What's Changed

cask/audit: detect incorrect app case by @krehel in #23400
Start install downloads before local-only checks by @MikeMcQuaid in #23381
contributions: clarify Maintainer team access by @SSakutaro in #23394
Tolerate missing bottle manifests in prefetches by @MikeMcQuaid in #23403
Use workflow result for commit style by @MikeMcQuaid in #23402
docs/MCP-Server: update Cursor URL by @p-linnane in #23415
download_queue: print fetch heading to stderr when stdout is not a TTY by @carlocab in #23406
cask/audit: allow linux-only casks by @bevanjkay in #23422
Compact install step JSON (25/26) by @MikeMcQuaid in #23365
api/cask: ignore target when selecting artifact stanza by @p-linnane in #23417
Retry API downloads without --time-cond on curl receive errors by @p-linnane in #23411
bundle cleanup: document trust store reset by @p-linnane in #23412
Pass the download queue to FormulaInstaller when upgrading by @p-linnane in #23416
test/ENV_spec: compare only singleton methods by @p-linnane in #23421
Restore use of package-provided service files by @MikeMcQuaid in #23423
bump: show upstream versions in release cooldown by @MikeMcQuaid in #23409
Add autobump option to tap-new by @SMillerDev in #23349
Convert Tab attributes to keyword arguments by @hyuraku in #23430
Remove Bubblewrap, use Landlock for Linux sandbox by @MikeMcQuaid in #23425
Fix random time in tap-new by @SMillerDev in #23432
Complete Cask stanza ordering coverage by @MikeMcQuaid in #23405
Skip cask link when symlink already correct by @MikeMcQuaid in #23428
Remove base64 gem and add Homebrew/NoBase64 cop by @MikeMcQuaid in #23410
Use codesign to sign patched binaries on Intel by @MikeMcQuaid in #23429
unpack_strategy/dmg: use diskutil image on macOS 14+ by @p-linnane in #23414
Speed up brew style and brew readall by @MikeMcQuaid in #23435
system_config: show core cask tap output on Linux by @AlternateRT in #23436
Reset default download queue between specs by @MikeMcQuaid in #23424
Fix cask Linux installs without os stanza by @MikeMcQuaid in #23431
shared_audits: print repo age if too new by @gromgit in #23438
vulns: add --fix-available and --no-fix-available flags by @kmarekspartz in #23152
Revert "unpack_strategy/dmg: use diskutil image on macOS 14+" by @MikeMcQuaid in #23444
Reject official legacy install hooks (26/26) by @MikeMcQuaid in #23366
Fix AppImage's stanza name in cask DSL by @AlternateRT in #23447
Treat cask OS support as explicit data by @MikeMcQuaid in #23433
Use public_send instead of send for public methods by @AbishekRaj2007 in #23449
Enforce explicit formula install-step bases (28/29) by @MikeMcQuaid in #23404
rubocops: adjust depends_on checks for Linux by @AlternateRT in #23453
workflows: check autogenerated files when commands change by @kmarekspartz in #23258
Remove the formula install-step var default (29/29) by @MikeMcQuaid in #23373
cask/audit: reject verified parameter on new casks by @AlternateRT in #23456
Add quiet mode for automatic updates by @HaraldNordgren in #23455
bundle: install cargo packages from a git URL or path by @tftio in #23451
Stabilise service caveats spec by @MikeMcQuaid in #23470
Update rubocop to 1.89.0 and rubocop-sorbet to 0.14.0 by @dduugg in #23452
requirements/macos_requirement: fix handling for Linux by @cho-m in #23473
Sandbox structured cask operations by @MikeMcQuaid in #23461
Fetch official tap HEAD for worktrees by @MikeMcQuaid in #23472
Use bottled inputs and add RuboCop guard by @MikeMcQuaid in #23468
Use .public_send instead of .send for calls to public methods by @AbishekRaj2007 in #23474
Enforce structured install step authoring by @MikeMcQuaid in #23475
util: spdx license tag limit from 256 to 255 by @daeho-ro in #23477
Allow sudo in sandboxed Cask install steps by @SSakutaro in #23476
service: fix caveat for SSH sessions by @IngmarStein in #23464
Preserve false values in Cask artifact serialization by @SSakutaro in #23478
formula: add std_swift_args by @cho-m in #23480
install_steps: allow run steps to ignore failure by @bevanjkay in #23484
livecheck: fix throttle detached head on CI by @bevanjkay in #23487
Introduce python_major_minor_version DSL by @iMichka in #23481

New Contributors

@AbishekRaj2007 made their first contribution in #23449
@tftio made their first contribution in #23451

Full Changelog: 6.0.15...6.0.16

Original source

What's Changed

workflows/docker: align deprecation of 22.04 image by @cho-m in #23378
Add PHP configuration action (16/24) by @MikeMcQuaid in #23191
Add Python bootstrap action (17/24) by @MikeMcQuaid in #23192
Align shared install step interfaces (18/24) by @MikeMcQuaid in #23193
Align install step autocorrections (20/24) by @MikeMcQuaid in #23195
Document canonical install steps (21/24) by @MikeMcQuaid in #23196
Plan remaining install hook migration (22/24) by @MikeMcQuaid in #23197
Bridge cask flight step migrations (19/26) by @MikeMcQuaid in #23382
Update migration delivery plan (23/24) by @MikeMcQuaid in #23198
Record final migration stacks (24/24) by @MikeMcQuaid in #23199
docs: fix errors reported by Vale 3.17.0 by @dduugg in #23387
formula-analytics: replace PyCall with subprocess by @MikeMcQuaid in #23379
Gemfile.lock: add checksums by @p-linnane in #23389
cask/config: define instance variables in a consistent order by @p-linnane in #23388
Add per-service user environment variable overrides by @IngmarStein in #23312
Suppress brew services tmux caveat on Linux by @HackAttack in #23390
Keep download progress within terminal width by @MikeMcQuaid in #23391
Parse only needed internal API payload entries by @MikeMcQuaid in #23380
install: isolate formula and cask fetch errors by @MikeMcQuaid in #23385
Make formula install-step var bases explicit by @MikeMcQuaid in #23372
ignorable: replace callcc with Fiber by @MikeMcQuaid in #23393
workflows/tap-new-tests: remove intel macOS from tap-new by @cho-m in #23398
sorbet: Fix the formula test helper block typing by @issyl0 in #23397

New Contributors

@HackAttack made their first contribution in #23390

Full Changelog: 6.0.14...6.0.15

Original source

What's Changed

Speed up warm-cache API loads and path lookups by @MikeMcQuaid in #23300

Remove most forks from no-op brew startup by @MikeMcQuaid in #23298

Speed up style checks for homebrew/core and homebrew/cask by @MikeMcQuaid in #23301

Avoid repeated coverage simulation by @MikeMcQuaid in #23313

Reduce vendored gem dependencies by @MikeMcQuaid in #23309

tap: require trust in Tap#to_hash by @carlocab in #23333

test/os/mac/keg: require macho by @carlocab in #23334

Preserve locale during brew startup by @MikeMcQuaid in #23332

Support Landlock ABI 2 on Linux kernel 6.1 by @MikeMcQuaid in #23335

Prepare complete DSL stanza ordering by @MikeMcQuaid in #23331

cask/audit: require "macho" before use by @chenrui333 in #23337

vulns: add advisory matcher and dev-cmd/advisory-match by @andrew in #23329

Group on_system_conditional after os by @AlternateRT in #23339

Fix shellenv INFOPATH missing the default in fish by @jdelStrother in #23059

Fix GitHub release version detection by @MikeMcQuaid in #23338

Restore base64 gem by @botantony in #23344

Add missing on_<system> stanzas to cask stanza order by @AlternateRT in #23321

Remove unused instance variables in API code by @dduugg in #23346

rubocops/urls: Ignore GitHub username and repo in binary URL check by @timhillgit in #23236

Enforce responsible AI contribution policy by @MikeMcQuaid in #23317

docs: update Vale styles by @p-linnane in #23353

Add glibc runtime action (14/24) by @MikeMcQuaid in #23201

contaier: add init option by @daeho-ro in #23348

Add Clang system config action (15/24) by @MikeMcQuaid in #23190

bundle: serialize installs sharing an implicit dependency by @dduugg in #23342

Document install step interpolation by @MikeMcQuaid in #23347

Ignore user-configured Git hooks for tap operations by @boblail in #23352

install_steps/formula_actions: write GCC specs only once by @botantony in #23357

DownloadLock: wait for another process's download instead of failing by @dduugg in #23343

Use test_each for table-driven specs, and update spoom to 1.8.6 by @dduugg in #23359

Fix SimpleCov coverage for parallel runs by @samford in #23358

Allow mixed env keys in script wrappers by @MikeMcQuaid in #23360

Recommend Software Update for CLT updates by @MikeMcQuaid in #23361

Remove leftover code for --no-quarantine by @cho-m in #23363

diagnostic: allowlist Apple Immersive Audio SDK dylib by @sebastianbell in #23367

Fix Ruby 4 CGI flaky test by @MikeMcQuaid in #23364

Add explicit dylib ID helpers by @MikeMcQuaid in #23369

contributions: allow --user with --maintainer-report-csv by @p-linnane in #23371

ReporterHub#select_formula_or_cask: fix type by @samford in #23330

generate-formula-api: attach vulnerabilities from advisory-database by @andrew in #23341

New Contributors

@jdelStrother made their first contribution in #23059

@timhillgit made their first contribution in #23236

@sebastianbell made their first contribution in #23367

Full Changelog: 6.0.13...6.0.14

Original source

What's Changed

docs: update formula authoring and toolchain references by @p-linnane in #23225
Don't print the --force hint when brew bundle cleanup prompts by @p-linnane in #23212
Generate stable cask syntax jobs by @MikeMcQuaid in #23222
docs: convert Adding Software to Homebrew into a package-type router by @p-linnane in #23224
Use --end-of-options for Git arguments by @andrew in #23223
Normalise systemd service labels by @MikeMcQuaid in #23228
Skip unavailable xattrs in cask audits by @MikeMcQuaid in #23229
Add phase timings to brew prof by @MikeMcQuaid in #23216
docs: update maintainer operations guides by @p-linnane in #23231
Add appimage to cask stanza order by @p-linnane in #23234
Remove Caskroom symlinks broken by cask uninstall, and warn when they exist by @aholland in #23235
docs: enforce sentence-case headings and codify prose conventions by @p-linnane in #23233
Validate serialised install steps (6/25) by @MikeMcQuaid in #23240
list: warn about broken Caskroom symlinks from the Bash fast path by @aholland in #23245
list: test the Bash fast path against the Ruby command by @aholland in #23247
Count squash-merge commits into the contributions count by @Moisan in #23221
Add cask command wrappers (6/24) by @MikeMcQuaid in #23183
Handle missing bottle mirror metadata by @MikeMcQuaid in #23244
dev-cmd/contributions: require tap by @samford in #23253
brew search --desc: show casks without descriptions by @MikeMcQuaid in #23241
List formulae from untrusted taps by @MikeMcQuaid in #23242
Read remote.origin.url from .git/config without spawning Git by @hyuraku in #23248
write_env_script: add permission change by @Moisan in #23249
cask/migrator: do not copy a cask into itself through a rename alias by @aholland in #23261
Handle cask mount failures and interrupts by @MikeMcQuaid in #23257
formula: enable PIE for Haskell on Linux by @cho-m in #23254
Add generated cask scripts (7/24) by @MikeMcQuaid in #23184
DeprecateDisable: add formula unreachable reason by @samford in #23262
bundle add: accept fully-qualified names from untapped taps by @p-linnane in #23266
Wrap in-place terminal redraws in synchronized updates by @bendrucker in #23264
Warn when sandbox paths stay readable by @MikeMcQuaid in #23256
cask/audit: fix nil crash in min_os check by @krehel in #23268
pathname: build eager-init type objects once, not per allocation by @hyuraku in #23267
Fix flaky DownloadQueue interruption test by @MikeMcQuaid in #23269
shared_audits: pass --fail when fetching Forgejo repo data by @krehel in #23271
formula: remove duplicate info from std_npm_args doc by @cho-m in #23273
formula: allow changing install args in std_cabal_v2_args by @cho-m in #23272
docs: implement lists for readability by @bevanjkay in #23274
Add Linux Landlock sandbox by @MikeMcQuaid in #23255
Allow PTYs in Landlock sandboxes by @MikeMcQuaid in #23279
Deduplicate install step source globs by @MikeMcQuaid in #23276
Remove cask verified parameter by @MikeMcQuaid in #23280
Respect ignored dependencies in ask plans by @MikeMcQuaid in #23277
Offer to uninstall packages before untapping by @MikeMcQuaid in #23278
Convert diagnostics to Finding objects by @SMillerDev in #23044
workflows: skip signing/pushing for dependabot by @MikeMcQuaid in #23286
Output Landlock ABI version in brew config by @MikeMcQuaid in #23287
Block releases on open release blockers by @MikeMcQuaid in #23289
Sample only user-set env config in analytics by @MikeMcQuaid in #23290
Align EnvConfig RBI types with runtime value by @p-linnane in #23291
Allow Landlock access to devices and IPC by @MikeMcQuaid in #23288
Add stop_timeout to service DSL for graceful stop timeout by @IngmarStein in #23294
Add disabled cops enforcing public APIs in tests by @MikeMcQuaid in #23292
formula: std_go_args always add -s -w to ldflags by @cho-m in #23299
Simplify cask command wrappers by @MikeMcQuaid in #23296
Remove unused HOMEBREW_ARCHFLAGS by @cho-m in #23303
Unblock POSIX message queues in Landlock by @MikeMcQuaid in #23302
rubocops/cask: add cop for empty arch by @krehel in #23297
Remove test-only FormulaInstaller.clear_* class methods by @dduugg in #23304
Remove unused GitHub and Git helper methods by @dduugg in #23305
Add homepage browser check DSL by @MikeMcQuaid in #23307
Add GCC runtime install action (12/24) by @MikeMcQuaid in #23189
Add scoped install step warnings (11/24) by @MikeMcQuaid in #23188
Add process termination steps (10/24) by @MikeMcQuaid in #23187
Allow formula permission steps (8/24) by @MikeMcQuaid in #23185
Declare cask command wrapper names by @MikeMcQuaid in #23308
Add constrained install commands (9/24) by @MikeMcQuaid in #23186
Defer multi-line download failure output until redraw finishes by @dduugg in #23306
vulns/osv_export: deduplicate references from OSV.dev by @andrew in #23314
Update package manager slogan by @MikeMcQuaid in #23315
Document service block methods and tidy Homebrew::Services by @dduugg in #23316
Remove unused "fully_loaded_formula" instance variable from formula.rb by @dduugg in #23319
Remove dead code from brew info and which-formula by @dduugg in #23322
Add gzipped executable action (13/24) by @MikeMcQuaid in #23200
Stage bottles using the path returned by fetch by @tony19 in #23323
Add missing stanza sorting by @DexM in #23320
formula: support common goreleaser ldflags via ldflags: :goreleaser by @cho-m in #23324
sorbet: Type blocks at source more precisely than T.untyped by @issyl0 in #23318
sorbet: More T.bind(self, T.class_of(Formula)) by @issyl0 in #23325
tests: Remove no-op Formulary.cache.delete by @issyl0 in #23326
Make tests use public APIs and enable their cops by @MikeMcQuaid in #23293
docs/Cask-Cookbook: fix links to renamed casks by @hyuraku in #23327

