What's Changed

• Use quarterly reports for role suggestions by @MikeMcQuaid in #23726
• cask/audit: reject verified parameter on all casks by @AlternateRT in #23718
• doctor: remove grep_v(String) from JSON output by @hyuraku in #23727
• Target Intel Clang under Rosetta by @MikeMcQuaid in #23723
• formula: update cargo fetch example by @cho-m in #23728
• formula_creator: add deny network to some modes by @cho-m in #23730
• formula_creator: add deny network for go and rust by @cho-m in #23734
• bump-cask-pr: load modified contents with FromContentLoader by @p-linnane in #23738
• bump: avoid overwriting skip message with autobump by @samford in #23737
• formula_creator: add deny network for cabal and zig by @cho-m in #23739
• Use InfluxDB v3 API for analytics reporting by @SMillerDev in #23620
• vulns: correct upstream fix boundaries and add reviewed overrides by @p-linnane in #23736
• Fix two dead links in the docs by @rawsun007 in #23744
• Report invalid formulae in pr-pull by @MikeMcQuaid in #23746
• services: recognize both macOS service labels by @p-linnane in #23741
• cask/uninstall: don't quit or signal the host process by @bevanjkay in #23695
• sandbox: allow writing xcrun db by @cho-m in #23748
• bump-formula-pr: render added version stanzas as string literals by @dduugg in #23751
• keg_relocate: contain text relocation to the keg by @dduugg in #23749
• keg: fix remove_oldname_opt_records to avoid early return by @cho-m in #23753
• rubocops/formula_cop: match array dependency type values by @hyuraku in #23758
• generate-cask-ci-matrix: drop macOS Intel CI by @bevanjkay in #23757
• formula_creator: remove outdated comment, show resource only for perl by @cho-m in #23745
• Stop fetching bottle manifests when creating tabs by @MikeMcQuaid in #23760
• pkg: reset installer Git config by @dduugg in #23747
• services: default to canonical macOS service labels by @p-linnane in #23750
• Add Formula#python3 for the direct Python dependency by @p-linnane in #23754
• cask: do not follow a symlinked rmdir path by @dduugg in #23761
• Replace some T.nilable(T::Boolean) by @botantony in #23350
• cask/cask_loader: recover uninstall artifacts from the signed payload by @dduugg in #23762
• formula_creator: add deny network for ruby by @cho-m in #23763
• formula: handle --offline in std_cargo_args by @cho-m in #23764
• unpack_strategy/zip: move volume labels by basename by @dduugg in #23765
• Remove default branch sync workflow by @MikeMcQuaid in #23732
• test: cover Utils.safe_filename and .safe_filename? by @rawsun007 in #23773
• Install app_image by moving the AppImage, mirroring the app stanza by @waldyrious in #23771
• Replace deleted homebrew-cask helper scripts by @bevanjkay in #23672
• Add cask audit for versioned app_image targets by @waldyrious in #23777
• Move more methods into Utils by @MikeMcQuaid in #23774
• Slim down and tighten AGENTS.md by @MikeMcQuaid in #23778
• api/formula/formula_struct_generator: defer placeholder replacement by @cho-m in #23780
• services: resolve owner from the registered service file by @p-linnane in #23781
• Fix shim exec loops and reap timed-out commands by @MikeMcQuaid in #23776
• Stop fetching unsigned per-package API data by @MikeMcQuaid in #23772
• Remove aggregate test jobs by @MikeMcQuaid in #23785
• Move formula Bundler defaults to superenv by @cho-m in #23786
• utils/bottles: only trust a padded build prefix from the bottle manifest by @dduugg in #23788
• services: recognize both Linux service labels by @p-linnane in #23792
• Share Python dependency lookup with Formula#python3 by @p-linnane in #23794
• cask: skip cask loader when no casks are installed by @krehel in #23798
• pkg: seed the API cache as the install user by @dduugg in #23795
• Re-sign node-gyp addons after stripping them by @daeho-ro in #23801
• generate-cask-ci-matrix: skip runners the cask is disabled on by @bevanjkay in #23791

New Contributors

• @rawsun007 made their first contribution in #23744

Full Changelog: 6.0.21...6.0.22

What's Changed

• Harden build prefix relocation of poured bottles by @MikeMcQuaid in #23667
• Harden build prefix relocation of poured bottles by @MikeMcQuaid in #23670
• Drop macOS Intel CI in Homebrew/core by @p-linnane in #23677
• formula: use -Wno-author in std_cmake_args by @p-linnane in #23676
• docs: update brew tap's description by @AlternateRT in #23687
• bundle/mac_app_store: Support upcoming mas 8.0.0 by @rgoldberg in #23690
• Handle absent cask bundle version suffixes by @MikeMcQuaid in #23688
• Speed up and expand integration coverage by @MikeMcQuaid in #23684
• Split slow test jobs by @MikeMcQuaid in #23675
• rubocops: add CMakeArgs cop by @p-linnane in #23680
• Group upgrade dependencies and dependents by @MikeMcQuaid in #23691
• Relativise absolute symlinks into the prefix when bottling by @MikeMcQuaid in #23682
• Defer the relocated pour validation sweep by @MikeMcQuaid in #23681
• Stream parallel cleanup output by @MikeMcQuaid in #23692
• github_runner_matrix: use macos-15-intel for Portable Ruby x86_64 by @p-linnane in #23694
• advisory-match: sync alias families and reopen reviewed ranges by @p-linnane in #23696
• tap: normalise Codeberg remote forms by @AlternateRT in #23697
• Break out GitHub Packages downloads per tag by @MikeMcQuaid in #23698
• Add padded bottle build prefixes by @MikeMcQuaid in #23693
• test/spec_helper: skip missing test tools under brew test-bot by @p-linnane in #23700
• extend/pathname: one lstat per entry in compute_disk_usage by @krehel in #23701
• rubocops/cask: flag redundant nested on_* blocks by @p-linnane in #23705
• audit: add --fix command for casks by @bevanjkay in #23618
• Enable shorter-prefix bottle relocation by @MikeMcQuaid in #23699
• utils/tty: memoise a failed stty size by @krehel in #23706
• formula_auditor: reject Linux libomp dependency in core formula by @cho-m in #23708
• rubocops/lines: add cop for jpeg dependency by @cho-m in #23709
• rubocops/lines: remove dead syntax by @cho-m in #23710
• bundle: require cask/cask_loader before use by @p-linnane in #23716
• Never install downloads with checksum mismatches by @MikeMcQuaid in #23717
• Reduce Intel macOS to Tier 3 by @p-linnane in #23679
• Harden unsigned API, trust, installer and output boundaries by @p-linnane in #23720
• Restore brew analytics to the manpage and completions by @dylanpulver in #23721
• Verify cached downloads at every consumption boundary by @p-linnane in #23719
• release: skip doctor on Tier 3 Intel macOS by @MikeMcQuaid in #23725
• Speed up test-bot smoke jobs by @MikeMcQuaid in #23724

New Contributors

• @dylanpulver made their first contribution in #23721

Full Changelog: 6.0.20...6.0.21

What's Changed

• generate-zap: resolve apps from package receipts by @loganrosen in #23623
• cc shim: compare by canonicalizing both sides, fixing issues with symlinked HOMEs by @averms in #23637
• pathname/disk_usage_extension: fix double path traversal by @krehel in #23632
• Migrate analytics to brew.sh proxy by @SMillerDev in #23639
• Add brew tests --load-only and break the install require cycle by @p-linnane in #23642
• Run privileged cask install steps in the parent process by @p-linnane in #23641
• Drive bottle pours from relocation metadata by @MikeMcQuaid in #23643
• bundle: fail Flatpak entries when flatpak is not installed by @p-linnane in #23648
• upgrade: print the fetch heading before prefetching by @bevanjkay in #23640
• utils/curl: fix curl_version memoization by @krehel in #23651
• livecheck/livecheck: rename some params to formula_or_cask by @cho-m in #23650
• Explain Cask Gatekeeper security model by @MikeMcQuaid in #23653
• rubocops/cask/url: require each keyword parameter on its own line by @hyuraku in #23654
• Check domain age to be > 30 days in auditors by @SMillerDev in #23655
• dev-cmd/bump: skip if there is an open bump PR by @cho-m in #23649
• cmd/uses: require cask/cask by @botantony in #23660
• tapioca/compilers/cask/config: Generate accessors from DEFAULT_DIRS by @p-linnane in #23661
• Fix undefined method 'all' for class Cask::Cask in deps command by @middagj in #23663
• Add package manager caches and isolate them in CI by @MikeMcQuaid in #23656
• Add formula fetch phase run before install by @MikeMcQuaid in #23657
• dev-cmd/pr-pull: require cask/cask_loader by @p-linnane in #23664
• Check ELF relocatability by structure when bottling by @MikeMcQuaid in #23644
• Delete node-gyp debris and strip addons when bottling by @MikeMcQuaid in #23645
• Check raw linkage names when bottling by @MikeMcQuaid in #23646
• bundle: batch installs where possible by @dduugg in #23659
• Require trust for automatic tap migration installs by @felix314159 in #23662

