 3 updates in the /docs directory: [concurrent-ruby](https://github.com/ruby-concurrency/concurrent-ruby), [async](https://github.com/socketry/async) and [sass-embedded](https://github.com/sass-contrib/sass-embedded-host-ruby).


Updates `test-prof` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/test-prof/test-prof/releases)
- [Changelog](https://github.com/test-prof/test-prof/blob/master/CHANGELOG.md)
- [Commits](https://github.com/test-prof/test-prof/compare/v1.6.2...v1.6.3)

Updates `simplecov` from 1.0.1 to 1.0.2
- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)
- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)
- [Commits](https://github.com/simplecov-ruby/simplecov/compare/v1.0.1...v1.0.2)

Updates `sorbet-static-and-runtime` from 0.6.13342 to 0.6.13359
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `concurrent-ruby` from 1.3.7 to 1.3.8
- [Release notes](https://github.com/ruby-concurrency/concurrent-ruby/releases)
- [Changelog](https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.3.7...v1.3.8)

Updates `sorbet-runtime` from 0.6.13342 to 0.6.13359
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `require-hooks` from 0.4.0 to 0.4.1
- [Changelog](https://github.com/ruby-next/require-hooks/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ruby-next/require-hooks/compare/v0.4.0...v0.4.1)

Updates `rubydex` from 0.2.9 to 0.3.0
- [Release notes](https://github.com/Shopify/rubydex/releases)
- [Commits](https://github.com/Shopify/rubydex/compare/v0.2.9...v0.3.0)

Updates `sorbet` from 0.6.13342 to 0.6.13359
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `sorbet-static` from 0.6.13342 to 0.6.13359
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `concurrent-ruby` from 1.3.7 to 1.3.8
- [Release notes](https://github.com/ruby-concurrency/concurrent-ruby/releases)
- [Changelog](https://github.com/ruby-concurrency/concurrent-ruby/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ruby-concurrency/concurrent-ruby/compare/v1.3.7...v1.3.8)

Updates `async` from 2.42.0 to 2.44.0
- [Release notes](https://github.com/socketry/async/releases)
- [Changelog](https://github.com/socketry/async/blob/main/releases.md)
- [Commits](https://github.com/socketry/async/compare/v2.42.0...v2.44.0)

Updates `io-event` from 1.19.3 to 1.19.4
- [Release notes](https://github.com/socketry/io-event/releases)
- [Changelog](https://github.com/socketry/io-event/blob/main/releases.md)
- [Commits](https://github.com/socketry/io-event/compare/v1.19.3...v1.19.4)

Updates `sass-embedded` from 1.101.0 to 1.102.0
- [Commits](https://github.com/sass-contrib/sass-embedded-host-ruby/compare/v1.101.0...v1.102.0)

---
updated-dependencies:
- dependency-name: test-prof
  dependency-version: 1.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: simplecov
  dependency-version: 1.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sorbet-static-and-runtime
  dependency-version: 0.6.13359
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: concurrent-ruby
  dependency-version: 1.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sorbet-runtime
  dependency-version: 0.6.13359
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: require-hooks
  dependency-version: 0.4.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: rubydex
  dependency-version: 0.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: sorbet
  dependency-version: 0.6.13359
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sorbet-static
  dependency-version: 0.6.13359
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: concurrent-ruby
  dependency-version: 1.3.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: async
  dependency-version: 2.44.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: bundler
- dependency-name: io-event
  dependency-version: 1.19.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: bundler
- dependency-name: sass-embedded
  dependency-version: 1.102.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-31 08:10:10 +00:00
Mike McQuaidandGitHub 5616730508 Merge pull request #23369 from Homebrew/change-dylib-id-dsl 
Add explicit dylib ID helpers
 2026-07-31 07:41:22 +00:00
Patrick Linnane 4cb825a801 contributions: allow --user with --maintainer-report-csv 
Signed-off-by: Patrick Linnane <patrick@linnane.io>
 2026-07-30 22:02:57 -07:00
Mike McQuaid 04ca847a41 Add explicit dylib ID helpers 
- Add a generic Formula helper and serialised install step for changing
  one Mach-O dynamic library ID.
- Require complete source and ID paths while allowing callers to resolve
  a source symlink explicitly.
- Preserve file permissions and codesign modified libraries on Apple
  Silicon.
- Document and audit both public interfaces.
 2026-07-30 21:46:43 +01:00
Mike McQuaidandGitHub 3550b83dee Merge pull request #23347 from Homebrew/document-install-step-interpolation 
Document install step interpolation
 2026-07-29 17:18:43 +00:00
Mike McQuaidandGitHub 182da7accd Merge pull request #23190 from Homebrew/install-step-15-clang-system-config 
Add Clang system config action (15/24)
 2026-07-29 17:04:35 +00:00
Mike McQuaid 095b9cef75 Document install step interpolation 
- Distinguish Ruby interpolation from install-time tokens that survive
  JSON serialisation.
- Keep token-producing compatibility helpers valid while rejecting
  arbitrary interpolation.
- Emit explicit install-time tokens from formula autocorrections.
 2026-07-29 17:59:20 +01:00
Mike McQuaidandGitHub 5a2627ba02 Merge pull request #23201 from Homebrew/install-step-14-glibc-runtime 
Add glibc runtime action (14/24)
 2026-07-29 16:37:47 +00:00
Patrick Linnane 1ba167eab7 docs: update Vale styles 
Signed-off-by: Patrick Linnane <patrick@linnane.io>
 2026-07-29 09:13:27 -07:00
Mike McQuaid 63f2dd43d0 Enforce responsible AI contribution policy 
- Keep commit history tied to accountable human contributors
- Ensure reviewers engage directly with responsible contributors
 2026-07-29 09:53:23 +01:00
AltCode bcf3453b4b docs: Format artifacts stanza table 2026-07-28 20:58:59 +02:00