chore: serve the formula from approov-cli releases (structural change only) - #12
Open
ivolz wants to merge 1 commit into
Open
chore: serve the formula from approov-cli releases (structural change only)#12ivolz wants to merge 1 commit into
ivolz wants to merge 1 commit into
Conversation
The tap currently hosts its own release tarballs and the formula points at them, so it is doing two jobs. Binaries now come from the approov/approov-cli release repository, published alongside the Windows and Linux packages with checksums and a detached PGP signature, and this tap holds only the formula. The old single tarball carried Linux/approov and MacOS/approov; the new releases ship one tarball per platform with a bare approov at the root, so the install block becomes per-OS. macOS is a universal binary, so Apple silicon and Intel share one url and checksum.
ivolz
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Important
This is a structural change only — it is not the 3.6.1 update.
Merge it to
mainon its own; the release pipeline then opens the 3.6.1 formula-bump PRautomatically. No tag or release is needed in this repository, now or ever again.
📦 What this changes
The tap currently does two jobs: it holds the formula and hosts the release tarballs
(3.6.0, 3.5.0, 3.4.0…). After this it holds only the formula, which is what a tap should be.
Binaries come from
approov/approov-cli—the single origin for every installation artifact and all installation documentation across
macOS, Windows and Linux. Homebrew, Scoop and winget all resolve against that one repository, so
there is one place to look for downloads, checksums, signatures and install instructions.
🔧 Details
url→approov-clireleasesapproovat the root; the old single tarball hadLinux/andMacOS/subdirectorieslicenseand a realtest dobrew audit --strictrequires bothWarning
brew installwill not work between this merge and the 3.6.1 release landing.The version and checksums here come from a temporary pipeline-test build, and
approov/approov-cliis still internal, so the URLsare not anonymously reachable. This window is expected and accepted. Existing installations
are unaffected — only new
brew install/brew upgraderuns are.✅ Merge checklist
brew installis broken until the 3.6.1 PR landsDeliberately not required before merging — the automation handles them:
SHA256SUMS)brew audit/brew installverification (do it on the 3.6.1 PR, when the URLs resolve)🤖 What happens next
mainnow has the right structure and the wrong version. Expected.approov/approov-cliis made public.versionand bothsha256readstraight from that release's
SHA256SUMS, so the formula cannot disagree with what waspublished. Verify with
brew audit --strict --onlineon that PR.brew installand completes the migration.mainkeeps requiring an approving review, so those PRs still need a human merge — deliberately,so someone sees the diff before customers receive it.
Existing releases in this repo are left in place so any pinned installs keep working.
Tracked in approov/core-project-approov#675.