New Contributors

@IngmarStein made their first contribution in #23294
@tony19 made their first contribution in #23323

Full Changelog: 6.0.12...6.0.13

Original source

What's Changed

vulns: advisory database repo renamed to Homebrew/advisory-database by @andrew in #23117

Bump vendored portable-ruby to 4.0.6 by @brew-commit-app[bot] in #23118

formulary: map resolves information from API by @Bo98 in #23114

downloadable: skip repeated checksum verification of the same file by @aholland in #23116

Enable cask FFI helpers for all users by @MikeMcQuaid in #23061

cmd/upgrade: don't show upgrade size with --build-from-source by @Bo98 in #23109

readline_nonblock: use larger buffer and retain state by @cho-m in #23120

Raise ArgumentError when get_make_var variable is missing by @thiagogenez in #22854

Refactor away unnecessary T.must for first/last element access by @dduugg in #23130

test_bot/formulae: re-enable all tests on Tier 1 by @cho-m in #23125

dependency: use same cache on recursive expand by @cho-m in #23127

Explain why we check for flat_namespace usage by @SMillerDev in #23132

Include implicit dependencies in formula installer checks by @jacktose in #23090

Stop silently ignoring bottle manifest download failures by @carlocab in #23134

Keep cask upgrades after approval failure by @MikeMcQuaid in #23135

cask/quarantine: don't enable developer mode when copying xattrs by @Bo98 in #23139

attestation: adjust for breaking GitHub API change by @Bo98 in #23142

Recover legacy Cask metadata by @MikeMcQuaid in #23136

cask: suppress requires_rosetta caveat when Rosetta 2 is already installed by @kmarekspartz in #23119

vulns: scan installed kegs by default and report untrusted-tap skips by @andrew in #23140

Add install step enforcement cops by @MikeMcQuaid in #23126

Serialise cask language variations by @MikeMcQuaid in #23124

Add JSON output method for doctor by @SMillerDev in #22448

Add aged Caskroom fixture corpus by @aholland in #23144

Let Cask migration verification skip the API fallback and report failures by @aholland in #23151

cask/audit: recognise suppressed requires_rosetta caveat by @p-linnane in #23155

tap-new: fix invalid job-level options in generated workflow by @elasticdog in #23154

Sample environment configuration analytics by @MikeMcQuaid in #23153

Document retagged release policy by @MikeMcQuaid in #23149

Use tap sources for cask metadata by @MikeMcQuaid in #23150

Avoid masking external home symlinks by @MikeMcQuaid in #23161

Fix component order autocorrection by @MikeMcQuaid in #23160

pathname: Syntax workaround for CodeQL parser failures by @issyl0 in #23162

tap-new: lint generated workflows by @MikeMcQuaid in #23157

docs/FAQ: clarify brew upgrade handling of self-updating apps. by @p-linnane in #23163

cask-cookbook: fix dev cmd paths by @bevanjkay in #23159

Remove unused default repository and product constants by @dduugg in #23165

Return the alias name from tap_formula_name_type by @hyuraku in #23168

docs: rename checksum and licence reference pages by @p-linnane in #23170

docs: update tap trust and supply-chain documentation by @p-linnane in #23171

Add install step removals (4/24) by @MikeMcQuaid in #23181

Add install step copies (3/24) by @MikeMcQuaid in #23180

Expand install step path handling (2/24) by @MikeMcQuaid in #23179

docs/Rakefile: ignore generated rubydoc files and HTTP 429 responses by @p-linnane in #23169

docs: update FAQ and troubleshooting pages by @p-linnane in #23172

docs: restyle governance and maintainer process pages by @p-linnane in #23175

docs: update command and integration references by @p-linnane in #23177

docs: update installation, platform support and shell completion pages by @p-linnane in #23173

