Skip to content

ci: trust the scratch Homebrew tap before fetching from it - #224

Merged
calvin-archastro merged 1 commit into
mainfrom
ci/trust-scratch-homebrew-tap
Oct 30, 2026
Merged

calvin-archastro merged 1 commit into
mainfrom
ci/trust-scratch-homebrew-tap

Conversation

@calvin-archastro

@calvin-archastro calvin-archastro commented Oct 30, 2026 •

Copy link
Copy Markdown
Contributor

Review on ArchCode

Problem and author intent

The Homebrew formula job fails on every PR (#219, #222, #223):
Refusing to load formula aster-ci/public-release/aster from untrusted tap aster-ci/public-release.

  • The job creates a scratch tap with brew tap-new, renders the formula into it, then runs brew fetch.
  • Homebrew 7 added tap trust and refuses to load formulae from untrusted taps.

What changed

  • After brew tap-new, the job runs brew trust --tap aster-ci/public-release.
  • The call is guarded on brew commands listing trust, so runners on older Homebrew still work.

Scope / Risk / User impact

CI workflow only; low risk. The tap is created by the same job, so trusting it grants nothing external. No user impact.

Testing

  • brew trust --tap on a scratch tap-new tap works locally (Homebrew 7.0.11).
  • This PR's own Homebrew formula job is the end-to-end check.

🤖 Generated with Claude Code

Homebrew 7 refuses to load a formula from a tap that has not been
trusted ("Refusing to load formula ... from untrusted tap"), which
fails the Homebrew formula job on every PR.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@calvin-archastro
calvin-archastro requested a review from a team October 30, 2026 00:09
@calvin-archastro

calvin-archastro commented Oct 30, 2026 •

Copy link
Copy Markdown
Contributor Author

ArchDev is watching this pull request. State: settled (cycle 1 of 1 for head 3baa11b).

when trigger decision result
2026-10-30T00:25:59.914Z verify head enqueue job_7f723a160ceabcffb5b77757 no change

Paused by the no-autofix label or a draft; never resolves reviewer threads. Jobs: job_7f723a160ceabcffb5b77757.

@calvin-archastro
calvin-archastro merged commit c167fee into main Oct 30, 2026
21 of 22 checks passed
calvin-archastro added a commit that referenced this pull request Oct 30, 2026
deferred_tests_decline_unlinked_current_executable copied its own binary
and exec'd the copy. A test thread that forks while the copy's write
descriptor is open hands that descriptor to its child, and exec of a
file open for writing fails with ETXTBSY ("Text file busy"), as CI saw
on #224. A hard link is never opened for writing; it lives beside the
binary because hard links cannot cross filesystems.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
calvin-archastro added a commit that referenced this pull request Oct 30, 2026
deferred_tests_decline_unlinked_current_executable copied its own binary
and exec'd the copy. A test thread that forks while the copy's write
descriptor is open hands that descriptor to its child, and exec of a
file open for writing fails with ETXTBSY ("Text file busy"), as CI saw
on #224. A hard link is never opened for writing; it lives beside the
binary because hard links cannot cross filesystems.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant