chore: auto-bump Homebrew tap on release#150
Draft
chailandau wants to merge 4 commits into
Draft
Conversation
chailandau
force-pushed
the
chore/homebrew-tap-autobump
branch
from
0561e57 to
125e232
Compare
nahiyankhan
previously approved these changes
Jun 17, 2026
chailandau
dismissed
nahiyankhan’s stale review
The merge-base changed after approval.
Mirror block/sessh: after publishing the release tarball, mint a scoped GitHub App token for block/homebrew-tap and dispatch its bump-formula.yaml so each anarchitecture-ghost@X.Y.Z release auto-opens a formula bump PR. Gated on BLOCK_HOMEBREW_TAP_APP_ID so forks/unconfigured repos skip it.
Move the tap-bump from the now dispatch-only release-tarball.yml onto release.yml's automatic publish path, so brew install block/tap/ghost tracks every npm release. Gated on an actual Changesets publish and the BLOCK_HOMEBREW_TAP_* secrets.
chailandau
force-pushed
the
chore/homebrew-tap-autobump
branch
from
125e232 to
95e045e
Compare
* main: chore: version packages ci: fix GitHub release tarballs
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Auto-bump the OSS Homebrew tap (
block/homebrew-tap) whenever@anarchitecture/ghostis published, sobrew install block/tap/ghosttracks releases without manual formula edits.Why
Today the
ghostformula version is bumped manually. This wires the release into the standard Block OSS auto-bump flow.How
The tap-bump hooks into
release.yml's publish path — the place where the.tgzis packed and attached to the GitHub Release on every Changesets publish. The original draft hookedrelease-tarball.yml, but that workflow became a dispatch-only manual fallback, so the autobump moved torelease.ymlto fire on every real release.Steps added to
release.yml(all gated onsteps.changesets.outputs.published == 'true'):tag/sha256/artifact_urlas step outputs.block/homebrew-tap.gh workflow run bump-formula.yaml --repo block/homebrew-tapwithrepo/formula/tag/artifact_url/sha256.block→blockonly — no Square/internal references.Prerequisites before this works
BLOCK_HOMEBREW_TAP_APP_ID/BLOCK_HOMEBREW_TAP_PRIVATE_KEYsecrets available to this repo (GitHub App installed onblock/ghost). Both bump steps are gated onenv.HAS_TAP_APPand the publish flag, so forks and unconfigured environments skip cleanly — safe to merge before onboarding completes.Formula/ghost.rbadded toblock/homebrew-tap(separate PR) so there's a formula to bump. Pin it at the current published version.Notes
id-token: writealready present onrelease.ymlfor provenance; reused for the App token mint.env.HAS_TAP_APP(thesecretscontext can't be used directly in step-levelif:).main(now at0.11.0); ci: attach .tgz to GitHub Release on npm publish #152's tarball-attach work has landed, so this is no longer stacked. Includes apatchchangeset so the next release publishes a new version and exercises the autobump path end-to-end.Draft — not yet functional until the prerequisites above are met.
Generated with Goose