Add scoped install step guards (1/24) by @MikeMcQuaid in #23178

docs: add a shared package acceptance policy by @p-linnane in #23174

Sandbox formula install steps by @MikeMcQuaid in #23202

docs: simplify the Expense and Reimbursement Policy by @p-linnane in #23176

Disable ask mode in Codespaces prebuild by @p-linnane in #23213

api/cask_download: preserve rename operations by @bevanjkay in #23211

Fix uninstalling casks removed from the API by @p-linnane in #23210

cask/audit: allow linux-only checksums and run audits on linux by @bevanjkay in #23122

formula-analytics: compress Armbian versions by @krehel in #23209

Allow reordered Cask migration artifacts by @ragtimelab in #23205

Remove unused services subcommand TRIGGERS constants by @dduugg in #23214

docs: correct the Cask Cookbook and cask terminology by @p-linnane in #23207

Add quarterly maintainer activity reports by @MikeMcQuaid in #23206

docs: consolidate language documentation by @p-linnane in #23208

dev-cmd/generate-zap: glob sfl files by @bevanjkay in #23220

fetch: exclude arches without downloads by @krehel in #23219

Add install step inreplace (5/24) by @MikeMcQuaid in #23182

New Contributors

@brew-commit-app[bot] made their first contribution in #23118

@kmarekspartz made their first contribution in #23119

@elasticdog made their first contribution in #23154

@ragtimelab made their first contribution in #23205

Full Changelog: 6.0.11...6.0.12

Original source

What's Changed

Enable more cask metadata migration to JSON for all users by @MikeMcQuaid in #22958
Skip rewriting Mach-O binaries when delete_rpath changes nothing by @hyuraku in #23079
test_bot/formulae: remove generic tests by @cho-m in #23082
Return a shared type instance from type constructors when runtime checking is disabled by @dduugg in #23078
test_bot/formulae: skip portable Ruby tests on macOS if same version by @cho-m in #23083
Test fixes for portable Ruby macOS runners by @cho-m in #23081
test/cask/audit_spec: fix min OS for Intel by @cho-m in #23085
Fix brew outdated --greedy crash on installed casks without a URL by @p-linnane in #23084
Revert "Return a shared type instance from type constructors when runtime checking is disabled" by @dduugg in #23091
Fix more test failures by @cho-m in #23088
Add brew vulns command by @andrew in #23080
Remove dead API methods and move generated_hash! to tests by @dduugg in #23095
Fix donation link by @MikeMcQuaid in #23098
Test uninstalling casks by @MikeMcQuaid in #23097
Use RubyMacho 6.0.0 by @MikeMcQuaid in #23047
Test without Sorbet runtime by @MikeMcQuaid in #23099
Preserve cask container metadata by @MikeMcQuaid in #23100
cmd/deps: accept --brewfile as an input source by @andrew in #23104
vulns/scanner: fall back to verbatim head URL for non-forge repos by @andrew in #23103
dev-cmd/generate-vulns-advisories: OSV advisory export for homebrew-advisory-database by @andrew in #23106
Keep the current internal package API file on brew cleanup -s by @p-linnane in #23111
Show application of file and data patches by @Bo98 in #23110
vulns/osv_export: merge into existing records instead of overwriting by @andrew in #23112
test_bot/formulae: only run subset of brew tests for portable Ruby by @cho-m in #23113
Start bottle downloads before dependency fetches by @MikeMcQuaid in #23105
download_queue: wake on completed downloads by @MikeMcQuaid in #23107
Prewarm Bootsnap caches after brew update by @MikeMcQuaid in #23108
generate-vulns-advisories: derive initial fixed via FormulaVersions by @andrew in #23115

Full Changelog: 6.0.10...6.0.11

Original source

What's Changed

• version/parser: speed up StemParser by @Bo98 in #23007
• Send bundle check failures to stderr by @MikeMcQuaid in #23009
• Guard release against stale main by @MikeMcQuaid in #23008
• dev-cmd/bump-formula-pr: keep failures when downgrade fails by @cho-m in #23006
• Skip incompatible cask upgrades by @MikeMcQuaid in #23012
• Remove redundant T.let annotations Sorbet can infer by @dduugg in #23013
• Avoid generated rmdir for shared file lists by @loganrosen in #22940
• docs: escape braces to avoid Liquid tag handling by @cho-m in #23025
• Fix test setup crash when multiple package APIs are cached by @p-linnane in #23016
• readall: remove todo tasks by @cho-m in #23005
• Fix spurious test-bot missing :all bottle warning by @p-linnane in #23019
• Fix misleading HEAD upgrade summary by @p-linnane in #23018
• Scrub internal package API cache files on brew cleanup -s by @p-linnane in #23022
• Don't require tap trust in casks/formulae shell specs by @p-linnane in #23024
• Keep generic tool caches out of the sandboxed test home by @p-linnane in #23026
• Skip unavailable sandbox sysctls by @MikeMcQuaid in #23015
• test_bot: avoid unbalanced shard by @cho-m in #23023
• u/g/api.rb: support GitHub App JWTs by @toobuntu in #23017
• Make Homebrew._system private and move quiet_system off Kernel by @hyuraku in #23030
• Fix autosquash behavior to default cherry_picked to false and add tes… by @hyuraku in #23031
• Avoid trust errors for cask conflicts by @MikeMcQuaid in #23027
• Add install step keychain cleanup by @MikeMcQuaid in #23032
• fix escaping in shellenv documentation by @adamv in #23035
• Extract queue staging hooks by @MikeMcQuaid in #23033
• perf: add Utils.parallel_map, use it in tap-info and services list by @dduugg in #22992
• Convert quarantine script to use FFI rather than Swift by @Bo98 in #22377
• Migrate more cask metadata to JSON for developers by @MikeMcQuaid in #22957
• bundle/parallel_installer: fix terminal output after interactive installs by @smorimoto in #23038
• perf/settings: read all settings with one git invocation per repository by @dduugg in #23037
• workflows: pin Homebrew/actions to 2026.07.10.1 by @p-linnane in #23048
• utils/pypi: use relative cooldown by @branchv in #23049
• Pre-stage cask downloads by @MikeMcQuaid in #23034
• Allow no-CLT cask installs by @MikeMcQuaid in #23043
• Add cask permission steps by @MikeMcQuaid in #23045
• Use Actions bot for vendor-gems by @MikeMcQuaid in #23042
• cmd/source: support npm urls by @branchv in #23050
• docs: remove references to removed setup_install_args by @branchv in #23055
• workflows/codeql: use ubuntu-latest by @p-linnane in #23057
• Update rubocop-sorbet to 0.13.0 by @dduugg in #23052
• Fix brew bundle cleanup --force not cleaning cache when brew cleanup warns by @p-linnane in #23056
• Move safe_system off Kernel by @hyuraku in #23046
• Warn instead of aborting brew bundle on stale-tab dependency cycles by @bendrucker in #23020
• Preserve cask quarantine approval by @MikeMcQuaid in #23060
• github_packages: truncate over-long licenses by @hyuraku in #23063
• Suggest commands for typos by @andrew in #23064
• Type formulary_factory cache values as Formula by @hyuraku in #23065
• Enable privileged tap CI containers by @MikeMcQuaid in #23051
• test/unpack_strategy: run extract with verbose by @cho-m in #23070
• cask: fix migration when the new cask is already installed by @bevanjkay in #23076
• test/install_steps_spec: clear HOMEBREW_GITHUB_ACTIONS to allow CI run by @cho-m in #23069
• test_bot/formulae: only run brew style if deps are bottled by @cho-m in #23071
• test_bot fixes for portable formulae by @cho-m in #23068
• test/unpack_strategy: use Mktemp to set group by @cho-m in #23075
• Add --ignore-main-package-cooldown to update-python-resources by @robinbowes in #23072

