Commit Graph
24195 Commits
Author SHA1 Message Date
Mike McQuaidandGitHub c31e8a122e Merge pull request #12440 from Homebrew/dependabot/bundler/Library/Homebrew/sorbet-0.5.9327
build(deps-dev): bump sorbet from 0.5.9319 to 0.5.9327 in /Library/Homebrew
2021-11-17 10:48:32 +00:00
BrewTestBot 84a979d76b Update RBI files for mime-types-data. 2021-11-16 18:20:18 +00:00
BrewTestBot 06bca8991e brew vendor-gems: commit updates. 2021-11-16 18:15:31 +00:00
BrewTestBot d371359c1c brew vendor-gems: commit updates. 2021-11-16 18:10:51 +00:00
dependabot[bot]andGitHub cd779bd347 build(deps): bump mime-types-data in /Library/Homebrew
Bumps [mime-types-data](https://github.com/mime-types/mime-types-data) from 3.2021.0901 to 3.2021.1115.
- [Release notes](https://github.com/mime-types/mime-types-data/releases)
- [Changelog](https://github.com/mime-types/mime-types-data/blob/main/History.md)
- [Commits](https://github.com/mime-types/mime-types-data/compare/v3.2021.0901...v3.2021.1115)

---
updated-dependencies:
- dependency-name: mime-types-data
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-11-16 18:06:08 +00:00
dependabot[bot]andGitHub ebec7f98d0 build(deps-dev): bump sorbet in /Library/Homebrew
Bumps [sorbet](https://github.com/sorbet/sorbet) from 0.5.9319 to 0.5.9327.
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: sorbet
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-11-16 18:04:45 +00:00
Mike McQuaidandGitHub 762b35bbc8 Merge pull request #12438 from carlocab/actions-annotations
utils/github/actions: support notices and new annotation parameters
2021-11-16 12:10:30 +00:00
Mike McQuaidandGitHub 38d5524860 Merge pull request #12436 from Homebrew/dependabot/bundler/Library/Homebrew/sorbet-0.5.9319
build(deps-dev): bump sorbet from 0.5.9318 to 0.5.9319 in /Library/Homebrew
2021-11-16 12:04:48 +00:00
Mike McQuaidandGitHub 06b653e968 Merge pull request #12427 from FnControlOption/pypi
update-python-resources: skip dependencies of excluded packages
2021-11-16 12:04:33 +00:00
Carlo Cabrera 6795a88520 utils/github/actions: support notices and new annotation parameters
GitHub Actions annotations also suport a "notice" annotation type. You
can also set the title of an annotion, and the set `endLine` and
`endColumn` parameters.

See https://docs.github.com/en/actions/learn-github-actions/workflow-commands-for-github-actions
2021-11-16 14:44:43 +08:00
Michka Popoff 1ce7f1fb7b disable: allow to disable due to checksum mismatch
The rationale is that a checksum mismatch is a huge security issue.
This means that the current source file, but maybe the initial one,
might have been compromised.

In the case upstream does not respond quickly to clarify what happened,
or fails to respond, we can now rev-bump the formula, disable and unbottle it,
making sure we stop delivering the potentially malicious code

Further improvements:
- Add the url of the project in the error message to redirect users to
the closed pull request where we disabled this, to centralize the discussion
and avoid the opening of multiple new issues
- Add a warning on brew-update that something is fishy upstream
2021-11-15 20:25:37 +01:00
fn ⌃ ⌥ dddce0de74 Style fixes 2021-11-15 10:49:07 -08:00
BrewTestBot 62d0f14e3c brew vendor-gems: commit updates. 2021-11-15 18:07:33 +00:00
dependabot[bot]andGitHub 14a3b2dca2 build(deps-dev): bump sorbet in /Library/Homebrew
Bumps [sorbet](https://github.com/sorbet/sorbet) from 0.5.9318 to 0.5.9319.
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: sorbet
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-11-15 18:03:27 +00:00
Carlo Cabrera 7bd5374dcc Revert "linkage_checker: check variable references with dlopen"
Trying to `dlopen` some Qt libraries causes Ruby to crash.

