Skip to content

fix: correct the Homebrew version claim in the footer and update hint - #375

Merged
YoungJinJung merged 1 commit into
mainfrom
fix/issue-374-homebrew-version-claim
Sep 29, 2026
Merged

YoungJinJung merged 1 commit into
mainfrom
fix/issue-374-homebrew-version-claim

Conversation

@YoungJinJung

Copy link
Copy Markdown
Contributor

Summary

#370 fixed the README; this carries the same correction to the two places that still had my original wrong claim.

I verified the facts against Homebrew's documentation rather than either PR's wording:

"Non-official taps require explicit trust by default since Homebrew 6.0.0" — docs.brew.sh/Tap-Trust

Tap trust shipped in Homebrew 6.0.0 on 2026-06-11. #369 reported the failure on 7.0.7 and I generalised from that one data point without checking when the requirement actually landed.

Changes

.goreleaser.yaml footer — said "Homebrew 7.0 refuses ..." and "The subcommand does not exist before 7.0 — skip it there." The second sentence told Homebrew 6.x users to skip a step they need. Now states 6.0.0 and uses the formula-scoped command.

unic update hint — same version comment, and it still suggested tap-scoped brew trust DevopsArtFactory/unic while the README had moved to formula scope. Now consistent.

README — restores the literal Refusing to load formula ... from untrusted tap string that #370 dropped, and names what the tap-scoped alternative grants, since the docs are explicit that it covers "every current and future formula, cask and external command from that tap". That is the reason to prefer formula scope, so it is worth one clause rather than left implicit.

Validation

  • Parsed .goreleaser.yaml with the repo's own gopkg.in/yaml.v3 and printed the unmarshalled footer — parses, renders as intended, changelog.filters.exclude unchanged
  • go build ./..., go vet ./..., go test ./... pass
  • grep across *.md, *.go, *.yaml for Homebrew 7, 7.0+ only, before 7.0 — no remaining hits

Not covered here

The published v0.3.3 and v0.3.4 release notes still carry the wrong claim. Those are edited through the API, not this branch; doing that separately.

Closes #374

#370 corrected the README: tap trust has been required since Homebrew
6.0.0, not 7.0, and `brew trust` exists on 6.x rather than being absent
there. The same wrong claim was still in the GoReleaser footer, which
generates it into every release, and in the `unic update` hint.

Per docs.brew.sh/Tap-Trust, non-official taps require explicit trust
since 6.0.0, and whole-tap trust covers "every current and future
formula, cask and external command from that tap" — so the hint now
uses the same formula-scoped command the README settled on.

Also restores the literal error string to the README. Anyone who has
already hit this searches the message rather than reading the install
section top-down, and #370 dropped it.

Closes #374
@coderabbitai

coderabbitai Bot commented Sep 29, 2026

Copy link
Copy Markdown

Warning

Review limit reached

Next included review available in 21 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Repository: DevopsArtFactory/unic/.coderabbit.yaml

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 3e264571-2196-4f09-bde2-0d5aaac24e47

📥 Commits

Reviewing files that changed from the base of the PR and between 72b38db and 0750b2b.

📒 Files selected for processing (3)
  • .goreleaser.yaml
  • README.md
  • internal/cli/update.go

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@amazon-q-developer amazon-q-developer Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR successfully corrects the Homebrew version requirement from 7.0 to 6.0.0 across all relevant files and updates the trust command to use formula-scoped trust instead of tap-scoped trust. The changes are factually accurate according to Homebrew's documentation and improve security by recommending the more restrictive formula-scoped trust command.

All three files (.goreleaser.yaml, README.md, internal/cli/update.go) are now consistent with each other. The PR includes proper verification against official Homebrew documentation and maintains consistency throughout the codebase.


You can now have the agent implement changes and create commits directly on your pull request's source branch. Simply comment with /q followed by your request in natural language to ask the agent to make changes.

@YoungJinJung
YoungJinJung merged commit 1f59b68 into main Sep 29, 2026
4 checks passed
@YoungJinJung
YoungJinJung deleted the fix/issue-374-homebrew-version-claim branch September 29, 2026 01:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

fix: correct the Homebrew version claim in release notes and footer

1 participant