New Contributors

• @adamv made their first contribution in #23035
• @smorimoto made their first contribution in #23038
• @robinbowes made their first contribution in #23072

Full Changelog: 6.0.9...6.0.10

Original source

What's Changed

• install_steps: handle EUID/UID like postinstall does by @Bo98 in #22985
• cask/upgrade: don't lose the original exception when rollback itself fails by @aholland in #22997
• Defer reinstall keg backup and silence analytics curl output by @p-linnane in #22994
• cask: don't crash upgrade when staged version directory is missing by @gecube in #22999
• perf/config: gather system configuration concurrently (~31% faster) by @dduugg in #22989
• github_runner_matrix: unique runner for each shard by @cho-m in #22991
• Avoid filesystem checks from Pathname presence tests by @dduugg in #22988
• Warn when all bottles are lost by @MikeMcQuaid in #22971
• cask/upgrade: make the post-install quarantine release actually run by @aholland in #23002
• Write cask receipts on upgrade by @MikeMcQuaid in #23001
• Use sudo user's tap trust by @MikeMcQuaid in #23000
• Dockerfile: add GCC 14 for compiler selection to use by @cho-m in #23003
• Use new Linux self-hosted setup by @Bo98 in #22995
• dev-cmd/bump-formula-pr: avoid attempting same resource update by @cho-m in #23004

New Contributors

• @gecube made their first contribution in #22999

Full Changelog: 6.0.8...6.0.9

Original source

What's Changed

• test/bundle/brew_spec: allow running test on generic OS by @cho-m in #22973
• Add source option to brew bundle uv tools by @danielfleischer in #22963
• test/test_bot_spec: use :trust_store context when testing trust by @cho-m in #22972
• Update issue links in docs to use correct template by @SMillerDev in #22982
• Store bottle SBOM data in manifests by @MikeMcQuaid in #22981
• Clarify install output for durations and single deps by @HaraldNordgren in #22980
• perf/sorbet: skip sorbet-runtime dispatch when runtime disabled (~6-8% faster) by @dduugg in #22978
• Fix stale cask upgrade metadata by @MikeMcQuaid in #22986
• perf/tap-info: generate tap hashes concurrently (up to ~77% faster) by @dduugg in #22975
• perf/upgrade: avoid linear scans of core formula names (~20% faster) by @dduugg in #22977
• Add structured link install steps by @MikeMcQuaid in #22987

New Contributors

• @danielfleischer made their first contribution in #22963

Full Changelog: 6.0.7...6.0.8

Original source

What's Changed

• ENV/super: set CC and CXX to unversioned gcc on Linux by @cho-m in #22889
• audit: require curl dependencies to have a working HTTP mirror by @p-linnane in #22898
• Force CMake to find shims before $HOMEBREW_PREFIX/bin by @cho-m in #22916
• Improve awkward wording of Backing Up App by @carter-thaxton in #22918
• bump-cask-pr: error when update fails by @samford in #22901
• contributions: fix type error by @samford in #22915
• extend/ENV/super: set CC/CXX to real names for llvm_clang by @cho-m in #22920
• bump: fix with invalid arch by @bevanjkay in #22910
• style: fix infinite loop in array alphabetisation by @bevanjkay in #22912
• os/mac/mach: avoid delegate for dylib_id by @cho-m in #22924
• Isolate the upgrade summary alignment spec from the formula API by @p-linnane in #22935
• Stabilize dependency-related tests by @p-linnane in #22927
• cask/artifact/pkg: fix type error by @samford in #22923
• docs/Formula-Cookbook: write_env_script needs binary path by @abitrolly in #22934
• Allow running bubblewrap in container by @cho-m in #22907
• Clarify Linux build tools installation instructions by @p-linnane in #22925
• Cache formula lookups during dependency expansion by @p-linnane in #22930
• Add CCACHE_FOUND=OFF to default CMake flags by @matteosecli in #22902
• Info: hide unlinkable kegs by @HaraldNordgren in #22897
• formula_auditor: propagate OS requirement to dependents by @cho-m in #22938
• docs/Tap-Trust: replace announcement of future changes with what came to pass by @unitof in #22928
• Adjust Subversion checkout operands by @MikeMcQuaid in #22942
• Remove T.let from frozen constants Sorbet can now infer by @dduugg in #22949
• Prepare cask taps before bundle jobs by @MikeMcQuaid in #22943
• Restrict livecheck redirects by @MikeMcQuaid in #22944
• Limit headered curl redirects by @MikeMcQuaid in #22945
• Uninstall untrusted casks safely by @MikeMcQuaid in #22946
• Add install step write cops by @MikeMcQuaid in #22947
• upgrade: Split deps and find older version better by @HaraldNordgren in #22951
• install_steps: allow gtk_update_icon_cache to run gtk4-update-icon-cache by @cho-m in #22953
• dev-cmd/test-bot: make --skip-recursive-dependents default by @cho-m in #22950
• Ignore same-name cask migrations by @MikeMcQuaid in #22955
• Allow staged install step conversion by @MikeMcQuaid in #22960
• Prune stale cask downloads by @MikeMcQuaid in #22962
• Store cask metadata as JSON more often by @MikeMcQuaid in #22952
• Preserve bottled SBOMs on pour by @MikeMcQuaid in #22956
• cask/staged: check App Management permissions before chown by @MiMoHo in #22967
• doc: Clarify version explanation of --json info by @okuramasafumi in #22877
• test_bot/formulae: handle runtime deps similar to Formula by @cho-m in #22964
• info: bold dependencies of uninstalled packages by @HaraldNordgren in #22965
• Add install step data directories by @MikeMcQuaid in #22961
• Remove redundant T.let annotations by @dduugg in #22974

