What's Changed

Use quarterly reports for role suggestions by @MikeMcQuaid in #23726
cask/audit: reject verified parameter on all casks by @AlternateRT in #23718
doctor: remove grep_v(String) from JSON output by @hyuraku in #23727
Target Intel Clang under Rosetta by @MikeMcQuaid in #23723
formula: update cargo fetch example by @cho-m in #23728
formula_creator: add deny network to some modes by @cho-m in #23730
formula_creator: add deny network for go and rust by @cho-m in #23734
bump-cask-pr: load modified contents with FromContentLoader by @p-linnane in #23738
bump: avoid overwriting skip message with autobump by @samford in #23737
formula_creator: add deny network for cabal and zig by @cho-m in #23739
Use InfluxDB v3 API for analytics reporting by @SMillerDev in #23620
vulns: correct upstream fix boundaries and add reviewed overrides by @p-linnane in #23736
Fix two dead links in the docs by @rawsun007 in #23744
Report invalid formulae in pr-pull by @MikeMcQuaid in #23746
services: recognize both macOS service labels by @p-linnane in #23741
cask/uninstall: don't quit or signal the host process by @bevanjkay in #23695
sandbox: allow writing xcrun db by @cho-m in #23748
bump-formula-pr: render added version stanzas as string literals by @dduugg in #23751
keg_relocate: contain text relocation to the keg by @dduugg in #23749
keg: fix remove_oldname_opt_records to avoid early return by @cho-m in #23753
rubocops/formula_cop: match array dependency type values by @hyuraku in #23758
generate-cask-ci-matrix: drop macOS Intel CI by @bevanjkay in #23757
formula_creator: remove outdated comment, show resource only for perl by @cho-m in #23745
Stop fetching bottle manifests when creating tabs by @MikeMcQuaid in #23760
pkg: reset installer Git config by @dduugg in #23747
services: default to canonical macOS service labels by @p-linnane in #23750
Add Formula#python3 for the direct Python dependency by @p-linnane in #23754
cask: do not follow a symlinked rmdir path by @dduugg in #23761
Replace some T.nilable(T::Boolean) by @botantony in #23350
cask/cask_loader: recover uninstall artifacts from the signed payload by @dduugg in #23762
formula_creator: add deny network for ruby by @cho-m in #23763
formula: handle --offline in std_cargo_args by @cho-m in #23764
unpack_strategy/zip: move volume labels by basename by @dduugg in #23765
Remove default branch sync workflow by @MikeMcQuaid in #23732
test: cover Utils.safe_filename and .safe_filename? by @rawsun007 in #23773
Install app_image by moving the AppImage, mirroring the app stanza by @waldyrious in #23771
Replace deleted homebrew-cask helper scripts by @bevanjkay in #23672
Add cask audit for versioned app_image targets by @waldyrious in #23777
Move more methods into Utils by @MikeMcQuaid in #23774
Slim down and tighten AGENTS.md by @MikeMcQuaid in #23778
api/formula/formula_struct_generator: defer placeholder replacement by @cho-m in #23780
services: resolve owner from the registered service file by @p-linnane in #23781
Fix shim exec loops and reap timed-out commands by @MikeMcQuaid in #23776
Stop fetching unsigned per-package API data by @MikeMcQuaid in #23772
Remove aggregate test jobs by @MikeMcQuaid in #23785
Move formula Bundler defaults to superenv by @cho-m in #23786
utils/bottles: only trust a padded build prefix from the bottle manifest by @dduugg in #23788
services: recognize both Linux service labels by @p-linnane in #23792
Share Python dependency lookup with Formula#python3 by @p-linnane in #23794
cask: skip cask loader when no casks are installed by @krehel in #23798
pkg: seed the API cache as the install user by @dduugg in #23795
Re-sign node-gyp addons after stripping them by @daeho-ro in #23801
generate-cask-ci-matrix: skip runners the cask is disabled on by @bevanjkay in #23791

New Contributors

@rawsun007 made their first contribution in #23744

Full Changelog: 6.0.21...6.0.22

Original source

What's Changed

Harden build prefix relocation of poured bottles by @MikeMcQuaid in #23667
Harden build prefix relocation of poured bottles by @MikeMcQuaid in #23670
Drop macOS Intel CI in Homebrew/core by @p-linnane in #23677
formula: use -Wno-author in std_cmake_args by @p-linnane in #23676
docs: update brew tap's description by @AlternateRT in #23687
bundle/mac_app_store: Support upcoming mas 8.0.0 by @rgoldberg in #23690
Handle absent cask bundle version suffixes by @MikeMcQuaid in #23688
Speed up and expand integration coverage by @MikeMcQuaid in #23684
Split slow test jobs by @MikeMcQuaid in #23675
rubocops: add CMakeArgs cop by @p-linnane in #23680
Group upgrade dependencies and dependents by @MikeMcQuaid in #23691
Relativise absolute symlinks into the prefix when bottling by @MikeMcQuaid in #23682
Defer the relocated pour validation sweep by @MikeMcQuaid in #23681
Stream parallel cleanup output by @MikeMcQuaid in #23692
github_runner_matrix: use macos-15-intel for Portable Ruby x86_64 by @p-linnane in #23694
advisory-match: sync alias families and reopen reviewed ranges by @p-linnane in #23696
tap: normalise Codeberg remote forms by @AlternateRT in #23697
Break out GitHub Packages downloads per tag by @MikeMcQuaid in #23698
Add padded bottle build prefixes by @MikeMcQuaid in #23693
test/spec_helper: skip missing test tools under brew test-bot by @p-linnane in #23700
extend/pathname: one lstat per entry in compute_disk_usage by @krehel in #23701
rubocops/cask: flag redundant nested on_* blocks by @p-linnane in #23705
audit: add --fix command for casks by @bevanjkay in #23618
Enable shorter-prefix bottle relocation by @MikeMcQuaid in #23699
utils/tty: memoise a failed stty size by @krehel in #23706
formula_auditor: reject Linux libomp dependency in core formula by @cho-m in #23708
rubocops/lines: add cop for jpeg dependency by @cho-m in #23709
rubocops/lines: remove dead syntax by @cho-m in #23710
bundle: require cask/cask_loader before use by @p-linnane in #23716
Never install downloads with checksum mismatches by @MikeMcQuaid in #23717
Reduce Intel macOS to Tier 3 by @p-linnane in #23679
Harden unsigned API, trust, installer and output boundaries by @p-linnane in #23720
Restore brew analytics to the manpage and completions by @dylanpulver in #23721
Verify cached downloads at every consumption boundary by @p-linnane in #23719
release: skip doctor on Tier 3 Intel macOS by @MikeMcQuaid in #23725
Speed up test-bot smoke jobs by @MikeMcQuaid in #23724

