Casks with :latest and :no-check do not update

[niclimcy]

Verification

• I understand that if I ignore these instructions, my issue may be closed without review.
• I have retried my command with --force.
• I ran brew update-reset && brew update and retried my command.
• I ran brew doctor, fixed as many issues as possible and retried my command.
• I have checked the instructions for reporting bugs.
• I made doubly sure this is not a checksum does not match / SHA256 mismatch error (do not open an issue before trying to open a PR to fix first).

Description of issue

~/$ brew upgrade --cask wezterm@nightly --no-quarantine --greedy-latest --force
Warning: Not upgrading wezterm@nightly, the downloaded artifact has not changed

The cask is a nightly so it does not have a livecheck and points to latest, however it does not try to download the newer available build.

Command that failed

brew upgrade --cask wezterm@nightly --no-quarantine --greedy-latest

Output of command with --verbose --debug

/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading wezterm@nightly
/usr/bin/env PATH=/opt/homebrew/opt/gh/bin:/opt/homebrew/Library/Homebrew/shims/shared:/usr/bin:/bin:/usr/sbin:/sbin HOME=/Users/niclim gh auth token --hostname github.com
/usr/bin/env HOME=/Users/niclim git credential-osxkeychain get
/usr/bin/env /opt/homebrew/Library/Homebrew/shims/shared/curl --disable --cookie /dev/null --globoff --show-error --user-agent Homebrew/4.5.4-39-g1f37a11\ \(Macintosh\;\ arm64\ Mac\ OS\ X\ 15.5\)\ curl/8.7.1 --header Accept-Language:\ en --retry 3 -V
/usr/bin/env /opt/homebrew/Library/Homebrew/shims/shared/curl --disable --cookie /dev/null --globoff --show-error --user-agent Homebrew/4.5.4-39-g1f37a11\ \(Macintosh\;\ arm64\ Mac\ OS\ X\ 15.5\)\ curl/8.7.1 --header Accept-Language:\ en --retry 3 --fail --location --silent --head https://github.com/wezterm/wezterm/releases/download/nightly/WezTerm-macos-nightly.zip
==> Checking quarantine support
/usr/bin/env /usr/bin/xattr -h
/usr/bin/env /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/swift -target arm64-apple-macosx15 /opt/homebrew/Library/Homebrew/cask/utils/quarantine.swift
==> Quarantine is available.
==> Verifying Gatekeeper status of /Users/niclim/Library/Caches/Homebrew/downloads/c57ec1344ecbf5ea80285241b68da2b5ba5475b74af75d8da93f1090e9badafa--WezTerm-macos-nightly.zip
/usr/bin/env /usr/bin/xattr -p com.apple.quarantine /Users/niclim/Library/Caches/Homebrew/downloads/c57ec1344ecbf5ea80285241b68da2b5ba5475b74af75d8da93f1090e9badafa--WezTerm-macos-nightly.zip
==> /Users/niclim/Library/Caches/Homebrew/downloads/c57ec1344ecbf5ea80285241b68da2b5ba5475b74af75d8da93f1090e9badafa--WezTerm-macos-nightly.zip is quarantined
Warning: Not upgrading wezterm@nightly, the downloaded artifact has not changed

Output of brew doctor and brew config

Your system is ready to brew.
HOMEBREW_VERSION: 4.5.4-39-g1f37a11
ORIGIN: https://github.com/Homebrew/brew
HEAD: 1f37a11b7946b6d770ecba66a487ba325b58e49c
Last commit: 20 hours ago
Branch: master
Core tap JSON: 07 Jun 12:30 UTC
Core cask tap JSON: 07 Jun 12:30 UTC
HOMEBREW_PREFIX: /opt/homebrew
HOMEBREW_CASK_OPTS: []
HOMEBREW_MAKE_JOBS: 10
HOMEBREW_SORBET_RUNTIME: set
Homebrew Ruby: 3.4.4 => /opt/homebrew/Library/Homebrew/vendor/portable-ruby/3.4.4/bin/ruby
CPU: deca-core 64-bit arm_firestorm_icestorm
Clang: 17.0.0 build 1700
Git: 2.39.5 => /Applications/Xcode.app/Contents/Developer/usr/bin/git
Curl: 8.7.1 => /usr/bin/curl
macOS: 15.5-arm64
CLT: 16.4.0.0.1.1747106510
Xcode: 16.4
Rosetta 2: false

Output of brew tap

mongodb/brew
oven-sh/bun

[niclimcy]

