Support tap trust in Brewfiles

[MikeMcQuaid]

Fixes #22756

• Preserve trusted tap dependencies when brew bundle dump cannot emit them as brew or cask entries.
• Let brew bundle cleanup --force make trust.json match the selected Brewfile.
• Document tap-level trusted hashes for formulae, casks and commands.

---

• Have you followed the guidelines in our Contributing document?
• Have you checked to ensure there aren't other open Pull Requests for the same change?
• Have you added an explanation of what your changes do and why you'd like us to include them? Performance claims (e.g. "this is faster") must include Hyperfine benchmarks.
• Have you written new tests (excluding integration tests) for your changes? Here's an example.
• Have you successfully run brew lgtm (style, typechecking and tests) with your changes locally?

---

• AI was used to generate or assist with generating this PR.

---

[Copilot]

⚠️ Not ready to approve

The documentation change for the Flathub beta remote URL appears incorrect and should be fixed to avoid directing users to a broken URL.

Pull request overview

This PR extends Homebrew Bundle’s trusted handling so tap-level trust can be represented in Brewfiles, preserved during brew bundle dump, and enforced/reset during brew bundle cleanup --force, with accompanying tests and documentation updates.

Changes:

• Add a Homebrew::Trust.replace! API to overwrite the trust store from a computed set of entries.
• Introduce Homebrew::Bundle::Trust to translate Brewfile trusted options (including tap-level trust hashes) into trust-store entries, and apply them early in bundle install.
• Enhance brew bundle dump tap output to emit tap-level trusted: { ... } hashes for trusted items not otherwise emitted as brew/cask lines, and document the syntax/behaviour.

File summaries

File	Description
Library/Homebrew/trust.rb	Adds replace! to atomically rewrite the trust store from a provided entry set.
Library/Homebrew/bundle/trust.rb	New helper to convert Brewfile trusted options into [type, name] trust-store entries.
Library/Homebrew/bundle/installer.rb	Applies trust derived from Brewfile entries before fetch/upgrade checks load formulae/casks.
Library/Homebrew/bundle/subcommand/cleanup.rb	On cleanup --force, resets trust.json to match the selected Brewfile’s trust declarations.
Library/Homebrew/bundle/dumper.rb	Passes dumped formulae/casks to tap dumping so taps can emit trust hashes only for non-dumped trusted items.
Library/Homebrew/bundle/tap.rb	Emits trusted: true for fully trusted taps or trusted: { ... } for partially trusted tap items.
Library/Homebrew/bundle/cask.rb	Reorders method visibility blocks (private helpers moved lower) without changing behaviour.
Library/Homebrew/test/bundle/installer_spec.rb	Adds tests for tap trusted hash parsing/application and unsupported key rejection.
Library/Homebrew/test/bundle/tap_spec.rb	Adds tests for dumping partial tap trust as trusted: { ... } hashes.
Library/Homebrew/test/bundle/dumper_spec.rb	Adds test ensuring trusted dependencies not dumped as formulae are preserved via tap trust hashes.
Library/Homebrew/test/cmd/bundle/cleanup_subcommand_spec.rb	Adds test validating cleanup --force rewrites trust store from Brewfile entries.
docs/Tap-Trust.md	Points Brewfile trust syntax discussion to the Bundle documentation section.
docs/Brew-Bundle-and-Brewfile.md	Documents tap-level trust hash syntax and dump/cleanup behaviour; updates examples.

Copilot's findings

• Files reviewed: 13/13 changed files
• Comments generated: 1

Note

Your feedback helps us improve the quality of this feature.
Please use 👍 or 👎 to tell us whether this assessment is correct.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.