Over the next few days, Homebrew’s repositories will begin to transition from PGP-based signing to SSH-based signing for @BrewTestBot commits.
As part of this change, we will be rotating our @BrewTestBot’s key.
This rotation should not affect most users, but you may notice
it if you currently manually verify git commits from
Homebrew/brew, Homebrew/homebrew-core, or similar.
Once all repositories have been transitioned, we will revoke the old PGP key to prevent unintended future use:
3C76C3F1E573FA9E82D7D104050B0F0FThe new SSH signing key has the following public half:
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE0QzQJ6gl6Yxru0QrSaDRNatiHajcKxDu9lxQrFl8Nw
Users can also discover this signing key programmatically through GitHub’s REST API:
$ gh api /users/BrewTestBot/ssh_signing_keys
[
{
"id": 475371,
"key": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE0QzQJ6gl6Yxru0QrSaDRNatiHajcKxDu9lxQrFl8Nw",
"title": "BREWTESTBOT_SSH_SIGNING_KEY",
"created_at": "2025-02-03T17:50:27.377+01:00"
}
]
Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal...
Homebrew 5.1.0 has been released. Homebrew’s most significant changes since 5.0.0 are expanded brew bundle support, brew version-install, new -full formula handling an...
Today, I’d like to announce Homebrew 5.0.0. The most significant changes since 4.6.0 are download concurrency by default, official support for Linux ARM64/AArch64, tim...
Today, I’d like to announce Homebrew 4.6.0. The most significant changes since 4.5.0 are opt-in concurrent downloads with HOMEBREW_DOWNLOAD_CONCURRENCY, preliminary ma...
Today, I’d like to announce Homebrew 4.5.0. The most significant changes since 4.4.0 are major improvements to brew bundle/services, preliminary Linux support for cask...
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。