Pin the Homebrew cask to the notarized Alpha app zip - #13
Merged
Conversation
Why: Developer ID signing and Apple notarization produced Simulator-Broker-0.1.0-alpha.1.zip. The cask still used sha256 :no_check and public docs still said the Alpha release did not attach that zip. Changed: Pin Casks/simulator-broker.rb to the published zip SHA-256. Document the brew cask one-liner and remove the stale not-attached caveats. Verification: npm run agent:verify -- --profile spec-only --paths Casks/simulator-broker.rb,README.md,docs/getting-started.md,docs/status.md,SECURITY.md,CHANGELOG.md,spec/build-and-test.md,docs/test/front-door.test.mjs --session-dir task-sessions/cask-notarized-app-zip-20260819 Affected: Casks/simulator-broker.rb README.md docs/getting-started.md docs/status.md SECURITY.md CHANGELOG.md spec/build-and-test.md docs/test/front-door.test.mjs Refs: https://github.com/fiveonecode/simulator-broker/releases/tag/v0.1.0-alpha.1 https://github.com/fiveonecode/simulator-broker/releases/download/v0.1.0-alpha.1/Simulator-Broker-0.1.0-alpha.1.zip spec/build-and-test.md Session: task-sessions/cask-notarized-app-zip-20260819
VladimirBrejcha
added a commit
to fiveonecode/homebrew-simulator-broker
that referenced
this pull request
Aug 19, 2026
Copy Casks/simulator-broker.rb from product main after fiveonecode/simulator-broker#13 merged as 0921bd66491a8d7203a0c90d935f813057bdb82b. The cask now pins sha256 5e19d128bf8061d5e18812c092e8a3b8e5f4514ff42bc233baa643fb0f075f70 for Simulator-Broker-0.1.0-alpha.1.zip. Verification: cmp Casks/simulator-broker.rb against product origin/main
VladimirBrejcha
added a commit
that referenced
this pull request
Aug 19, 2026
Why: origin/main added the notarized cask SHA pin after this branch diverged. The merge-base copy of spec/build-and-test.md must keep both the pinned-cask current-state bullets and the hardcoded simulator-broker session-root contract. Changed: - spec/build-and-test.md: keep the product-slug session-root obligation and take the pinned-cask plus notarized zip current-state bullets. - CHANGELOG.md, Casks/simulator-broker.rb, README.md, SECURITY.md, docs/getting-started.md, docs/status.md, docs/test/front-door.test.mjs: take the origin/main pinned-cask front door. Verification: - npm run agent:verify -- --profile spec-only --paths spec/build-and-test.md CHANGELOG.md Casks/simulator-broker.rb README.md SECURITY.md docs/getting-started.md docs/status.md docs/test/front-door.test.mjs --session-dir task-sessions/merge-agent-home-main-20260819 Affected: - spec/build-and-test.md - CHANGELOG.md - Casks/simulator-broker.rb - README.md - SECURITY.md - docs/getting-started.md - docs/status.md - docs/test/front-door.test.mjs Refs: - 0921bd6 (Merge pull request #13 from fiveonecode/release/cask-notarized-app-zip) - 52259ea (Point Codex verify-specs at the simulator-broker slug) Session: - task-sessions/merge-agent-home-main-20260819 Co-authored-by: Cursor <cursoragent@cursor.com>
|
✅ OpenCodeReview: Review skipped: no items were selected. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
The signed, notarized
Simulator-Broker-0.1.0-alpha.1.zipis now attached to the Alpha GitHub Release. The cask still usedsha256 :no_checkand public docs still said that zip was missing.Changed
Casks/simulator-broker.rbto SHA-2565e19d128bf8061d5e18812c092e8a3b8e5f4514ff42bc233baa643fb0f075f70.brew install --cask fiveonecode/simulator-broker/simulator-broker.Verification
spec-onlypassed.agent:completepassed.Session
task-sessions/cask-notarized-app-zip-20260819Release asset
https://github.com/fiveonecode/simulator-broker/releases/download/v0.1.0-alpha.1/Simulator-Broker-0.1.0-alpha.1.zip