New Contributors

@dylanpulver made their first contribution in #23721

Full Changelog: 6.0.20...6.0.21

Original source

What's Changed

generate-zap: resolve apps from package receipts by @loganrosen in #23623
cc shim: compare by canonicalizing both sides, fixing issues with symlinked HOMEs by @averms in #23637
pathname/disk_usage_extension: fix double path traversal by @krehel in #23632
Migrate analytics to brew.sh proxy by @SMillerDev in #23639
Add brew tests --load-only and break the install require cycle by @p-linnane in #23642
Run privileged cask install steps in the parent process by @p-linnane in #23641
Drive bottle pours from relocation metadata by @MikeMcQuaid in #23643
bundle: fail Flatpak entries when flatpak is not installed by @p-linnane in #23648
upgrade: print the fetch heading before prefetching by @bevanjkay in #23640
utils/curl: fix curl_version memoization by @krehel in #23651
livecheck/livecheck: rename some params to formula_or_cask by @cho-m in #23650
Explain Cask Gatekeeper security model by @MikeMcQuaid in #23653
rubocops/cask/url: require each keyword parameter on its own line by @hyuraku in #23654
Check domain age to be > 30 days in auditors by @SMillerDev in #23655
dev-cmd/bump: skip if there is an open bump PR by @cho-m in #23649
cmd/uses: require cask/cask by @botantony in #23660
tapioca/compilers/cask/config: Generate accessors from DEFAULT_DIRS by @p-linnane in #23661
Fix undefined method 'all' for class Cask::Cask in deps command by @middagj in #23663
Add package manager caches and isolate them in CI by @MikeMcQuaid in #23656
Add formula fetch phase run before install by @MikeMcQuaid in #23657
dev-cmd/pr-pull: require cask/cask_loader by @p-linnane in #23664
Check ELF relocatability by structure when bottling by @MikeMcQuaid in #23644
Delete node-gyp debris and strip addons when bottling by @MikeMcQuaid in #23645
Check raw linkage names when bottling by @MikeMcQuaid in #23646
bundle: batch installs where possible by @dduugg in #23659
Require trust for automatic tap migration installs by @felix314159 in #23662

New Contributors

@averms made their first contribution in #23637
@felix314159 made their first contribution in #23662

Full Changelog: 6.0.19...6.0.20

Original source

What's Changed

Set oldest GCC to 8 to enable -ffile-prefix-map by @cho-m in #23533

audit: resolve untapped core dependencies by @MikeMcQuaid in #23542

Skip duplicate /v2/ when artifact domain already contains it by @jouve in #23062

cli/parser: fix help crash with -- arguments by @krehel in #23544

sorbet: Add a Tapioca compiler for Cask::DSL to type some more tests by @issyl0 in #23534

Clarify outdated cask version display by @HaraldNordgren in #23543

cask/upgrade: mirror per-file quarantine approval across upgrades by @aholland in #23546

rubocops/cask: add cops for all conditional stanzas by @AlternateRT in #23554

vulns: read the advisory index from formulae.brew.sh by @p-linnane in #23555

cask/upgrade: preserve an unquarantined app's state across upgrades by @aholland in #23556

Fix cask token in conflicts_with example by @muzimuzhi in #23557

keg: skip linking some symlinks that point to other kegs by @cho-m in #23558

Prepare batched package installation by @MikeMcQuaid in #23547

Prepare combined upgrade planning by @MikeMcQuaid in #23548

Order install package phases by @MikeMcQuaid in #23549

Order reinstall package phases by @MikeMcQuaid in #23550

Order upgrade package phases by @MikeMcQuaid in #23551

Defer package summaries until cleanup by @MikeMcQuaid in #23552

cask/artifact: support wildcards in uninstall quit/signal by @bevanjkay in #23559

Allow nested sandbox integration tests by @MikeMcQuaid in #23561

Reduce install command load time by @MikeMcQuaid in #23560

rubocops/uses_from_macos: add lldb to provided by macOS by @cho-m in #23563

utils/rubocop: activate installed platform Rubydex gem by @p-linnane in #23565

generate-cask-ci-matrix: require Cask::CaskLoader by @samford in #23566

generate-cask-ci-matrix: test lazy CaskLoader require by @p-linnane in #23568

Load cask loader when reading Caskroom by @MikeMcQuaid in #23570

missing_formula: defer cask/info require by @p-linnane in #23571

sorbet: Bump more Cask tests to higher typed levels by @issyl0 in #23574

sorbet: Bump more OS-specific tests to higher typed levels by @issyl0 in #23575

sorbet: Bump more command tests to higher typed levels by @issyl0 in #23576

sorbet: Bump more core tests to higher typed levels by @issyl0 in #23577

sorbet: Bump more RuboCop tests to higher typed levels by @issyl0 in #23578

sorbet: Bump more utility tests to higher typed levels by @issyl0 in #23579

Stabilise Bootsnap cache keys by @MikeMcQuaid in #23573

Fix cask extract integrity by @SSakutaro in #23584

cache_store: make CacheStoreDatabase.use thread-safe by @Dmdv in #23581

Stabilise install-dependent tests by @MikeMcQuaid in #23583

Defer API formula inflation by @MikeMcQuaid in #23572

Load cask loader for list versions by @MikeMcQuaid in #23587

keg_relocate: skip running patchelf on bun binaries by @cho-m in #23589

Cover profiler cache key stability by @MikeMcQuaid in #23590

Skip warm GHCR manifest cache discovery by @MikeMcQuaid in #23591

docs: fix Vale errors by @MikeMcQuaid in #23598

Invalidate bottle cache for local patches by @MikeMcQuaid in #23597

vulns: include OSS-Fuzz patch fixes as GIT ecosystem, add additional "fixed" filtering (released vs. patched), and --list-skipped by @kmarekspartz in #23511