This reverts commit 0191a275cc.
2021-11-16 01:32:42 +08:00
Carlo CabreraandGitHub b39fbc9c8c Merge pull request #12429 from carlocab/variable-dlopen
linkage_checker: check variable references with dlopen
2021-11-15 23:09:56 +08:00
Mike McQuaidandGitHub 819eea5669 Merge pull request #12426 from EricFromCanada/issues-url-condition
Also show issues URL on macOS arm64
2021-11-15 14:24:11 +00:00
BrewTestBot d7395863c0 spdx: update license data.
Autogenerated by [a scheduled GitHub Action](https://github.com/Homebrew/brew/blob/master/.github/workflows/spdx.yml).
2021-11-15 00:07:49 +00:00
Carlo Cabrera 0191a275cc linkage_checker: check variable references with dlopen
The linkage check currently does nothing to check the validity of
variable-referenced libraries (prefixed with an `@`).

We could rectify that by mimicking the dynamic linker in looking up the
variable-referenced library, but this could get quite complicated.
Instead, let's let the linker do the hard work by checking if we can
`dlopen` libraries and bundles that contain variable linkage. The
`dlopen` will fail if the linker cannot resolve the variable reference.

There are at least two disadvantages to this approach relative to the
alternative suggested above:
1. This doesn't work for binary executables.
2. This doesn't identify which variable references are broken.

It's still better than not checking them at all, which is what we do
currently, and saves us from having to carry around code that parses and
verifies variable references directly.
2021-11-15 02:24:16 +08:00
Dawid DziurlaandGitHub 55244c845b rubocops/text: forbid "go get" only in install method 2021-11-14 14:04:14 +01:00
fn ⌃ ⌥ e6e730f49d update-python-resources: skip dependencies of excluded packages 2021-11-14 03:52:44 -08:00
EricFromCanada 3515059941 Also show issues URL on macOS arm64 2021-11-13 15:00:10 -05:00
BrewTestBot b4fd89c811 Update RBI files for mechanize. 2021-11-12 18:09:43 +00:00
BrewTestBot 4fda2c335c brew vendor-gems: commit updates. 2021-11-12 18:05:53 +00:00
dependabot[bot]andGitHub 234cd2e664 build(deps): bump mechanize from 2.8.1 to 2.8.3 in /Library/Homebrew
Bumps [mechanize](https://github.com/sparklemotion/mechanize) from 2.8.1 to 2.8.3.
- [Release notes](https://github.com/sparklemotion/mechanize/releases)
- [Changelog](https://github.com/sparklemotion/mechanize/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/mechanize/compare/v2.8.1...v2.8.3)

---
updated-dependencies:
- dependency-name: mechanize
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-11-12 18:03:22 +00:00
XuehaiPan 50cde98fd3 utils/shfmt.sh: allow single line if blocks 2021-11-12 19:57:32 +08:00
XuehaiPan 391e7e22f8 utils/shfmt.sh: add != and =~ to within test regex 2021-11-12 19:57:28 +08:00
XuehaiPan 2345a34095 utils/shfmt.sh: rename regex variables 2021-11-12 19:29:09 +08:00
EricFromCanada 6e0e96eb1d list: raise NoSuchKegError if formula exists but isn't installed 2021-11-11 17:40:32 -05:00
EricFromCanada dd439b4c11 bump: skip PR check if livecheck does not return a version 2021-11-11 10:02:30 -05:00
Carlo CabreraandGitHub 3b41be9983 Merge pull request #12417 from carlocab/rosetta-arm
vendor-install: handle native ARM running under Rosetta
2021-11-11 18:00:44 +08:00
Carlo Cabrera f114b89750 brew.sh: move comment closer to code it references 2021-11-11 17:33:28 +08:00
Carlo Cabrera 49de2b0c1a Check arch instead of the brand string 2021-11-11 17:30:02 +08:00
Carlo Cabrera 98b33e6732 Remove another redundant conditional
This condition is always true when we've reached this branch.
2021-11-11 16:28:15 +08:00
Mike McQuaidandGitHub 449d0430cb Merge pull request #12414 from alebcay/create_github_pr_redact_secrets
GitHub.create_bump_pr: don't leak GitHub token if set via environment variable
2021-11-11 08:27:46 +00:00
Carlo Cabrera fd1ca7e2b7 Remove redundant conditionals
Whenever the `sysctl` call does not match `"Apple"*`, we can be sure
that `HOMEBREW_PROCESSOR` is `Intel`, so there's no need for this
additional check.
2021-11-11 16:24:59 +08:00
Carlo Cabrera 51ab1649fb Install Portable Ruby on native ARM installs
The previous commit only prevented the installation of an Intel Portable
Ruby into `/opt/homebrew` prefix. Let's actually install an ARM64
Portable Ruby there too.
2021-11-11 16:21:35 +08:00
Carlo Cabrera 8aeb28781c vendor-install: handle native ARM running under Rosetta
Since `HOMEBREW_PROCESSOR` is populated using `uname -m`, this will
register as `Intel` even when a native ARM install is running under
Rosetta.