New Contributors

• @averms made their first contribution in #23637
• @felix314159 made their first contribution in #23662

Full Changelog: 6.0.19...6.0.20

What's Changed

• Set oldest GCC to 8 to enable -ffile-prefix-map by @cho-m in #23533
• audit: resolve untapped core dependencies by @MikeMcQuaid in #23542
• Skip duplicate /v2/ when artifact domain already contains it by @jouve in #23062
• cli/parser: fix help crash with -- arguments by @krehel in #23544
• sorbet: Add a Tapioca compiler for Cask::DSL to type some more tests by @issyl0 in #23534
• Clarify outdated cask version display by @HaraldNordgren in #23543
• cask/upgrade: mirror per-file quarantine approval across upgrades by @aholland in #23546
• rubocops/cask: add cops for all conditional stanzas by @AlternateRT in #23554
• vulns: read the advisory index from formulae.brew.sh by @p-linnane in #23555
• cask/upgrade: preserve an unquarantined app's state across upgrades by @aholland in #23556
• Fix cask token in conflicts_with example by @muzimuzhi in #23557
• keg: skip linking some symlinks that point to other kegs by @cho-m in #23558
• Prepare batched package installation by @MikeMcQuaid in #23547
• Prepare combined upgrade planning by @MikeMcQuaid in #23548
• Order install package phases by @MikeMcQuaid in #23549
• Order reinstall package phases by @MikeMcQuaid in #23550
• Order upgrade package phases by @MikeMcQuaid in #23551
• Defer package summaries until cleanup by @MikeMcQuaid in #23552
• cask/artifact: support wildcards in uninstall quit/signal by @bevanjkay in #23559
• Allow nested sandbox integration tests by @MikeMcQuaid in #23561
• Reduce install command load time by @MikeMcQuaid in #23560
• rubocops/uses_from_macos: add lldb to provided by macOS by @cho-m in #23563
• utils/rubocop: activate installed platform Rubydex gem by @p-linnane in #23565
• generate-cask-ci-matrix: require Cask::CaskLoader by @samford in #23566
• generate-cask-ci-matrix: test lazy CaskLoader require by @p-linnane in #23568
• Load cask loader when reading Caskroom by @MikeMcQuaid in #23570
• missing_formula: defer cask/info require by @p-linnane in #23571
• sorbet: Bump more Cask tests to higher typed levels by @issyl0 in #23574
• sorbet: Bump more OS-specific tests to higher typed levels by @issyl0 in #23575
• sorbet: Bump more command tests to higher typed levels by @issyl0 in #23576
• sorbet: Bump more core tests to higher typed levels by @issyl0 in #23577
• sorbet: Bump more RuboCop tests to higher typed levels by @issyl0 in #23578
• sorbet: Bump more utility tests to higher typed levels by @issyl0 in #23579
• Stabilise Bootsnap cache keys by @MikeMcQuaid in #23573
• Fix cask extract integrity by @SSakutaro in #23584
• cache_store: make CacheStoreDatabase.use thread-safe by @Dmdv in #23581
• Stabilise install-dependent tests by @MikeMcQuaid in #23583
• Defer API formula inflation by @MikeMcQuaid in #23572
• Load cask loader for list versions by @MikeMcQuaid in #23587
• keg_relocate: skip running patchelf on bun binaries by @cho-m in #23589
• Cover profiler cache key stability by @MikeMcQuaid in #23590
• Skip warm GHCR manifest cache discovery by @MikeMcQuaid in #23591
• docs: fix Vale errors by @MikeMcQuaid in #23598
• Invalidate bottle cache for local patches by @MikeMcQuaid in #23597
• vulns: include OSS-Fuzz patch fixes as GIT ecosystem, add additional "fixed" filtering (released vs. patched), and --list-skipped by @kmarekspartz in #23511
• Handle empty API Cask flight blocks by @MikeMcQuaid in #23603
• Handle unknown user in trust file by @MikeMcQuaid in #23600
• Add relocatable bottles plan by @MikeMcQuaid in #23605
• Suppress no-op cleanup output by @MikeMcQuaid in #23596
• Add brew benchmark for cold and warm workloads by @MikeMcQuaid in #23601
• Release FFI Core Foundation objects deterministically by @dot-agi in #23607
• advisory-match: add --new-history to skip reviewed records by @p-linnane in #23610
• cask/upgrade: don't read quarantine metadata when quarantine is unavailable by @aholland in #23608
• dev-cmd/extract: write local patches by @cho-m in #23604
• Load cask loader for cask search by @MikeMcQuaid in #23611
• untap: require CaskLoader by @capruxel in #23614
• Suppress stderr for generated cask completions by @vincentkoc in #23613
• tests: speed up slow tests by @bevanjkay in #23616
• Resolve cask system languages before artifact installation by @dot-agi in #23612
• cask/artifact: don't copy xattrs when quarantine is unavailable by @aholland in #23617
• Improve and cleanup cask downloads by @MikeMcQuaid in #23615
• test/cmd/which-formula_spec: avoid modifications outside test dir by @cho-m in #23626
• Select the native architecture's dynamic linker on Linux by @p-linnane in #23622
• formatter: fix comma placement for negative numbers by @krehel in #23625
• sorbet: Bump more tests to higher typed levels by @issyl0 in #23630
• Add TODO for Cargo release cooldown by @MikeMcQuaid in #23627
• vulns: close reviewed open ranges and fix historical subject lookup by @p-linnane in #23634
• Record bottle relocation metadata by @MikeMcQuaid in #23629
• Clean up stale versioned opt aliases by @MikeMcQuaid in #23633
• Avoid eager PatchELF signature evaluation by @MikeMcQuaid in #23636
• Make network access allowances exclusive by @MikeMcQuaid in #23635