Handle empty API Cask flight blocks by @MikeMcQuaid in #23603

Handle unknown user in trust file by @MikeMcQuaid in #23600

Add relocatable bottles plan by @MikeMcQuaid in #23605

Suppress no-op cleanup output by @MikeMcQuaid in #23596

Add brew benchmark for cold and warm workloads by @MikeMcQuaid in #23601

Release FFI Core Foundation objects deterministically by @dot-agi in #23607

advisory-match: add --new-history to skip reviewed records by @p-linnane in #23610

cask/upgrade: don't read quarantine metadata when quarantine is unavailable by @aholland in #23608

dev-cmd/extract: write local patches by @cho-m in #23604

Load cask loader for cask search by @MikeMcQuaid in #23611

untap: require CaskLoader by @capruxel in #23614

Suppress stderr for generated cask completions by @vincentkoc in #23613

tests: speed up slow tests by @bevanjkay in #23616

Resolve cask system languages before artifact installation by @dot-agi in #23612

cask/artifact: don't copy xattrs when quarantine is unavailable by @aholland in #23617

Improve and cleanup cask downloads by @MikeMcQuaid in #23615

test/cmd/which-formula_spec: avoid modifications outside test dir by @cho-m in #23626

Select the native architecture's dynamic linker on Linux by @p-linnane in #23622

formatter: fix comma placement for negative numbers by @krehel in #23625

sorbet: Bump more tests to higher typed levels by @issyl0 in #23630

Add TODO for Cargo release cooldown by @MikeMcQuaid in #23627

vulns: close reviewed open ranges and fix historical subject lookup by @p-linnane in #23634

Record bottle relocation metadata by @MikeMcQuaid in #23629

Clean up stale versioned opt aliases by @MikeMcQuaid in #23633

Avoid eager PatchELF signature evaluation by @MikeMcQuaid in #23636

Make network access allowances exclusive by @MikeMcQuaid in #23635

New Contributors

@jouve made their first contribution in #23062

@Dmdv made their first contribution in #23581

@dot-agi made their first contribution in #23607

@capruxel made their first contribution in #23614

@vincentkoc made their first contribution in #23613

Full Changelog: 6.0.18...6.0.19

Original source

What's Changed

Build and publish large runner docker image by @iMichka in #23345

Avoid nil cask versions during installation by @MikeMcQuaid in #23499

Use cask dependencies for platform support by @MikeMcQuaid in #23496

Fix role used to push to ECR by @iMichka in #23500

Report unavailable cask platforms accurately by @MikeMcQuaid in #23501

Add supported_platforms to cask API data by @p-linnane in #23503

cask: merge multiple conflicts_with stanzas by @hyuraku in #23506

Normalize hyphenated HOMEBREW_CASK_OPTS option names by @carlocab in #23505

sbom: add purl external references for sources using Vulns::Identify by @kmarekspartz in #23459

bump: retry, then skip packages on transient GitHub API errors by @moscowmule2240 in #23504

Drop legacy option names when deserializing cask config by @carlocab in #23508

Show upgraded dependencies during installation by @HaraldNordgren in #23509

Publish multi-platform long runner image by @rexmhall09 in #23502

Stop inferring cask OS support from artifact types by @p-linnane in #23513

Report progress when uploading bottles by @p-linnane in #23520

utils/git: only mutate describe-cache when .git is user-owned by @p-linnane in #23517

advisory-match: add --repology to load a local index by @p-linnane in #23516

cask/audit: anchor sha256 check to string by @krehel in #23518

Record startup phases in brew prof --timings by @MikeMcQuaid in #23526

bundle: accept only remote sources for uv tools by @tftio in #23469

Keep one failure from aborting a batch install by @MikeMcQuaid in #23525

utils/cpan: add offline test coverage by @p-linnane in #23527

docs: clarify cask artifact OS guidance by @p-linnane in #23524

utils/cpan: fail closed on non-CPAN and livecheck resources by @p-linnane in #23529

rubocops/cask: add sha256 stanza ordering by @krehel in #23532

utils/curl: request headers when body is unused by @krehel in #23528

Faster brew cleanup with many installed packages by @mrjbq7 in #23515

generate-advisories-api: add advisory index generator by @p-linnane in #23530

extend/ENV/super: remove outdated cccfg flag comments by @cho-m in #23535

utils/clang: allow Version type for kernel_version by @cho-m in #23536

keg: create share/pwsh as a real directory when linking by @daeho-ro in #23537

sandbox: keep terminal output translation on during PTY passthrough by @aholland in #23514

