From 84cba100e31072fe801c8fcae2b9cedba3cac5e9 Mon Sep 17 00:00:00 2001
From: Ivan Rublev <git@ivanrublev.me>
Date: Fri, 31 Jul 2026 23:48:09 +0200
Subject: [PATCH] Fix bump-tap CI: trust tap before load, drop no-op push input

Homebrew's trust.rb refuses to load formulae from an untrusted tap.
Pre-tap and brew trust the tap before the action runs. Also removes
push: true (not a real action input, silently ignored) and switches
to no_fork: true so the bump branch pushes directly to the tap repo.
---
 .github/workflows/bump-tap.yml | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/bump-tap.yml b/.github/workflows/bump-tap.yml
index c0fa0b1..3164d73 100644
--- a/.github/workflows/bump-tap.yml
+++ b/.github/workflows/bump-tap.yml
@@ -10,14 +10,19 @@ jobs:
   bump:
     runs-on: ubuntu-latest
     steps:
+      # Homebrew refuses to load formulae from untrusted taps; trust ours before the action taps+loads it.
+      - run: |
+          brew tap IvanRublev/homebrew-tap
+          brew trust IvanRublev/homebrew-tap
       - uses: dawidd6/action-homebrew-bump-formula@v3
         with:
           # PAT with `repo` scope on the tap repo. Store as an Actions secret.
           token: ${{ secrets.TAP_TOKEN }}
           tap: IvanRublev/homebrew-tap
           formula: claudezero
+          # Push branch directly to the tap repo instead of forking (token needs write access there).
+          no_fork: true
           # No release payload on a tag push — name the tag and commit explicitly.
           tag: ${{ github.ref_name }}
           revision: ${{ github.sha }}
-          # Opens a PR on the tap by default. Add `push: true` to commit direct.
-          push: true
+          # Opens a PR on the tap (no direct-push mode exists for this action).