New Contributors

• @jouve made their first contribution in #23062
• @Dmdv made their first contribution in #23581
• @dot-agi made their first contribution in #23607
• @capruxel made their first contribution in #23614
• @vincentkoc made their first contribution in #23613

Full Changelog: 6.0.18...6.0.19

What's Changed

• Build and publish large runner docker image by @iMichka in #23345
• Avoid nil cask versions during installation by @MikeMcQuaid in #23499
• Use cask dependencies for platform support by @MikeMcQuaid in #23496
• Fix role used to push to ECR by @iMichka in #23500
• Report unavailable cask platforms accurately by @MikeMcQuaid in #23501
• Add supported_platforms to cask API data by @p-linnane in #23503
• cask: merge multiple conflicts_with stanzas by @hyuraku in #23506
• Normalize hyphenated HOMEBREW_CASK_OPTS option names by @carlocab in #23505
• sbom: add purl external references for sources using Vulns::Identify by @kmarekspartz in #23459
• bump: retry, then skip packages on transient GitHub API errors by @moscowmule2240 in #23504
• Drop legacy option names when deserializing cask config by @carlocab in #23508
• Show upgraded dependencies during installation by @HaraldNordgren in #23509
• Publish multi-platform long runner image by @rexmhall09 in #23502
• Stop inferring cask OS support from artifact types by @p-linnane in #23513
• Report progress when uploading bottles by @p-linnane in #23520
• utils/git: only mutate describe-cache when .git is user-owned by @p-linnane in #23517
• advisory-match: add --repology to load a local index by @p-linnane in #23516
• cask/audit: anchor sha256 check to string by @krehel in #23518
• Record startup phases in brew prof --timings by @MikeMcQuaid in #23526
• bundle: accept only remote sources for uv tools by @tftio in #23469
• Keep one failure from aborting a batch install by @MikeMcQuaid in #23525
• utils/cpan: add offline test coverage by @p-linnane in #23527
• docs: clarify cask artifact OS guidance by @p-linnane in #23524
• utils/cpan: fail closed on non-CPAN and livecheck resources by @p-linnane in #23529
• rubocops/cask: add sha256 stanza ordering by @krehel in #23532
• utils/curl: request headers when body is unused by @krehel in #23528
• Faster brew cleanup with many installed packages by @mrjbq7 in #23515
• generate-advisories-api: add advisory index generator by @p-linnane in #23530
• extend/ENV/super: remove outdated cccfg flag comments by @cho-m in #23535
• utils/clang: allow Version type for kernel_version by @cho-m in #23536
• keg: create share/pwsh as a real directory when linking by @daeho-ro in #23537
• sandbox: keep terminal output translation on during PTY passthrough by @aholland in #23514
• Use internal JSON for update reports by @MikeMcQuaid in #23540
• Handle disappearing Landlock paths by @MikeMcQuaid in #23541
• cask/upgrade: claim macOS may prompt rather than will by @aholland in #23545

