From f2f2bfae145f91486ac0444fa17aac51278fdecc Mon Sep 17 00:00:00 2001
From: iliana etaoin <iliana@oxide.computer>
Date: Wed, 7 Feb 2024 08:57:19 -0800
Subject: [PATCH] pin libxmlsec1 1.3.2 in CI on macOS (#5007)

See also #4920

A [temporary](https://xkcd.com/2730/) hack to keep the macOS job mildly
happy while I muster the energy to fix this upstream in samael.
---
 .github/workflows/rust.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index fa99017b0d..05ff2ed879 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -30,7 +30,16 @@ jobs:
     steps:
     # This repo is unstable and unnecessary: https://github.com/microsoft/linux-package-repositories/issues/34
     - name: Disable packages.microsoft.com repo
+      if: ${{ startsWith(matrix.os, 'ubuntu') }}
       run: sudo rm -f /etc/apt/sources.list.d/microsoft-prod.list
+    # https://github.com/oxidecomputer/omicron/issues/4920
+    - name: Pin libxmlsec1 to 1.3.2
+      if: ${{ startsWith(matrix.os, 'macos') }}
+      run: |
+        curl -fLOsS --retry 5 https://raw.githubusercontent.com/Homebrew/homebrew-core/081149b0d2720c2759b6ac8253e33b27f6d6c1cd/Formula/lib/libxmlsec1.rb
+        brew install ./libxmlsec1.rb
+        brew pin libxmlsec1
+        rm -f libxmlsec1.rb
     - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       with:
         ref: ${{ github.event.pull_request.head.sha }} # see omicron#4461