From e66a0e1a989ee74ef10cdb6494dddd8e5d2695fb Mon Sep 17 00:00:00 2001
From: Benjamin Pannell <benjamin@pannell.dev>
Date: Sat, 20 Jun 2026 22:16:47 +0100
Subject: [PATCH] ci: publish releases to the Homebrew tap

Adds a release-only fan-in job (needs build) that calls
SierraSoftworks/actions-tap to update the github-backup formula in the
Homebrew tap, generating major/minor versioned aliases. The job is
guarded with `if: github.event_name == 'release'` so it only runs on
releases and not on push or pull_request events.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .github/workflows/rust.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 26b6a54..ccf724c 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -322,3 +322,18 @@ jobs:
       - name: Inspect image
         run: |
           docker buildx imagetools inspect ${{ env.FULL_IMAGE_NAME }}:${{ steps.meta.outputs.version }}
+
+  tap:
+    name: Update Homebrew Tap
+    runs-on: ubuntu-latest
+    if: github.event_name == 'release'
+    needs:
+      - build
+    steps:
+      - name: Update Homebrew Tap
+        uses: SierraSoftworks/actions-tap@v1
+        with:
+          app-id: ${{ secrets.TAP_APP_ID }}
+          private-key: ${{ secrets.TAP_APP_PRIVATE_KEY }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          aliases: major minor