From 14cc034b9a258bd97f95fa562cb006e3f4381d84 Mon Sep 17 00:00:00 2001
From: "emmanuel.john" <>
Date: Mon, 24 Nov 2025 20:01:41 -0600
Subject: [PATCH 1/2] granted: fix missing assume binary

Granted requires both 'granted' and 'assume' binaries to function.
The assume script exports AWS credentials to the parent shell.

Closes #249904
---
 Formula/g/granted.rb | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/Formula/g/granted.rb b/Formula/g/granted.rb
index 1159a3b904182..e309d18a1ab35 100644
--- a/Formula/g/granted.rb
+++ b/Formula/g/granted.rb
@@ -20,6 +20,10 @@ class Granted < Formula
   def install
     ldflags = "-s -w -X github.com/common-fate/granted/internal/build.Version=#{version}"
     system "go", "build", *std_go_args(ldflags:), "./cmd/granted"
+    bin.install_symlink "granted" => "assumego"
+    # these must be in bin, and not sourced automatically
+    bin.install "scripts/assume"
+    bin.install "scripts/assume.fish"
   end
 
   test do
@@ -27,5 +31,15 @@ def install
 
     output = shell_output("#{bin}/granted auth configure 2>&1", 1)
     assert_match "[✘] please provide a url argument", output
+
+    ENV["GRANTED_ALIAS_CONFIGURED"] = "true"
+    assert_match version.to_s, shell_output("#{bin}/assume --version")
+    assert_match version.to_s, shell_output("#{bin}/assumego --version")
+
+    # assume is interactive; pipe_output provides empty stdin causing prompts to fail.
+    # Match varies by environment: "does not match" (with browser), "Could not find
+    # default browser" (no browser configured), or "EOF" (when stdin closes).
+    output = pipe_output("#{bin}/assume non-existing-role 2>&1", "")
+    assert_match(/does not match any profiles|Could not find default browser|EOF/, output)
   end
 end

From 527838acd046f6269a4a9a02b31b14b4a67f5bbf Mon Sep 17 00:00:00 2001
From: BrewTestBot <1589480+BrewTestBot@users.noreply.github.com>
Date: Wed, 26 Nov 2025 22:03:57 +0000
Subject: [PATCH 2/2] granted: update 0.38.0 bottle.

---
 Formula/g/granted.rb | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/Formula/g/granted.rb b/Formula/g/granted.rb
index e309d18a1ab35..976c95a1afc0f 100644
--- a/Formula/g/granted.rb
+++ b/Formula/g/granted.rb
@@ -7,12 +7,13 @@ class Granted < Formula
   head "https://github.com/fwdcloudsec/granted.git", branch: "main"
 
   bottle do
-    sha256 cellar: :any_skip_relocation, arm64_tahoe:   "905d6f692d85563eca73585449c2936f5086ce5cc1cc1e101a3bcd71ecf1e8f0"
-    sha256 cellar: :any_skip_relocation, arm64_sequoia: "826f554acd21683c694d7b3ab363aee7a5339b9f488c8672b723494557dda323"
-    sha256 cellar: :any_skip_relocation, arm64_sonoma:  "4d6a65dc8bcb372ebbbdaee1ce5d47f14adec08b67b2ff8d6a6c28da6d29e8ad"
-    sha256 cellar: :any_skip_relocation, sonoma:        "2082c978cba759a2f55bcaa9e1afe102dc6bd03687deba376b075b043158358a"
-    sha256 cellar: :any_skip_relocation, arm64_linux:   "9ecdd52db4973da236d1317fbcd89309dd0ec5e36da27515463e29383ac423fa"
-    sha256 cellar: :any_skip_relocation, x86_64_linux:  "bf9dfb7396fd9de587fabb3b7fa0246efdf9155a5c2ed32cf5ec2fab0d27848c"
+    rebuild 1
+    sha256 cellar: :any_skip_relocation, arm64_tahoe:   "b2ae7e586190f7c5092da72f5e510a4c280b55c114975e39a9b5ca500ef5f601"
+    sha256 cellar: :any_skip_relocation, arm64_sequoia: "fc90ac61d24f078333207f04e4750cbb0be674734ad42ee2f1c3d449069f7d95"
+    sha256 cellar: :any_skip_relocation, arm64_sonoma:  "f72bc786bb6f5e3bd0d23150d07c1f9a889d06b42a728589114ebb418b3bd505"
+    sha256 cellar: :any_skip_relocation, sonoma:        "ad6688f253dd0a2440dd3e3a4201bdfd729e77ef33b62e33668961c63bbe7386"
+    sha256 cellar: :any_skip_relocation, arm64_linux:   "eaf45439a1a8f236a254b8db441fada6c8813b314ed479aa65f201be47b031dc"
+    sha256 cellar: :any_skip_relocation, x86_64_linux:  "534d96a5ee4e3075598d6be97a10c2df041a4fcf6f95f3498299fd9a777a0130"
   end
 
   depends_on "go" => :build