4.3.7

What's Changed

• Homebrew-Governance: Our 501(c)3 is empty by @issyl0 in #17520
• Revert "Use cp -c when copying files" by @apainintheneck in #17526
• utils/gems: handle mismatching EUID and UID for bundle installs by @Bo98 in #17196
• bottle/github_packages: include path_exec_files, all_files. by @MikeMcQuaid in #17518
• Revert "bottle/github_packages: include path_exec_files, all_files." by @p-linnane in #17529
• Remove non-Portable Ruby bootsnap support by @Bo98 in #17534
• bottle/github_packages: include path_exec_files. by @MikeMcQuaid in #17532
• dev-cmd/extract: trim version to only digits/decimals for class & file names by @EricFromCanada in #17537
• cask: ignore minimum macOS in on_os blocks for variations by @EricFromCanada in #17540
• dev-cmd/tap-new: add macos-14 by @bayandin in #17552
• formula_auditor: scope eol check to core tap by @apainintheneck in #17553
• cask/audit: support on_os blocks in audit_min_os by @EricFromCanada in #17548
• formula_installer: fix gh bootstrap cycle by @woodruffw in #17546

Full Changelog: 4.3.6...4.3.7

4.3.6

What's Changed

• diagnostic: don't show cask taps with no casks. by @MikeMcQuaid in #17466
• workflows/docs: various tweaks. by @MikeMcQuaid in #17468
• diagnostic: fix cask taps doctor output. by @MikeMcQuaid in #17467
• workflows/docs: allow reading GitHub Pages. by @MikeMcQuaid in #17469
• docs: more workflow improvements. by @MikeMcQuaid in #17470
• rubocop: remove SpecFilePathSuffix by @p-linnane in #17478
• version: enable strict typing by @Bo98 in #17480
• Fix ZDOTDIR environment variable not being read by @leoheitmannruiz in #17483
• Use cp -c when copying files by @tesaguri in #17373
• docs: fix brew style by @MikeMcQuaid in #17488
• brew tab: new command for editing tab information by @ZhongRuoyu in #17449
• Fix brew style path checking by @samford in #17482
• Fix/reenable brew style docs by @MikeMcQuaid in #17491
• cmd/setup-ruby: fix Portable Ruby install failing by @Bo98 in #17500
• Portable Ruby 3.3.3 by @Bo98 in #17501
• Portable Ruby cleanup/fixes by @MikeMcQuaid in #17503
• pkg: adjust setting permissions by @EricFromCanada in #17499
• vendor-install: fix incorrect portable Ruby version reference. by @MikeMcQuaid in #17504
• style: reject *.sh directories. by @MikeMcQuaid in #17505
• autoremove: don't remove formulae that were built from source by @MikeMcQuaid in #17508
• Ignore runner labels in actionlint by @shivammathur in #17506
• cask: fix trash.swift under Xcode 16 by @Bo98 in #17514
• Fix spelling; Github -> GitHub by @jbampton in #17516
• Cask::Audit: Align user agents with livecheck by @samford in #17512
• bottle/github_packages: include path_exec_files, all_files. by @MikeMcQuaid in #17507
• Revert "bottle/github_packages: include path_exec_files, all_files." by @p-linnane in #17517
• feat: add shared checks for casks and formulae by @SMillerDev in #17381

New Contributors

• @tesaguri made their first contribution in #17373

Full Changelog: 4.3.5...4.3.6

4.3.5

This release contains preliminary macOS 15 Sequoia support. When using macOS 15 betas, remember that:

• You must also update Xcode and the CLT to 16.0 beta
• brew install will default to Sonoma bottles, so formulae like pkg-config and gcc will use the macOS 14 SDK when installed from a bottle
• Formulae built from source may or may not work - pull requests with any relevant fixes are welcome

What's Changed

• Preliminary macOS 15 (Sequoia) support by @Bo98 in #17459
• cmd/list: new fix for exit code when supplied both a cask and formula by @Bo98 in #17465
• tap: fix failing documentation linting. by @MikeMcQuaid in #17456
• github/workflows: split RubyDoc CI job. by @MikeMcQuaid in #17457