Here is the output of the curl command:

curl --disable --cookie /dev/null --globoff --show-error --user-agent Homebrew/4.5.4-39-g1f37a11\ \(Macintosh\;\ arm64\ Mac\ OS\ X\ 15.5\)\ curl/8.7.1 --header Accept-Language:\ en --retry 3 --fail --location --silent --head https://github.com/wezterm/wezterm/releases/download/nightly/WezTerm-macos-nightly.zip
HTTP/2 302
date: Sat, 07 Jun 2025 12:37:31 GMT
content-type: text/html; charset=utf-8
content-length: 0
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With,Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/120568143/9831f1b8-d2d0-42d9-9ef9-8897a644fd8f?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250607%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250607T123731Z&X-Amz-Expires=300&X-Amz-Signature=3a24e13ba13b08bea4bcba5fc296b122f63e69da8d81c751e242d8d0b65532a4&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DWezTerm-macos-nightly.zip&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/
server: github.com
x-github-request-id: E307:1519C5:1194DA:1489D6:6844328B

HTTP/2 200
content-type: application/octet-stream
last-modified: Sat, 07 Jun 2025 03:53:39 GMT
etag: "0x8DDA576E345A949"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: f87af6e1-901e-005a-5161-d787b2000000
x-ms-version: 2025-05-05
x-ms-creation-time: Sat, 07 Jun 2025 03:53:39 GMT
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=WezTerm-macos-nightly.zip
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
fastly-restarts: 1
accept-ranges: bytes
age: 823
date: Sat, 07 Jun 2025 12:37:32 GMT
x-served-by: cache-iad-kiad7000099-IAD, cache-qpg120109-QPG
x-cache: HIT, HIT
x-cache-hits: 27, 0
x-timer: S1749299852.824056,VS0,VE1
content-length: 112521423

[EricFromCanada]

@apainintheneck Related to #13275?

[apainintheneck]

Warning: Not upgrading wezterm@nightly, the downloaded artifact has not changed

This line indicates that the downloaded artifact is the same between the currently installed version and the latest nightly version. The idea was to avoid reinstalling casks if no changes had been made in the meantime. For versioned casks this is easy, we just compare the latest version to the installed version. For unversioned casks, we compare a hash of the download artifact to avoid unnecessary work.

When was the last time you were able to upgrade this cask? I think you should be able to see when it was last installed by using brew info ....

[bevanjkay]

It could be worth looking into cache invalidation here, are we correctly checking the modified header if it is provided? We may just be comparing the hash with the cached download.

[niclimcy]

Warning: Not upgrading wezterm@nightly, the downloaded artifact has not changed

This line indicates that the downloaded artifact is the same between the currently installed version and the latest nightly version. The idea was to avoid reinstalling casks if no changes had been made in the meantime. For versioned casks this is easy, we just compare the latest version to the installed version. For unversioned casks, we compare a hash of the download artifact to avoid unnecessary work.

When was the last time you were able to upgrade this cask? I think you should be able to see when it was last installed by using brew info ....

Seems like it is not trying to download the latest binary to compare.

brew info wezterm@nightly
==> wezterm@nightly: latest
https://wezterm.org/
Installed
/opt/homebrew/Caskroom/wezterm@nightly/latest (272.9MB)
  Installed on 2025-05-03 at 04:57:30
From: https://github.com/Homebrew/homebrew-cask/blob/HEAD/Casks/w/wezterm@nightly.rb
==> Name
WezTerm
==> Description
GPU-accelerated cross-platform terminal emulator and multiplexer
==> Artifacts
WezTerm.app (App)
/Applications/WezTerm.app/Contents/MacOS/wezterm-mux-server (Binary)
/Applications/WezTerm.app/Contents/MacOS/strip-ansi-escapes (Binary)
/Applications/WezTerm.app/Contents/Resources/shell-completion/fish -> /opt/homebrew/share/fish/vendor_completions.d/wezterm.fish (Binary)
/Applications/WezTerm.app/Contents/Resources/shell-completion/zsh -> /opt/homebrew/share/zsh/site-functions/_wezterm (Binary)
/Applications/WezTerm.app/Contents/MacOS/wezterm (Binary)
/Applications/WezTerm.app/Contents/Resources/shell-completion/bash -> /opt/homebrew/etc/bash_completion.d/wezterm (Binary)
/Applications/WezTerm.app/Contents/MacOS/wezterm-gui (Binary)
==> Analytics
install: 333 (30 days), 1,094 (90 days), 4,478 (365 days)

[apainintheneck]

It looks like a bug to me in that case. I'm not sure what could be happening off the top of my head but some sort of caching could be the issue as mentioned by @bevanjkay. It might be a good idea to move this to the main brew repo as well since this doesn't seem to be related to the cask definition itself.

[niclimcy]

It looks like a bug to me in that case. I'm not sure what could be happening off the top of my head but some sort of caching could be the issue as mentioned by @bevanjkay. It might be a good idea to move this to the main brew repo as well since this doesn't seem to be related to the cask definition itself.

Do I make a new issue or will this issue be transferred over by y'all?