New Contributors

• @carter-thaxton made their first contribution in #22918
• @matteosecli made their first contribution in #22902
• @MiMoHo made their first contribution in #22967
• @okuramasafumi made their first contribution in #22877

Full Changelog: 6.0.6...6.0.7

Original source

What's Changed

• Flag scoped service path helpers by @MikeMcQuaid in #22858
• linkage_checker: always report incorrect :no_linkage by @cho-m in #22887
• Cleanup brew-rs leftovers by @botantony in #22895
• Add shared Utils::Path.ensure_child_of! containment helper by @p-linnane in #22890
• test: add :needs_daemon_manager to some tests by @cho-m in #22905
• test/cmd/update_spec: fix local test run failures by @cho-m in #22906
• Resolve patch targets via patch --dry-run for containment by @p-linnane in #22908
• Revalidate tap restrictions for git redirects by @p-linnane in #22909

Full Changelog: 6.0.5...6.0.6

Original source

What's Changed

Cask Cookbook: document generate_completions_from_executable stanza by @bevanjkay in #22848
generate_completions: add style for default shells and auto corrections by @daeho-ro in #22841
Add bump-compatibility-version command by @p-linnane in #22846
Filter info JSON package types by @MikeMcQuaid in #22851
Enable formula path helper cop by @MikeMcQuaid in #22845
Rescue MethodDeprecatedError when attempting to load installed caskfiles by @Rylan12 in #22856
Speed up tests by @MikeMcQuaid in #22852
Approve stale lead maintainer PRs by @MikeMcQuaid in #22818
Rescue MethodDeprecatedError when loading from installed caskfile in installer by @Rylan12 in #22859
Align upgrade summary columns by @paulogdm in #22844
Remove dead Formula methods and annotate public DSL by @dduugg in #22733
download_queue: use tuple instead of T::Array by @botantony in #22861
Warn about missing libraries in brew info by @HaraldNordgren in #22849
utils/path: add formula_opt_include helper by @botantony in #22865
Forward the --quiet flag to all brew bundle subcommands by @wfarr in #22868
patch: add type and resolves DSL for annotating patches by @andrew in #22466
Support path helpers in services by @MikeMcQuaid in #22870
Disable tap Git credential prompts by @MikeMcQuaid in #22869
Fix HOMEBREW_FORBID_PACKAGES_FROM_PATHS bypasses by @p-linnane in #22872
formula_auditor: audit new formulae for duplicates by @botantony in #22860
bump-formula-pr: do not repeat release notes multiple times by @botantony in #22871
Redact GitHub token in bump dry-run output by @p-linnane in #22874
Reject inline cask definitions passed to the MCP server by @p-linnane in #22875
Key Brewfile trust entries by custom tap remotes by @liby in #22862
Fix core cask tap redirects by @MikeMcQuaid in #22876

New Contributors

@paulogdm made their first contribution in #22844
@wfarr made their first contribution in #22868
@liby made their first contribution in #22862

Full Changelog: 6.0.3...6.0.4

Original source

Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal Homebrew JSON API, sandboxing on Linux, better defaults informed by our user survey, many brew bundle improvements, improved performance and initial support for macOS 27 (Golden Gate).

✨ Highlights since 5.1.0

🔐 Tap trust

Homebrew 6.0.0 introduces tap trust. A third-party tap can contain arbitrary, unsandboxed Ruby that runs on your machine, so Homebrew now requires taps (and tap-qualified formulae and casks) to be explicitly trusted before their code is evaluated or run. This reduces the risk from malicious or compromised taps while leaving the official Homebrew taps trusted by default. See the new Tap-Trust documentation for details.

• Homebrew enforces initial tap trust so untrusted taps are flagged before their code runs, trusts qualified tap items before install, stops auto-tapping untrusted taps, pins tap allow, forbid and trust lists to remotes and uses tap trust when evaluating all formulae and casks.
• brew tap gains commands for managing tap trust, can trust a tap by its remote URL, brew trust adds a --json=v1 flag and brew tap-info adds a trusted field.
• brew bundle honours the trusted: option and brew bundle dump records trusted bundle entries, marking custom-remote taps as trusted.
• docs.brew.sh has new pages, including Tap-Trust, explaining Homebrew’s new tap trust model, and Homebrew trusts taps in test-bot.

⚡ Default internal JSON API

The internal JSON API is now the default, advancing the smaller API that Homebrew re-enabled and turned on for developers recently. It combines all Homebrew’s metadata into a single download, so brew updates faster and talks to the network less. It was opt-in via HOMEBREW_USE_INTERNAL_API since 5.0.0; that variable is now deprecated (see below).

🐧 Linux sandbox

The Linux Bubblewrap sandbox aligns Linux with macOS, where build, test and postinstall phases already run sandboxed. It is on by default for developers, Homebrew moved its macOS sandbox logic to share code, improved Linux sandbox behaviour (with Homebrew/homebrew-core setting the sandbox env in CI), hardened sandboxed install phases, sandboxed cask executable hooks, allowed logs in the build sandbox, installed Bubblewrap on hosted Ubuntu and skips sandbox setup for syntax-only jobs.

⚙️ Better defaults

• Following our Homebrew user survey, we have made many changes based on the results. The most notable is making ask mode the default for developers, so brew install and brew upgrade show a dependency summary and confirmation prompt before making changes.
• Homebrew adds ask dependency plans and cask support, accepts one-key ask confirmations and aligns ask dry-run prompts.
• Homebrew fetches ask upgrades together, prints the ask upgrade summary sooner, skips the upgrade ask prompt when empty, adds a final brew upgrade summary and explains the upgrade metadata fetch.

