Repository navigation
release: drop Homebrew tap and Apple signing, install via curl only - #1206
Merged
Merged
Conversation
The Developer ID certificate used by quill to sign and notarize the macOS binaries expired on 2026-10-16 and broke the v0.1.35 release. Rather than renew it, stop signing macOS binaries altogether: the curl installer (onctl.sh/get.sh) downloads without the quarantine attribute, so Gatekeeper never inspects the binary, and GPG-signed checksums still cover integrity. - .goreleaser.yml: one build for darwin/linux/windows, no quill post hook, no homebrew_casks publish - goreleaser workflows: remove quill install/verify steps and the APPLE_*/QUILL_* secret wiring - docs/README: macOS and Linux both install via curl; remove the brew-only onctl-dev instructions and scripts/install-dev.sh (the edge build covers "latest main") - edge config/workflow comments and .bestpractices.json: stop describing the notarized/Homebrew pipeline Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
cdalar
enabled auto-merge (squash)
October 21, 2026 13:33
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #1206 +/- ##
=======================================
Coverage 41.25% 41.25%
=======================================
Files 69 69
Lines 7560 7560
=======================================
Hits 3119 3119
Misses 4441 4441 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
This was referenced Oct 21, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Why
The Apple Developer ID certificate behind quill's sign-and-notarize step expired on 2026-10-16, which broke the v0.1.35 release run. Instead of renewing it, stop signing macOS binaries and stop publishing to the Homebrew tap. The curl installer at onctl.sh/get.sh is now the only documented install path for macOS and Linux.
Binaries fetched with curl don't carry the quarantine attribute, so Gatekeeper never inspects them. The GPG-signed checksums still cover integrity.
Changes
.goreleaser.yml: single build for darwin/linux/windows, no quill post hook, nohomebrew_casksgoreleaser.yml/goreleaser-self-hosted-test.yml: remove quill install/verify steps and theAPPLE_*/QUILL_*secret wiringREADME.md/docs/docs/index.md: one "macOS and Linux" install section using curl; brew-onlyonctl-devinstructions andscripts/install-dev.shremoved (the edge build already covers "latest main").goreleaser.edge.yml,edge.yml,.bestpractices.json: comments/justification no longer describe the notarized/Homebrew pipelineVerified
goreleaser checkpassesgoreleaser build --snapshot --single-targetbuilds the darwin binary and it runsFollow-ups (not in this PR)
APPLE_DEVELOPER_CERTIFICATE_*andQUILL_NOTARY_*repo secrets are now unused and can be deletedcdalar/homebrew-tapwill stop receiving updates and can be archivedubuntu-latest🤖 Generated with Claude Code