From cc15578b3d653aacc0aa69d6e26aebbd08f2ca91 Mon Sep 17 00:00:00 2001
From: Pushkinist <4850452+Pushkinist@users.noreply.github.com>
Date: Thu, 18 Jun 2026 15:15:01 +0700
Subject: [PATCH] chore(release): bump Homebrew formula to v0.2.3

---
 docs/RELEASING.md          | 17 +++++++++--------
 packaging/homebrew/rmlx.rb |  4 ++--
 2 files changed, 11 insertions(+), 10 deletions(-)

diff --git a/docs/RELEASING.md b/docs/RELEASING.md
index 86eabba..adbbc9d 100644
--- a/docs/RELEASING.md
+++ b/docs/RELEASING.md
@@ -50,14 +50,15 @@ crates are `publish = false`). There is no separate `VERSION` file.
    your authenticated identity + the public Rekor log — real provenance for
    the prebuilt binary. Consumer-side verification is in "Verify both install
    paths".
-8. **Formula url + sha256:** bump the `url` line in
-   `packaging/homebrew/rmlx.rb` to the new `v<version>` tag tarball, **then**
-   `make release-sha` (or `bash scripts/release/source_sha256.sh --write`) for
-   the sha256.
-   > ⚠️ `source_sha256.sh --write` patches **only the sha256, not the `url`
-   > version**. If you skip the manual url bump, the formula carries the new
-   > sha against the old tag's url and `brew install` fails with a sha
-   > mismatch. Always edit the `url` line yourself.
+8. **Formula url + sha256:** run `make release-sha` (or
+   `bash scripts/release/source_sha256.sh --write`) — it patches **both** the
+   `url` line in `packaging/homebrew/rmlx.rb` to the new `v<version>` tag
+   tarball **and** the `sha256`.
+   > GitHub generates the source archive on first access, so its sha256 can
+   > shift on the very first fetch right after a tag push. The
+   > `source_sha256.sh`-written value is usually the correct stable one — but
+   > re-fetch the archive 2-3× (`curl -fsSL .../archive/refs/tags/v<version>.tar.gz
+   > | shasum -a 256`) and confirm the digest is stable before trusting it.
    Commit the formula bump via a PR (`main` is ruleset-protected; see below).
 9. **Publish the tap:** `make tap-sync` (copies the formula into
    `Pushkinist/homebrew-rmlx` as `Formula/rmlx.rb` and pushes).
diff --git a/packaging/homebrew/rmlx.rb b/packaging/homebrew/rmlx.rb
index d384740..10d2628 100644
--- a/packaging/homebrew/rmlx.rb
+++ b/packaging/homebrew/rmlx.rb
@@ -21,8 +21,8 @@
 class Rmlx < Formula
   desc "Rust-native, single-binary MLX inference + conversion backend for Apple Silicon"
   homepage "https://github.com/Pushkinist/rMLX"
-  url "https://github.com/Pushkinist/rMLX/archive/refs/tags/v0.2.2.tar.gz"
-  sha256 "cd7a6ee2b0d341476296a6bf9789b23c766921de1ebeac5bec1156415fa5e8c0"
+  url "https://github.com/Pushkinist/rMLX/archive/refs/tags/v0.2.3.tar.gz"
+  sha256 "abc416caae237fc384d5c0712519641707610461375bf7737a6f7a848a1cbf29"
   license any_of: ["MIT", "Apache-2.0"]
   head "https://github.com/Pushkinist/rMLX.git", branch: "main"