Show HN: Homebrew 6.0.0

# 6.0.0 Source: [https://brew.sh/2026/06/11/homebrew-6.0.0/](https://brew.sh/2026/06/11/homebrew-6.0.0/) Today, I’m proud to announce Homebrew 6\.0\.0\. The most significant changes since 5\.1\.0 are a new tap trust security mechanism, the new faster, smaller, default internal Homebrew JSON API, sandboxing on Linux, better defaults informed by our user survey, many`brew bundle`improvements, improved performance and initial support for macOS 27 \(Golden Gate\)\. ### ✨ Highlights since 5\.1\.0 #### 🔐 Tap trust Homebrew 6\.0\.0 introduces tap trust\. A third\-party tap can contain arbitrary, unsandboxed Ruby that runs on your machine, so Homebrew now requires taps \(and tap\-qualified formulae and casks\) to be explicitly trusted before their code is evaluated or run\. This reduces the risk from malicious or compromised taps while leaving the official Homebrew taps trusted by default\. See the new[Tap\-Trust documentation](https://docs.brew.sh/Tap-Trust)for details\. - Homebrew[enforces initial tap trust so untrusted taps are flagged before their code runs](https://github.com/Homebrew/brew/pull/22470),[trusts qualified tap items before install](https://github.com/Homebrew/brew/pull/22621),[stops auto\-tapping untrusted taps](https://github.com/Homebrew/brew/pull/22599),[pins tap allow, forbid and trust lists to remotes](https://github.com/Homebrew/brew/pull/22590)and[uses tap trust when evaluating all formulae and casks](https://github.com/Homebrew/brew/pull/22476)\. - [`brew tap`gains commands for managing tap trust](https://github.com/Homebrew/brew/pull/22472), can[trust a tap by its remote URL](https://github.com/Homebrew/brew/pull/22611),[`brew trust`adds a`\-\-json=v1`flag](https://github.com/Homebrew/brew/pull/22624)and[`brew tap\-info`adds a`trusted`field](https://github.com/Homebrew/brew/pull/22613)\. - [`brew bundle`honours the`trusted:`option](https://github.com/Homebrew/brew/pull/22594)and[`brew bundle dump`records trusted bundle entries](https://github.com/Homebrew/brew/pull/22528),[marking custom\-remote taps as trusted](https://github.com/Homebrew/brew/pull/22625)\. - [docs\.brew\.sh has new pages, including Tap\-Trust](https://docs.brew.sh/Tap-Trust), explaining Homebrew’s new tap trust model, and[Homebrew trusts taps in test\-bot](https://github.com/Homebrew/brew/pull/22497)\. #### ⚡ Default internal JSON API The**internal JSON API**is[now the default](https://github.com/Homebrew/brew/pull/22546),[advancing](https://github.com/Homebrew/brew/pull/22367)the smaller API that Homebrew[re\-enabled](https://github.com/Homebrew/brew/pull/22042)and[turned on for developers](https://github.com/Homebrew/brew/pull/22226)recently\. It combines all Homebrew’s metadata into a single download, so`brew`updates faster and talks to the network less\. It was opt\-in via`HOMEBREW\_USE\_INTERNAL\_API`since 5\.0\.0; that variable is now deprecated \(see below\)\. #### 🐧 Linux sandbox The**[Linux Bubblewrap sandbox](https://github.com/Homebrew/brew/pull/22240)**aligns Linux with macOS, where build, test and postinstall phases already run sandboxed\. It is[on by default for developers](https://github.com/Homebrew/brew/pull/22370), Homebrew[moved its macOS sandbox logic](https://github.com/Homebrew/brew/pull/22238)to share code,[improved Linux sandbox behaviour](https://github.com/Homebrew/brew/pull/22315)\(with[Homebrew/homebrew\-core setting the sandbox env in CI](https://github.com/Homebrew/homebrew-core/pull/283172)\),[hardened sandboxed install phases](https://github.com/Homebrew/brew/pull/22413),[sandboxed cask executable