ci: add manual sync-brew-formula workflow#52
Closed
lukeocodes wants to merge 2 commits intomainfrom
Closed
Conversation
Manual escape hatch for when the auto-bump-on-release path can't fire (e.g. no root v* release was cut but we need the live tap formula patched immediately to unblock 'brew install'). Uses the existing CLI_TAP_SYNC_PAT secret to push directly to deepgram/homebrew-tap. Idempotent: skips if rust dep already present. Aborts safely if the formula has been hand-edited (marker text not found or duplicated). Triggered immediately to ship the rust + pkgconf fix for the cryptography / pydantic_core source-build failure currently breaking 'brew install deepgram/tap/deepgram'.
Member
Author
|
Closing — folding into #49 to keep one PR for the brew fix work. The sync workflow can't actually push anyway (403 from deepgram-robot to homebrew-tap, see failed run) so it's dead until the PAT permissions are fixed. Easier to re-add the workflow once permissions work, rather than carry an unusable PR. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds a manual escape-hatch workflow (`workflow_dispatch`) for syncing `deepgram/homebrew-tap/Formula/deepgram.rb` when the auto-bump path can't fire (typically: no root `v*` release was cut, but we still need the live formula patched immediately to unblock `brew install`).
The workflow uses the existing `CLI_TAP_SYNC_PAT` secret. Idempotent — skips if rust dep already present. Aborts safely if the formula has been hand-edited.
Why now
We tried to run this to ship the rust + pkgconf build-deps fix that's currently breaking `brew install deepgram/tap/deepgram` (failure log). The patch step succeeded, but the push step hit a 403 from `deepgram-robot` to `deepgram/homebrew-tap`:
```
remote: Permission to deepgram/homebrew-tap.git denied to deepgram-robot.
fatal: unable to access 'https://github.com/deepgram/homebrew-tap/': The requested URL returned error: 403
```
This means the existing `bump-brew-formula` job in `release.yml` will hit the same 403 on the next root release. Action needed: grant `deepgram-robot` write access on `deepgram/homebrew-tap` (or rotate the PAT to a credential owner who already has access).
After permissions are corrected, this workflow can be re-triggered via the Actions tab (`Run workflow` → branch `main`).
Pre-existing comments
The workflow's header docstring is category 3 necessary — documents when to use this manual workflow vs the standard auto-bump in release.yml. Without it, a maintainer seeing two formula-syncing workflows might delete the wrong one as redundant or use the manual escape hatch for a normal release.