New Contributors

• @moscowmule2240 made their first contribution in #23504
• @mrjbq7 made their first contribution in #23515

Full Changelog: 6.0.17...6.0.18

What's Changed

• sbom: build pkg:brew purls via Vulns::Purl by @andrew in #23488
• Report skipped dependent upgrades by @MikeMcQuaid in #23491
• Allow cask runs to access the network by @MikeMcQuaid in #23497

Full Changelog: 6.0.16...6.0.17

What's Changed

• cask/audit: detect incorrect app case by @krehel in #23400
• Start install downloads before local-only checks by @MikeMcQuaid in #23381
• contributions: clarify Maintainer team access by @SSakutaro in #23394
• Tolerate missing bottle manifests in prefetches by @MikeMcQuaid in #23403
• Use workflow result for commit style by @MikeMcQuaid in #23402
• docs/MCP-Server: update Cursor URL by @p-linnane in #23415
• download_queue: print fetch heading to stderr when stdout is not a TTY by @carlocab in #23406
• cask/audit: allow linux-only casks by @bevanjkay in #23422
• Compact install step JSON (25/26) by @MikeMcQuaid in #23365
• api/cask: ignore target when selecting artifact stanza by @p-linnane in #23417
• Retry API downloads without --time-cond on curl receive errors by @p-linnane in #23411
• bundle cleanup: document trust store reset by @p-linnane in #23412
• Pass the download queue to FormulaInstaller when upgrading by @p-linnane in #23416
• test/ENV_spec: compare only singleton methods by @p-linnane in #23421
• Restore use of package-provided service files by @MikeMcQuaid in #23423
• bump: show upstream versions in release cooldown by @MikeMcQuaid in #23409
• Add autobump option to tap-new by @SMillerDev in #23349
• Convert Tab attributes to keyword arguments by @hyuraku in #23430
• Remove Bubblewrap, use Landlock for Linux sandbox by @MikeMcQuaid in #23425
• Fix random time in tap-new by @SMillerDev in #23432
• Complete Cask stanza ordering coverage by @MikeMcQuaid in #23405
• Skip cask link when symlink already correct by @MikeMcQuaid in #23428
• Remove base64 gem and add Homebrew/NoBase64 cop by @MikeMcQuaid in #23410
• Use codesign to sign patched binaries on Intel by @MikeMcQuaid in #23429
• unpack_strategy/dmg: use diskutil image on macOS 14+ by @p-linnane in #23414
• Speed up brew style and brew readall by @MikeMcQuaid in #23435
• system_config: show core cask tap output on Linux by @AlternateRT in #23436
• Reset default download queue between specs by @MikeMcQuaid in #23424
• Fix cask Linux installs without os stanza by @MikeMcQuaid in #23431
• shared_audits: print repo age if too new by @gromgit in #23438
• vulns: add --fix-available and --no-fix-available flags by @kmarekspartz in #23152
• Revert "unpack_strategy/dmg: use diskutil image on macOS 14+" by @MikeMcQuaid in #23444
• Reject official legacy install hooks (26/26) by @MikeMcQuaid in #23366
• Fix AppImage's stanza name in cask DSL by @AlternateRT in #23447
• Treat cask OS support as explicit data by @MikeMcQuaid in #23433
• Use public_send instead of send for public methods by @AbishekRaj2007 in #23449
• Enforce explicit formula install-step bases (28/29) by @MikeMcQuaid in #23404
• rubocops: adjust depends_on checks for Linux by @AlternateRT in #23453
• workflows: check autogenerated files when commands change by @kmarekspartz in #23258
• Remove the formula install-step var default (29/29) by @MikeMcQuaid in #23373
• cask/audit: reject verified parameter on new casks by @AlternateRT in #23456
• Add quiet mode for automatic updates by @HaraldNordgren in #23455
• bundle: install cargo packages from a git URL or path by @tftio in #23451
• Stabilise service caveats spec by @MikeMcQuaid in #23470
• Update rubocop to 1.89.0 and rubocop-sorbet to 0.14.0 by @dduugg in #23452
• requirements/macos_requirement: fix handling for Linux by @cho-m in #23473
• Sandbox structured cask operations by @MikeMcQuaid in #23461
• Fetch official tap HEAD for worktrees by @MikeMcQuaid in #23472
• Use bottled inputs and add RuboCop guard by @MikeMcQuaid in #23468
• Use .public_send instead of .send for calls to public methods by @AbishekRaj2007 in #23474
• Enforce structured install step authoring by @MikeMcQuaid in #23475
• util: spdx license tag limit from 256 to 255 by @daeho-ro in #23477
• Allow sudo in sandboxed Cask install steps by @SSakutaro in #23476
• service: fix caveat for SSH sessions by @IngmarStein in #23464
• Preserve false values in Cask artifact serialization by @SSakutaro in #23478
• formula: add std_swift_args by @cho-m in #23480
• install_steps: allow run steps to ignore failure by @bevanjkay in #23484
• livecheck: fix throttle detached head on CI by @bevanjkay in #23487
• Introduce python_major_minor_version DSL by @iMichka in #23481