hooks](https://github.com/Homebrew/brew/pull/22406),[allowed logs in the build sandbox](https://github.com/Homebrew/brew/pull/22539),[installed Bubblewrap on hosted Ubuntu](https://github.com/Homebrew/brew/pull/22458)and[skips sandbox setup for syntax\-only jobs](https://github.com/Homebrew/brew/pull/22507)\. #### ⚙️ Better defaults - Following our[Homebrew user survey](https://github.com/orgs/Homebrew/discussions/6706), we have made many changes based on the results\. The most notable is[making`ask`mode the default for developers](https://github.com/Homebrew/brew/pull/22369), so`brew install`and`brew upgrade`show a dependency summary and confirmation prompt before making changes\. - Homebrew[adds ask dependency plans and cask support](https://github.com/Homebrew/brew/pull/22275),[accepts one\-key ask confirmations](https://github.com/Homebrew/brew/pull/22436)and[aligns ask dry\-run prompts](https://github.com/Homebrew/brew/pull/22353)\. - Homebrew[fetches ask upgrades together](https://github.com/Homebrew/brew/pull/22435),[prints the ask upgrade summary sooner](https://github.com/Homebrew/brew/pull/22510),[skips the upgrade ask prompt when empty](https://github.com/Homebrew/brew/pull/22333),[adds a final`brew upgrade`summary](https://github.com/Homebrew/brew/pull/22140)and[explains the upgrade metadata fetch](https://github.com/Homebrew/brew/pull/22143)\. #### 📦`brew bundle` - `brew bundle`gains many improvements, most notably[parallel formula installation](https://github.com/Homebrew/brew/pull/21891)that now[runs jobs automatically by default](https://github.com/Homebrew/brew/pull/22545), plus[npm](https://github.com/Homebrew/brew/pull/21820)and[krew](https://github.com/Homebrew/brew/pull/21802)extensions,[wider cleanup support](https://github.com/Homebrew/brew/pull/22395)and, on Windows,[`winget`support](https://github.com/Homebrew/brew/pull/22397)\. - Homebrew[adds cleanup support to npm, cargo, go and uv extensions](https://github.com/Homebrew/brew/pull/21883)and[asks before removing during cleanup](https://github.com/Homebrew/brew/pull/22453)\. - Homebrew runs[`brew bundle krew`via`kubectl\-krew`directly](https://github.com/Homebrew/brew/pull/22328),[respects`CARGO\_HOME`and friends for`cargo`](https://github.com/Homebrew/brew/pull/21795),[adds a`\-\-describe`flag to`brew bundle add`](https://github.com/Homebrew/brew/pull/21797)and[tries`mas install`before falling back to`mas get`](https://github.com/Homebrew/brew/pull/22361)\. - Homebrew[adds bundle type disable flags](https://github.com/Homebrew/brew/pull/22452),[improves check guidance](https://github.com/Homebrew/brew/pull/22265)and[checks formula link status](https://github.com/Homebrew/brew/pull/22412)\. - Homebrew[serialises formula locks](https://github.com/Homebrew/brew/pull/22297),[makes non\-core DSLs a single file](https://github.com/Homebrew/brew/pull/21721),[removes description comments from`brew bundle/remover`](https://github.com/Homebrew/brew/pull/21735)and[avoids parsing the output of`brew services list`](https://github.com/Homebrew/brew/pull/21830)\. - [`brew bundle`performs npm installs more securely\.](https://github.com/Homebrew/brew/pull/22405) #### 🏎️ Performance Homebrew is faster across the board, with[startup performance tweaks](https://github.com/Homebrew/brew/pull/21734),[a ~30% faster`brew leaves`](https://github.com/Homebrew/brew/pull/21911),[parallelised bottle tab fetching on upgrade](https://github.com/Homebrew/brew/pull/22118)and[less work loading Ruby libraries at startup](https://github.com/Homebrew/brew/pull/22133)\. #### 🍎 macOS 27 \(Golden Gate\) [Homebrew adds initial support for macOS 27 \(Golden Gate\)](https://github.com/Homebrew/brew/pull/22592)\. ### 🔮 Upcoming changes - macOS 27 \(Golden Gate\) drops Intel support, so per our[Support Tiers](https://docs.brew.sh/Support-Tiers#future-macos-support): in September 2026,**macOS Intel`x86\_64`moves to Tier 3**with no CI support and no new bottles \(binary packages\) built for macOS Intel; in September 2027,**macOS Intel`x86\_64`will be unsupported entirely and all related code deleted**\. - [The`master`to`main`migration begun in 4\.6\.0 continues](https://github.com/Homebrew/brew/pull/21937): more repositories no longer update`master`,[GitHub Actions warn`@master`users to migrate to`@main`](https://github.com/Homebrew/actions/pull/838)and the`sync\-default\-branches`workflows are removed from[Homebrew/homebrew\-cask](https://github.com/Homebrew/homebrew-cask/pull/257835)and[Homebrew/homebrew\-core](https://github.com/Homebrew/homebrew-core/pull/276288)\. - Casks that fail macOS Gatekeeper checks, deprecated in 5\.0\.0, remain on track to be disabled in September 2026\. ### 🔒 Security #### 🚨 Security advisories Homebrew published three security advisories: - [The POST download strategy bypassed the documented HTTPS\-to\-HTTP redirect protection by discarding the resolved URL \(GHSA\-7699\-qf8c\-q47m\)](https://github.com/Homebrew/brew/security/advisories/GHSA-7699-qf8c-q47m), fixed by[enforcing secure redirects](https://github.com/Homebrew/brew/pull/22368)\. - [Root code execution was possible via Git hooks in the macOS`\.pkg`postinstall \(GHSA\-6689\-q779\-c33m\)](https://github.com/Homebrew/brew/security/advisories/GHSA-6689-q779-c33m), fixed by[cleaning Homebrew git state](https://github.com/Homebrew/brew/pull/22081)and[replacing the installer git directory](https://github.com/Homebrew/brew/pull/22090)\. - [The macOS installer package trusted a user\-controlled`/var/tmp`plist and could assign Homebrew ownership to a local attacker \(GHSA\-59v8\-x8q4\-px5c\)](https://github.com/Homebrew/brew/security/advisories/GHSA-59v8-x8q4-px5c), fixed by[tweaking the macOS`\.pkg`package\-user plist handling](https://github.com/Homebrew/brew/pull/22581)\. #### 🛡️ Other security improvements - Homebrew[filters sensitive environment variables during Ruby evaluations](https://github.com/Homebrew/brew/pull/22384)and[defers`HOMEBREW\_\*`environment secrets to download time](https://github.com/Homebrew/brew/pull/22623)\. - Homebrew[runs forbidden checks for casks and formulae before download](https://github.com/Homebrew/brew/pull/22259)and lets you[require checksums for casks with`HOMEBREW\_CASK\_OPTS\_REQUIRE\_SHA`](https://github.com/Homebrew/brew/pull/22007)\. - [Homebrew links to a shared security policy\.](https://github.com/Homebrew/brew/pull/22266) ### 🗑️ Deprecations - [Homebrew deprecates default opt\-ins\.](https://github.com/Homebrew/brew/pull/22601) - [Homebrew deprecates now\-default bundle and internal API environment variables such as`HOMEBREW\_BUNDLE\_NO\_SECRETS`and`HOMEBREW\_USE\_INTERNAL\_API`\.](https://github.com/Homebrew/brew/pull/22641) - [Homebrew marks unused options for deprecation\.](https://github.com/Homebrew/brew/pull/22478) - [Various other Homebrew 6\.0\.0 deprecations\.](https://github.com/Homebrew/brew/pull/22549) - [Homebrew’s SBOM support is now opt\-in with`HOMEBREW\_SBOM`\.](https://github.com/Homebrew/brew/pull/22083) ### 🎁 Features #### 🖥️ Casks - Homebrew[can pin casks](https://github.com/Homebrew/brew/pull/22276)and[supports casks in`brew missing`](https://github.com/Homebrew/brew/pull/22460)\. - Homebrew[adds AppImage support for Linux](https://github.com/Homebrew/brew/pull/20334)and[implements a Linux freedesktop trash for casks](https://github.com/Homebrew/brew/pull/22086)\. - Homebrew improves cask upgrades by[sharing upgrade download queues](https://github.com/Homebrew/brew/pull/22394),[moving upgrade summaries before fetch](https://github.com/Homebrew/brew/pull/21898),[adding a quit opt\-out](https://github.com/Homebrew/brew/pull/22383)and[reopening closed apps during upgrade](https://github.com/Homebrew/brew/pull/22296)\. - Homebrew improves`auto\_updates`casks:[improving how they update](https://github.com/Homebrew/brew/pull/21962),[refining the behaviour](https://github.com/Homebrew/brew/pull/21974)[further](https://github.com/Homebrew/brew/pull/22003),[gating auto\-updates behind opt\-in](https://github.com/Homebrew/brew/pull/21985)and[upgrading them when the bundle version is stale](https://github.com/Homebrew/brew/pull/21882)\. - [`cask`adds a`generate\_completions\_from\_executable`DSL artifact](https://github.com/Homebrew/brew/pull/21781)and[includes resolved artifact targets in JSON output](https://github.com/Homebrew/brew/pull/22346)\. - Homebrew[shows a cask version transition in per\-cask upgrade output](https://github.com/Homebrew/brew/pull/21730),[skips valid cached cask fetches](https://github.com/Homebrew/brew/pull/22580),[speeds up cask backup copies](https://github.com/Homebrew/brew/pull/22552)and has[`caskroom`use the user’s primary group on Linux](https://github.com/Homebrew/brew/pull/22202)\. - [`brew doctor`and`brew cleanup`handle corrupt Caskroom directories\.](https://github.com/Homebrew/brew/pull/21880) #### 💻 Operating system support - Homebrew[makes Linux cask requirements explicit](https://github.com/Homebrew/brew/pull/21909),[aligns cask macOS dependencies](https://github.com/Homebrew/brew/pull/22185),[supports bare`depends\_on :macos`in casks](https://github.com/Homebrew/brew/pull/22006),[tracks macOS support explicitly](https://github.com/Homebrew/brew/pull/22187)and[emits Linux variations for casks with Linux checksums](https://github.com/Homebrew/brew/pull/22632)\. - [Homebrew adds a maximum macOS for cask dependencies\.](https://github.com/Homebrew/brew/pull/22198)Homebrew/homebrew\-cask adopts the[new`depends\_on maximum\_macos:`syntax](https://github.com/Homebrew/homebrew-cask/pull/268102)and fixes its macOS dependencies in[Homebrew/homebrew\-cask](https://github.com/Homebrew/homebrew-cask/pull/263813)and[Homebrew/homebrew\-core](https://github.com/Homebrew/homebrew-core/pull/282148)\. - Homebrew[adds M5 and M5 Pro/Max CPU recognition](https://github.com/Homebrew/brew/pull/22242)and[caps the OCLP tier when macOS is outdated](https://github.com/Homebrew/brew/pull/22154)\. - Homebrew[labels WSL analytics](https://github.com/Homebrew/brew/pull/22558),[shows the Windows build on WSL in`brew config`](https://github.com/Homebrew/brew/pull/22398)and[moves the`wsl?`boolean from`OS::Linux`up to the`OS`module](https://github.com/Homebrew/brew/pull/22309)\. #### 🚰 Taps - [Homebrew recognises more equivalent tap remote forms, ignoring a`\.git`suffix when matching GitHub remotes and consolidating tap remote normalisation\.](https://github.com/Homebrew/brew/pull/22612)\([and](https://github.com/Homebrew/brew/pull/22604)[more](https://github.com/Homebrew/brew/pull/22616)\) - Homebrew[handles formulae and casks more uniformly across commands](https://github.com/Homebrew/brew/pull/22585),[installs explicitly requested taps](https://github.com/Homebrew/brew/pull/21921)and[stops implicit tap installation](https://github.com/Homebrew/brew/pull/21905)\. - Homebrew[uses worktrees for local core taps](https://github.com/Homebrew/brew/pull/22455)and[blocks worktree updates](https://github.com/Homebrew/brew/pull/22525)\. - Homebrew[shares full\-name parsing helpers](https://github.com/Homebrew/brew/pull/21966)and[uses full\-name helpers for split names](https://github.com/Homebrew/brew/pull/22183)\. #### ℹ️`brew info`and`brew tap\-info` - `brew info`output is clearer:[more consistent and helpful](https://github.com/Homebrew/brew/pull/21917), with[a Binaries section listing executables](https://github.com/Homebrew/brew/pull/22150),[a clearer recursive runtime dependencies line](https://github.com/Homebrew/brew/pull/22113),[clearer same\-named conflicts and shadowed formulae](https://github.com/Homebrew/brew/pull/22537)and[a list versions JSON output](https://github.com/Homebrew/brew/pull/22360)\. - `brew info`shows installed state better:[the upgrade target for outdated`@`\-versioned formulae](https://github.com/Homebrew/brew/pull/22321),[installed dependents with`\-\-verbose`](https://github.com/Homebrew/brew/pull/22163),[deprecated and disabled packages in install status](https://github.com/Homebrew/brew/pull/22334),[installed formulae resolved from the receipt’s tap with a shadowing warning](https://github.com/Homebrew/brew/pull/22224),[the installed version and an upgrade hint on the headline](https://github.com/Homebrew/brew/pull/22128),[other installed versions](https://github.com/Homebrew/brew/pull/22241)and[an installed info inventory](https://github.com/Homebrew/brew/pull/22141)\. - [`brew info`and`brew tap\-info`skip the uninstalled marker when not a problem](https://github.com/Homebrew/brew/pull/22342),[show more tap info for packages](https://github.com/Homebrew/brew/pull/22304)and[`brew tap\-info`lists formulae and casks](https://github.com/Homebrew/brew/pull/22180)\. - [`brew which\-formula`shows install status](https://github.com/Homebrew/brew/pull/22300)and[Homebrew shows quarantine script usage](https://github.com/Homebrew/brew/pull/22375)\. #### 🆕 New commands, flags and output - [`brew exec`is a new command, like`npx`](https://github.com/Homebrew/brew/pull/22222), that[supports formulae environments](https://github.com/Homebrew/brew/pull/22269)\. - [`brew as\-console\-user`is a new command for running Homebrew as the right user under MDM/`root`environments](https://github.com/Homebrew/brew/pull/22358)and[`brew update <formula\>`is aliased to`upgrade`](https://github.com/Homebrew/brew/pull/21906)\. - Homebrew tidies help and completions:[omitting aliases from completions](https://github.com/Homebrew/brew/pull/22352),[hiding`HOMEBREW\_CASK\_OPTS\_\*`from help](https://github.com/Homebrew/brew/pull/22017),[hiding maintainer commands](https://github.com/Homebrew/brew/pull/22547)and[hiding`hide\_from\_man\_page`commands from`brew commands`](https://github.com/Homebrew/brew/pull/22229)\. - Homebrew[avoids install warning annotations](https://github.com/Homebrew/brew/pull/22434)and[warns when formula executables are shadowed on`PATH`](https://github.com/Homebrew/brew/pull/22130)\. #### 🧊 Cooldowns, livecheck and bumping - Homebrew adds download cooldowns for[Bundler](https://github.com/Homebrew/brew/pull/22555),[RubyGems livecheck](https://github.com/Homebrew/brew/pull/22253),[npm and pip defaults](https://github.com/Homebrew/brew/pull/21919),[PyPI resource resolution](https://github.com/Homebrew/brew/pull/21920)and[npm and PyPI in`bump`](https://github.com/Homebrew/brew/pull/21888)to avoid upstream supply\-side security risks\. - Homebrew[prints`bump`skip status, messages and errors](https://github.com/Homebrew/brew/pull/21746)and[checks RubyGems licences](https://github.com/Homebrew/brew/pull/22343)\. - Homebrew[respects`livecheck`throttle days in`audit`](https://github.com/Homebrew/brew/pull/22061),[adds livecheck throttling by days](https://github.com/Homebrew/brew/pull/21853)and[speeds up the formula throttle days check](https://github.com/Homebrew/brew/pull/22214)\. #### ⬇️ Downloads and fetching - [`brew fetch \-\-all\-platforms`fetches every variant](https://github.com/Homebrew/brew/pull/22426), Homebrew[prints download error details when using concurrency](https://github.com/Homebrew/brew/pull/21818),[preserves partial downloads on network errors](https://github.com/Homebrew/brew/pull/22048),[avoids cached manifest downloads](https://github.com/Homebrew/brew/pull/22316)and[hints when a download is HTML, not a binary](https://github.com/Homebrew/brew/pull/22184)\. - [Homebrew avoids redundant Caskroom`chgrp`\.](https://github.com/Homebrew/brew/pull/22121) #### 🛎️ Services - Homebrew[starts systemd timers for services](https://github.com/Homebrew/brew/pull/22105),[creates service path directories automatically](https://github.com/Homebrew/brew/pull/22512)\(with[Homebrew/homebrew\-core adopting the new service path creation logic](https://github.com/Homebrew/homebrew-core/pull/285882)\) and[audits redundant service path setup](https://github.com/Homebrew/brew/pull/22514)\. - [`brew services`no longer fails to load with`\-\-sudo\-service\-user`\.](https://github.com/Homebrew/brew/pull/22500) #### 🧪 Formulae and packaging - Homebrew[adds the VCS revision as`scm\_revision`in the tab](https://github.com/Homebrew/brew/pull/22020),[supports in\-repository patch files](https://github.com/Homebrew/brew/pull/22144),[supports CPS metadata directories](https://github.com/Homebrew/brew/pull/22267)and[includes patches in`formula``to\_hash`](https://github.com/Homebrew/brew/pull/22459)\. - Homebrew[respects installed dependents during autoremove](https://github.com/Homebrew/brew/pull/21719)and[cross\-checks`autoremove`candidates against formula definitions](https://github.com/Homebrew/brew/pull/21725)\. #### 🪜 Install steps framework - The**[install steps framework](https://github.com/Homebrew/brew/pull/22371)**expresses common postinstall, preflight and postflight behaviour as ordered, literal\-only DSL data that is exposed through the JSON APIs\. Where a formula or cask only does simple file preparation, it no longer needs to download and evaluate a Ruby file at install time\. Homebrew adds[formula install steps](https://github.com/Homebrew/brew/pull/22372),[cask install steps](https://github.com/Homebrew/brew/pull/22373),[an audit for formula install steps](https://github.com/Homebrew/brew/pull/22474),[install step rebuild actions](https://github.com/Homebrew/brew/pull/22513),[rebuild step methods](https://github.com/Homebrew/brew/pull/22554),[rebuild step RuboCop checks](https://github.com/Homebrew/brew/pull/22515)and[an audit of cask flight step conversions](https://github.com/Homebrew/brew/pull/22411);`homebrew/core`and`homebrew/cask`adopt the new DSLs \([`post\_install\_steps`](https://github.com/Homebrew/homebrew-core/pull/285885),[`postinstall`](https://github.com/Homebrew/homebrew-core/pull/285474)and[flight steps](https://github.com/Homebrew/homebrew-cask/pull/267046)\)\. In`homebrew/core`and`homebrew/cask`this covers a large share of`post\_install`and`\*flight`blocks \(creating directories, touching markers, moving and symlinking files\), with more operation types planned\. #### 🔀 Other changes - [`brew vulns`is a new Homebrew tap and subcommand that checks installed packages for known vulnerabilities](https://github.com/Homebrew/homebrew-brew-vulns)🔒\. - [Homebrew warns for Nix\-managed Homebrew\.](https://github.com/Homebrew/brew/pull/22182) #### 🧹 Internals, typing and refactors - Homebrew[replaces`brew which\-update`](https://github.com/Homebrew/brew/pull/22231),[uses an AST for source rewrites](https://github.com/Homebrew/brew/pull/22220)and[enforces public API visibility and docs](https://github.com/Homebrew/brew/pull/21993)\. - Homebrew reworks command parsing:[parser subcommand scaffolding](https://github.com/Homebrew/brew/pull/22278), converting the[bundle](https://github.com/Homebrew/brew/pull/22280),[services](https://github.com/Homebrew/brew/pull/22279)and[remaining](https://github.com/Homebrew/brew/pull/22281)subcommands,[scoping subcommand option constraints](https://github.com/Homebrew/brew/pull/22325)and[usage help](https://github.com/Homebrew/brew/pull/22326), and no longer[restricting global options to subcommands](https://github.com/Homebrew/brew/pull/22408)\. - Homebrew[limits Sorbet runtime defaults](https://github.com/Homebrew/brew/pull/22496)and[limits recursive Sorbet in test\-bot](https://github.com/Homebrew/brew/pull/22509)\. #### 🛠️ Continuous integration and developer tooling - [The Ubuntu 24\.04 CI migration flagged in 5\.1\.0 for 6\.0\.0 has now landed](https://github.com/Homebrew/brew/pull/21761), raising the Linux baseline\. - Homebrew[annotates test\-bot dependency impact](https://github.com/Homebrew/brew/pull/22221),[closes API\-created issues that do not match a template](https://github.com/Homebrew/brew/pull/22424)and[closes incomplete PRs](https://github.com/Homebrew/brew/pull/22186)\. - Homebrew’s[`setup\-homebrew`GitHub Action defaults to the stable tag](https://github.com/Homebrew/actions/pull/837)and[trusts taps on non\-stable`brew`](https://github.com/Homebrew/actions/pull/860)\. - [`brew lgtm`covers tap audits and formula tests](https://github.com/Homebrew/brew/pull/22075)and Homebrew[works around a non\-writable cache for lgtm commands in`brew\.sh`](https://github.com/Homebrew/brew/pull/21791)\. - [`workflows/docker`builds Ubuntu 26\.04 images](https://github.com/Homebrew/brew/pull/22586)and[`test`disables`return false`handling](https://github.com/Homebrew/brew/pull/22147)\. #### 📚 Documentation - Homebrew’s documentation improves: the[Rosetta cask support policy](https://github.com/Homebrew/brew/pull/21903),[unsupported multi\-user setups](https://github.com/Homebrew/brew/pull/21908),[notability requirements](https://github.com/Homebrew/brew/pull/21923),[`\-full`formula guidance](https://github.com/Homebrew/brew/pull/21929),[upstream expectations](https://github.com/Homebrew/brew/pull/22085)and[lifecycle requests](https://github.com/Homebrew/brew/pull/22052),[the new`auto\_updates`behaviour](https://github.com/Homebrew/brew/pull/21957)and a[consolidated deprecation policy](https://github.com/Homebrew/brew/pull/21946)\. - [Homebrew clarifies`compatibility\_version`guidance](https://github.com/Homebrew/brew/pull/21902)and[Homebrew/homebrew\-core backfills`compatibility\_version 1`](https://github.com/Homebrew/homebrew-core/pull/273379)\. This will help reduce the number of formulae that need upgraded by`brew upgrade`over time\. Finally: - Homebrew is a non\-profit project run entirely by volunteers, not employees\. We need your funds to pay for software, hardware and hosting around continuous integration and future improvements to the project\. Every donation will be spent on making Homebrew better for our users\. Please consider a regular donation through[GitHub Sponsors](https://github.com/sponsors/Homebrew),[OpenCollective](https://opencollective.com/homebrew#category-CONTRIBUTE)and[Patreon](https://www.patreon.com/homebrew)\. - [Homebrew/brew has no open issues](https://github.com/Homebrew/brew/issues?q=sort%3Aupdated-desc+is%3Aissue+is%3Aopen+)at the time of writing 🎉\. - Homebrew has a brand new[brew\.sh](https://brew.sh/)homepage style\. - [BrewUI is Homebrew’s upcoming official graphical interface](https://github.com/Homebrew/brewui)\. It’s not ready for general use yet\. - The`brew\-rs`experiment in moving parts of Homebrew’s Ruby frontend to Rust[has concluded](https://github.com/Homebrew/brew-rs): benchmarks showed Homebrew’s Rust frontend only ahead on narrow, already\-cached bottle fetches, not on representative full installs \(pouring bottles, linking, writing metadata and health checks\), so the performance focus has moved back to Ruby and to starting useful network and disk I/O sooner\. We’ve[added an FAQ entry](https://github.com/Homebrew/brew/pull/22658)explaining all of this\. Our numbers come from honest, fully\-compatible comparisons\. Not all unofficial Homebrew frontends seem to apply the same rigor to their benchmarks, compatability or security: your mileage with those may vary\. - Homebrew is increasingly a**“package manager for everywhere”**: Homebrew is recommended in[Microsoft’s Windows Developer Config for WSL comfort](https://github.com/microsoft/WindowsDeveloperConfig#-wsl-comfort), works well on[Bazzite](https://bazzite.gg/)and now[supports`winget`in`brew bundle`](https://github.com/Homebrew/brew/pull/22397)as a Windows\-only feature\. - The Homebrew team is aware of the supply\-side security issues with other package managers\. We’ve taken various steps to mitigate these risks for our users, some existing \(e\.g\. macOS sandboxing, human review on all changes, environment filtering, all package maintainers are Homebrew maintainers\), some new \(e\.g\. Linux sandboxing, sandboxing reads of sensitive locations, cooldown from riskier ecosystems\)\. We will continue to monitor the supply\-side security landscape and take further steps as needed\. See the new[Supply Chain Security documentation](https://docs.brew.sh/Supply-Chain-Security)we’ve[added](https://github.com/Homebrew/brew/pull/22657)for details\. - Homebrew has[documented the principles behind our AI and LLM usage rules](https://github.com/Homebrew/brew/pull/22656)in a new[Responsible AI Usage](https://docs.brew.sh/Responsible-AI-Usage)page\. - [Homebrew has joined the Open Source Resistance and you should too\.](https://ossresistance.com/) Thanks to all our hard\-working volunteer maintainers, contributors, sponsors and supporters for getting us this far\. ### Latest Posts - [5\.1\.0](https://brew.sh/2026/03/10/homebrew-5.1.0/)10 Mar 2026Homebrew 5\.1\.0 has been released\. Homebrew’s most significant changes since 5\.0\.0 are expanded brew bundle support, brew version\-install, new \-full formula handling an\.\.\. - [5\.0\.0](https://brew.sh/2025/11/12/homebrew-5.0.0/)12 Nov 2025Today, I’d like to announce Homebrew 5\.0\.0\. The most significant changes since 4\.6\.0 are download concurrency by default, official support for Linux ARM64/AArch64, tim\.\.\. - [4\.6\.0](https://brew.sh/2025/08/05/homebrew-4.6.0/)05 Aug 2025Today, I’d like to announce Homebrew 4\.6\.0\. The most significant changes since 4\.5\.0 are opt\-in concurrent downloads with HOMEBREW\_DOWNLOAD\_CONCURRENCY, preliminary ma\.\.\. - [4\.5\.0](https://brew.sh/2025/04/29/homebrew-4.5.0/)29 Apr 2025Today, I’d like to announce Homebrew 4\.5\.0\. The most significant changes since 4\.4\.0 are major improvements to brew bundle/services, preliminary Linux support for cask\.\.\.