Restrict livecheck redirects

[MikeMcQuaid]

• Prevent brew livecheck from following upstream redirects to non-HTTPS targets by default.
• Keep livecheck content and header fetches aligned so redirect handling does not diverge.
• Cover the redirect protocol guard with focused regressions.

---

• Have you followed our Contributing guidelines?
• Have you checked for other open Pull Requests for the same change?
• Have you explained what your changes do? Performance claims (e.g. "this is faster") must include Hyperfine benchmarks.
• Have you explained why you'd like these changes included, not just what they do?
• For bug fixes, have you given step-by-step brew commands to reproduce the bug?
• Have you written new tests (excluding integration tests)? Here's an example.
• Have you successfully run brew lgtm (style, typechecking and tests) locally?

---

• AI was used to generate or assist with generating this PR.

OpenAI Codex 5.5 xhigh with local review and testing.

---

[Copilot]

Pull request overview

This PR tightens brew livecheck network safety by preventing redirect chains from downgrading to non-HTTPS targets, and ensures the same redirect policy is applied consistently across both header and content fetching paths.

Changes:

• Add HTTPS-only redirect restrictions to livecheck’s curl invocations (via --proto-redir =https) and centralize redirect-related args.
• Keep page_headers and page_content aligned by reusing the same redirection argument set.
• Add focused specs to prevent regressions in redirect protocol guarding.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
Library/Homebrew/livecheck/strategy.rb	Introduces shared redirect curl args and applies HTTPS-only redirect policy to livecheck fetches.
Library/Homebrew/test/livecheck/strategy_spec.rb	Adds regression tests asserting HTTPS-only redirect args are used for both header and content fetches.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.