Skip to content

ci: pin Homebrew/actions/setup-homebrew to a tag #3612

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
bpamiri merged 2 commits into from
Sep 13, 2026
Merged

ci: pin Homebrew/actions/setup-homebrew to a tag #3612

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
f5726da
ci: pin Homebrew/actions/setup-homebrew to a tag
bpamiri Sep 13, 2026
5a0d58e
ci: grant tap trust before tapping
bpamiri Sep 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 8 additions & 1 deletion .github/workflows/docs-validation.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -101,10 +101,17 @@ jobs:
run: pnpm install --frozen-lockfile

- name: Set up Linuxbrew
uses: Homebrew/actions/setup-homebrew@master
uses: Homebrew/actions/setup-homebrew@2026.09.07.1

- name: Install Wheels CLI
run: |
# Trust BEFORE tap. Homebrew now validates every formula in a tap while
# cloning it, and on Linuxbrew refuses untrusted ones at that moment —
# the clone itself fails with "Invalid formula ... Refusing to load formula
# from untrusted tap", so a trust command placed after the tap runs too
# late. `brew trust` accepts a tap that is not installed yet (no-op on
# older brew that lacks the command).
brew trust wheels-dev/wheels || true
brew tap wheels-dev/wheels || true
brew install wheels

Expand Down
12 changes: 8 additions & 4 deletions .github/workflows/docs-verify.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@ jobs:
run: pnpm install --frozen-lockfile

- name: Set up Linuxbrew
uses: Homebrew/actions/setup-homebrew@master
uses: Homebrew/actions/setup-homebrew@2026.09.07.1

- name: Install Wheels CLI
env:
Expand All @@ -63,10 +63,14 @@ jobs:
# The ephemeral runner is already isolation enough for CI.
HOMEBREW_NO_SANDBOX_LINUX: "1"
run: |
brew tap wheels-dev/wheels || true
# Homebrew 5.1+ refuses to load formulae from untrusted third-party
# taps; trust must be granted explicitly (no-op on older brew).
# Trust BEFORE tap. Homebrew now validates every formula in a tap while
# cloning it, and on Linuxbrew refuses untrusted ones at that moment —
# the clone itself fails with "Invalid formula ... Refusing to load formula
# from untrusted tap", so a trust command placed after the tap runs too
# late. `brew trust` accepts a tap that is not installed yet (no-op on
# older brew that lacks the command).
brew trust wheels-dev/wheels || true
brew tap wheels-dev/wheels || true
brew install wheels

- name: Patch wheels wrapper JAVA_HOME for Linux
Expand Down
Loading