New Contributors

• @AbishekRaj2007 made their first contribution in #23449
• @tftio made their first contribution in #23451

Full Changelog: 6.0.15...6.0.16

What's Changed

• workflows/docker: align deprecation of 22.04 image by @cho-m in #23378
• Add PHP configuration action (16/24) by @MikeMcQuaid in #23191
• Add Python bootstrap action (17/24) by @MikeMcQuaid in #23192
• Align shared install step interfaces (18/24) by @MikeMcQuaid in #23193
• Align install step autocorrections (20/24) by @MikeMcQuaid in #23195
• Document canonical install steps (21/24) by @MikeMcQuaid in #23196
• Plan remaining install hook migration (22/24) by @MikeMcQuaid in #23197
• Bridge cask flight step migrations (19/26) by @MikeMcQuaid in #23382
• Update migration delivery plan (23/24) by @MikeMcQuaid in #23198
• Record final migration stacks (24/24) by @MikeMcQuaid in #23199
• docs: fix errors reported by Vale 3.17.0 by @dduugg in #23387
• formula-analytics: replace PyCall with subprocess by @MikeMcQuaid in #23379
• Gemfile.lock: add checksums by @p-linnane in #23389
• cask/config: define instance variables in a consistent order by @p-linnane in #23388
• Add per-service user environment variable overrides by @IngmarStein in #23312
• Suppress brew services tmux caveat on Linux by @HackAttack in #23390
• Keep download progress within terminal width by @MikeMcQuaid in #23391
• Parse only needed internal API payload entries by @MikeMcQuaid in #23380
• install: isolate formula and cask fetch errors by @MikeMcQuaid in #23385
• Make formula install-step var bases explicit by @MikeMcQuaid in #23372
• ignorable: replace callcc with Fiber by @MikeMcQuaid in #23393
• workflows/tap-new-tests: remove intel macOS from tap-new by @cho-m in #23398
• sorbet: Fix the formula test helper block typing by @issyl0 in #23397

