From 9008031f1755d1260eb8a19ab8b4f79ac7a9956f Mon Sep 17 00:00:00 2001
From: Ivan Rublev <git@ivanrublev.me>
Date: Fri, 31 Jul 2026 23:48:09 +0200
Subject: [PATCH] Fix bump-tap CI: trust tap before load, drop no-op push input

Homebrew's trust.rb refuses to load formulae from an untrusted tap.
Pre-tap and brew trust the tap before the action runs. Also removes
push: true (not a real action input, silently ignored) and switches
to no_fork: true so the bump branch pushes directly to the tap repo.
---
 .github/workflows/bump-tap.yml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/bump-tap.yml b/.github/workflows/bump-tap.yml
index c0fa0b1..aac27b8 100644
--- a/.github/workflows/bump-tap.yml
+++ b/.github/workflows/bump-tap.yml
@@ -10,14 +10,16 @@ jobs:
   bump:
     runs-on: ubuntu-latest
     steps:
-      - uses: dawidd6/action-homebrew-bump-formula@v3
+      # v3 predates upstream's `brew trust` call, so it hits Homebrew::UntrustedTapError; v8 fixed it.
+      - uses: dawidd6/action-homebrew-bump-formula@v8
         with:
           # PAT with `repo` scope on the tap repo. Store as an Actions secret.
           token: ${{ secrets.TAP_TOKEN }}
           tap: IvanRublev/homebrew-tap
           formula: claudezero
+          # Push branch directly to the tap repo instead of forking (token needs write access there).
+          no_fork: true
           # No release payload on a tag push — name the tag and commit explicitly.
           tag: ${{ github.ref_name }}
           revision: ${{ github.sha }}
-          # Opens a PR on the tap by default. Add `push: true` to commit direct.
-          push: true
+          # Opens a PR on the tap (no direct-push mode exists for this action).