From 6c8df2668787872fff1a222ccbf16f3f485ae180 Mon Sep 17 00:00:00 2001
From: Jonathan Langevin <jon@langevin.me>
Date: Sun, 7 Jun 2026 07:39:31 -0400
Subject: [PATCH 1/2] fix: update wfctl tap via pull request

---
 .github/workflows/update-wfctl.yml | 39 +++++++++++++++++++++++++++---
 1 file changed, 35 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/update-wfctl.yml b/.github/workflows/update-wfctl.yml
index fbb3c17..2197b75 100644
--- a/.github/workflows/update-wfctl.yml
+++ b/.github/workflows/update-wfctl.yml
@@ -6,17 +6,20 @@ on:
 
 permissions:
   contents: write
+  pull-requests: write
 
 jobs:
   update:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
     - name: Update wfctl formula
       env:
         VERSION: ${{ github.event.client_payload.version }}
       run: |
+        set -euo pipefail
+
         # Strip v prefix for formula version
         FORMULA_VERSION="${VERSION#v}"
 
@@ -29,6 +32,10 @@ jobs:
         SHA_DARWIN_ARM64=$(grep "wfctl-darwin-arm64$" checksums.txt | awk '{print $1}')
         SHA_LINUX_AMD64=$(grep "wfctl-linux-amd64$" checksums.txt | awk '{print $1}')
         SHA_LINUX_ARM64=$(grep "wfctl-linux-arm64$" checksums.txt | awk '{print $1}')
+        test -n "$SHA_DARWIN_AMD64"
+        test -n "$SHA_DARWIN_ARM64"
+        test -n "$SHA_LINUX_AMD64"
+        test -n "$SHA_LINUX_ARM64"
 
         # Generate the formula
         cat > Formula/wfctl.rb << RUBY
@@ -81,11 +88,35 @@ jobs:
         # Remove leading whitespace from heredoc
         sed -i 's/^        //' Formula/wfctl.rb
 
-    - name: Commit and push
+    - name: Open update pull request
+      env:
+        GH_TOKEN: ${{ github.token }}
+        VERSION: ${{ github.event.client_payload.version }}
       run: |
+        set -euo pipefail
+
+        BRANCH="automation/update-wfctl-${VERSION}"
         git config user.name "goreleaserbot"
         git config user.email "bot@goreleaser.com"
+        git checkout -B "$BRANCH"
         git add Formula/wfctl.rb
         git diff --cached --quiet && echo "No changes" && exit 0
-        git commit -m "chore: update wfctl to ${{ github.event.client_payload.version }}"
-        git push
+        git commit -m "chore: update wfctl to ${VERSION}"
+        git push --force-with-lease --set-upstream origin "$BRANCH"
+
+        BODY="Automated wfctl Homebrew formula update for ${VERSION}."
+        if PR_NUMBER=$(gh pr view "$BRANCH" --json number --jq .number 2>/dev/null); then
+          gh pr edit "$PR_NUMBER" \
+            --title "chore: update wfctl to ${VERSION}" \
+            --body "$BODY"
+        else
+          PR_URL=$(gh pr create \
+            --base main \
+            --head "$BRANCH" \
+            --title "chore: update wfctl to ${VERSION}" \
+            --body "$BODY")
+          PR_NUMBER="${PR_URL##*/}"
+        fi
+
+        gh pr merge "$PR_NUMBER" --auto --squash --delete-branch || \
+          echo "Auto-merge unavailable; update PR ${PR_NUMBER} remains open."

From 441a038a83dff0b236f925b1ffb652e3b8cb7b19 Mon Sep 17 00:00:00 2001
From: Jonathan Langevin <jon@langevin.me>
Date: Sun, 7 Jun 2026 07:39:48 -0400
Subject: [PATCH 2/2] chore: update wfctl to v0.75.1

---
 Formula/wfctl.rb | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/Formula/wfctl.rb b/Formula/wfctl.rb
index 2923e6c..34d323d 100644
--- a/Formula/wfctl.rb
+++ b/Formula/wfctl.rb
@@ -1,28 +1,28 @@
 class Wfctl < Formula
   desc "CLI for the workflow orchestration engine — validate, inspect, deploy, and manage configs"
   homepage "https://github.com/GoCodeAlone/workflow"
-  version "0.60.17"
+  version "0.75.1"
   license "Apache-2.0"
 
   on_macos do
     on_intel do
       url "https://github.com/GoCodeAlone/workflow/releases/download/v#{version}/wfctl-darwin-amd64"
-      sha256 "3aafa03d7a41d210475f40a7c2971a589eba590d3f76ffe8950eb25402d7bcc5"
+      sha256 "ad44de779107cf505eb96f8520521ad290499adad0fb7db87f43caf00562dba1"
     end
     on_arm do
       url "https://github.com/GoCodeAlone/workflow/releases/download/v#{version}/wfctl-darwin-arm64"
-      sha256 "4203f41244d0ff6e22e580a4452e044555da4e39181be4cdbb453e47b19aa8cf"
+      sha256 "fac0867b892aa5c33a8656f1fdff7979310e598b10d04550339fb4fd5f5821f6"
     end
   end
 
   on_linux do
     on_intel do
       url "https://github.com/GoCodeAlone/workflow/releases/download/v#{version}/wfctl-linux-amd64"
-      sha256 "fefba2dd3a93ad8f8587a9a198cb2d7189002efe859949c450b010103d0933bf"
+      sha256 "2a8656410969d32c476151de1d27f6e334466a357db94c4fcc8be9bf493da0ea"
     end
     on_arm do
       url "https://github.com/GoCodeAlone/workflow/releases/download/v#{version}/wfctl-linux-arm64"
-      sha256 "ca07453c1005700c6bf124ea1acdb62bcfb77a176e7c022f71975a8886339d2d"
+      sha256 "5782e9d94d318441b5fc34d744e02c03bca5b54908f547dcca08f9e00c46bf78"
     end
   end