(7 comments) (0 reactions) (0 assignees)Ruby (15,288 stars) (13,532 forks)batch import

help wantedopenssl-4-migration

Description

`openssl@3` to `openssl@4` migration tracking

Staging branch process

This migration is now being run through the openssl-4-migration-staging branch. New migration PRs should target that branch and use branches in Homebrew/homebrew-core rather than forks.

Work root-first, then trace down the dependent tree. This avoids the mixed openssl@3 / openssl@4 linkage seen when leaf formulae are migrated directly against main. Use brew deps --tree --include-build <formula> / brew deps --graph --dot --include-build <formula> to order follow-up work.

For staging PRs:

use the labels openssl-4-migration, staging-branch-pr, and CI-skip-recursive-dependents
skip routine local brew ops; staging CI is the validation path for this migration
keep independent formulae split for quick review/merge
group formulae only when they are small to build and tightly coupled

Depth 0 roots / prerequisites

Depth 1 dependents

Depth 2 dependents

cargo-c https://github.com/Homebrew/homebrew-core/pull/280867
cryptography https://github.com/Homebrew/homebrew-core/pull/280868
gdal https://github.com/Homebrew/homebrew-core/pull/280870
php https://github.com/Homebrew/homebrew-core/pull/280871
ruby https://github.com/Homebrew/homebrew-core/pull/280872

Depth 3 dependents

gstreamer https://github.com/Homebrew/homebrew-core/pull/280873

614 formulae depend on openssl@3 (including => :build / => :test deps).

Grouped by dependent count, then by build system. Migrate leaves first. If they break, blast radius is limited.

See OpenSSL 4.0 release notes for breaking changes. Common failure modes:

C/C++: ASN1_STRING is now opaque; X509 getters now return const pointers.
Rust: openssl-sys v0.10.78 (released 2026-04-19) is the first release supporting OpenSSL 4.
Some formulae declare depends_on "openssl@3" but do not actually link it. Verify if we can drop the dependency rather than migrate.

Rust (98)

Go (5)

C/C++ (CMake) (104)

C/C++ (autotools) (147)

Other (90)

Go (1)

gensio (1 dependents)

C/C++ (CMake) (23)

C/C++ (autotools) (23)

Other (11)

Rust (1)

ruby@3.4 (2 dependents)

C/C++ (CMake) (18)

C/C++ (autotools) (34)

Other (14)

Rust (4)

cargo-c (10 dependents) #280867
cryptography (110 dependents) #280868
gstreamer (12 dependents) #280873
ruby (37 dependents) #280872

C/C++ (CMake) (9)

C/C++ (autotools) (28)

Other (4)

hiredis (7 dependents) #280833
pulseaudio (31 dependents) #280861
qtbase (108 dependents) #280862
systemd (69 dependents) #280864

Contributor guide

Tech stack: ccpprustgopythonrubyshell
Domain: devopsinfrastructurebuild systemrelease
Issue type: refactor
Difficulty: 5
Estimated time: over 1 week
Activity status: active
Clarity: mostly clear
Prerequisites: Understanding of OpenSSL 4.0 API changesFamiliarity with Homebrew formula structureExperience with C/C++ and Rust build systems
Newbie friendliness: 10
Research direction: This tracking issue coordinates the migration of 614 Homebrew formulae from openssl@3 to openssl@4. To contribute, pick a leaf formula (with zero dependents) from the list, create a PR targeting the 'openssl 4 migration staging' branch, and follow the process described in the issue body. Key files to modify are the formula's .rb file in the Homebrew/homebrew core repository. The staging branch and CI will validate the migration. Consult the OpenSSL 4.0 release notes for breaking changes like opaque ASN1 STRING and const X509 getters.