Make the Homebrew submission automatic by being the tap

[bojieli]

The last manual step in a release was "copy packaging/homebrew/donottype.rb into the tap's Casks/ and push". The runbook called it unavoidable because a submission is a pull request to somebody else's repository — but that is only true of homebrew-cask, which this project has not applied to. The tap it actually told people to install from, bojieli/tap, does not exist, so the cask's own install line had never worked.

This repository becomes the tap

Casks/ is one of the three directories Homebrew looks in, so the file somebody installs is the file reviewed here. One copy, no submission, nothing to forget.

brew tap bojieli/donottype https://github.com/bojieli/DoNotType
brew install --cask donottype

The URL is needed because a tap is normally located by the name homebrew-<x> and this repository is named for the product. That is the entire cost, and it buys away a second repository, a cross-repository token, and a copy that can go stale between releases.

The bump runs itself

New packaging.yml runs on release: published, points the cask at that version with scripts/update-packaging.sh, and commits the result.

That trigger rather than the tag, because the cask cannot be correct any earlier: the script reads the checksum from the release's own .sha256 asset, which 404s while the release is still a draft. It is also the moment the artifacts become real, so it is when the tap should follow them. The rolling latest prerelease is excluded, since every green build on main republishes it and a cask following that would hand users a development build.

Kept separate from release.yml rather than bolted on: that workflow is tag-driven and ends by drafting a release for a human to read, and adding a release trigger there would have meant guarding every existing job against an event none of them want.

Three real defects Homebrew's own checks caught

Found by tapping this branch locally and running brew audit, not by reading:

• verified: is deprecated. It warned on every command a tapped user ran, and was always redundant here — the default check is that the download host matches homepage, which it does.
• No minimum macOS. The app requires Sonoma, per LSMinimumSystemVersion and Package.swift, but the cask promised nothing. Homebrew would install onto an older system and the app would refuse to launch.
• The string form of depends_on macos: is deprecated too. Now the symbol form. macos_requirement.rb defaults the comparator to >=, so it is still a floor, confirmed by a dry run on macOS 26 that installs.

Verified end to end

Tapped from this branch and installed for real, into a temporary --appdir so the working install was untouched:

• brew audit --cask --online exits 0.
• brew install --cask downloads from the release, verifies the checksum, and installs.
• The installed bundle reports 0.6.2 and passes Gatekeeper as Notarized Developer ID.
• brew uninstall --cask is clean.

🤖 Generated with Claude Code