Use internal JSON for update reports by @MikeMcQuaid in #23540

Handle disappearing Landlock paths by @MikeMcQuaid in #23541

cask/upgrade: claim macOS may prompt rather than will by @aholland in #23545

New Contributors

@moscowmule2240 made their first contribution in #23504

@mrjbq7 made their first contribution in #23515

Full Changelog: 6.0.17...6.0.18

Original source

What's Changed

cask/audit: detect incorrect app case by @krehel in #23400
Start install downloads before local-only checks by @MikeMcQuaid in #23381
contributions: clarify Maintainer team access by @SSakutaro in #23394
Tolerate missing bottle manifests in prefetches by @MikeMcQuaid in #23403
Use workflow result for commit style by @MikeMcQuaid in #23402
docs/MCP-Server: update Cursor URL by @p-linnane in #23415
download_queue: print fetch heading to stderr when stdout is not a TTY by @carlocab in #23406
cask/audit: allow linux-only casks by @bevanjkay in #23422
Compact install step JSON (25/26) by @MikeMcQuaid in #23365
api/cask: ignore target when selecting artifact stanza by @p-linnane in #23417
Retry API downloads without --time-cond on curl receive errors by @p-linnane in #23411
bundle cleanup: document trust store reset by @p-linnane in #23412
Pass the download queue to FormulaInstaller when upgrading by @p-linnane in #23416
test/ENV_spec: compare only singleton methods by @p-linnane in #23421
Restore use of package-provided service files by @MikeMcQuaid in #23423
bump: show upstream versions in release cooldown by @MikeMcQuaid in #23409
Add autobump option to tap-new by @SMillerDev in #23349
Convert Tab attributes to keyword arguments by @hyuraku in #23430
Remove Bubblewrap, use Landlock for Linux sandbox by @MikeMcQuaid in #23425
Fix random time in tap-new by @SMillerDev in #23432
Complete Cask stanza ordering coverage by @MikeMcQuaid in #23405
Skip cask link when symlink already correct by @MikeMcQuaid in #23428
Remove base64 gem and add Homebrew/NoBase64 cop by @MikeMcQuaid in #23410
Use codesign to sign patched binaries on Intel by @MikeMcQuaid in #23429
unpack_strategy/dmg: use diskutil image on macOS 14+ by @p-linnane in #23414
Speed up brew style and brew readall by @MikeMcQuaid in #23435
system_config: show core cask tap output on Linux by @AlternateRT in #23436
Reset default download queue between specs by @MikeMcQuaid in #23424
Fix cask Linux installs without os stanza by @MikeMcQuaid in #23431
shared_audits: print repo age if too new by @gromgit in #23438
vulns: add --fix-available and --no-fix-available flags by @kmarekspartz in #23152
Revert "unpack_strategy/dmg: use diskutil image on macOS 14+" by @MikeMcQuaid in #23444
Reject official legacy install hooks (26/26) by @MikeMcQuaid in #23366
Fix AppImage's stanza name in cask DSL by @AlternateRT in #23447
Treat cask OS support as explicit data by @MikeMcQuaid in #23433
Use public_send instead of send for public methods by @AbishekRaj2007 in #23449
Enforce explicit formula install-step bases (28/29) by @MikeMcQuaid in #23404
rubocops: adjust depends_on checks for Linux by @AlternateRT in #23453
workflows: check autogenerated files when commands change by @kmarekspartz in #23258
Remove the formula install-step var default (29/29) by @MikeMcQuaid in #23373
cask/audit: reject verified parameter on new casks by @AlternateRT in #23456
Add quiet mode for automatic updates by @HaraldNordgren in #23455
bundle: install cargo packages from a git URL or path by @tftio in #23451
Stabilise service caveats spec by @MikeMcQuaid in #23470
Update rubocop to 1.89.0 and rubocop-sorbet to 0.14.0 by @dduugg in #23452
requirements/macos_requirement: fix handling for Linux by @cho-m in #23473
Sandbox structured cask operations by @MikeMcQuaid in #23461
Fetch official tap HEAD for worktrees by @MikeMcQuaid in #23472
Use bottled inputs and add RuboCop guard by @MikeMcQuaid in #23468
Use .public_send instead of .send for calls to public methods by @AbishekRaj2007 in #23474
Enforce structured install step authoring by @MikeMcQuaid in #23475
util: spdx license tag limit from 256 to 255 by @daeho-ro in #23477
Allow sudo in sandboxed Cask install steps by @SSakutaro in #23476
service: fix caveat for SSH sessions by @IngmarStein in #23464
Preserve false values in Cask artifact serialization by @SSakutaro in #23478
formula: add std_swift_args by @cho-m in #23480
install_steps: allow run steps to ignore failure by @bevanjkay in #23484
livecheck: fix throttle detached head on CI by @bevanjkay in #23487
Introduce python_major_minor_version DSL by @iMichka in #23481

New Contributors

@AbishekRaj2007 made their first contribution in #23449
@tftio made their first contribution in #23451

Full Changelog: 6.0.15...6.0.16

Original source

What's Changed

workflows/docker: align deprecation of 22.04 image by @cho-m in #23378
Add PHP configuration action (16/24) by @MikeMcQuaid in #23191
Add Python bootstrap action (17/24) by @MikeMcQuaid in #23192
Align shared install step interfaces (18/24) by @MikeMcQuaid in #23193
Align install step autocorrections (20/24) by @MikeMcQuaid in #23195
Document canonical install steps (21/24) by @MikeMcQuaid in #23196
Plan remaining install hook migration (22/24) by @MikeMcQuaid in #23197
Bridge cask flight step migrations (19/26) by @MikeMcQuaid in #23382
Update migration delivery plan (23/24) by @MikeMcQuaid in #23198
Record final migration stacks (24/24) by @MikeMcQuaid in #23199
docs: fix errors reported by Vale 3.17.0 by @dduugg in #23387
formula-analytics: replace PyCall with subprocess by @MikeMcQuaid in #23379
Gemfile.lock: add checksums by @p-linnane in #23389
cask/config: define instance variables in a consistent order by @p-linnane in #23388
Add per-service user environment variable overrides by @IngmarStein in #23312
Suppress brew services tmux caveat on Linux by @HackAttack in #23390
Keep download progress within terminal width by @MikeMcQuaid in #23391
Parse only needed internal API payload entries by @MikeMcQuaid in #23380
install: isolate formula and cask fetch errors by @MikeMcQuaid in #23385
Make formula install-step var bases explicit by @MikeMcQuaid in #23372
ignorable: replace callcc with Fiber by @MikeMcQuaid in #23393
workflows/tap-new-tests: remove intel macOS from tap-new by @cho-m in #23398
sorbet: Fix the formula test helper block typing by @issyl0 in #23397

