Merge pull request #5004 from arturcic/fix/homebrew-bump-formula-pr

ci: replace homebrew bump action with brew bump-formula-pr

Author: arturcic

.github/workflows/homebrew.yml

@@ -40,16 +40,31 @@ jobs:
         with:
           op_service_account_token: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
 
-      - uses: mislav/bump-homebrew-formula-action@ccf2332299a883f6af50a1d2d41e5df7904dd769 # v4.1
-        name: Bump Homebrew formula
-        with:
-          formula-name: gitversion
-          tag-name: ${{ steps.get-version.outputs.version }}
-          download-url: https://github.com/GitTools/GitVersion/archive/refs/tags/${{ steps.get-version.outputs.version }}.tar.gz
-          push-to: gittools-bot/homebrew-core
-          commit-message: |
-            {{formulaName}} {{version}}
-
-            For additional details see https://github.com/GitTools/GitVersion/releases/tag/${{ steps.get-version.outputs.version }}
+      # Uses Homebrew's own `brew bump-formula-pr` (preinstalled on the runner) rather than a
+      # third-party action. mislav/bump-homebrew-formula-action breaks when GitHub's tarball
+      # endpoint returns HTTP 303 instead of 302 (see mislav/bump-homebrew-formula-action#342);
+      # the official CLI handles the redirect correctly and removes a pinned-action dependency.
+      - name: Bump Homebrew formula
         env:
-          COMMITTER_TOKEN: ${{ steps.github-creds.outputs.github_release_token }}
+          HOMEBREW_GITHUB_API_TOKEN: ${{ steps.github-creds.outputs.github_release_token }}
+          HOMEBREW_GIT_NAME: GitTools Bot
+          HOMEBREW_GIT_EMAIL: gittoolsbot@outlook.com
+          HOMEBREW_NO_AUTO_UPDATE: "1"
+        run: |
+          version="${{ steps.get-version.outputs.version }}"
+          url="https://github.com/GitTools/GitVersion/archive/refs/tags/${version}.tar.gz"
+          sha256="$(curl -fsSL --proto '=https' --proto-redir '=https' "$url" | shasum -a 256 | cut -d ' ' -f 1)"
+
+          git config --global user.name "GitTools Bot"
+          git config --global user.email "gittoolsbot@outlook.com"
+
+          # No --fork-org: that flag requires an *organization* login, but the
+          # publish runs as the gittools-bot *user*. Omitting it makes brew fork
+          # to the authenticated user (gittools-bot/homebrew-core) — the same
+          # target the old action used via push-to.
+          brew bump-formula-pr gitversion \
+            --url "$url" \
+            --sha256 "$sha256" \
+            --no-audit \
+            --no-browse \
+            --message "For additional details see https://github.com/GitTools/GitVersion/releases/tag/${version}"