📦 brew bundle

• brew bundle gains many improvements, most notably parallel formula installation that now runs jobs automatically by default, plus npm and krew extensions, wider cleanup support and, on Windows, winget support.
• Homebrew adds cleanup support to npm, cargo, go and uv extensions and asks before removing during cleanup.
• Homebrew runs brew bundle krew via kubectl-krew directly, respects CARGO_HOME and friends for cargo, adds a --describe flag to brew bundle add and tries mas install before falling back to mas get.
• Homebrew adds bundle type disable flags, improves check guidance and checks formula link status.
• Homebrew serialises formula locks, makes non-core DSLs a single file, removes description comments from brew bundle/remover and avoids parsing the output of brew services list.
• brew bundle performs npm installs more securely.

🏎️ Performance

Homebrew is faster across the board, with startup performance tweaks, a ~30% faster brew leaves, parallelised bottle tab fetching on upgrade and less work loading Ruby libraries at startup.

🍎 macOS 27 (Golden Gate)

Homebrew adds initial support for macOS 27 (Golden Gate).

🔮 Upcoming changes

• macOS 27 (Golden Gate) drops Intel support, so per our Support Tiers: in September 2026, macOS Intel x86_64 moves to Tier 3 with no CI support and no new bottles (binary packages) built for macOS Intel; in September 2027, macOS Intel x86_64 will be unsupported entirely and all related code deleted.
• The master to main migration begun in 4.6.0 continues: more repositories no longer update master, GitHub Actions warn @master users to migrate to @main and the sync-default-branches workflows are removed from Homebrew/homebrew-cask and Homebrew/homebrew-core.
• Casks that fail macOS Gatekeeper checks, deprecated in 5.0.0, remain on track to be disabled in September 2026.

🔒 Security

🚨 Security advisories

Homebrew published three security advisories:

• The POST download strategy bypassed the documented HTTPS-to-HTTP redirect protection by discarding the resolved URL (GHSA-7699-qf8c-q47m), fixed by enforcing secure redirects.
• Root code execution was possible via Git hooks in the macOS .pkg postinstall (GHSA-6689-q779-c33m), fixed by cleaning Homebrew git state and replacing the installer git directory.
• The macOS installer package trusted a user-controlled /var/tmp plist and could assign Homebrew ownership to a local attacker (GHSA-59v8-x8q4-px5c), fixed by tweaking the macOS .pkg package-user plist handling.

🛡️ Other security improvements

• Homebrew filters sensitive environment variables during Ruby evaluations and defers HOMEBREW_* environment secrets to download time.
• Homebrew runs forbidden checks for casks and formulae before download and lets you require checksums for casks with HOMEBREW_CASK_OPTS_REQUIRE_SHA.
• Homebrew links to a shared security policy.

🗑️ Deprecations

• The Ubuntu 24.04 CI migration raised the Linux baseline to glibc 2.39, so Linux systems with an older system glibc (such as Ubuntu 22.04 with glibc 2.35) are now Tier 2: no new bottles (binary packages) are built for them and brew doctor warns. Use the ghcr.io/homebrew/brew Docker image or upgrade to a Tier 1 configuration such as Ubuntu 24.04.
• Homebrew deprecates default opt-ins.
• Homebrew deprecates now-default bundle and internal API environment variables such as HOMEBREW_BUNDLE_NO_SECRETS and HOMEBREW_USE_INTERNAL_API.
• Homebrew marks unused options for deprecation.
• Various other Homebrew 6.0.0 deprecations.
• Homebrew’s SBOM support is now opt-in with HOMEBREW_SBOM.

🎁 Features

🖥️ Casks

• Homebrew can pin casks and supports casks in brew missing.
• Homebrew adds AppImage support for Linux and implements a Linux freedesktop trash for casks.
• Homebrew improves cask upgrades by sharing upgrade download queues, moving upgrade summaries before fetch, adding a quit opt-out and reopening closed apps during upgrade.
• Homebrew improves auto_updates casks: improving how they update, refining the behaviour, further gating auto-updates behind opt-in and upgrading them when the bundle version is stale.
• cask adds a generate_completions_from_executable DSL artifact and includes resolved artifact targets in JSON output.
• Homebrew shows a cask version transition in per-cask upgrade output, skips valid cached cask fetches, speeds up cask backup copies and has caskroom use the user’s primary group on Linux.
• brew doctor and brew cleanup handle corrupt Caskroom directories.

💻 Operating system support

• Homebrew makes Linux cask requirements explicit, aligns cask macOS dependencies, supports bare depends_on :macos in casks, tracks macOS support explicitly and emits Linux variations for casks with Linux checksums.
• Homebrew adds a maximum macOS for cask dependencies. Homebrew/homebrew-cask adopts the new depends_on maximum_macos: syntax and fixes its macOS dependencies in Homebrew/homebrew-cask and Homebrew/homebrew-core.
• Homebrew adds M5 and M5 Pro/Max CPU recognition and caps the OCLP tier when macOS is outdated.
• Homebrew labels WSL analytics, shows the Windows build on WSL in brew config and moves the wsl? boolean from OS::Linux up to the OS module.

🚰 Taps

• Homebrew recognises more equivalent tap remote forms, ignoring a .git suffix when matching GitHub remotes and consolidating tap remote normalisation.
• Homebrew handles formulae and casks more uniformly across commands, installs explicitly requested taps and stops implicit tap installation.
• Homebrew uses worktrees for local core taps and blocks worktree updates.
• Homebrew shares full-name parsing helpers and uses full-name helpers for split names.

ℹ️ brew info and brew tap-info

• brew info output is clearer: more consistent and helpful, with a Binaries section listing executables, a clearer recursive runtime dependencies line, clearer same-named conflicts and shadowed formulae and a list versions JSON output.
• brew info shows installed state better: the upgrade target for outdated @-versioned formulae, installed dependents with --verbose, deprecated and disabled packages in install status, installed formulae resolved from the receipt’s tap with a shadowing warning, the installed version and an upgrade hint on the headline, other installed versions and an installed info inventory.
• brew info and brew tap-info skip the uninstalled marker when not a problem, show more tap info for packages and brew tap-info lists formulae and casks.
• brew which-formula shows install status and Homebrew shows quarantine script usage.