New Contributors

@HackAttack made their first contribution in #23390

Full Changelog: 6.0.14...6.0.15

Original source

What's Changed

Speed up warm-cache API loads and path lookups by @MikeMcQuaid in #23300

Remove most forks from no-op brew startup by @MikeMcQuaid in #23298

Speed up style checks for homebrew/core and homebrew/cask by @MikeMcQuaid in #23301

Avoid repeated coverage simulation by @MikeMcQuaid in #23313

Reduce vendored gem dependencies by @MikeMcQuaid in #23309

tap: require trust in Tap#to_hash by @carlocab in #23333

test/os/mac/keg: require macho by @carlocab in #23334

Preserve locale during brew startup by @MikeMcQuaid in #23332

Support Landlock ABI 2 on Linux kernel 6.1 by @MikeMcQuaid in #23335

Prepare complete DSL stanza ordering by @MikeMcQuaid in #23331

cask/audit: require "macho" before use by @chenrui333 in #23337

vulns: add advisory matcher and dev-cmd/advisory-match by @andrew in #23329

Group on_system_conditional after os by @AlternateRT in #23339

Fix shellenv INFOPATH missing the default in fish by @jdelStrother in #23059

Fix GitHub release version detection by @MikeMcQuaid in #23338

Restore base64 gem by @botantony in #23344

Add missing on_<system> stanzas to cask stanza order by @AlternateRT in #23321

Remove unused instance variables in API code by @dduugg in #23346

rubocops/urls: Ignore GitHub username and repo in binary URL check by @timhillgit in #23236

Enforce responsible AI contribution policy by @MikeMcQuaid in #23317

docs: update Vale styles by @p-linnane in #23353

Add glibc runtime action (14/24) by @MikeMcQuaid in #23201

contaier: add init option by @daeho-ro in #23348

Add Clang system config action (15/24) by @MikeMcQuaid in #23190

bundle: serialize installs sharing an implicit dependency by @dduugg in #23342

Document install step interpolation by @MikeMcQuaid in #23347

Ignore user-configured Git hooks for tap operations by @boblail in #23352

install_steps/formula_actions: write GCC specs only once by @botantony in #23357

DownloadLock: wait for another process's download instead of failing by @dduugg in #23343

Use test_each for table-driven specs, and update spoom to 1.8.6 by @dduugg in #23359

Fix SimpleCov coverage for parallel runs by @samford in #23358

Allow mixed env keys in script wrappers by @MikeMcQuaid in #23360

Recommend Software Update for CLT updates by @MikeMcQuaid in #23361

Remove leftover code for --no-quarantine by @cho-m in #23363

diagnostic: allowlist Apple Immersive Audio SDK dylib by @sebastianbell in #23367

Fix Ruby 4 CGI flaky test by @MikeMcQuaid in #23364

Add explicit dylib ID helpers by @MikeMcQuaid in #23369

contributions: allow --user with --maintainer-report-csv by @p-linnane in #23371

ReporterHub#select_formula_or_cask: fix type by @samford in #23330

generate-formula-api: attach vulnerabilities from advisory-database by @andrew in #23341

