Add Homebrew cask configuration

.buildkite/Dockerfile.build

@@ -1,4 +1,4 @@
 FROM golang:1.24.3@sha256:81bf5927dc91aefb42e2bc3a5abdbe9bb3bae8ba8b107e2a4cf43ce3402534c6
 
-COPY --from=goreleaser/goreleaser-pro:v2.9.0@sha256:adf70d3f53233855f6091c58c2e3f182fd41311fe322cbf3284994bb6991a53d /usr/bin/goreleaser /usr/local/bin/goreleaser
-COPY --from=ghcr.io/ko-build/ko:20b15e67194215721faba356b857fcf5d621dfaa /ko-app/ko /usr/local/bin/ko
+COPY --from=goreleaser/goreleaser-pro:v2.10.2@sha256:778473880071d0ee0924c5b55fd43b8985b85be554568d7983c8a49967b216f9 /usr/bin/goreleaser /usr/local/bin/goreleaser
+COPY --from=ghcr.io/ko-build/ko:latest@sha256:70d44eb2b4e6bb09abed0a90993cb79b93abdd700e3c76be93cb9466f1141b1e /ko-app/ko /usr/local/bin/ko

.goreleaser.yaml

@@ -41,9 +41,9 @@ kos:
     build: buildkite-mcp-server
     main: ./cmd/buildkite-mcp-server/
     creation_time: "{{.CommitTimestamp}}"
-    base_image: 'cgr.dev/chainguard/static:latest'
+    base_image: "cgr.dev/chainguard/static:latest"
     tags:
-      - '{{.Version}}'
+      - "{{.Version}}"
       - latest
     labels:
       org.opencontainers.image.authors: Buildkite Inc. https://buildkite.com
@@ -55,7 +55,7 @@ kos:
     bare: true
     preserve_import_paths: false
     # FIXME: We use GOOS and -split in our pipeline which is causing issues with the ko integration
-    # so we disable it here when the GOOS is set to something other than linux. This avoids 
+    # so we disable it here when the GOOS is set to something other than linux. This avoids
     # the ko build to fail when running on macos or windows.
     disable: '{{ and (isEnvSet "GOOS") (ne .Env.GOOS "linux") }}'
     platforms:
@@ -83,6 +83,27 @@ changelog:
       - "^docs:"
       - "^test:"
 
+# Publish new releases to our homebrew tap:
+# https://github.com/buildkite/homebrew-buildkite
+homebrew_casks:
+  - name: buildkite-mcp-server
+    repository:
+      owner: buildkite
+      name: homebrew-buildkite
+      branch: master
+    homepage: https://github.com/buildkite/buildkite-mcp-server
+    description: "Model Context Protocol server for Buildkite"
+    # We don't notarize our binaries so they fail to run when quarantined, which
+    # homebrew does by default. `brew install --no-quarantine ...` is possible,
+    # but nobody does it, and the error is opaque. So just self-release from
+    # quarantine.
+    hooks:
+      post:
+        install: |
+          if system_command("/usr/bin/xattr", args: ["-h"]).exit_status == 0
+            system_command "/usr/bin/xattr", args: ["-dr", "com.apple.quarantine", "#{staged_path}/buildkite-mcp-server"]
+          end
+
 release:
   footer: >-