[bevanjkay]

It can be transferred

[vvvvv]

I had the same issue and did some investigation.
I suspect that this affects all casks with version :latest and sha256 :no_check.

To find which casks might be affected on my system:

$ cd /opt/homebrew/Caskroom
$ fd 'LATEST_DOWNLOAD_SHA256' --hidden --type f
chromium/.metadata/LATEST_DOWNLOAD_SHA256
wezterm@nightly/.metadata/LATEST_DOWNLOAD_SHA256

I had already updated wezterm (by deleting the wezterm files in ~/Library/Caches/Homebrew/downloads), so I'll use Chromium as an example here.

Let's start by checking which casks are outdated.

$ brew outdated --verbose --debug --cask --greedy

/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading homebrew/cask/chatbox
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading homebrew/cask/chatgpt
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading homebrew/cask/chromium
/usr/bin/env plutil -convert xml1 -o - /Applications/Xcode-beta.app/Contents/Info.plist
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading discord
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading firefox
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading font-cascadia-code
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading font-fira-code-nerd-font
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading font-hack-nerd-font
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading font-hasklig
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading font-hasklug-nerd-font
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading font-jetbrains-mono-nerd-font
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading homebrew/cask/imhex
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading joplin
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading karabiner-elements
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading qmk-toolbox
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading rectangle-pro
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading homebrew/cask/sanesidebuttons
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading splice
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading homebrew/cask/spotify
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading telegram
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading via
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading vivid
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading homebrew/cask/vmware-fusion
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading wezterm@nightly
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading whatsapp
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromAPILoader): loading wireshark
/opt/homebrew/Library/Homebrew/brew.rb (Cask::CaskLoader::FromTapLoader): loading vvvvv/zig/zig@nightly
/usr/bin/env /opt/homebrew/Library/Homebrew/shims/shared/curl --disable --cookie /dev/null --globoff --show-error --user-agent Homebrew/4.5.6-45-ge66bb7e\ \(Macintosh\;\ arm64\ Mac\ OS\ X\ 14.7.6\)\ curl/8.7.1 --header Accept-Language:\ en --retry 3 -V
/usr/bin/env /opt/homebrew/Library/Homebrew/shims/shared/curl --disable --cookie /dev/null --globoff --show-error --user-agent Homebrew/4.5.6-45-ge66bb7e\ \(Macintosh\;\ arm64\ Mac\ OS\ X\ 14.7.6\)\ curl/8.7.1 --header Accept-Language:\ en --retry 3 --fail --location --silent --head https://download-chromium.appspot.com/dl/Mac_Arm\?type=snapshots
/usr/bin/env /opt/homebrew/Library/Homebrew/shims/shared/curl --disable --cookie /dev/null --globoff --show-error --user-agent Homebrew/4.5.6-45-ge66bb7e\ \(Macintosh\;\ arm64\ Mac\ OS\ X\ 14.7.6\)\ curl/8.7.1 --header Accept-Language:\ en --retry 3 --fail --location --silent --head --request GET --http1.1 https://download-chromium.appspot.com/dl/Mac_Arm\?type=snapshots
==> Checking quarantine support
/usr/bin/env /usr/bin/xattr -h
/usr/bin/env /Library/Developer/CommandLineTools/usr/bin/swift -target arm64-apple-macosx14 /opt/homebrew/Library/Homebrew/cask/utils/quarantine.swift
==> Quarantine is available.
==> Verifying Gatekeeper status of /Users/v/Library/Caches/Homebrew/downloads/9689e554ae2d938027c2d26f29176cdf362d24ff5f9f0bd338550e4a524e40f5--chrome-mac.zip
/usr/bin/env /usr/bin/xattr -p com.apple.quarantine /Users/v/Library/Caches/Homebrew/downloads/9689e554ae2d938027c2d26f29176cdf362d24ff5f9f0bd338550e4a524e40f5--chrome-mac.zip
==> /Users/v/Library/Caches/Homebrew/downloads/9689e554ae2d938027c2d26f29176cdf362d24ff5f9f0bd338550e4a524e40f5--chrome-mac.zip is quarantined
/usr/bin/env /opt/homebrew/Library/Homebrew/shims/shared/curl --disable --cookie /dev/null --globoff --show-error --user-agent Homebrew/4.5.6-45-ge66bb7e\ \(Macintosh\;\ arm64\ Mac\ OS\ X\ 14.7.6\)\ curl/8.7.1 --header Accept-Language:\ en --retry 3 -V
/usr/bin/env /opt/homebrew/Library/Homebrew/shims/shared/curl --disable --cookie /dev/null --globoff --show-error --user-agent Homebrew/4.5.6-45-ge66bb7e\ \(Macintosh\;\ arm64\ Mac\ OS\ X\ 14.7.6\)\ curl/8.7.1 --header Accept-Language:\ en --retry 3 --fail --location --silent --head https://github.com/wezterm/wezterm/releases/download/nightly/WezTerm-macos-nightly.zip
==> Verifying Gatekeeper status of /Users/v/Library/Caches/Homebrew/downloads/c57ec1344ecbf5ea80285241b68da2b5ba5475b74af75d8da93f1090e9badafa--WezTerm-macos-nightly.zip
/usr/bin/env /usr/bin/xattr -p com.apple.quarantine /Users/v/Library/Caches/Homebrew/downloads/c57ec1344ecbf5ea80285241b68da2b5ba5475b74af75d8da93f1090e9badafa--WezTerm-macos-nightly.zip
==> /Users/v/Library/Caches/Homebrew/downloads/c57ec1344ecbf5ea80285241b68da2b5ba5475b74af75d8da93f1090e9badafa--WezTerm-macos-nightly.zip is quarantined
chatbox (1.13.2) != 1.13.4
chatgpt (1.2025.140,1748052662) != 1.2025.154,1749565565
discord (0.0.347) != 0.0.349
firefox (139.0.1) != 139.0.4
joplin (3.3.12) != 3.3.13
telegram (11.11,272320) != 11.12.3,273181
wireshark (4.4.6) != 4.4.7
zig@nightly (0.15.0-dev.703+597dd328e) != 0.15.0-dev.769+4d7980645

