Pipeline re-uploads assets without re-triggering homebrew formula update

Open
#698 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
48/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Active
Tech stack
go
Domain
release

Research direction

Start by tracing the release pipeline step that updates the cloudfoundry/homebrew-tap formula and how it is triggered when release assets are uploaded or replaced. Check the pipeline configuration and related tests; reproduce or inspect a rerun that replaces assets. Done when replacing release assets also refreshes the formula checksums so brew upgrade bbl succeeds.

Written by the indexing model from the issue text.

Description

Summary

When the release pipeline re-runs and replaces assets on an existing release, the cloudfoundry/homebrew-tap formula update step does not re-run. This leaves bbl.rb with stale checksums that cause brew upgrade bbl to fail for all users with a SHA256 mismatch error.

What happened (v9.0.50)

  1. 2026-09-30 — pipeline cut the v9.0.50 release and uploaded initial assets
  2. 2026-10-01 — BOSH CI committed the homebrew formula with checksums from those assets
  3. 2026-10-05 — pipeline re-ran (triggered by commit bf54483b, "Update deployments"), rebuilt all binaries, re-uploaded all assets, and updated the release tag — but did not re-trigger the homebrew formula update

All five release assets were replaced with new binaries (likely picking up an updated bundled terraform version). The formula was never updated, so the expected checksum (c2c986fa... for osx_arm64) no longer matches the actual download (2f5b3b00...).

Impact

brew upgrade bbl fails for all users:

Error: Formula reports different checksum: c2c986fa97b501973217b4a868414a8c65698290b893480c86c610c04439c880
       SHA-256 checksum of downloaded file: 2f5b3b004be3aa757d21b0e59afb5e8d82c2791cec3df1dd118110da16ae9bc1
Dominant language
Go
Stars
181
Forks
179
Avg merge
9h 54m
Merged PRs (30d)
2

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from cloudfoundry/bosh-bootloader

All issues in cloudfoundry/bosh-bootloader

Similar issues

More Go issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.