release-homebrew.yml

# AUTOGENERATED FROM release-homebrew.jsonnet DO NOT MODIFY
jobs:
  brew-build:
    name: Build Semgrep via Brew from HEAD
    runs-on: macos-latest
    steps:
      - env:
          HOMEBREW_NO_INSTALL_FROM_API: 1
        run: brew update --debug --verbose
      - env:
          HOMEBREW_NO_INSTALL_FROM_API: 1
          NONINTERACTIVE: 1
        run: brew install semgrep --HEAD --debug || brew link --overwrite semgrep
      - env:
          HOMEBREW_NO_INSTALL_FROM_API: 1
        name: Check installed correctly
        run: brew test semgrep --HEAD
  homebrew-core-pr:
    runs-on: macos-latest
    steps:
      - run: brew update
      - name: 'ugly: fix the python path for brew bump-formula-pr'
        run: cd /usr/local/Cellar/python@3.11; ln -s 3.11.6_1 3.11.7
      - env:
          HOMEBREW_GITHUB_API_TOKEN: ${{ secrets.SEMGREP_HOMEBREW_RELEASE_PAT }}
        if: ${{ inputs.dry-run }}
        name: Dry Run bump semgrep.rb
        run: |
          brew bump-formula-pr --force --no-audit --no-browse --write-only \
            --message="semgrep 99.99.99" \
            --tag="v99.99.99" --revision="${GITHUB_SHA}" semgrep --python-exclude-packages semgrep
      - if: ${{ ! inputs.dry-run }}
        name: Bump semgrep.rb
        run: |
          brew bump-formula-pr --force --no-audit --no-browse --write-only \
            --message="semgrep ${{ inputs.version }}" --tag="v${{ inputs.version }}" semgrep --debug
      - env:
          GITHUB_TOKEN: ${{ secrets.SEMGREP_HOMEBREW_RELEASE_PAT }}
        name: Make the commit
        run: |
          cd "$(brew --repository)/Library/Taps/homebrew/homebrew-core"
          git status
          git diff
          git config user.name ${{ github.actor }}
          git config user.email ${{ github.actor }}@users.noreply.github.com

          gh auth setup-git
          git remote add r2c https://github.com/semgrep-release/homebrew-core.git
          git checkout -b bump-semgrep-${{ inputs.version }}
          git add Formula/s/semgrep.rb
          git commit -m "semgrep ${{ inputs.version }}"
      - env:
          GITHUB_TOKEN: ${{ secrets.SEMGREP_HOMEBREW_RELEASE_PAT }}
        if: ${{ ! inputs.dry-run }}
        name: Push commit to our fork of homebrew-core
        run: |
          cd "$(brew --repository)/Library/Taps/homebrew/homebrew-core"
          git push --set-upstream r2c --force "bump-semgrep-${{ inputs.version }}"
      - env:
          GITHUB_TOKEN: ${{ secrets.SEMGREP_HOMEBREW_RELEASE_PAT }}
        if: ${{ ! inputs.dry-run }}
        name: Open PR to official homebrew-core repo
        run: |
          gh pr create --repo homebrew/homebrew-core \
            --base master --head "semgrep-release:bump-semgrep-${{ inputs.version }}" \
            --title="semgrep ${{ inputs.version }}" \
            --body "Bump semgrep to version ${{ inputs.version }}"
name: release-homebrew
on:
  workflow_dispatch:
    inputs:
      dry-run:
        description: |
          Check the box for a dry-run.
          A dry-run will not push any external state.
        required: true
        type: boolean
      version:
        description: |
          The version of Semgrep to release on Homebrew (e.g., 1.55.2)
        required: true
        type: string