4.3.11

What's Changed

• shellenv: prepend colon to MANPATH if set by @gromgit in #17633
• Introduce UnpackStrategyType by @dduugg in #17640
• livecheck: finish expanding typed: strict by @samford in #17643
• Use struct for #audit_formula args by @samford in #17651
• dev-cmd/bump-formula-pr: Fix fetch_resource_and_forced_version types by @issyl0 in #17655
• context: fix original context not being restored by @EricFromCanada in #17654
• cask/dsl/caveats: allow for simulated system checks in rosetta caveat by @bevanjkay in #17659
• docker: revert back linuxbrew's UID to 1000 by @andreineculau in #17660
• Assume the --greedy flag for brew outdated when HOMEBREW_UPGRADE_GREEDY is set by @andrewbraxton in #17668
• cmd/shellenv.sh: handle undefined MANPATH and set -eu. by @MikeMcQuaid in #17674
• cli/named_args: raise priority of core casks by @Bo98 in #17681
• sorbet: Make more files (that have public APIs defined in them) typed: strict by @issyl0 in #17636
• test/dev-cmd/bottle: Mark the bottling test as needs_network by @issyl0 in #17680
• unpack_strategy/dmg: Convert to Sorbet typed: strict by @issyl0 in #17683
• formula_assertions: Fix type of cmd param in shell_output by @issyl0 in #17688
• Add cask install receipts by @Rylan12 in #17554
• workflows: pin actions by @Moisan in #17691
• Use Downloadable API in FromBottleLoader. by @reitermarkus in #17695
• Restrict direct url installs to the file:// scheme by @Rylan12 in #17697
• Portable Ruby 3.3.4 by @MikeMcQuaid in #17696
• workflows/vendor-gems: handle input string more robustly by @ZhongRuoyu in #17698
• attestations: widen the beta by @woodruffw in #17692
• attestation: don't dupe stderr by @woodruffw in #17704
• Don't allow special characters in sandbox rule paths by @Rylan12 in #17700
• curl_spec: remove no-op Marshal use by @woodruffw in #17699
• formula_installer: skip attestations on local_bottle_path by @woodruffw in #17706
• feat: do not use existing sudo authentication in brew commands by @SMillerDev in #17694
• Deny file mode changes outside of specified paths in sandbox by @Rylan12 in #17708
• Create Resource::BottleManifest. by @reitermarkus in #17709
• attestation: allow disabling verification. by @MikeMcQuaid in #17712
• attestation: only enable for developers outside CI by @MikeMcQuaid in #17713
• Rearrange requires by @MikeMcQuaid in #17707
• Remove maintainers.json by @MikeMcQuaid in #17715
• bump: add utils/repology require by @samford in #17717
• workflows/vendor-gem: remove use of pull_request target. by @MikeMcQuaid in #17718
• Port brew help (without arguments) to Bash by @MikeMcQuaid in #17710
• Widen attestation verification rollout by @MikeMcQuaid in #17716
• Port brew --repository to Bash by @ZhongRuoyu in #17726
• global: fix require order. by @MikeMcQuaid in #17730
• vendor_gems: require utils/git by @Moisan in #17732
• cmd/--repository: improve tap name error checking by @ZhongRuoyu in #17733
• pypi: allow universal wheels as resources by @woodruffw in #17724
• sandbox: deny signal to other processes by @Moisan in #17719
• brew.sh: speed up brew --help, brew -h, etc. by @ZhongRuoyu in #17735
• workflows/tests: enable attestations by @woodruffw in #17736
• utils/analytics: strip out more data. by @MikeMcQuaid in #17729
• Output disable date for deprecated packages by @MikeMcQuaid in #17721
• global: more require ordering fixes. by @MikeMcQuaid in #17737
• Require utils/backtrace when install fails to load formula by @Rylan12 in #17738
• Make ignore_interrupts thread-safe. by @reitermarkus in #17722
• dev-cmd/bottle: add missing require. by @MikeMcQuaid in #17739
• dev-cmd/pr-publish: add missing require by @p-linnane in #17741
• brew bump: do not call repology by default by @Moisan in #17740
• attestation: improve error message when gh is too old by @nandahkrishna in #17727
• brew.sh: fix nested developer command detection by @Bo98 in #17745
• dev-cmd/update-test: fix dev channel testing by @Bo98 in #17747
• dev-cmd/bump-formula-pr: fix missing require by @ZhongRuoyu in #17749
• cmd/tap: add missing require by @p-linnane in #17746
• utils/pypi: add missing import by @woodruffw in #17753
• Add stub Ruby commands for all Bash commands. by @MikeMcQuaid in #17742
• formula: add require utils/gzip by @Moisan in #17755
• formula: require utils/git_repository by @Moisan in #17754
• Revert "sandbox: deny signal to other processes" by @Rylan12 in #17759
• cask/info: fix installed size reporting by @krehel in #17757
• Have tap_git_head return nil when no tap is installed by @Rylan12 in #17763
• Add ShellCommand module for shell command stubs by @ZhongRuoyu in #17758
• brew bump: cleanup and improve --eval-all handling by @nandahkrishna in #17748
• formula: fix missing require by @branchvincent in #17772
• cask/audit: handle cask_min_os is nil by @khipp in #17768
• utils/analytics: fix handling of newlines by @Bo98 in #17775
• Add utils/backtrace requires by @samford in #17762
• formula_assertions: Fix pipe_output type sig by @issyl0 in #17780
• dev-cmd/pr-automerge: add missing require by @shivammathur in #17783
• Fix UID handling with cask installer script: by @Bo98 in #17782
• download_strategy: fix UID handling for Git submodules by @carlocab in #17786
• attestation: avoid touching working directory by @Bo98 in #17785
• Ensure early installation of gh for attestations by @nandahkrishna in #17760
• FormulaURILoader: use regex to validate refs before attempting to cast by @Rylan12 in #17766
• Formula-Cookbook: add std_*_args explanations by @p-linnane in #17792
• Update How-To-Open-a-Homebrew-Pull-Request.md: add links to Manpage by @muescha in #17797
• dependency: fix missed upgrades when an alias is changed to a formula by @Bo98 in #17799
• attestation: handle bad configurations better by @Bo98 in #17800
• attestation: fix comment by @woodruffw in #17805
• Update Brew-Livecheck.md: add examples for modify version information by @muescha in #17798
• Fix missing requires for tap-info command by @kmontag in #17778
• Add missing_formula require to Homebrew::CLI::NamedArgs by @ah91086 in #17809
• contributions, github: add missing requires, fix type errors by @samford in #17806
• Avoid frozen array errors in brew upgrade by @apainintheneck in #17793
• Add better "--quiet" support to cask upgrade by @ericsampson in #17761
• resource_auditor: add missing require by @chenrui333 in #17822
• download_strategy: fix handling of Apa...

4.3.10

What's Changed

• docker: revert back linuxbrew's UID to 1000 by @andreineculau in #17660
• cli/named_args: raise priority of core casks by @Bo98 in #17681
• utils/analytics: strip out more data. by @MikeMcQuaid in #17729
• utils/analytics: fix handling of newlines by @Bo98 in #17775
• dependency: fix missed upgrades when an alias is changed to a formula by @Bo98 in #17799

Full Changelog: 4.3.9...4.3.10

4.3.9

What's Changed

• Load tap migration renames from api by @apainintheneck in #17599
• ci: improve Dockerfile to make proper use of build cache by @marcosnils in #17584
• Use effective_arch for rustflags by @git-mann in #17597
• Use API for description searches by @rrotter in #17582
• Load tap migration renames from API with short names by @apainintheneck in #17607
• cask/audit: handle on_os range bounded by depends_on by @EricFromCanada in #17608
• Remove broken opavote links by @Rylan12 in #17613
• rubocops/class: allow disabled formulae to be without a test block by @bayandin in #17614
• sorbet: Migrate dev-cmd files from typed: true to typed: strict by @issyl0 in #17606
• extract: Log formula version by @Kentzo in #17622
• dev-cmd/typecheck: Stop dry running Spoom sigil bumps by @issyl0 in #17621
• sorbet: Tighten up dev-cmd types by @issyl0 in #17625
• clear description cache if updated w/o EVAL_ALL by @rrotter in #17602
• dev-cmd/bump-formula-pr: formula_version should return Version not String by @issyl0 in #17628
• Use cached json API file for formulae and cask specified paths by @Rylan12 in #17615
• livecheck: expand typed: strict usage by @samford in #17632
• Improve "unknown command" error by @MikeMcQuaid in #17634
• extract: Fix missing '--git-revision' in the usage banner by @Kentzo in #17638

New Contributors

• @marcosnils made their first contribution in #17584
• @git-mann made their first contribution in #17597

Full Changelog: 4.3.8...4.3.9

4.3.8

What's Changed

• cmd/vendor-install: extract portable-ruby download info by @alebcay in #17557
• feat: use shared checks for URL cop by @SMillerDev in #17521
• cask/audit: ensure on_os blocks specify a min OS by @EricFromCanada in #17565
• docs/Gems,-Eggs-and-Perl-Modules: fix typo. by @Zopolis4 in #17567
• CurlDownloadStrategy: Ignore invalid last-modified header values by @issyl0 in #17571
• feat: check if casks should warn about rosetta by @SMillerDev in #17573
• feat: check for unknown arch for casks by @SMillerDev in #17577
• autoremove: skip formulae where installed_on_request is nil by @Rylan12 in #17589
• Remove redundant early return in livecheck skip_conditions by @Rylan12 in #17591
• style: chdir before running rubocop by @Bo98 in #17595
• cask/audit: filter bad artifacts in rosetta audit by @krehel in #17575
• cask/audit: handle arch-specific detected min OS by @EricFromCanada in #17596
• extract: Add the --git-revision argument by @Kentzo in #17588

New Contributors

• @Zopolis4 made their first contribution in #17567

Full Changelog: 4.3.7...4.3.8

4.3.7

What's Changed

• Homebrew-Governance: Our 501(c)3 is empty by @issyl0 in #17520
• Revert "Use cp -c when copying files" by @apainintheneck in #17526
• utils/gems: handle mismatching EUID and UID for bundle installs by @Bo98 in #17196
• bottle/github_packages: include path_exec_files, all_files. by @MikeMcQuaid in #17518
• Revert "bottle/github_packages: include path_exec_files, all_files." by @p-linnane in #17529
• Remove non-Portable Ruby bootsnap support by @Bo98 in #17534
• bottle/github_packages: include path_exec_files. by @MikeMcQuaid in #17532
• dev-cmd/extract: trim version to only digits/decimals for class & file names by @EricFromCanada in #17537
• cask: ignore minimum macOS in on_os blocks for variations by @EricFromCanada in #17540
• dev-cmd/tap-new: add macos-14 by @bayandin in #17552
• formula_auditor: scope eol check to core tap by @apainintheneck in #17553
• cask/audit: support on_os blocks in audit_min_os by @EricFromCanada in #17548
• formula_installer: fix gh bootstrap cycle by @woodruffw in #17546

Full Changelog: 4.3.6...4.3.7

4.3.6

What's Changed

• diagnostic: don't show cask taps with no casks. by @MikeMcQuaid in #17466
• workflows/docs: various tweaks. by @MikeMcQuaid in #17468
• diagnostic: fix cask taps doctor output. by @MikeMcQuaid in #17467
• workflows/docs: allow reading GitHub Pages. by @MikeMcQuaid in #17469
• docs: more workflow improvements. by @MikeMcQuaid in #17470
• rubocop: remove SpecFilePathSuffix by @p-linnane in #17478
• version: enable strict typing by @Bo98 in #17480
• Fix ZDOTDIR environment variable not being read by @leoheitmannruiz in #17483
• Use cp -c when copying files by @tesaguri in #17373
• docs: fix brew style by @MikeMcQuaid in #17488
• brew tab: new command for editing tab information by @ZhongRuoyu in #17449
• Fix brew style path checking by @samford in #17482
• Fix/reenable brew style docs by @MikeMcQuaid in #17491
• cmd/setup-ruby: fix Portable Ruby install failing by @Bo98 in #17500
• Portable Ruby 3.3.3 by @Bo98 in #17501
• Portable Ruby cleanup/fixes by @MikeMcQuaid in #17503
• pkg: adjust setting permissions by @EricFromCanada in #17499
• vendor-install: fix incorrect portable Ruby version reference. by @MikeMcQuaid in #17504
• style: reject *.sh directories. by @MikeMcQuaid in #17505
• autoremove: don't remove formulae that were built from source by @MikeMcQuaid in #17508
• Ignore runner labels in actionlint by @shivammathur in #17506
• cask: fix trash.swift under Xcode 16 by @Bo98 in #17514
• Fix spelling; Github -> GitHub by @jbampton in #17516
• Cask::Audit: Align user agents with livecheck by @samford in #17512
• bottle/github_packages: include path_exec_files, all_files. by @MikeMcQuaid in #17507
• Revert "bottle/github_packages: include path_exec_files, all_files." by @p-linnane in #17517
• feat: add shared checks for casks and formulae by @SMillerDev in #17381

New Contributors

• @tesaguri made their first contribution in #17373

Full Changelog: 4.3.5...4.3.6

4.3.5

This release contains preliminary macOS 15 Sequoia support. When using macOS 15 betas, remember that:

• You must also update Xcode and the CLT to 16.0 beta
• brew install will default to Sonoma bottles, so formulae like pkg-config and gcc will use the macOS 14 SDK when installed from a bottle
• Formulae built from source may or may not work - pull requests with any relevant fixes are welcome

What's Changed

• Preliminary macOS 15 (Sequoia) support by @Bo98 in #17459
• cmd/list: new fix for exit code when supplied both a cask and formula by @Bo98 in #17465
• tap: fix failing documentation linting. by @MikeMcQuaid in #17456
• github/workflows: split RubyDoc CI job. by @MikeMcQuaid in #17457

Full Changelog: 4.3.4...4.3.5

4.3.4

What's Changed

• Add --scrub flag alias to cleanup command by @garritfra in #17414
• cmd/setup-ruby: handle empty command path. by @MikeMcQuaid in #17417
• bin/brew: fix tracking of original paths with brew-in-brew calls by @Bo98 in #17421
• dev-cmd/edit: Show API install warning after the edit is done by @abitrolly in #17408
• cask: skip variations for inapplicable versions by @EricFromCanada in #17386
• cmd/vendor-install: handle broken shasum. by @MikeMcQuaid in #17425
• Curl#curl_headers: Work with 8 exit_status by @samford in #17412
• attestation: handle :all bottles by @woodruffw in #17438
• ruby-version: move to Library/Homebrew. by @MikeMcQuaid in #17441
• cmd/list: fix exit codes. by @MikeMcQuaid in #17442
• cmake: don't set cmake_minimum_required by @alebcay in #17448
• Fix migrations of formulae and casks to non homebrew taps by @pe in #17385

New Contributors

• @garritfra made their first contribution in #17414
• @pe made their first contribution in #17385

Full Changelog: 4.3.3...4.3.4

4.3.3

What's Changed

• Audit: disable OSDN urls by @Aaron-212 in #17366
• github_runner_matrix: define timeout values in constants by @carlocab in #17280
• style: run actionlint. by @MikeMcQuaid in #17357
• cask/audit: Rework tmpdir removal by @samford in #17377
• dev-cmd/contributions: Fix the date range behaviour by @issyl0 in #17383
• formula_auditor: add exemption for nghttp2 by @carlocab in #17384
• cask/audit: fix nested container extraction by @krehel in #17388
• os/mac: fix fetching Linux bottles on macOS by @MikeMcQuaid in #17396
• Output GitHub warning/error annotations to stderr by @MikeMcQuaid in #17397
• dev-cmd/bump*: improve autobump messaging. by @MikeMcQuaid in #17398
• Portable Ruby 3.3.2 by @MikeMcQuaid in #17399
• Remove unnecessary use of T.cast by @dduugg in #17405
• dev-cmd/contributions: ‘Coauthorship’ sounds weird by @issyl0 in #17407
• Fix constructing search query strings with date ranges by @issyl0 in #17409
• Make more files Sorbet typed: strict by @issyl0 in #17410
• Make brew typecheck --update --suggest-typed bump strictness further by @issyl0 in #17411

New Contributors

• @Aaron-212 made their first contribution in #17366

Full Changelog: 4.3.2...4.3.3

4.3.2

What's Changed

• build(deps): bump ruby/setup-ruby from 1.176.0 to 1.177.0 by @p-linnane in #17339
• Add support for Vernier profiler by @MikeMcQuaid in #17316
• rubocops/shared/desc_helper: fix autocorrect infinite loop by @Bo98 in #17344
• docs: clarify upstream taps by @p-linnane in #17345
• cask/audit: update signing checks for app, binary, and pkg by @krehel in #17031
• dev-cmd/vendor-gems: run bundle clean by @Bo98 in #17351
• Include more Ruby metadata files by @MikeMcQuaid in #17353
• livecheck/strategy: verify --fail-with-body support by @EricFromCanada in #17356
• Clean up cask audit tmpdir after use by @samford in #17358
• dependabot.yml: consistency updates. by @MikeMcQuaid in #17359
• Revert "Enable HOMEBREW_AUTOREMOVE by autoremove_default" by @carlocab in #17364
• fix: allow not validating SBOM by @SMillerDev in #17368
• Revert "Revert "Enable HOMEBREW_AUTOREMOVE by autoremove_default"" by @MikeMcQuaid in #17369
• sbom: fix dependency bottle information in SBOM. by @MikeMcQuaid in #17370

Full Changelog: 4.3.1...4.3.2