As you can see Chromium is not marked as outdated.

Next, I run curl just as Homebrew does.

$ curl --disable --cookie /dev/null --globoff --show-error --user-agent Homebrew/4.5.6-38-g8063291\ \(Macintosh\;\ arm64\ Mac\ OS\ X\ 14.7.6\)\ curl/8.7.1 --header Accept-Language:\ en --retry 3 --fail --location --silent --head 'https://download-chromium.appspot.com/dl/Mac_Arm?type=snapshots'

HTTP/2 302
content-type: text/html; charset=utf-8
location: https://commondatastorage.googleapis.com/chromium-browser-snapshots/Mac_Arm/1473127/chrome-mac.zip
x-cloud-trace-context: a23ab8479af04ce7a53e142579583c89
content-length: 383
date: Thu, 12 Jun 2025 17:40:37 GMT
server: Google Frontend
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

HTTP/2 200
content-type: application/zip
x-guploader-uploadid: ABgVH8_HthpDbTUaa7XVZhVL2o-xA1yENNmLWXtCeDpuGf6pS4_rFpvf4LC0V_k96QOI8ipDWVRZ7WY
expires: Thu, 12 Jun 2025 18:40:37 GMT
date: Thu, 12 Jun 2025 17:40:37 GMT
cache-control: public, max-age=3600
last-modified: Thu, 12 Jun 2025 17:35:15 GMT
etag: "e336477b81b80ff07712e6d712a1fb0e"
x-goog-generation: 1749749715943374
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 147721929
x-goog-hash: crc32c=ULRm4w==
x-goog-hash: md5=4zZHe4G4D/B3EubXEqH7Dg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 147721929
server: UploadServer
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

I then follow the URL to the binary.

$ curl --silent --disable --cookie /dev/null --globoff --show-error --user-agent Homebrew/4.5.6-38-g8063291\ \(Macintosh\;\ arm64\ Mac\ OS\ X\
14.7.6\)\ curl/8.7.1 --header Accept-Language:\ en --retry 3 --fail --output ./chromium.zip --location 'https://commondatastorage.googleapis.com/chromium-browser-snapshots/Mac_Arm/1473127/chrome-mac.zip'
$ unzip chromium.zip -d chromium

And compare the version installed on my system, which brew considers up-to-date, with the freshly downloaded version:

$ which chromium
/opt/homebrew/bin/chromium

$ /opt/homebrew/bin/chromium --version
Chromium 138.0.7178.0

$ ./chromium/chrome-mac/Chromium.app/Contents/MacOS/Chromium --version
Chromium 139.0.7236.0

The version installed on my system is Chromium 138.0.7178.0 while the freshly downloaded version is Chromium 139.0.7236.0.

I looked up when 138.0.7178.0 was released - Version 138.0.7178.0 was released on May 13, 2025.
source: https://chromiumdash.appspot.com/fetch_releases?channel=Canary&platform=Mac&num=6&offset=45
The server returns a lot of 500, so you need a bit of patience to verify for yourself. I had more success using curl than using a browser.

I keep my system relatively up-to-date and have performed many updates since May, so this bug must have existed for a couple of weeks now.

Maybe someone could update the title to better reflect the severity of this issue.
I tried opening a new issue but your templates suggest that these kinds of reports aren't allowed.