From c75d18350c3abd2de62b12c91a1ddeccc0a7efb9 Mon Sep 17 00:00:00 2001 From: ZdenekSrotyr Date: Wed, 15 Jul 2026 18:21:07 +0200 Subject: [PATCH] fix(release): trust the homebrew tap before install in test-install The v0.66.1 release run (first one to actually reach this step, since homebrew/chocolatey were broken on every prior tag -- fixed in #476) failed here: `brew install keboola-cli2` refuses to load a formula from a third-party tap until the tap is explicitly trusted. Add `brew trust` right after `brew tap`, matching the remedy brew itself prints on failure. Verified locally: `brew tap` + `brew trust` + `brew install keboola-cli2` against the real keboola/homebrew-keboola-cli2 tap succeeds (arm64 linuxbrew container). The subsequent `kbagent --version` glibc mismatch seen in that local run is specific to arm64 bottles on this machine, not the amd64 ubuntu-latest CI runner -- the same binary already passes `kbagent --version` via the apt/rpm legs of this job on that runner. --- .github/workflows/release-kbagent.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/release-kbagent.yml b/.github/workflows/release-kbagent.yml index 8f0f5c08..bf631d31 100644 --- a/.github/workflows/release-kbagent.yml +++ b/.github/workflows/release-kbagent.yml @@ -485,6 +485,11 @@ jobs: docker run --rm -e VERSION homebrew/brew bash -c ' set -e brew tap keboola/keboola-cli2 https://github.com/keboola/homebrew-keboola-cli2 + # brew now refuses to load a formula from a third-party tap until the tap is + # explicitly trusted ("Refusing to load formula ... from untrusted tap ..."). + # First observed on the v0.66.1 run (github.com/keboola/cli, release-kbagent + # #29430278032) -- this is a real end-user install step too, not CI-only. + brew trust keboola/keboola-cli2 brew install keboola-cli2 kbagent --version | grep -q "${VERSION}" '