🆕 New commands, flags and output

• brew exec is a new command, like npx, that supports formulae environments.
• brew as-console-user is a new command for running Homebrew as the right user under MDM/root environments and brew update is aliased to upgrade.
• Homebrew tidies help and completions: omitting aliases from completions, hiding HOMEBREW_CASK_OPTS_* from help, hiding maintainer commands and hiding hide_from_man_page commands from brew commands.
• Homebrew avoids install warning annotations and warns when formula executables are shadowed on PATH.

🧊 Cooldowns, livecheck and bumping

• Homebrew adds download cooldowns for Bundler, RubyGems livecheck, npm and pip defaults, PyPI resource resolution and npm and PyPI in bump to avoid upstream supply-side security risks.
• Homebrew prints bump skip status, messages and errors and checks RubyGems licences.
• Homebrew respects livecheck throttle days in audit, adds livecheck throttling by days and speeds up the formula throttle days check.

⬇️ Downloads and fetching

• brew fetch --all-platforms fetches every variant, Homebrew prints download error details when using concurrency, preserves partial downloads on network errors, avoids cached manifest downloads and hints when a download is HTML, not a binary.
• Homebrew avoids redundant Caskroom chgrp.

🛎️ Services

• Homebrew starts systemd timers for services, creates service path directories automatically (with Homebrew/homebrew-core adopting the new service path creation logic) and audits redundant service path setup.
• brew services no longer fails to load with --sudo-service-user.

🧪 Formulae and packaging

• Homebrew adds the VCS revision as scm_revision in the tab, supports in-repository patch files, supports CPS metadata directories and includes patches in formula to_hash.
• Homebrew respects installed dependents during autoremove and cross-checks autoremove candidates against formula definitions.

🪜 Install steps framework

The install steps framework expresses common postinstall, preflight and postflight behaviour as ordered, literal-only DSL data that is exposed through the JSON APIs. Where a formula or cask only does simple file preparation, it no longer needs to download and evaluate a Ruby file at install time. Homebrew adds formula install steps, cask install steps, an audit for formula install steps, install step rebuild actions, rebuild step methods, rebuild step RuboCop checks and an audit of cask flight step conversions; homebrew/core and homebrew/cask adopt the new DSLs (post_install_steps, postinstall and flight steps). In homebrew/core and homebrew/cask this covers a large share of post_install and *flight blocks (creating directories, touching markers, moving and symlinking files), with more operation types planned.

🔀 Other changes

• brew vulns is a new Homebrew tap and subcommand that checks installed packages for known vulnerabilities brew vulns is a new Homebrew tap and subcommand that checks installed packages for known vulnerabilities 🔒.
• Homebrew warns for Nix-managed Homebrew.

🧹 Internals, typing and refactors

• Homebrew replaces brew which-update, uses an AST for source rewrites and enforces public API visibility and docs.
• Homebrew reworks command parsing: parser subcommand scaffolding, converting the bundle, services and remaining subcommands, scoping subcommand option constraints and usage help, and no longer restricting global options to subcommands.
• Homebrew limits Sorbet runtime defaults and limits recursive Sorbet in test-bot.

🛠️ Continuous integration and developer tooling

• The Ubuntu 24.04 CI migration flagged in 5.1.0 for 6.0.0 has now landed, raising the Linux baseline.
• Homebrew annotates test-bot dependency impact, closes API-created issues that do not match a template and closes incomplete PRs.
• Homebrew’s setup-homebrew GitHub Action defaults to the stable tag setup-homebrew GitHub Action defaults to the stable tag and trusts taps on non-stable brew.
• brew lgtm covers tap audits and formula tests brew lgtm covers tap audits and formula tests and Homebrew works around a non-writable cache for lgtm commands in brew.sh.
• workflows/docker builds Ubuntu 26.04 images workflows/docker builds Ubuntu 26.04 images and test disables return false handling test disables return false handling.

📚 Documentation

• Homebrew’s documentation improves: the Rosetta cask support policy, unsupported multi-user setups, notability requirements, -full formula guidance, upstream expectations and lifecycle requests, the new auto_updates behaviour and a consolidated deprecation policy.
• Homebrew clarifies compatibility_version guidance and Homebrew/homebrew-core backfills compatibility_version 1. This will help reduce the number of formulae that need upgraded by brew upgrade over time.

Finally:

• Homebrew is a non-profit project run entirely by volunteers, not employees. We need your funds to pay for software, hardware and hosting around continuous integration and future improvements to the project. Every donation will be spent on making Homebrew better for our users. Please consider a regular donation through GitHub Sponsors, OpenCollective and Patreon.
• Homebrew/brew has no open issues at the time of writing 🎉.
• Homebrew has a brand new brew.sh homepage style.
• BrewUI is Homebrew’s upcoming official graphical interface. It’s not ready for general use yet.
• The brew-rs experiment in moving parts of Homebrew’s Ruby frontend to Rust has concluded: benchmarks showed Homebrew’s Rust frontend only ahead on narrow, already-cached bottle fetches, not on representative full installs (pouring bottles, linking, writing metadata and health checks), so the performance focus has moved back to Ruby and to starting useful network and disk I/O sooner. We’ve added an FAQ entry explaining all of this. Our numbers come from honest, fully-compatible comparisons. Not all unofficial Homebrew frontends seem to apply the same rigor to their benchmarks, compatability or security: your mileage with those may vary.
• Homebrew is increasingly a “package manager for everywhere”: Homebrew is recommended in Microsoft’s Windows Developer Config for WSL comfort, works well on Bazzite and now supports winget in brew bundle as a Windows-only feature.
• The Homebrew team is aware of the supply-side security issues with other package managers. We’ve taken various steps to mitigate these risks for our users, some existing (e.g. macOS sandboxing, human review on all changes, environment filtering, all package maintainers are Homebrew maintainers), some new (e.g. Linux sandboxing, sandboxing reads of sensitive locations, cooldown from riskier ecosystems). We will continue to monitor the supply-side security landscape and take further steps as needed. See the new Supply Chain Security documentation we’ve added for details.
• Homebrew has documented the principles behind our AI and LLM usage rules in a new Responsible AI Usage page.
• Homebrew has joined the Open Source Resistance and you should too.

Thanks to all our hard-working volunteer maintainers, contributors, sponsors and supporters for getting us this far.

Original source