New Contributors

@jdelStrother made their first contribution in #23059

@timhillgit made their first contribution in #23236

@sebastianbell made their first contribution in #23367

Full Changelog: 6.0.13...6.0.14

Original source

What's Changed

docs: update formula authoring and toolchain references by @p-linnane in #23225
Don't print the --force hint when brew bundle cleanup prompts by @p-linnane in #23212
Generate stable cask syntax jobs by @MikeMcQuaid in #23222
docs: convert Adding Software to Homebrew into a package-type router by @p-linnane in #23224
Use --end-of-options for Git arguments by @andrew in #23223
Normalise systemd service labels by @MikeMcQuaid in #23228
Skip unavailable xattrs in cask audits by @MikeMcQuaid in #23229
Add phase timings to brew prof by @MikeMcQuaid in #23216
docs: update maintainer operations guides by @p-linnane in #23231
Add appimage to cask stanza order by @p-linnane in #23234
Remove Caskroom symlinks broken by cask uninstall, and warn when they exist by @aholland in #23235
docs: enforce sentence-case headings and codify prose conventions by @p-linnane in #23233
Validate serialised install steps (6/25) by @MikeMcQuaid in #23240
list: warn about broken Caskroom symlinks from the Bash fast path by @aholland in #23245
list: test the Bash fast path against the Ruby command by @aholland in #23247
Count squash-merge commits into the contributions count by @Moisan in #23221
Add cask command wrappers (6/24) by @MikeMcQuaid in #23183
Handle missing bottle mirror metadata by @MikeMcQuaid in #23244
dev-cmd/contributions: require tap by @samford in #23253
brew search --desc: show casks without descriptions by @MikeMcQuaid in #23241
List formulae from untrusted taps by @MikeMcQuaid in #23242
Read remote.origin.url from .git/config without spawning Git by @hyuraku in #23248
write_env_script: add permission change by @Moisan in #23249
cask/migrator: do not copy a cask into itself through a rename alias by @aholland in #23261
Handle cask mount failures and interrupts by @MikeMcQuaid in #23257
formula: enable PIE for Haskell on Linux by @cho-m in #23254
Add generated cask scripts (7/24) by @MikeMcQuaid in #23184
DeprecateDisable: add formula unreachable reason by @samford in #23262
bundle add: accept fully-qualified names from untapped taps by @p-linnane in #23266
Wrap in-place terminal redraws in synchronized updates by @bendrucker in #23264
Warn when sandbox paths stay readable by @MikeMcQuaid in #23256
cask/audit: fix nil crash in min_os check by @krehel in #23268
pathname: build eager-init type objects once, not per allocation by @hyuraku in #23267
Fix flaky DownloadQueue interruption test by @MikeMcQuaid in #23269
shared_audits: pass --fail when fetching Forgejo repo data by @krehel in #23271
formula: remove duplicate info from std_npm_args doc by @cho-m in #23273
formula: allow changing install args in std_cabal_v2_args by @cho-m in #23272
docs: implement lists for readability by @bevanjkay in #23274
Add Linux Landlock sandbox by @MikeMcQuaid in #23255
Allow PTYs in Landlock sandboxes by @MikeMcQuaid in #23279
Deduplicate install step source globs by @MikeMcQuaid in #23276
Remove cask verified parameter by @MikeMcQuaid in #23280
Respect ignored dependencies in ask plans by @MikeMcQuaid in #23277
Offer to uninstall packages before untapping by @MikeMcQuaid in #23278
Convert diagnostics to Finding objects by @SMillerDev in #23044
workflows: skip signing/pushing for dependabot by @MikeMcQuaid in #23286
Output Landlock ABI version in brew config by @MikeMcQuaid in #23287
Block releases on open release blockers by @MikeMcQuaid in #23289
Sample only user-set env config in analytics by @MikeMcQuaid in #23290
Align EnvConfig RBI types with runtime value by @p-linnane in #23291
Allow Landlock access to devices and IPC by @MikeMcQuaid in #23288
Add stop_timeout to service DSL for graceful stop timeout by @IngmarStein in #23294
Add disabled cops enforcing public APIs in tests by @MikeMcQuaid in #23292
formula: std_go_args always add -s -w to ldflags by @cho-m in #23299
Simplify cask command wrappers by @MikeMcQuaid in #23296
Remove unused HOMEBREW_ARCHFLAGS by @cho-m in #23303
Unblock POSIX message queues in Landlock by @MikeMcQuaid in #23302
rubocops/cask: add cop for empty arch by @krehel in #23297
Remove test-only FormulaInstaller.clear_* class methods by @dduugg in #23304
Remove unused GitHub and Git helper methods by @dduugg in #23305
Add homepage browser check DSL by @MikeMcQuaid in #23307
Add GCC runtime install action (12/24) by @MikeMcQuaid in #23189
Add scoped install step warnings (11/24) by @MikeMcQuaid in #23188
Add process termination steps (10/24) by @MikeMcQuaid in #23187
Allow formula permission steps (8/24) by @MikeMcQuaid in #23185
Declare cask command wrapper names by @MikeMcQuaid in #23308
Add constrained install commands (9/24) by @MikeMcQuaid in #23186
Defer multi-line download failure output until redraw finishes by @dduugg in #23306
vulns/osv_export: deduplicate references from OSV.dev by @andrew in #23314
Update package manager slogan by @MikeMcQuaid in #23315
Document service block methods and tidy Homebrew::Services by @dduugg in #23316
Remove unused "fully_loaded_formula" instance variable from formula.rb by @dduugg in #23319
Remove dead code from brew info and which-formula by @dduugg in #23322
Add gzipped executable action (13/24) by @MikeMcQuaid in #23200
Stage bottles using the path returned by fetch by @tony19 in #23323
Add missing stanza sorting by @DexM in #23320
formula: support common goreleaser ldflags via ldflags: :goreleaser by @cho-m in #23324
sorbet: Type blocks at source more precisely than T.untyped by @issyl0 in #23318
sorbet: More T.bind(self, T.class_of(Formula)) by @issyl0 in #23325
tests: Remove no-op Formulary.cache.delete by @issyl0 in #23326
Make tests use public APIs and enable their cops by @MikeMcQuaid in #23293
docs/Cask-Cookbook: fix links to renamed casks by @hyuraku in #23327

New Contributors

@IngmarStein made their first contribution in #23294
@tony19 made their first contribution in #23323

Full Changelog: 6.0.12...6.0.13

Original source

What's Changed

vulns: advisory database repo renamed to Homebrew/advisory-database by @andrew in #23117

Bump vendored portable-ruby to 4.0.6 by @brew-commit-app[bot] in #23118

formulary: map resolves information from API by @Bo98 in #23114

downloadable: skip repeated checksum verification of the same file by @aholland in #23116

Enable cask FFI helpers for all users by @MikeMcQuaid in #23061

cmd/upgrade: don't show upgrade size with --build-from-source by @Bo98 in #23109

readline_nonblock: use larger buffer and retain state by @cho-m in #23120

Raise ArgumentError when get_make_var variable is missing by @thiagogenez in #22854

Refactor away unnecessary T.must for first/last element access by @dduugg in #23130

test_bot/formulae: re-enable all tests on Tier 1 by @cho-m in #23125

dependency: use same cache on recursive expand by @cho-m in #23127

Explain why we check for flat_namespace usage by @SMillerDev in #23132

Include implicit dependencies in formula installer checks by @jacktose in #23090

Stop silently ignoring bottle manifest download failures by @carlocab in #23134

Keep cask upgrades after approval failure by @MikeMcQuaid in #23135

cask/quarantine: don't enable developer mode when copying xattrs by @Bo98 in #23139

attestation: adjust for breaking GitHub API change by @Bo98 in #23142

Recover legacy Cask metadata by @MikeMcQuaid in #23136

cask: suppress requires_rosetta caveat when Rosetta 2 is already installed by @kmarekspartz in #23119

vulns: scan installed kegs by default and report untrusted-tap skips by @andrew in #23140

Add install step enforcement cops by @MikeMcQuaid in #23126

Serialise cask language variations by @MikeMcQuaid in #23124

Add JSON output method for doctor by @SMillerDev in #22448

Add aged Caskroom fixture corpus by @aholland in #23144

Let Cask migration verification skip the API fallback and report failures by @aholland in #23151

cask/audit: recognise suppressed requires_rosetta caveat by @p-linnane in #23155

tap-new: fix invalid job-level options in generated workflow by @elasticdog in #23154