Full Changelog: 4.3.4...4.3.5

4.3.4

What's Changed

• Add --scrub flag alias to cleanup command by @garritfra in #17414
• cmd/setup-ruby: handle empty command path. by @MikeMcQuaid in #17417
• bin/brew: fix tracking of original paths with brew-in-brew calls by @Bo98 in #17421
• dev-cmd/edit: Show API install warning after the edit is done by @abitrolly in #17408
• cask: skip variations for inapplicable versions by @EricFromCanada in #17386
• cmd/vendor-install: handle broken shasum. by @MikeMcQuaid in #17425
• Curl#curl_headers: Work with 8 exit_status by @samford in #17412
• attestation: handle :all bottles by @woodruffw in #17438
• ruby-version: move to Library/Homebrew. by @MikeMcQuaid in #17441
• cmd/list: fix exit codes. by @MikeMcQuaid in #17442
• cmake: don't set cmake_minimum_required by @alebcay in #17448
• Fix migrations of formulae and casks to non homebrew taps by @pe in #17385

New Contributors

• @garritfra made their first contribution in #17414
• @pe made their first contribution in #17385

Full Changelog: 4.3.3...4.3.4

4.3.3

What's Changed

• Audit: disable OSDN urls by @Aaron-212 in #17366
• github_runner_matrix: define timeout values in constants by @carlocab in #17280
• style: run actionlint. by @MikeMcQuaid in #17357
• cask/audit: Rework tmpdir removal by @samford in #17377
• dev-cmd/contributions: Fix the date range behaviour by @issyl0 in #17383
• formula_auditor: add exemption for nghttp2 by @carlocab in #17384
• cask/audit: fix nested container extraction by @krehel in #17388
• os/mac: fix fetching Linux bottles on macOS by @MikeMcQuaid in #17396
• Output GitHub warning/error annotations to stderr by @MikeMcQuaid in #17397
• dev-cmd/bump*: improve autobump messaging. by @MikeMcQuaid in #17398
• Portable Ruby 3.3.2 by @MikeMcQuaid in #17399
• Remove unnecessary use of T.cast by @dduugg in #17405
• dev-cmd/contributions: ‘Coauthorship’ sounds weird by @issyl0 in #17407
• Fix constructing search query strings with date ranges by @issyl0 in #17409
• Make more files Sorbet typed: strict by @issyl0 in #17410
• Make brew typecheck --update --suggest-typed bump strictness further by @issyl0 in #17411

New Contributors

• @Aaron-212 made their first contribution in #17366

Full Changelog: 4.3.2...4.3.3

4.3.2

What's Changed

• build(deps): bump ruby/setup-ruby from 1.176.0 to 1.177.0 by @p-linnane in #17339
• Add support for Vernier profiler by @MikeMcQuaid in #17316
• rubocops/shared/desc_helper: fix autocorrect infinite loop by @Bo98 in #17344
• docs: clarify upstream taps by @p-linnane in #17345
• cask/audit: update signing checks for app, binary, and pkg by @krehel in #17031
• dev-cmd/vendor-gems: run bundle clean by @Bo98 in #17351
• Include more Ruby metadata files by @MikeMcQuaid in #17353
• livecheck/strategy: verify --fail-with-body support by @EricFromCanada in #17356
• Clean up cask audit tmpdir after use by @samford in #17358
• dependabot.yml: consistency updates. by @MikeMcQuaid in #17359
• Revert "Enable HOMEBREW_AUTOREMOVE by autoremove_default" by @carlocab in #17364
• fix: allow not validating SBOM by @SMillerDev in #17368
• Revert "Revert "Enable HOMEBREW_AUTOREMOVE by autoremove_default"" by @MikeMcQuaid in #17369
• sbom: fix dependency bottle information in SBOM. by @MikeMcQuaid in #17370

Full Changelog: 4.3.1...4.3.2

4.3.1

What's Changed

• Add Ubuntu 24.04 Docker image by @Bo98 in #17293
• messages: enable strict typing by @alebcay in #17287
• brew.sh: cache HOMEBREW_VERSION on disk. by @MikeMcQuaid in #17292
• Added a list of extensions to pre-install in Codespaces by @okineadev in #17298
• Add HOMEBREW_ARTIFACT_DOMAIN_NO_FALLBACK by @MikeMcQuaid in #17295
• attestation: redact secret in environment by @woodruffw in #17302
• utils/gems: use HOMEBREW_CACHE for bundler cache. by @MikeMcQuaid in #17304
• linkage_checker: remove gcc from @indirect_deps on Linux by @carlocab in #17306
• utils/gems: handle undefined HOMEBREW_CACHE. by @MikeMcQuaid in #17313
• cask/audit: fix sharding for font-* casks by @bevanjkay in #17311
• docs: update for Homebrew/cask-fonts deprecation by @p-linnane in #17314
• feat: note that Homebrew does not have a sandbox on Linux by @SMillerDev in #17318
• Portable Ruby 3.3.1 by @MikeMcQuaid in #17312
• Speed up brew list by @MikeMcQuaid in #17317
• extend/pathname/rmtree: improve comment. by @MikeMcQuaid in #17322
• Hide default gems warnings for Ruby 3.4. by @MikeMcQuaid in #17315
• rubocop: target Ruby 3.3. by @MikeMcQuaid in #17323
• Dockerfile: drop libz-dev by @Bo98 in #16702
• utils/gems: use BUNDLE_USER_CACHE instead of BUNDLE_CACHE_PATH. by @MikeMcQuaid in #17324
• env_config: add HOMEBREW_BUNDLE_USER_CACHE. by @MikeMcQuaid in #17327
• formula: trap CMake FetchContent usage instead of using FETCHCONTENT_FULLY_DISCONNECTED by @alebcay in #17310
• attestation: drop workflow check on core attestation by @woodruffw in #17331
• utils/shell: add + to safe shell characters by @carlocab in #17330
• Add necesarry --force to tap instructions by @leoheitmannruiz in #17335
• extend/pathname: import rmtree again. by @MikeMcQuaid in #17329
• SBOM: various fixes. by @MikeMcQuaid in #17336

New Contributors

• @okineadev made their first contribution in #17298

Full Changelog: 4.3.0...4.3.1

4.3.0

Release notes for this release can be found on the Homebrew blog.

What's Changed

• env_config: add HOMEBREW_ALLOWED_TAPS by @carlocab in #17213
• cask/audit: tune sourceforge.net URL regex by @EricFromCanada in #17241
• brew.sh: shift -v to the end of the parameter list earlier. by @MikeMcQuaid in #17244
• tap: allow/forbid installation of taps from environment variables. by @MikeMcQuaid in #17245
• Homebrew 4.3.0 deprecation/disable/removals. by @MikeMcQuaid in #17233
• feat: add generated SPDX file on bottling by @SMillerDev in #16594
• caveats_spec: remove outdated plist_startup reference. by @MikeMcQuaid in #17248
• tap: update core tap --force messaging by @apainintheneck in #17251
• extract_plist: fix passing an alternative url by @bevanjkay in #17252
• Fix cask source file path loading issues by @apainintheneck in #17242
• cmd/update.sh: check initial branch is not master by @dkav in #17259
• utils/github/api: use real UID for auth fetching by @Bo98 in #17262
• SBOM improvements by @MikeMcQuaid in #17254
• extend/kernel: make opoo/odie/etc. print GitHub Actions notes. by @MikeMcQuaid in #17255
• github_runner_matrix: support orchestrator long build queues by @carlocab in #17219
• formula_installer: don't fire cask warnings when installing. by @MikeMcQuaid in #17263
• Enable HOMEBREW_AUTOREMOVE by default by @MikeMcQuaid in #17261
• dev-cmd/tap-new: add Brewfile documentation to readme template by @jasonkarns in #17256
• fix no autoremove suggestion typo by @apainintheneck in #17266
• Revert "Create '.keepme' files in directories" by @MikeMcQuaid in #17268
• extend/kernel: add sigs to opoo/onoe/ofail by @MikeMcQuaid in #17270
• docs/Installation: Use the documented --strip-components tar argument by @mrpippy in #17271
• Support font sharding in Homebrew/cask by @krehel in #17265
• github_runner_matrix: add -x86_64 to Intel runner names by @carlocab in #17222
• fix: use UTC for all SBOM times by @SMillerDev in #17282
• tap: adjust font cask path by @p-linnane in #17283
• SBOM: more fixes. by @MikeMcQuaid in #17284
• formula: this was nilable before so remove it. by @MikeMcQuaid in #17285
• various: fix minor typos by @p-linnane in #17291
• docs: add local build instructions by @EricFromCanada in #17289

New Contributors

• @mrpippy made their first contribution in #17271

Full Changelog: 4.2.21...4.3.0

4.2.21

What's Changed

• Document Tab.for_keg and use Keg#tab where possible. by @reitermarkus in #17168
• shims/super/cc: avoid passing -oso_prefix during configure by @carlocab in #17169
• startup/bootsnap: raise repeated LoadError. by @MikeMcQuaid in #17177
• fix: Display a warning (instead of exiting early) when unable to find recent issues on a tap by @boblail in #17182
• brew.sh: auto-update 3rd-party taps more often. by @MikeMcQuaid in #17179
• Cookbook document what Operation not permitted means by @mohawk2 in #17176
• install-bundler-gems: change_privilege when necessary. by @MikeMcQuaid in #17178
• Remove disabled extend. by @reitermarkus in #17184
• Various improvements for brew command by @MikeMcQuaid in #17186
• Call Homebrew.install_bundler_gems! more consistently. by @MikeMcQuaid in #17185
• Optimise more command handling/speed by @MikeMcQuaid in #17188
• Remove the signing workflow for backfill attestation checks by @josephsweeney in #17190
• brew.sh: fix argument handling for a few commands. by @MikeMcQuaid in #17192
• New formula internal json v3 dependencies format by @apainintheneck in #17153
• Warn about undocumented non-private APIs. by @reitermarkus in #17165
• cmd/leaves: fix an undefined method error by @ZhongRuoyu in #17200
• Fix internal formula json v3 frozen hash parsing bug by @apainintheneck in #17201
• compilers: add gcc-14 by @fxcoudert in #17202
• Library/Homebrew: move stdin ruby scripts to files under utils. by @MikeMcQuaid in #17204
• homebrew/cask-versions: remove by @razvanazamfirei in #17207
• docs: update for Homebrew/cask-versions deprecation by @p-linnane in #17208
• Cask-Cookbook: remove outdated URL by @p-linnane in #17210
• various: remove remaining Homebrew/cask-versions references by @p-linnane in #17209
• formula: fix missing test resources. by @MikeMcQuaid in #17211
• dev-cmd/tests: skip tests that require core if it's not tapped by @apainintheneck in #17212
• docs/cask-cookbook: token examples for versioned/development casks by @bevanjkay in #17214
• Pypi: Update strategy regex by @samford in #17218
• cmd/generate-cask-api: include cask renames by @EricFromCanada in #17225
• tap: tweak core tap warning by @apainintheneck in #17227
• attestations: improve authentication techniques by @woodruffw in #17220
• Add resource signature. by @reitermarkus in #17223
• Replace FormulaTextAuditor usage by @issyl0 in #17228

New Contributors

• @mohawk2 made their first contribution in #17176

Full Changelog: 4.2.20...4.2.21

4.2.20

What's Changed

• cmd/deps: add --os and --arch by @cho-m in #17122
• Create individually namespace args for each command by @dduugg in #17123
• Explicitly mark non-private APIs. by @reitermarkus in #17128
• Support for opt-in network isolation in build/test sandboxes by @alebcay in #17081
• cmd/list: support listing formulae installed on request or automatically by @ZhongRuoyu in #17125
• Revert "formula: configure git/npm to ignore .brew_home" by @MikeMcQuaid in #17131
• Explicitly mark non-public APIs. by @reitermarkus in #17132
• utils/github: paginate artifact API result by @ZhongRuoyu in #17138
• Revert "Revert "os/linux/elf: avoid using ldd for listing dynamic dependencies"" by @ZhongRuoyu in #17136
• Update External-Commands docs for new command abstraction by @dduugg in #17139
• extend/ENV/super: avoid adding llvm to HOMEBREW_LIBRARY_PATHS by @carlocab in #17104
• Reapply "formula: configure git/npm to ignore .brew_home" by @branchvincent in #17141
• sandbox: enable strict typing by @alebcay in #17148
• feat: add audit for wayback machine URLs by @SMillerDev in #16476
• analytics: support command and test-bot analytics. by @MikeMcQuaid in #16847
• os/linux/kernel: enable strict typing by @alebcay in #17152
• checksum: enable strict typing by @alebcay in #17151
• cmd/*-sync: avoid clobbering existing user installations by @carlocab in #17155
• Remove unused private method. by @reitermarkus in #17156
• Hide #inspect and #to_s in docs. by @reitermarkus in #17157
• utils/analytics: cleanup test-bot analytics. by @MikeMcQuaid in #17154
• utils/analytics: revert a test-bot analytics change. by @MikeMcQuaid in #17158
• Make documentation @api private by default. by @reitermarkus in #16831
• elf: expand $ORIGIN in RUNPATH/RPATH entries by @alebcay in #17149
• utils/gzip: enable strict typing by @alebcay in #17171
• utils/backtrace: enable strict typing by @alebcay in #17170

Full Changelog: 4.2.19...4.2.20