Move Homebrew formula publishing from GoReleaser to GitHub Actions

Replaces the built-in GoReleaser brew configuration with a custom workflow job. This uses a template to explicitly handle multiple architectures and platforms, rendering the final formula with checksums fetched from the release before pushing to the homebrew-tap repository.

Author: hra42

.github/homebrew/ai.rb.tmpl

@@ -0,0 +1,36 @@
+class Ai < Formula
+  desc "AI shell assistant — turn natural language into shell commands"
+  homepage "https://github.com/hra42/ai"
+  version "__VERSION__"
+  license "Unlicense"
+
+  on_macos do
+    on_arm do
+      url "https://github.com/hra42/ai/releases/download/v__VERSION__/ai_darwin_arm64.tar.gz"
+      sha256 "__SHA_DARWIN_ARM64__"
+    end
+    on_intel do
+      url "https://github.com/hra42/ai/releases/download/v__VERSION__/ai_darwin_amd64.tar.gz"
+      sha256 "__SHA_DARWIN_AMD64__"
+    end
+  end
+
+  on_linux do
+    on_arm do
+      url "https://github.com/hra42/ai/releases/download/v__VERSION__/ai_linux_arm64.tar.gz"
+      sha256 "__SHA_LINUX_ARM64__"
+    end
+    on_intel do
+      url "https://github.com/hra42/ai/releases/download/v__VERSION__/ai_linux_amd64.tar.gz"
+      sha256 "__SHA_LINUX_AMD64__"
+    end
+  end
+
+  def install
+    bin.install "ai"
+  end
+
+  test do
+    assert_match version.to_s, shell_output("#{bin}/ai --version")
+  end
+end

.github/workflows/release.yml

@@ -30,4 +30,67 @@ jobs:
           args: release --clean
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          HOMEBREW_TAP_GITHUB_TOKEN: ${{ secrets.HOMEBREW_TAP_GITHUB_TOKEN }}
+
+  homebrew:
+    needs: goreleaser
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Render and push formula
+        env:
+          GH_TOKEN: ${{ secrets.HOMEBREW_TAP_GITHUB_TOKEN }}
+          TAG: ${{ github.ref_name }}
+        run: |
+          set -euo pipefail
+
+          version="${TAG#v}"
+          release_url="https://github.com/hra42/ai/releases/download/${TAG}"
+
+          # Download the release's checksums.txt and pull the four SHAs we need.
+          curl -fsSL "${release_url}/checksums.txt" -o checksums.txt
+          sha_for() {
+            grep " $1\$" checksums.txt | awk '{print $1}' | head -n1
+          }
+          sha_darwin_arm64=$(sha_for ai_darwin_arm64.tar.gz)
+          sha_darwin_amd64=$(sha_for ai_darwin_amd64.tar.gz)
+          sha_linux_arm64=$(sha_for ai_linux_arm64.tar.gz)
+          sha_linux_amd64=$(sha_for ai_linux_amd64.tar.gz)
+
+          for s in "$sha_darwin_arm64" "$sha_darwin_amd64" "$sha_linux_arm64" "$sha_linux_amd64"; do
+            if [ -z "$s" ]; then
+              echo "missing sha in checksums.txt" >&2
+              cat checksums.txt >&2
+              exit 1
+            fi
+          done
+
+          # Render the template.
+          mkdir -p out/Formula
+          sed \
+            -e "s|__VERSION__|${version}|g" \
+            -e "s|__SHA_DARWIN_ARM64__|${sha_darwin_arm64}|g" \
+            -e "s|__SHA_DARWIN_AMD64__|${sha_darwin_amd64}|g" \
+            -e "s|__SHA_LINUX_ARM64__|${sha_linux_arm64}|g" \
+            -e "s|__SHA_LINUX_AMD64__|${sha_linux_amd64}|g" \
+            .github/homebrew/ai.rb.tmpl > out/Formula/ai.rb
+
+          echo "::group::Rendered Formula/ai.rb"
+          cat out/Formula/ai.rb
+          echo "::endgroup::"
+
+          # Push to the tap repo.
+          git config --global user.name "goreleaserbot"
+          git config --global user.email "bot@goreleaser.com"
+          git clone "https://x-access-token:${GH_TOKEN}@github.com/hra42/homebrew-tap.git" tap
+          mkdir -p tap/Formula
+          cp out/Formula/ai.rb tap/Formula/ai.rb
+          cd tap
+          git add Formula/ai.rb
+          if git diff --cached --quiet; then
+            echo "Formula unchanged — nothing to commit."
+            exit 0
+          fi
+          git commit -m "ai ${version}"
+          git push origin HEAD

.goreleaser.yaml

@@ -57,20 +57,7 @@ release:
   extra_files:
     - glob: scripts/install.sh
 
-brews:
-  - name: ai
-    repository:
-      owner: hra42
-      name: homebrew-tap
-      token: "{{ .Env.HOMEBREW_TAP_GITHUB_TOKEN }}"
-    directory: Formula
-    homepage: https://github.com/hra42/ai
-    description: "AI shell assistant — turn natural language into shell commands"
-    license: Unlicense
-    commit_author:
-      name: goreleaserbot
-      email: bot@goreleaser.com
-    install: |
-      bin.install "ai"
-    test: |
-      system "#{bin}/ai", "--version"
+# Homebrew formula publishing is handled outside GoReleaser by the
+# `homebrew` job in .github/workflows/release.yml — it renders
+# .github/homebrew/ai.rb.tmpl with the version + sha256s from this
+# release and pushes Formula/ai.rb into hra42/homebrew-tap.