New Contributors

• @HackAttack made their first contribution in #23390

Full Changelog: 6.0.14...6.0.15

What's Changed

• Speed up warm-cache API loads and path lookups by @MikeMcQuaid in #23300
• Remove most forks from no-op brew startup by @MikeMcQuaid in #23298
• Speed up style checks for homebrew/core and homebrew/cask by @MikeMcQuaid in #23301
• Avoid repeated coverage simulation by @MikeMcQuaid in #23313
• Reduce vendored gem dependencies by @MikeMcQuaid in #23309
• tap: require trust in Tap#to_hash by @carlocab in #23333
• test/os/mac/keg: require macho by @carlocab in #23334
• Preserve locale during brew startup by @MikeMcQuaid in #23332
• Support Landlock ABI 2 on Linux kernel 6.1 by @MikeMcQuaid in #23335
• Prepare complete DSL stanza ordering by @MikeMcQuaid in #23331
• cask/audit: require "macho" before use by @chenrui333 in #23337
• vulns: add advisory matcher and dev-cmd/advisory-match by @andrew in #23329
• Group on_system_conditional after os by @AlternateRT in #23339
• Fix shellenv INFOPATH missing the default in fish by @jdelStrother in #23059
• Fix GitHub release version detection by @MikeMcQuaid in #23338
• Restore base64 gem by @botantony in #23344
• Add missing on_<system> stanzas to cask stanza order by @AlternateRT in #23321
• Remove unused instance variables in API code by @dduugg in #23346
• rubocops/urls: Ignore GitHub username and repo in binary URL check by @timhillgit in #23236
• Enforce responsible AI contribution policy by @MikeMcQuaid in #23317
• docs: update Vale styles by @p-linnane in #23353
• Add glibc runtime action (14/24) by @MikeMcQuaid in #23201
• contaier: add init option by @daeho-ro in #23348
• Add Clang system config action (15/24) by @MikeMcQuaid in #23190
• bundle: serialize installs sharing an implicit dependency by @dduugg in #23342
• Document install step interpolation by @MikeMcQuaid in #23347
• Ignore user-configured Git hooks for tap operations by @boblail in #23352
• install_steps/formula_actions: write GCC specs only once by @botantony in #23357
• DownloadLock: wait for another process's download instead of failing by @dduugg in #23343
• Use test_each for table-driven specs, and update spoom to 1.8.6 by @dduugg in #23359
• Fix SimpleCov coverage for parallel runs by @samford in #23358
• Allow mixed env keys in script wrappers by @MikeMcQuaid in #23360
• Recommend Software Update for CLT updates by @MikeMcQuaid in #23361
• Remove leftover code for --no-quarantine by @cho-m in #23363
• diagnostic: allowlist Apple Immersive Audio SDK dylib by @sebastianbell in #23367
• Fix Ruby 4 CGI flaky test by @MikeMcQuaid in #23364
• Add explicit dylib ID helpers by @MikeMcQuaid in #23369
• contributions: allow --user with --maintainer-report-csv by @p-linnane in #23371
• ReporterHub#select_formula_or_cask: fix type by @samford in #23330
• generate-formula-api: attach vulnerabilities from advisory-database by @andrew in #23341

New Contributors

• @jdelStrother made their first contribution in #23059
• @timhillgit made their first contribution in #23236
• @sebastianbell made their first contribution in #23367