Sample environment configuration analytics by @MikeMcQuaid in #23153

Document retagged release policy by @MikeMcQuaid in #23149

Use tap sources for cask metadata by @MikeMcQuaid in #23150

Avoid masking external home symlinks by @MikeMcQuaid in #23161

Fix component order autocorrection by @MikeMcQuaid in #23160

pathname: Syntax workaround for CodeQL parser failures by @issyl0 in #23162

tap-new: lint generated workflows by @MikeMcQuaid in #23157

docs/FAQ: clarify brew upgrade handling of self-updating apps. by @p-linnane in #23163

cask-cookbook: fix dev cmd paths by @bevanjkay in #23159

Remove unused default repository and product constants by @dduugg in #23165

Return the alias name from tap_formula_name_type by @hyuraku in #23168

docs: rename checksum and licence reference pages by @p-linnane in #23170

docs: update tap trust and supply-chain documentation by @p-linnane in #23171

Add install step removals (4/24) by @MikeMcQuaid in #23181

Add install step copies (3/24) by @MikeMcQuaid in #23180

Expand install step path handling (2/24) by @MikeMcQuaid in #23179

docs/Rakefile: ignore generated rubydoc files and HTTP 429 responses by @p-linnane in #23169

docs: update FAQ and troubleshooting pages by @p-linnane in #23172

docs: restyle governance and maintainer process pages by @p-linnane in #23175

docs: update command and integration references by @p-linnane in #23177

docs: update installation, platform support and shell completion pages by @p-linnane in #23173

Add scoped install step guards (1/24) by @MikeMcQuaid in #23178

docs: add a shared package acceptance policy by @p-linnane in #23174

Sandbox formula install steps by @MikeMcQuaid in #23202

docs: simplify the Expense and Reimbursement Policy by @p-linnane in #23176

Disable ask mode in Codespaces prebuild by @p-linnane in #23213

api/cask_download: preserve rename operations by @bevanjkay in #23211

Fix uninstalling casks removed from the API by @p-linnane in #23210

cask/audit: allow linux-only checksums and run audits on linux by @bevanjkay in #23122

formula-analytics: compress Armbian versions by @krehel in #23209

Allow reordered Cask migration artifacts by @ragtimelab in #23205

Remove unused services subcommand TRIGGERS constants by @dduugg in #23214

docs: correct the Cask Cookbook and cask terminology by @p-linnane in #23207

Add quarterly maintainer activity reports by @MikeMcQuaid in #23206

docs: consolidate language documentation by @p-linnane in #23208

dev-cmd/generate-zap: glob sfl files by @bevanjkay in #23220

fetch: exclude arches without downloads by @krehel in #23219

Add install step inreplace (5/24) by @MikeMcQuaid in #23182

New Contributors

@brew-commit-app[bot] made their first contribution in #23118

@kmarekspartz made their first contribution in #23119

@elasticdog made their first contribution in #23154

@ragtimelab made their first contribution in #23205

Full Changelog: 6.0.11...6.0.12

Original source

What's Changed

Enable more cask metadata migration to JSON for all users by @MikeMcQuaid in #22958
Skip rewriting Mach-O binaries when delete_rpath changes nothing by @hyuraku in #23079
test_bot/formulae: remove generic tests by @cho-m in #23082
Return a shared type instance from type constructors when runtime checking is disabled by @dduugg in #23078
test_bot/formulae: skip portable Ruby tests on macOS if same version by @cho-m in #23083
Test fixes for portable Ruby macOS runners by @cho-m in #23081
test/cask/audit_spec: fix min OS for Intel by @cho-m in #23085
Fix brew outdated --greedy crash on installed casks without a URL by @p-linnane in #23084
Revert "Return a shared type instance from type constructors when runtime checking is disabled" by @dduugg in #23091
Fix more test failures by @cho-m in #23088
Add brew vulns command by @andrew in #23080
Remove dead API methods and move generated_hash! to tests by @dduugg in #23095
Fix donation link by @MikeMcQuaid in #23098
Test uninstalling casks by @MikeMcQuaid in #23097
Use RubyMacho 6.0.0 by @MikeMcQuaid in #23047
Test without Sorbet runtime by @MikeMcQuaid in #23099
Preserve cask container metadata by @MikeMcQuaid in #23100
cmd/deps: accept --brewfile as an input source by @andrew in #23104
vulns/scanner: fall back to verbatim head URL for non-forge repos by @andrew in #23103
dev-cmd/generate-vulns-advisories: OSV advisory export for homebrew-advisory-database by @andrew in #23106
Keep the current internal package API file on brew cleanup -s by @p-linnane in #23111
Show application of file and data patches by @Bo98 in #23110
vulns/osv_export: merge into existing records instead of overwriting by @andrew in #23112
test_bot/formulae: only run subset of brew tests for portable Ruby by @cho-m in #23113
Start bottle downloads before dependency fetches by @MikeMcQuaid in #23105
download_queue: wake on completed downloads by @MikeMcQuaid in #23107
Prewarm Bootsnap caches after brew update by @MikeMcQuaid in #23108
generate-vulns-advisories: derive initial fixed via FormulaVersions by @andrew in #23115

