From 3de64dae57c688e40620e318d89ac487f76375ec Mon Sep 17 00:00:00 2001
From: botantony <antonsm21@gmail.com>
Date: Fri, 17 Oct 2025 14:25:21 +0200
Subject: [PATCH 1/2] falcosecurity-libs 0.22.0

---
 Formula/f/falcosecurity-libs.rb | 12 +++---------
 1 file changed, 3 insertions(+), 9 deletions(-)

diff --git a/Formula/f/falcosecurity-libs.rb b/Formula/f/falcosecurity-libs.rb
index 946575598bb25..c6b542acc3887 100644
--- a/Formula/f/falcosecurity-libs.rb
+++ b/Formula/f/falcosecurity-libs.rb
@@ -1,22 +1,19 @@
 class FalcosecurityLibs < Formula
   desc "Core libraries for Falco and Sysdig"
   homepage "https://falcosecurity.github.io/libs/"
-  url "https://github.com/falcosecurity/libs/archive/refs/tags/0.20.0.tar.gz"
-  sha256 "4ae6ddb42a1012bacd88c63abdaa7bd27ca0143c4721338a22c45597e63bc99d"
+  url "https://github.com/falcosecurity/libs/archive/refs/tags/0.22.0.tar.gz"
+  sha256 "1a46032e8eadbc5c4d29b767178cc3d2e04810cbf13ba2057854661aa74abbe6"
   license all_of: [
     "Apache-2.0",
     { any_of: ["GPL-2.0-only", "MIT"] }, # driver/
     { "GPL-2.0-only" => { with: "Linux-syscall-note" } }, # userspace/libscap/compat/
   ]
-  revision 10
 
   livecheck do
     url :stable
     regex(/^v?(\d+(?:\.\d+)+)$/i)
   end
 
-  no_autobump! because: :requires_manual_review
-
   bottle do
     sha256 cellar: :any, arm64_tahoe:   "9bfc3a5565d4a0c1627ba1676e046b026a4749bd18a9fa6515ea6f86bb0ada18"
     sha256 cellar: :any, arm64_sequoia: "1e0d96744115216127c699c225d79a14546fd02442446eccaefcce9c26a00ffa"
@@ -56,9 +53,6 @@ def install
       -DFALCOSECURITY_LIBS_VERSION=#{version}
       -DUSE_BUNDLED_DEPS=OFF
     ]
-    # TODO: remove on next release which has dropped option
-    # https://github.com/falcosecurity/libs/commit/d45d53a1e0e397658d23b216c3c1716a68481554
-    args << "-DMINIMAL_BUILD=ON" if OS.mac?
 
     system "cmake", "-S", ".", "-B", "build", *args, *std_cmake_args
     system "cmake", "--build", "build"
@@ -71,7 +65,7 @@ def install
     system ENV.cxx, "-std=c++17", pkgshare/"scap_event.cpp", "-o", "test",
                     "-I#{include}/falcosecurity",
                     "-L#{Formula["googletest"].lib}", "-L#{lib}",
-                    "-lgtest", "-lgtest_main", "-lsinsp"
+                    "-lgtest", "-lgtest_main", "-lsinsp", "-lscap_event_schema"
     system "./test"
   end
 end

From 83ebd416f9978fb12401428f59216fcd5aa8fa4c Mon Sep 17 00:00:00 2001
From: botantony <antonsm21@gmail.com>
Date: Fri, 17 Oct 2025 14:42:08 +0200
Subject: [PATCH 2/2] sysdig: revision bump (falcosecurity-libs 0.22.0)

---
 Formula/s/sysdig.rb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Formula/s/sysdig.rb b/Formula/s/sysdig.rb
index dca0be931c54f..a86668679aeec 100644
--- a/Formula/s/sysdig.rb
+++ b/Formula/s/sysdig.rb
@@ -4,6 +4,7 @@ class Sysdig < Formula
   url "https://github.com/draios/sysdig/archive/refs/tags/0.40.1.tar.gz"
   sha256 "f4d465847ba8e814958b5f5818f637595f3d78ce93dbc3b8ff3ee65a80a9b90f"
   license "Apache-2.0"
+  revision 1
   head "https://github.com/draios/sysdig.git", branch: "dev"
 
   livecheck do