Cached at:
09/13/26, 11:36 AM
# 7.0.0
Source: [https://brew.sh/2026/09/13/homebrew-7.0.0/](https://brew.sh/2026/09/13/homebrew-7.0.0/)
Today, I’m proud to announce Homebrew 7\.0\.0\. The most significant changes since 6\.0\.0 are faster installations and upgrades, stronger sandboxing, a native macOS app, built\-in vulnerability checks and an advisory database, the end of macOS 10\.15 support and Intel Macs moving to Tier 3\.
**Contents**
- [⬆️ Upgrading](https://brew.sh/2026/09/13/homebrew-7.0.0/#%EF%B8%8F-upgrading)
- [🍺 All Homebrew users](https://brew.sh/2026/09/13/homebrew-7.0.0/#-all-homebrew-users)- [🏎️ Performance](https://brew.sh/2026/09/13/homebrew-7.0.0/#%EF%B8%8F-performance) - [🔒 Security](https://brew.sh/2026/09/13/homebrew-7.0.0/#-security)- [Security advisories](https://brew.sh/2026/09/13/homebrew-7.0.0/#security-advisories) - [Installation and tap protection](https://brew.sh/2026/09/13/homebrew-7.0.0/#installation-and-tap-protection) - [🔎 Commands and configuration](https://brew.sh/2026/09/13/homebrew-7.0.0/#-commands-and-configuration) - [🗃️ Casks](https://brew.sh/2026/09/13/homebrew-7.0.0/#%EF%B8%8F-casks)
- [🍎 macOS users](https://brew.sh/2026/09/13/homebrew-7.0.0/#-macos-users)- [🖥️ Homebrew app](https://brew.sh/2026/09/13/homebrew-7.0.0/#%EF%B8%8F-homebrew-app)
- [🐧 Linux users](https://brew.sh/2026/09/13/homebrew-7.0.0/#-linux-users)
- [🍾 Non\-default prefix users](https://brew.sh/2026/09/13/homebrew-7.0.0/#-non-default-prefix-users)
- [🔍 Security teams and auditors](https://brew.sh/2026/09/13/homebrew-7.0.0/#-security-teams-and-auditors)
- [🐳 Homebrew users in CI](https://brew.sh/2026/09/13/homebrew-7.0.0/#-homebrew-users-in-ci)
- [🛠️ Tap maintainers](https://brew.sh/2026/09/13/homebrew-7.0.0/#%EF%B8%8F-tap-maintainers)- [🪜 Install steps](https://brew.sh/2026/09/13/homebrew-7.0.0/#-install-steps)
- [🙏 Finally](https://brew.sh/2026/09/13/homebrew-7.0.0/#-finally)
### ⬆️ Upgrading
An auto\-update or manual`brew update`\(if you have`$HOMEBREW\_NO\_AUTO\_UPDATE`set\) will upgrade Homebrew for you\.
`Now`means 7\.0\.0\. Deprecated interfaces warn until disablement; disabled interfaces reject use and removed interfaces are unavailable\.
Environment7\.0\.0 behaviour and actionTimingPR linksmacOS 10\.15 or earlierUpgrade to macOS 11 or laterNow[Minimum version](https://github.com/Homebrew/brew/pull/23703)macOS Sonoma 14Tier 3; upgrade to Sequoia 15\+ for bottles and`\.pkg`installationsNow[Support window](https://github.com/Homebrew/brew/pull/23928)macOS Golden Gate 27 on Apple SiliconFully supported \(Tier 1\), with prebuilt bottlesNow[Full support](https://github.com/Homebrew/brew/pull/23928)[`ghcr\.io/homebrew/ubuntu22\.04`](https://github.com/Homebrew/brew/pkgs/container/ubuntu22.04)Image removed; migrate to[`ghcr\.io/homebrew/brew`](https://github.com/Homebrew/brew/pkgs/container/brew)Now[Notice](https://github.com/Homebrew/brew/pull/23378),[removal](https://github.com/Homebrew/brew/pull/23729)[`Homebrew/actions/\*@master`or`@main`](https://github.com/Homebrew/actions)`master`removed; pin a[CalVer release](https://github.com/Homebrew/actions/releases)or full SHANow[Branch migration](https://github.com/Homebrew/actions/pull/838),[releases](https://github.com/Homebrew/actions/pull/883)Setuid wrappers with different real and effective UIDsRejected; run as the installation’s owner without a wrapperNow[Execution model](https://github.com/Homebrew/brew/pull/23955)Third\-party`brew`wrappersTier 3; internal commands bypass wrappers; seek support from the wrapper projectNow[Wrapper changes](https://github.com/Homebrew/brew/pull/23783)[Homebrew/brew`master`](https://github.com/Homebrew/brew/tree/master)Frozen bootstrap; switch to[`main`](https://github.com/Homebrew/brew/tree/main)before removal2027\-03\-01[Bootstrap](https://github.com/Homebrew/brew/pull/23733)Intel macOS 11 or laterTier 3; no new bottles; migrate to[MacPorts](https://www.macports.org/)before Homebrew stops running2027\-09\-01[Support](https://github.com/Homebrew/brew/pull/23679),[bottles](https://github.com/Homebrew/brew/pull/23677)Apple Silicon macOS 11Upgrade to macOS 12 or later before support ends2027\-09\-01[Support schedule](https://github.com/Homebrew/brew/pull/20497)Third\-party formula`post\_install`and cask flight blocksDeprecated; migrate to`\*\_steps`;`brew style \-\-fix`converts common hooks2027\-12\-11[Deprecation](https://github.com/Homebrew/brew/pull/23729),[migration](https://github.com/Homebrew/brew/pull/23195)### 🍺 All Homebrew users
The following improvements apply across platforms unless stated otherwise\.
#### 🏎️ Performance
Greater concurrency across downloads, preparation and installation maximises performance while coordinating failures and summaries\.
- `brew install`,`brew reinstall`and`brew upgrade`[overlap package preparation and downloads](https://github.com/Homebrew/brew/pull/23549), including[`brew bundle`batches](https://github.com/Homebrew/brew/pull/23871), reducing waits between packages and allowing a`Brewfile`to benefit from the same shared installation work as a command naming several packages\.
- `brew config`[gathers independent system details concurrently](https://github.com/Homebrew/brew/pull/22989), so compiler, operating\-system and repository checks overlap instead of making diagnostic reports wait for every subprocess in turn\.
- [`brew tap\-info \-\-installed \-\-json=v1`collects tap metadata concurrently, shortening inventory requests when several repositories need Git or network checks while preserving the output order expected by scripts\.](https://github.com/Homebrew/brew/pull/22975)
- [`brew cleanup`avoids repeated cache scans, speeding up cleanup for installations with many packages\.](https://github.com/Homebrew/brew/pull/23515)
- `brew fetch`reads download information directly from API metadata for[bottles](https://github.com/Homebrew/brew/pull/22666)and[casks](https://github.com/Homebrew/brew/pull/22670), starting downloads without loading complete package definitions merely to discover URLs and checksums\.
- [`brew update`prepares Ruby caches so subsequent commands start faster\.](https://github.com/Homebrew/brew/pull/23108)
- [Homebrew reuses parsed API data on warm runs while verifying signatures on every load, reducing preparation time for repeated package commands without dropping authenticity checks\.](https://github.com/Homebrew/brew/pull/23300)
- Homebrew[launches fewer subprocesses during startup](https://github.com/Homebrew/brew/pull/23298), reducing command overhead, and[reads terminal dimensions directly](https://github.com/Homebrew/brew/pull/23952), avoiding hangs with uutils`stty`\.
#### 🔒 Security
Homebrew 7\.0\.0 includes various security fixes and new installation protections\.
##### Security advisories
The first fixed releases are listed below\.
- **[GHSA\-rg9r\-ppxp\-87hm](https://github.com/Homebrew/brew/security/advisories/GHSA-rg9r-ppxp-87hm), High, fixed in 6\.0\.12:**unsigned cask\-removal metadata could execute commands with`sudo`;[all vulnerable recovery code and API accessors have been deleted](https://github.com/Homebrew/brew/pull/23772)\.
- **[GHSA\-5263\-whxq\-77hp](https://github.com/Homebrew/brew/security/advisories/GHSA-5263-whxq-77hp), Moderate, fixed in 7\.0\.0:**a malicious cask could execute code outside the macOS install sandbox through LaunchServices; Homebrew restricts[application launching](https://github.com/Homebrew/brew/pull/23907),[Mach services](https://github.com/Homebrew/brew/pull/23909)and[Unix socket connections](https://github.com/Homebrew/brew/pull/23920)\.
- **[GHSA\-hqpg\-hjr9\-c7j8](https://github.com/Homebrew/brew/security/advisories/GHSA-hqpg-hjr9-c7j8), Moderate, fixed in 6\.0\.12:**the macOS installer[ignores prefix\-owned Git configuration](https://github.com/Homebrew/brew/pull/23747)that could execute programs as root\.
- **[GHSA\-x82f\-cj53\-gqfr](https://github.com/Homebrew/brew/security/advisories/GHSA-x82f-cj53-gqfr), Low, fixed in 6\.0\.7:**[`brew livecheck`restricts redirects](https://github.com/Homebrew/brew/pull/22944)to prevent server\-side request forgery\.
- **[GHSA\-3m5g\-jfx7\-3p65](https://github.com/Homebrew/brew/security/advisories/GHSA-3m5g-jfx7-3p65), Low, fixed in 6\.0\.7:**[download redirects cannot forward secret headers to other hosts](https://github.com/Homebrew/brew/pull/22945)\.
- **[GHSA\-r9gp\-p4vv\-f93x](https://github.com/Homebrew/brew/security/advisories/GHSA-r9gp-p4vv-f93x), Low, fixed in 6\.0\.6:**[Git redirects cannot bypass tap restrictions](https://github.com/Homebrew/brew/pull/22909)\.
- **[GHSA\-9g4r\-vmj2\-j2gj](https://github.com/Homebrew/brew/security/advisories/GHSA-9g4r-vmj2-j2gj), Low, fixed in 6\.0\.7:**[Subversion external URLs cannot become command options](https://github.com/Homebrew/brew/pull/22942)\.
- **[GHSA\-r7qx\-325v\-4ccx](https://github.com/Homebrew/brew/security/advisories/GHSA-r7qx-325v-4ccx), Low, fixed in 6\.0\.6:**[patch targets cannot escape the staged source tree](https://github.com/Homebrew/brew/pull/22881)\.
##### Installation and tap protection
[Tap trust](https://docs.brew.sh/Tap-Trust)remains the primary protection against malicious third\-party casks; sandboxing mainly limits accidental damage and adds installation safeguards\. It cannot make untrusted software safe to run: applications execute with the user’s privileges, and[vendor`\.pkg`installers run outside the sandbox](https://docs.brew.sh/Cask-Cookbook#cask-artifact-trust-and-sandboxing)and may require`sudo`\. We balance tighter restrictions with keeping existing software working\.
- Homebrew delivers structured setup as signed data and sandboxes[formula](https://github.com/Homebrew/brew/pull/23202)and[cask operations](https://github.com/Homebrew/brew/pull/23461), reducing arbitrary Ruby execution and repeated package loading\.
- Homebrew begins migrating dependency downloads into a[`fetch`phase](https://github.com/Homebrew/brew/pull/23657): migrated formulae download with network access and writable caches, then`install`disables networking and makes those caches read\-only; migration remains ongoing\.
- [Homebrew blocks sandboxed reads of the home directory by default](https://github.com/Homebrew/brew/pull/22660), keeping unrelated personal files outside package builds while allowing required Homebrew paths;[private temporary directories let build tools communicate locally without enabling network access](https://github.com/Homebrew/brew/pull/23940)\.
- Homebrew[rejects mismatched real and effective user IDs](https://github.com/Homebrew/brew/pull/23955)before reading configuration, removing untested privilege\-switching code for unsupported shared installations\.
[Trust and environment migrations and replacements\.](https://brew.sh/7.0.0-migration-guide/#trust-and-environment)
#### 🔎 Commands and configuration
Commands provide clearer previews, package information and service configuration\.
- [`brew install \-\-dry\-run`previews formulae and casks together\.](https://github.com/Homebrew/brew/pull/23874)
- [`brew list \-\-no\-installed\-on\-request`identifies formulae installed as dependencies\.](https://github.com/Homebrew/brew/pull/22829)
- `brew info`[distinguishes uninstallable packages with`⊘`from uninstalled packages with`✘`](https://github.com/Homebrew/brew/pull/23853)and[marks unmet operating\-system and architecture requirements](https://github.com/Homebrew/brew/pull/23841), making it easier to understand whether a package can run on the current machine before starting an installation\.
- `brew services`[reads persistent overrides from`$HOMEBREW\_USER\_CONFIG\_HOME/services/<formula\>\.env`, allowing local service settings to survive package upgrades and take effect on restart without editing generated service files](https://github.com/Homebrew/brew/pull/23312)\. New and restarted services use`sh\.brew\.<formula\>`on[macOS](https://github.com/Homebrew/brew/pull/23750)and[Linux](https://github.com/Homebrew/brew/pull/23837), recognising legacy registrations until restart\.
- `brew bundle`restores language tools from declared sources:[Cargo Git repositories or paths](https://github.com/Homebrew/brew/pull/23451)and[`source:`for remote`uv`tools](https://github.com/Homebrew/brew/pull/22963)\.
- `brew doctor \-\-json`[provides structured diagnostics for automation](https://github.com/Homebrew/brew/pull/22448);`brew doctor`also[warns when another`brew`shadows the current installation in`PATH`](https://github.com/Homebrew/brew/pull/23783), helping diagnose wrapper and installation conflicts\.
- [`brew deps \-\-brewfile`inspects a Brewfile’s dependencies, making it easier to review the packages a development environment will bring in before installing that environment\.](https://github.com/Homebrew/brew/pull/23104)
- [`brew untap`offers to uninstall a tap’s packages first, allowing an unwanted package source and its installed software to be removed together\.](https://github.com/Homebrew/brew/pull/23278)
- [`HOMEBREW\_AUTO\_UPDATE\_QUIET`suppresses automatic\-update package details, keeping routine command output focused while still allowing Homebrew to update in the background of normal use\.](https://github.com/Homebrew/brew/pull/23455)
- [Homebrew stops exporting its own`BUNDLER\_VERSION`to child processes, allowing formula builds to use their required Bundler version\.](https://github.com/Homebrew/brew/pull/23950)
`Brewfile`s record language\-tool sources alongside other packages, reducing separate installation instructions when reproducing an environment on another machine\.
[Command and configuration migrations and replacements\.](https://brew.sh/7.0.0-migration-guide/#commands-and-configuration)
#### 🗃️ Casks
[Formula links take precedence when formulae and casks provide the same commands, with warnings explaining how to restore the cask links\.](https://github.com/Homebrew/brew/pull/23925)
- `brew upgrade`[skips incompatible casks while upgrading compatible applications](https://github.com/Homebrew/brew/pull/23012); both it and`brew outdated`[honour`HOMEBREW\_NO\_UPGRADE\_AUTO\_UPDATES\_CASKS`](https://github.com/Homebrew/brew/pull/22825), preserving[self\-updating applications’ opt\-out](https://docs.brew.sh/FAQ#how-does-brew-upgrade-handle-apps-that-update-themselves)\.
- `brew uninstall`[removes records for casks missing from the API, warning about possible leftovers](https://github.com/Homebrew/brew/pull/23210), and[avoids needless password prompts when files are already owned by the current user](https://github.com/Homebrew/brew/pull/23948)\.
- [`brew link`and`brew unlink`accept`\-\-cask`/`\-\-casks`and`\-\-formula`/`\-\-formulae`, allowing cask binaries, manpages and completions to be disabled or restored without reinstalling;`\-\-dry\-run`previews changes, while`brew link \-\-overwrite`replaces conflicts and`\-\-force`replaces only symlinks from the same cask\.](https://github.com/Homebrew/brew/pull/23925)
- [Homebrew’s API includes cask language variants](https://github.com/Homebrew/brew/pull/23124), allowing installation to select the appropriate URL, checksum and artifacts from package data without evaluating the cask’s Ruby definition for each language choice\.
[Cask configuration migrations and replacements\.](https://brew.sh/7.0.0-migration-guide/#cask-configuration)
### 🍎 macOS users
**Homebrew moves macOS Intel`x86\_64`to Tier 3 in September 2026,[announced in August 2025](https://github.com/Homebrew/brew/pull/20497)and[repeated in the 5\.0\.0 release notes on 12 November 2025](https://brew.sh/2025/11/12/homebrew-5.0.0/); 7\.0\.0 also drops macOS 10\.15\.**Homebrew still runs on Intel until September 2027, without project support or routine bottle builds\. Apple and GitHub’s retreat from Intel support exceeds what Homebrew’s volunteers can replace\.
- [`brew services run`applies per\-service environment overrides without registering a login service, making temporary runs use the same configuration as a permanently registered service\.](https://github.com/Homebrew/brew/pull/23869)
- [`brew shellenv`sets`PATH`directly, avoiding macOS`path\_helper`subprocesses and configuration\-file writes\.](https://github.com/Homebrew/brew/pull/23783)
- Homebrew[moves Intel to Tier 3](https://github.com/Homebrew/brew/pull/23679):[existing bottles remain, but updated formulae may require source builds](https://github.com/orgs/Homebrew/discussions/7044)after[unreliable infrastructure ended routine Intel bottle updates](https://github.com/Homebrew/brew/pull/23677)\.
- Homebrew’s[`\.pkg`installer is Apple Silicon only](https://github.com/Homebrew/brew/pull/23779)and[requires macOS Sequoia 15 or later](https://github.com/Homebrew/brew/pull/23928);[MacPorts may offer Intel users better binary package coverage](https://github.com/Homebrew/brew/pull/23806)\.
- [Homebrew installs prebuilt casks without Xcode Command Line Tools, removing a compiler dependency from application setup\.](https://github.com/Homebrew/brew/pull/23043)
- Homebrew[fully supports macOS Golden Gate 27](https://github.com/Homebrew/brew/pull/23928), following its[bottle rollout](https://github.com/Homebrew/brew/pull/23918); Sequoia 15, Tahoe 26 and Golden Gate 27 are Tier 1 on Apple Silicon\.
- [Homebrew permits Metal shader compilation inside the macOS sandbox, allowing ggml and whisper\.cpp tests to use GPU acceleration without network access\.](https://github.com/Homebrew/brew/pull/23949)
**[macOS support migrations](https://docs.brew.sh/Support-Tiers#future-macos-support)**
Interface or platformStatus in 7\.0\.0TimingReplacementmacOS Catalina 10\.15 and earlierRemovedNowUpgrade to macOS Big Sur 11 or later\.Intel macOSTier 3; no new bottlesNowApple Silicon or[MacPorts](https://www.macports.org/)\.macOS Sonoma 14Tier 3; no new bottlesNowmacOS Sequoia 15 or later\.[macOS Golden Gate 27 on Apple Silicon](https://github.com/Homebrew/brew/pull/23928)Supported; Tier 1NowNo migration required; prebuilt bottles available\.Running Homebrew on Intel MacsUpcoming removal2027\-09\-01Apple Silicon or another package manager\.macOS Big Sur 11 on Apple SiliconUpcoming removal2027\-09\-01macOS Monterey 12 or later\.#### 🖥️ Homebrew app
[BrewUI is Homebrew’s fully released official graphical interface for macOS](https://github.com/Homebrew/brewui), making package management more approachable through a native application\.
[](https://brew.sh/assets/img/blog/homebrew-7.0.0-brewui.png)
- [`brew install homebrew\-app`installs BrewUI on macOS Tahoe 26 or later\.](https://github.com/Homebrew/homebrew-cask/pull/283478)
- [BrewUI brings package browsing, search and installed\-version details into one window, making it easier to explore available software and review an existing installation\.](https://github.com/Homebrew/brewui)
- [BrewUI shows the underlying`brew`commands for package operations, keeping the work visible and helping connect graphical actions with familiar terminal commands\.](https://github.com/Homebrew/brewui)
### 🐧 Linux users
Homebrew 6\.0\.0[introduced Bubblewrap sandboxing](https://brew.sh/2026/06/11/homebrew-6.0.0/)\. Homebrew 7\.0\.0[replaces it with Landlock](https://github.com/Homebrew/brew/pull/23425), requiring no dependencies or escalated Docker permissions, which caused setup problems with Bubblewrap\.
**Status in 7\.0\.0:**kernels without Landlock continue working without Linux sandboxing in the less secure pre\-6\.0\.0 configuration;`brew doctor`reports missing protection as an advisory\.
- [`brew config`reports the Landlock ABI for troubleshooting\.](https://github.com/Homebrew/brew/pull/23287)
- [Homebrew supports Landlock ABI 2 on Linux 6\.1, warning when the kernel cannot enforce network restrictions\.](https://github.com/Homebrew/brew/pull/23335)
- [Homebrew moves AppImages to their application destination, matching macOS`\.app`installations instead of versioned symlinks, so self\-updates preserve launchers\.](https://github.com/Homebrew/brew/pull/23771)
**[Linux configuration](https://github.com/Homebrew/brew/pull/23729)**
Interface or platformStatus in 7\.0\.0TimingReplacement`HOMEBREW\_SANDBOX\_LINUX`DisabledNowRemove it; Landlock is used automatically where available\.`HOMEBREW\_NO\_SANDBOX\_LINUX`Deprecated2027\-12\-11No replacement opt\-out; unavailable Landlock remains advisory\.[`HOMEBREW\_ARCH`](https://github.com/Homebrew/brew/pull/23783)Deprecated2027\-12\-11Default native CPU optimisation\.### 🍾 Non\-default prefix users
[Homebrew relocates compatible bottles to shorter prefixes](https://github.com/Homebrew/brew/pull/23699), avoiding source builds outside the default installation location\.
**Status in 7\.0\.0:**[limits are 13 bytes on Apple Silicon macOS, 26 on Linux and 10 for existing Intel macOS bottles](https://github.com/Homebrew/brew/blob/main/Library/Homebrew/plans/relocatable-bottles.md)\. These count the full path, including slashes; the Cellar must also fit its build\-time length\. Bottles marked`:any`or`:any\_skip\_relocation`are relocatable to any prefix\.
- [Homebrew relocates prefix symlinks so they remain usable elsewhere\.](https://github.com/Homebrew/brew/pull/23682)
- [Homebrew records relocation metadata at build time, reducing repeated installation scans and allowing installation to apply the recorded changes instead of rediscovering every embedded path on each machine\.](https://github.com/Homebrew/brew/pull/23629)
**Upcoming rollout:**[padded builds](https://github.com/Homebrew/brew/pull/23693)aim to make[every bottle and dependency relocatable to prefixes up to 64 bytes on Apple Silicon macOS and both Linux architectures](https://github.com/Homebrew/brew/blob/main/Library/Homebrew/plans/relocatable-bottles.md)\. This may eventually allow full support within those limits; non\-default prefixes remain unsupported for now, with no rollout date\.
### 🔍 Security teams and auditors
[Homebrew’s new advisory database](https://github.com/Homebrew/advisory-database)records vulnerabilities against the formula versions and revisions Homebrew ships, including backported security fixes\.[`brew vulns`is built in](https://github.com/Homebrew/brew/pull/23080), checking known vulnerabilities using[OSV\.dev](https://osv.dev/)without another tap or gem\.
- `brew vulns`[scans installed formulae and reports untrusted\-tap skips](https://github.com/Homebrew/brew/pull/23140), with[`\-\-severity=high`,`\-\-deps`and`\-\-brewfile`for focused checks](https://github.com/Homebrew/brew/pull/23080)\. It prioritises remediation using[`\-\-fix\-available`and`\-\-no\-fix\-available`](https://github.com/Homebrew/brew/pull/23152),[`\-\-fix\-type`for released versus patched fixes and`\-\-list\-skipped`for coverage gaps](https://github.com/Homebrew/brew/pull/23511)\.
- Homebrew publishes[advisory findings in the formula API](https://github.com/Homebrew/brew/pull/23341)and a[downloadable advisory index](https://github.com/Homebrew/brew/pull/23555), helping other tools distinguish outstanding vulnerabilities from fixes already shipped\. The database’s[OSV\-format records are freely reusable under CC0](https://github.com/Homebrew/advisory-database#license), giving security teams a shared source of Homebrew\-specific vulnerability data\.
- [Homebrew recognises security patches annotated with`resolves`, avoiding vulnerability reports for fixes already included in a package\.](https://github.com/Homebrew/brew/pull/22466)
- [Homebrew adds upstream package identifiers to software bills of materials](https://github.com/Homebrew/brew/pull/23459), allowing external tools to connect source archives with registries such as PyPI, npm and Cargo rather than relying only on Homebrew formula names\.
- [Homebrew verifies attestations for supported third\-party tap bottles](https://github.com/Homebrew/brew/pull/23769), extending build\-provenance checks beyond`homebrew/core`when a tap publishes the required attestations\.
### 🐳 Homebrew users in CI
[Homebrew images](https://github.com/orgs/Homebrew/packages?repo_name=brew)and[GitHub Actions](https://github.com/Homebrew/actions)provide maintained migration targets\.
- `brew test\-bot \-\-build\-dependents\-from\-source`[limits source builds to ten dependants per formula per shard, prioritising popular packages](https://github.com/Homebrew/brew/pull/23884), enabling[broader Linux source\-build coverage](https://github.com/Homebrew/brew/pull/23910)while keeping CI runtime manageable\.
- Homebrew[runs routine Golden Gate dependant tests](https://github.com/Homebrew/brew/pull/23942)on[GitHub’s`xcode\-27`runners](https://github.blog/changelog/2026-09-10-xcode-27-runner-image-now-runs-on-macos-27/), reducing reliance on self\-hosted infrastructure\.
- [Homebrew retires the Ubuntu 22\.04 image](https://github.com/Homebrew/brew/pull/23378); use the maintained general\-purpose image below\.
- [Homebrew’s versioned actions pin internal dependencies](https://github.com/Homebrew/actions/pull/883), making workflow upgrades reviewable; migrate`@main`and removed`@master`references to releases or full SHAs\.
- Homebrew uses[`Homebrew/actions/setup\-ruby`with`portable\-ruby: true`](https://github.com/Homebrew/actions/tree/main/setup-ruby)in its[Ruby workflow](https://github.com/Homebrew/brew/pull/23883), allowing CI jobs to select the same interpreter as Homebrew without depending on internal Ruby entry points\.
**[CI migrations](https://github.com/Homebrew/brew/pull/23729)**
Interface or platformStatus in 7\.0\.0TimingReplacement[`ghcr\.io/homebrew/ubuntu22\.04`](https://github.com/Homebrew/brew/pkgs/container/ubuntu22.04)RemovedNow[`ghcr\.io/homebrew/brew`](https://github.com/Homebrew/brew/pkgs/container/brew)\.[`Homebrew/actions/\*@master`](https://github.com/Homebrew/actions)RemovedNow[CalVer release](https://github.com/Homebrew/actions/releases)or full SHA; no redirect\.[`Homebrew/actions/\*@main`](https://github.com/Homebrew/actions/tree/main)Migration recommendedNow[CalVer release](https://github.com/Homebrew/actions/releases)or full SHA\.### 🛠️ Tap maintainers
Authoring tools reduce manual setup and encourage safer package definitions\.
- `brew audit \-\-cask \-\-online \-\-fix`[corrects macOS requirements and application\-name case](https://github.com/Homebrew/brew/pull/23618);`brew audit \-\-strict`[detects downloaded prebuilt npm executables in installed`homebrew/core`formulae](https://github.com/Homebrew/brew/pull/23906), helping maintainers enforce source\-build requirements\.
- `brew style \-\-fix`[consolidates platform\-specific cask checksums and sorts dependencies](https://github.com/Homebrew/brew/pull/23901), simplifying cross\-platform definitions;`brew style`also[rejects broad`com\.install4j\.\*`uninstall and zap patterns](https://github.com/Homebrew/brew/pull/23908)that could affect unrelated applications\.
- `brew tap\-new`[generates automatic update workflows for new taps, checking upstream versions on a schedule and opening pull requests so maintainers can review updates without manually checking each formula](https://github.com/Homebrew/brew/pull/23349)\. It also[generates attesting bottle\-publishing workflows by default, with`\-\-no\-attestations`as an opt\-out](https://github.com/Homebrew/brew/pull/23769), helping new taps publish the provenance that Homebrew can verify when their users install bottles\.
- [`brew bump\-cask\-pr`can generate separate Intel and Apple Silicon version stanzas from architecture\-specific update results](https://github.com/Homebrew/brew/pull/22462), allowing maintainers to follow upstream applications that release different versions for each architecture without manually rewriting supported root\-level definitions\.
- [`brew bump\-formula\-pr`updates Git resources whose version is a commit hash, keeping both the version and pinned revision in sync for projects without release tags\.](https://github.com/Homebrew/brew/pull/23914)
- `brew create`[generates syntactically valid formula templates](https://github.com/Homebrew/brew/pull/23947), with[separate fetch and offline\-build phases for Go and Rust](https://github.com/Homebrew/brew/pull/23734)to prevent downloads during compilation\.
- [`brew update\-python\-resources \-\-ignore\-main\-package\-cooldown`bypasses only the main package’s cooldown in third\-party formulae\.](https://github.com/Homebrew/brew/pull/23072)
- [`brew benchmark`measures cold and warm install/fetch workloads separately](https://github.com/Homebrew/brew/pull/23601), with`\-\-runs=`controlling repetitions and`\-\-exec`supporting custom Hyperfine commands, so contributors can identify whether a change improves fresh downloads, cached installations or command overhead rather than relying on one combined timing\.
- [`brew bump\-compatibility\-version`records changes requiring dependant rebuilds\.](https://github.com/Homebrew/brew/pull/22846)
- [`brew formula\-python\-resources \-\-all`/`\-\-tap=`inventories Python resources, while`brew bump\-python\-resources\-pr \-\-packages=`opens security updates, with`\-n`/`\-\-dry\-run`,`\-\-install\-dependencies`,`\-\-no\-fork`,`\-\-branch=`,`\-\-message=`and`\-\-output=`supporting automation\.](https://github.com/Homebrew/brew/pull/23881)
- [Homebrew formulae use`python3`to select their direct Python dependency without hardcoded interpreter paths\.](https://github.com/Homebrew/brew/pull/23754)
- [Homebrew formulae can declare`stop\_timeout`for services](https://github.com/Homebrew/brew/pull/23294), giving databases and other stateful applications longer to shut down gracefully before the service manager terminates them;`stop\_timeout 60`sets a one\-minute allowance on both macOS and Linux\.
- [Homebrew’s`python\_major\_minor\_version`helper supplies the selected Python version](https://github.com/Homebrew/brew/pull/23481), avoiding repeated version\-detection code in formula definitions that need versioned paths or arguments\.
- [Homebrew’s`std\_go\_args\(ldflags: :goreleaser\)`supplies common GoReleaser build metadata](https://github.com/Homebrew/brew/pull/23324), including version, commit and build date, helping upstream applications report useful version information from Homebrew builds without each formula recreating those linker arguments\.
- [Homebrew formulae and casks can record a human homepage check with`homepage \.\.\., browsed: "YYYY\-MM\-DD"`](https://github.com/Homebrew/brew/pull/23307), pausing automated availability checks for one year when a site works in browsers but blocks automated requests, while ensuring the manual check has an expiry\.
- [Homebrew services can use shared package path helpers](https://github.com/Homebrew/brew/pull/22870), allowing service definitions to refer to package locations consistently without duplicating path construction between their commands and environment settings\.
#### 🪜 Install steps
Formula`post\_install`and cask`\*flight`Ruby blocks are deprecated in favour of declared`\*\_steps`\. Explicit operations and paths allow validation, sandboxing and signed API delivery, making setup safer and avoiding repeated package evaluation\.
**Status in 7\.0\.0:**[official taps reject legacy hooks](https://github.com/Homebrew/brew/pull/23366); third\-party taps receive warnings until 11 December 2027\.
- [`brew style \-\-fix`converts common hooks](https://github.com/Homebrew/brew/pull/23195);[manual migrations](https://github.com/Homebrew/brew/pull/23196)require rewriting the block’s contents as declared steps, following the[Formula Cookbook](https://docs.brew.sh/Formula-Cookbook#running-commands-after-installation)or[Cask Cookbook](https://docs.brew.sh/Cask-Cookbook#stanza-flight_steps)\.
- [Homebrew provides structured file operations and configuration writes, preserving common setup without arbitrary Ruby; formula authors describe the intended operation and target, while Homebrew handles validation and execution consistently\.](https://github.com/Homebrew/brew/pull/22759)
- [Homebrew validates serialised steps before execution, giving package authors a defined set of supported operations and allowing API\-delivered setup to follow the same rules as locally loaded definitions\.](https://github.com/Homebrew/brew/pull/23240)
**[Install hook migrations](https://github.com/Homebrew/brew/pull/23729)**
Interface or platformStatus in 7\.0\.0TimingReplacementFormula`post\_install`Deprecated2027\-12\-11`post\_install\_steps`Cask`preflight`Deprecated2027\-12\-11`preflight\_steps`Cask`postflight`Deprecated2027\-12\-11`postflight\_steps`Cask`uninstall\_preflight`Deprecated2027\-12\-11`uninstall\_preflight\_steps`Cask`uninstall\_postflight`Deprecated2027\-12\-11`uninstall\_postflight\_steps`[The migration guide lists install\-step names, DSLs and public API replacements\.](https://brew.sh/7.0.0-migration-guide/#install-step-names-and-options)
[Maintenance command removals and replacements are also documented\.](https://brew.sh/7.0.0-migration-guide/#maintenance-commands)
### 🙏 Finally
- The Intel support decision reflects the limits of a volunteer\-run project:[Apple have dropped Intel`x86\_64`support from macOS 27 Golden Gate](https://www.apple.com/os/macos/)and[GitHub Actions will retire Intel macOS runners in autumn 2027](https://github.blog/changelog/2025-09-19-github-actions-macos-13-runner-image-is-closing-down/)\. If Apple and Microsoft’s GitHub, two of the world’s largest technology companies, cannot continue supporting macOS Intel`x86\_64`, sadly neither can Homebrew\.[MacPorts still supports macOS Intel`x86\_64`](https://www.macports.org/)and is likely to provide better results on this platform\.
- Homebrew is a non\-profit project run entirely by volunteers, not employees\. We need your funds to pay for software, hardware and hosting around continuous integration and future improvements to the project\. Every donation will be spent on making Homebrew better for our users\. Please consider a regular donation through[GitHub Sponsors](https://github.com/sponsors/Homebrew),[OpenCollective](https://opencollective.com/homebrew#category-CONTRIBUTE)and[Patreon](https://www.patreon.com/homebrew)\.
- [Homebrew/brew \(still\) has no open issues](https://github.com/Homebrew/brew/issues?q=sort%3Aupdated-desc+is%3Aissue+is%3Aopen+)at the time of writing, as has been the case for most of the period since Homebrew 6\.0\.0 🎉\.
Thanks to all our hard\-working volunteer maintainers, contributors, sponsors and supporters for getting us this far\.
### Latest Posts
- [6\.0\.0](https://brew.sh/2026/06/11/homebrew-6.0.0/)11 Jun 2026Today, I’m proud to announce Homebrew 6\.0\.0\. The most significant changes since 5\.1\.0 are a new tap trust security mechanism, the new faster, smaller, default internal\.\.\.
- [5\.1\.0](https://brew.sh/2026/03/10/homebrew-5.1.0/)10 Mar 2026Homebrew 5\.1\.0 has been released\. Homebrew’s most significant changes since 5\.0\.0 are expanded brew bundle support, brew version\-install, new \-full formula handling an\.\.\.
- [5\.0\.0](https://brew.sh/2025/11/12/homebrew-5.0.0/)12 Nov 2025Today, I’d like to announce Homebrew 5\.0\.0\. The most significant changes since 4\.6\.0 are download concurrency by default, official support for Linux ARM64/AArch64, tim\.\.\.
- [4\.6\.0](https://brew.sh/2025/08/05/homebrew-4.6.0/)05 Aug 2025Today, I’d like to announce Homebrew 4\.6\.0\. The most significant changes since 4\.5\.0 are opt\-in concurrent downloads with HOMEBREW\_DOWNLOAD\_CONCURRENCY, preliminary ma\.\.\.