Full Changelog: 6.0.10...6.0.11

Original source

What's Changed

• version/parser: speed up StemParser by @Bo98 in #23007
• Send bundle check failures to stderr by @MikeMcQuaid in #23009
• Guard release against stale main by @MikeMcQuaid in #23008
• dev-cmd/bump-formula-pr: keep failures when downgrade fails by @cho-m in #23006
• Skip incompatible cask upgrades by @MikeMcQuaid in #23012
• Remove redundant T.let annotations Sorbet can infer by @dduugg in #23013
• Avoid generated rmdir for shared file lists by @loganrosen in #22940
• docs: escape braces to avoid Liquid tag handling by @cho-m in #23025
• Fix test setup crash when multiple package APIs are cached by @p-linnane in #23016
• readall: remove todo tasks by @cho-m in #23005
• Fix spurious test-bot missing :all bottle warning by @p-linnane in #23019
• Fix misleading HEAD upgrade summary by @p-linnane in #23018
• Scrub internal package API cache files on brew cleanup -s by @p-linnane in #23022
• Don't require tap trust in casks/formulae shell specs by @p-linnane in #23024
• Keep generic tool caches out of the sandboxed test home by @p-linnane in #23026
• Skip unavailable sandbox sysctls by @MikeMcQuaid in #23015
• test_bot: avoid unbalanced shard by @cho-m in #23023
• u/g/api.rb: support GitHub App JWTs by @toobuntu in #23017
• Make Homebrew._system private and move quiet_system off Kernel by @hyuraku in #23030
• Fix autosquash behavior to default cherry_picked to false and add tes… by @hyuraku in #23031
• Avoid trust errors for cask conflicts by @MikeMcQuaid in #23027
• Add install step keychain cleanup by @MikeMcQuaid in #23032
• fix escaping in shellenv documentation by @adamv in #23035
• Extract queue staging hooks by @MikeMcQuaid in #23033
• perf: add Utils.parallel_map, use it in tap-info and services list by @dduugg in #22992
• Convert quarantine script to use FFI rather than Swift by @Bo98 in #22377
• Migrate more cask metadata to JSON for developers by @MikeMcQuaid in #22957
• bundle/parallel_installer: fix terminal output after interactive installs by @smorimoto in #23038
• perf/settings: read all settings with one git invocation per repository by @dduugg in #23037
• workflows: pin Homebrew/actions to 2026.07.10.1 by @p-linnane in #23048
• utils/pypi: use relative cooldown by @branchv in #23049
• Pre-stage cask downloads by @MikeMcQuaid in #23034
• Allow no-CLT cask installs by @MikeMcQuaid in #23043
• Add cask permission steps by @MikeMcQuaid in #23045
• Use Actions bot for vendor-gems by @MikeMcQuaid in #23042
• cmd/source: support npm urls by @branchv in #23050
• docs: remove references to removed setup_install_args by @branchv in #23055
• workflows/codeql: use ubuntu-latest by @p-linnane in #23057
• Update rubocop-sorbet to 0.13.0 by @dduugg in #23052
• Fix brew bundle cleanup --force not cleaning cache when brew cleanup warns by @p-linnane in #23056
• Move safe_system off Kernel by @hyuraku in #23046
• Warn instead of aborting brew bundle on stale-tab dependency cycles by @bendrucker in #23020
• Preserve cask quarantine approval by @MikeMcQuaid in #23060
• github_packages: truncate over-long licenses by @hyuraku in #23063
• Suggest commands for typos by @andrew in #23064
• Type formulary_factory cache values as Formula by @hyuraku in #23065
• Enable privileged tap CI containers by @MikeMcQuaid in #23051
• test/unpack_strategy: run extract with verbose by @cho-m in #23070
• cask: fix migration when the new cask is already installed by @bevanjkay in #23076
• test/install_steps_spec: clear HOMEBREW_GITHUB_ACTIONS to allow CI run by @cho-m in #23069
• test_bot/formulae: only run brew style if deps are bottled by @cho-m in #23071
• test_bot fixes for portable formulae by @cho-m in #23068
• test/unpack_strategy: use Mktemp to set group by @cho-m in #23075
• Add --ignore-main-package-cooldown to update-python-resources by @robinbowes in #23072

New Contributors

• @adamv made their first contribution in #23035
• @smorimoto made their first contribution in #23038
• @robinbowes made their first contribution in #23072

Full Changelog: 6.0.9...6.0.10

Original source

What's Changed

• install_steps: handle EUID/UID like postinstall does by @Bo98 in #22985
• cask/upgrade: don't lose the original exception when rollback itself fails by @aholland in #22997
• Defer reinstall keg backup and silence analytics curl output by @p-linnane in #22994
• cask: don't crash upgrade when staged version directory is missing by @gecube in #22999
• perf/config: gather system configuration concurrently (~31% faster) by @dduugg in #22989
• github_runner_matrix: unique runner for each shard by @cho-m in #22991
• Avoid filesystem checks from Pathname presence tests by @dduugg in #22988
• Warn when all bottles are lost by @MikeMcQuaid in #22971
• cask/upgrade: make the post-install quarantine release actually run by @aholland in #23002
• Write cask receipts on upgrade by @MikeMcQuaid in #23001
• Use sudo user's tap trust by @MikeMcQuaid in #23000
• Dockerfile: add GCC 14 for compiler selection to use by @cho-m in #23003
• Use new Linux self-hosted setup by @Bo98 in #22995
• dev-cmd/bump-formula-pr: avoid attempting same resource update by @cho-m in #23004

New Contributors

• @gecube made their first contribution in #22999

Full Changelog: 6.0.8...6.0.9

Original source

What's Changed

• test/bundle/brew_spec: allow running test on generic OS by @cho-m in #22973
• Add source option to brew bundle uv tools by @danielfleischer in #22963
• test/test_bot_spec: use :trust_store context when testing trust by @cho-m in #22972
• Update issue links in docs to use correct template by @SMillerDev in #22982
• Store bottle SBOM data in manifests by @MikeMcQuaid in #22981
• Clarify install output for durations and single deps by @HaraldNordgren in #22980
• perf/sorbet: skip sorbet-runtime dispatch when runtime disabled (~6-8% faster) by @dduugg in #22978
• Fix stale cask upgrade metadata by @MikeMcQuaid in #22986
• perf/tap-info: generate tap hashes concurrently (up to ~77% faster) by @dduugg in #22975
• perf/upgrade: avoid linear scans of core formula names (~20% faster) by @dduugg in #22977
• Add structured link install steps by @MikeMcQuaid in #22987

New Contributors

• @danielfleischer made their first contribution in #22963

Full Changelog: 6.0.7...6.0.8

Original source