Let's work around this by checking `sysctl -n machdep.cpu.brand_string`.
On my Intel machine:

    ❯ sysctl -n machdep.cpu.brand_string
    Intel(R) Core(TM) i3-1000NG4 CPU @ 1.10GHz

On Apple Silicon:

    brew@HMBRW-A-001-M1-001 ~ % sysctl -n machdep.cpu.brand_string
    Apple M1

The case of a Rosetta installation of Homebrew is already handled below
the proposed change.

Fixes Homebrew/discussions#2434.
2021-11-11 16:06:33 +08:00
Rylan PolsterandGitHub 6c341516d3 Merge pull request #12416 from Homebrew/dependabot/bundler/Library/Homebrew/sorbet-0.5.9318
build(deps-dev): bump sorbet from 0.5.9309 to 0.5.9318 in /Library/Homebrew
2021-11-10 16:21:51 -05:00
BrewTestBot 749a66343d Update RBI files for unparser. 2021-11-10 18:12:12 +00:00
BrewTestBot 2c60e7f237 brew vendor-gems: commit updates. 2021-11-10 18:11:27 +00:00
BrewTestBot 8222e77460 brew vendor-gems: commit updates. 2021-11-10 18:07:38 +00:00
dependabot[bot]andGitHub 5d704a0ecc build(deps-dev): bump sorbet in /Library/Homebrew
Bumps [sorbet](https://github.com/sorbet/sorbet) from 0.5.9309 to 0.5.9318.
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

---
updated-dependencies:
- dependency-name: sorbet
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-11-10 18:05:12 +00:00
dependabot[bot]andGitHub 1ee4758009 build(deps): bump unparser from 0.6.1 to 0.6.2 in /Library/Homebrew
Bumps [unparser](https://github.com/mbj/unparser) from 0.6.1 to 0.6.2.
- [Release notes](https://github.com/mbj/unparser/releases)
- [Changelog](https://github.com/mbj/unparser/blob/main/Changelog.md)
- [Commits](https://github.com/mbj/unparser/commits/v0.6.2)

---
updated-dependencies:
- dependency-name: unparser
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-11-10 18:04:32 +00:00
Caleb Xu 333f44f84e github: use system_command when pushing bump PR 2021-11-10 12:42:14 -05:00
Caleb Xu 227b8148eb system_command: redact secrets in stdout/stderr
We already redact secrets when printing the command-line invocation
itself. Make sure that stdout/stderr doesn't leak secrets either.
2021-11-10 10:36:16 -05:00
Carlo CabreraandGitHub df2ded4e96 Merge pull request #12386 from FnControlOption/search
search: split up command into multiple methods
2021-11-10 20:57:04 +08:00
Evan Phoenix b5ccf8aac2 Do not pass -Wl,-headerpad_max_install_names to b-linux-path
One of the more curious bugs, if you use
-Wl,-headerpad_max_install_names on linux, it tries to link a library
named "eaderpath_max_install_names" in, which causes all kinds of weird
havoc.

Most notably, gtester inside glib fails to run for bizarre reasons.
-Wl,-headerpad_max_install_names is not an option anywhere outside macos
anyway, so move it to macos only and avoid the heartache of extremely
weild bugs.
2021-11-09 20:38:26 -08:00
Rylan PolsterandGitHub ec1e077631 Merge pull request #12405 from Homebrew/dependabot/bundler/Library/Homebrew/sorbet-0.5.9309
build(deps-dev): bump sorbet from 0.5.9307 to 0.5.9309 in /Library/Homebrew
2021-11-09 22:15:34 -05:00
EricFromCanada 508b48d19e formula_installer: preinstall any pre-fetch dependencies 2021-11-09 13:56:40 -05:00