Skip to content

chore(release): publish the formula to the klarlabs-studio tap#158

Merged
felixgeelhaar merged 1 commit into
mainfrom
chore/formula-to-klarlabs-tap
Jul 26, 2026
Merged

chore(release): publish the formula to the klarlabs-studio tap#158
felixgeelhaar merged 1 commit into
mainfrom
chore/formula-to-klarlabs-tap

Conversation

@felixgeelhaar

Copy link
Copy Markdown
Collaborator

Why

tokenops is a klarlabs-studio repo and HOMEBREW_TAP_TOKEN is a klarlabs-studio org secret — but the formula was pointed at felixgeelhaar/homebrew-tap, a personal repo that secret cannot reach.

briefkasten hit that combination first: v0.31.0 published all 22 signed artifacts and then failed on the brew step with

403 Resource not accessible by personal access token

A 403 rather than a 401 is the fine-grained-PAT signature — it authenticated, but the target repo is outside its scope. The comment above the block asserted the token had contents:write on the personal tap; it does not, and after this change it does not need to.

Sequencing note for whoever merges

tokenops.rb exists only in the personal tap. So the first release after this lands creates it in the org tap, and the personal-tap copy stops being updated — anyone installed from felixgeelhaar/tap silently pins to their current version.

A tap_migrations.json entry in the personal tap ({"tokenops": "klarlabs-studio/tap"}) carries them over, but it has to come after that first release: a redirect pointing at a tap that does not yet hold the formula breaks the very install it exists to preserve. Neither tap contains that file today.

Note for a follow-up

goreleaser check reports the config "uses deprecated properties"brews: was deprecated in GoReleaser v2.16 in favour of homebrew_casks:, which is also Homebrew's guidance for a pre-compiled binary. That predates this PR and is left alone to keep the change to one line of intent.

https://claude.ai/code/session_01BFsL9VmX5KHW8cnLMRPei3

tokenops is a klarlabs-studio repo and HOMEBREW_TAP_TOKEN is a
klarlabs-studio org secret, but the formula was pointed at
felixgeelhaar/homebrew-tap — a personal repo the org secret cannot
reach. briefkasten hit that combination first: its v0.31.0 published all
22 signed artifacts and then failed on the brew step with "403 Resource
not accessible by personal access token".

Note for whoever merges: tokenops.rb exists only in the personal tap, so
the first release after this lands creates it in the org tap and the old
copy stops being updated. A tap_migrations.json entry in the personal tap
carries those users over, but it has to come AFTER that release — a
redirect to a tap that does not yet hold the formula breaks the install
it was meant to preserve.

Claude-Session: https://claude.ai/code/session_01BFsL9VmX5KHW8cnLMRPei3
@felixgeelhaar
felixgeelhaar merged commit 02d087f into main Jul 26, 2026
6 checks passed
@felixgeelhaar
felixgeelhaar deleted the chore/formula-to-klarlabs-tap branch July 26, 2026 12:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant