Homebrew 6.0 Enhances Security with Tap Trust and Linux Sandboxing

Homebrew has released version 6.0, introducing a new tap trust mechanism that requires explicit trust for third-party taps, enhancing supply chain security. This version also adds Linux sandboxing for compiling software, a feature already present on macOS. The update aims to mitigate risks associated with running untrusted Ruby code from third-party sources. Homebrew's project lead highlighted the importance of these changes, noting that the trust model is significantly different from npm's. Additionally, a new command, brew vulns, allows users to check for known vulnerabilities in installed packages. Homebrew is phasing out support for Intel macOS, with no new bottles for Intel starting September 2026. The update is well-received among developers, although some express frustration over the transition.

Key Points: • Homebrew 6.0 introduces tap trust requiring explicit approval for third-party taps. • Linux sandboxing is now implemented for compiling software, enhancing security. • The update includes a new command to check for known vulnerabilities in installed packages.