Full Changelog: 6.0.13...6.0.14

What's Changed

• docs: update formula authoring and toolchain references by @p-linnane in #23225
• Don't print the --force hint when brew bundle cleanup prompts by @p-linnane in #23212
• Generate stable cask syntax jobs by @MikeMcQuaid in #23222
• docs: convert Adding Software to Homebrew into a package-type router by @p-linnane in #23224
• Use --end-of-options for Git arguments by @andrew in #23223
• Normalise systemd service labels by @MikeMcQuaid in #23228
• Skip unavailable xattrs in cask audits by @MikeMcQuaid in #23229
• Add phase timings to brew prof by @MikeMcQuaid in #23216
• docs: update maintainer operations guides by @p-linnane in #23231
• Add appimage to cask stanza order by @p-linnane in #23234
• Remove Caskroom symlinks broken by cask uninstall, and warn when they exist by @aholland in #23235
• docs: enforce sentence-case headings and codify prose conventions by @p-linnane in #23233
• Validate serialised install steps (6/25) by @MikeMcQuaid in #23240
• list: warn about broken Caskroom symlinks from the Bash fast path by @aholland in #23245
• list: test the Bash fast path against the Ruby command by @aholland in #23247
• Count squash-merge commits into the contributions count by @Moisan in #23221
• Add cask command wrappers (6/24) by @MikeMcQuaid in #23183
• Handle missing bottle mirror metadata by @MikeMcQuaid in #23244
• dev-cmd/contributions: require tap by @samford in #23253
• brew search --desc: show casks without descriptions by @MikeMcQuaid in #23241
• List formulae from untrusted taps by @MikeMcQuaid in #23242
• Read remote.origin.url from .git/config without spawning Git by @hyuraku in #23248
• write_env_script: add permission change by @Moisan in #23249
• cask/migrator: do not copy a cask into itself through a rename alias by @aholland in #23261
• Handle cask mount failures and interrupts by @MikeMcQuaid in #23257
• formula: enable PIE for Haskell on Linux by @cho-m in #23254
• Add generated cask scripts (7/24) by @MikeMcQuaid in #23184
• DeprecateDisable: add formula unreachable reason by @samford in #23262
• bundle add: accept fully-qualified names from untapped taps by @p-linnane in #23266
• Wrap in-place terminal redraws in synchronized updates by @bendrucker in #23264
• Warn when sandbox paths stay readable by @MikeMcQuaid in #23256
• cask/audit: fix nil crash in min_os check by @krehel in #23268
• pathname: build eager-init type objects once, not per allocation by @hyuraku in #23267
• Fix flaky DownloadQueue interruption test by @MikeMcQuaid in #23269
• shared_audits: pass --fail when fetching Forgejo repo data by @krehel in #23271
• formula: remove duplicate info from std_npm_args doc by @cho-m in #23273
• formula: allow changing install args in std_cabal_v2_args by @cho-m in #23272
• docs: implement lists for readability by @bevanjkay in #23274
• Add Linux Landlock sandbox by @MikeMcQuaid in #23255
• Allow PTYs in Landlock sandboxes by @MikeMcQuaid in #23279
• Deduplicate install step source globs by @MikeMcQuaid in #23276
• Remove cask verified parameter by @MikeMcQuaid in #23280
• Respect ignored dependencies in ask plans by @MikeMcQuaid in #23277
• Offer to uninstall packages before untapping by @MikeMcQuaid in #23278
• Convert diagnostics to Finding objects by @SMillerDev in #23044
• workflows: skip signing/pushing for dependabot by @MikeMcQuaid in #23286
• Output Landlock ABI version in brew config by @MikeMcQuaid in #23287
• Block releases on open release blockers by @MikeMcQuaid in #23289
• Sample only user-set env config in analytics by @MikeMcQuaid in #23290
• Align EnvConfig RBI types with runtime value by @p-linnane in #23291
• Allow Landlock access to devices and IPC by @MikeMcQuaid in #23288
• Add stop_timeout to service DSL for graceful stop timeout by @IngmarStein in #23294
• Add disabled cops enforcing public APIs in tests by @MikeMcQuaid in #23292
• formula: std_go_args always add -s -w to ldflags by @cho-m in #23299
• Simplify cask command wrappers by @MikeMcQuaid in #23296
• Remove unused HOMEBREW_ARCHFLAGS by @cho-m in #23303
• Unblock POSIX message queues in Landlock by @MikeMcQuaid in #23302
• rubocops/cask: add cop for empty arch by @krehel in #23297
• Remove test-only FormulaInstaller.clear_* class methods by @dduugg in #23304
• Remove unused GitHub and Git helper methods by @dduugg in #23305
• Add homepage browser check DSL by @MikeMcQuaid in #23307
• Add GCC runtime install action (12/24) by @MikeMcQuaid in #23189
• Add scoped install step warnings (11/24) by @MikeMcQuaid in #23188
• Add process termination steps (10/24) by @MikeMcQuaid in #23187
• Allow formula permission steps (8/24) by @MikeMcQuaid in #23185
• Declare cask command wrapper names by @MikeMcQuaid in #23308
• Add constrained install commands (9/24) by @MikeMcQuaid in #23186
• Defer multi-line download failure output until redraw finishes by @dduugg in #23306
• vulns/osv_export: deduplicate references from OSV.dev by @andrew in #23314
• Update package manager slogan by @MikeMcQuaid in #23315
• Document service block methods and tidy Homebrew::Services by @dduugg in #23316
• Remove unused "fully_loaded_formula" instance variable from formula.rb by @dduugg in #23319
• Remove dead code from brew info and which-formula by @dduugg in #23322
• Add gzipped executable action (13/24) by @MikeMcQuaid in #23200
• Stage bottles using the path returned by fetch by @tony19 in #23323
• Add missing stanza sorting by @DexM in #23320
• formula: support common goreleaser ldflags via ldflags: :goreleaser by @cho-m in #23324
• sorbet: Type blocks at source more precisely than T.untyped by @issyl0 in #23318
• sorbet: More T.bind(self, T.class_of(Formula)) by @issyl0 in #23325
• tests: Remove no-op Formulary.cache.delete by @issyl0 in #23326
• Make tests use public APIs and enable their cops by @MikeMcQuaid in #23293
• docs/Cask-Cookbook: fix links to renamed casks by @hyuraku in #23327

New Contributors

• @IngmarStein made their first contribution in #23294
• @tony19 made their first contribution in #23323

Full Changelog: 6.0.12...6.0.13