Skip to content

Publish formula through canonical Homebrew tap - #11

Merged
ndizazzo merged 1 commit into
mainfrom
codex/homebrew-tap
Jul 28, 2026
Merged

Publish formula through canonical Homebrew tap#11
ndizazzo merged 1 commit into
mainfrom
codex/homebrew-tap

Conversation

@ndizazzo

@ndizazzo ndizazzo commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

Summary

  • remove the redundant explicit formula version rejected by strict Homebrew audit
  • add strict formula auditing to the packaging release lane
  • document Mesh-LLM/tap as the canonical public Homebrew channel and its polling ownership contract

Validation

  • node --experimental-strip-types --test tests/homebrew-release.test.ts
  • actionlint -color
  • rendered 0.74.0 formula: brew audit --strict --online, brew install, and brew test on Apple Silicon

Summary by CodeRabbit

  • New Features

    • Homebrew is now supported as a published installation channel through the canonical public tap.
    • Homebrew formulas reference immutable macOS release archives and verified checksums.
    • Added guidance for installing Mesh-LLM through Homebrew.
  • Documentation

    • Updated packaging, publishing, readiness, and support documentation.
    • Clarified unsupported Intel macOS and Linux repository status.
    • Documented Homebrew validation, synchronization, and rollback practices.
  • Bug Fixes

    • Homebrew release verification now performs strict online formula auditing.

@coderabbitai

coderabbitai Bot commented Jul 28, 2026

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

Homebrew formula metadata and release validation were updated, while project documentation now describes canonical tap publication, installation, synchronization, and packaging readiness status.

Changes

Homebrew publication

Layer / File(s) Summary
Formula metadata and validation
.github/workflows/images-release.yml, packaging/homebrew/Formula/mesh-llm.rb.template
The formula derives its version from the archive URL, and the release workflow runs strict online auditing before installation.
Publication channel and tap workflow
README.md, docs/publishing.md, packaging/homebrew/README.md
Documentation identifies GitHub Release assets and the canonical Homebrew tap, and describes formula validation, synchronization, archive handling, and installation.
Packaging readiness records
docs/packaging-readiness-gaps.md, docs/packaging-readiness-scorecard.md
Readiness records separate the Homebrew tap from pending native Linux repositories and document audit, trust, rollback, and dispatch requirements.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately summarizes the main change: publishing the formula through the canonical Homebrew tap.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch codex/homebrew-tap

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@docs/publishing.md`:
- Around line 14-21: Update the Homebrew channel description in the publishing
documentation to state that the formula supports Apple Silicon macOS only and
that Intel macOS is unsupported. Keep the existing immutable archive,
verification, polling, and commit behavior unchanged.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 71b0e24d-f898-4e49-987f-0434e5b7dae8

📥 Commits

Reviewing files that changed from the base of the PR and between 416a3e2 and a51cd01.

📒 Files selected for processing (7)
  • .github/workflows/images-release.yml
  • README.md
  • docs/packaging-readiness-gaps.md
  • docs/packaging-readiness-scorecard.md
  • docs/publishing.md
  • packaging/homebrew/Formula/mesh-llm.rb.template
  • packaging/homebrew/README.md
💤 Files with no reviewable changes (1)
  • packaging/homebrew/Formula/mesh-llm.rb.template

Comment thread docs/publishing.md
Comment on lines +14 to +21
GitHub Release assets, GHCR, npm, and the
[`Mesh-LLM/tap`](https://github.com/Mesh-LLM/homebrew-tap) Homebrew tap are the
enabled public channels. Do not create apt, apk, or pacman repositories until
signing/trust-root ownership and rollback procedures exist. Homebrew publishes
a formula that references the immutable upstream macOS archive and its
upstream-verified SHA256; it does not repackage that binary. The tap polls this
repository's latest non-prerelease packaging release, validates and installs
the attached `mesh-llm.rb`, and commits it only when it changes.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

Document the Homebrew platform limitation here.

This newly enabled channel should explicitly say that the formula supports Apple Silicon only and that Intel macOS is unsupported; currently that limitation is documented only in packaging/homebrew/README.md.

Suggested wording
 GitHub Release assets, GHCR, npm, and the
 [`Mesh-LLM/tap`](https://github.com/Mesh-LLM/homebrew-tap) Homebrew tap are the
 enabled public channels. Do not create apt, apk, or pacman repositories until
 signing/trust-root ownership and rollback procedures exist. Homebrew publishes
-a formula that references the immutable upstream macOS archive and its
-upstream-verified SHA256; it does not repackage that binary.
+a formula for Apple Silicon that references the immutable upstream macOS
+archive and its upstream-verified SHA256; Intel macOS is unsupported, and the
+formula does not repackage that binary.
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
GitHub Release assets, GHCR, npm, and the
[`Mesh-LLM/tap`](https://github.com/Mesh-LLM/homebrew-tap) Homebrew tap are the
enabled public channels. Do not create apt, apk, or pacman repositories until
signing/trust-root ownership and rollback procedures exist. Homebrew publishes
a formula that references the immutable upstream macOS archive and its
upstream-verified SHA256; it does not repackage that binary. The tap polls this
repository's latest non-prerelease packaging release, validates and installs
the attached `mesh-llm.rb`, and commits it only when it changes.
GitHub Release assets, GHCR, npm, and the
[`Mesh-LLM/tap`](https://github.com/Mesh-LLM/homebrew-tap) Homebrew tap are the
enabled public channels. Do not create apt, apk, or pacman repositories until
signing/trust-root ownership and rollback procedures exist. Homebrew publishes
a formula for Apple Silicon that references the immutable upstream macOS
archive and its upstream-verified SHA256; Intel macOS is unsupported, and the
formula does not repackage that binary. The tap polls this repository's latest
non-prerelease packaging release, validates and installs the attached
`mesh-llm.rb`, and commits it only when it changes.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/publishing.md` around lines 14 - 21, Update the Homebrew channel
description in the publishing documentation to state that the formula supports
Apple Silicon macOS only and that Intel macOS is unsupported. Keep the existing
immutable archive, verification, polling, and commit behavior unchanged.

Source: Coding guidelines

@ndizazzo
ndizazzo merged commit c81d1d8 into main Jul 28, 2026
2 checks passed
@ndizazzo
ndizazzo deleted the codex/homebrew-tap branch July 28, 2026 18:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant