From 653117732d73de928927437e47e81fe4d0cee13d Mon Sep 17 00:00:00 2001 From: Jean-Philippe Date: Tue, 15 Sep 2026 11:21:28 -0400 Subject: [PATCH] docker-install-build-deps: trust the tap before tapping it MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Current Homebrew evaluates a new tap's formulae at tap time and refuses to load them from an untrusted tap, failing the tap itself — so the trust call after it never ran, and every image build died at 'Cannot tap d3mlabs/d3mlabs: invalid syntax in tap!'. brew trust records trust by name before the tap exists, so it goes first. Co-authored-by: Cursor --- bin/docker-install-build-deps.sh | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/bin/docker-install-build-deps.sh b/bin/docker-install-build-deps.sh index 9345201..546a100 100755 --- a/bin/docker-install-build-deps.sh +++ b/bin/docker-install-build-deps.sh @@ -47,9 +47,15 @@ export PATH="$(brew --prefix ruby)/bin:$PATH" # keeps older brews working: they have no trust subcommand and no policy to # satisfy, and if a trust-enforcing brew somehow skips it, the install below # still fails loudly. +# +# Trust MUST precede tap: current brew evaluates a new tap's formulae at tap +# time and refuses to load them from an untrusted tap, failing the tap itself +# ("Cannot tap ...: invalid syntax in tap!") — so trusting afterwards never +# gets the chance to run. `brew trust` records trust by name before the tap +# exists. echo ">>> Trusting the d3mlabs tap" -brew tap d3mlabs/d3mlabs brew trust d3mlabs/d3mlabs || true +brew tap d3mlabs/d3mlabs if [ -n "$DEV_REF" ]; then echo ">>> Cloning d3mlabs/dev (${DEV_REF}) — source override"