Show HN: Homebrew 6.0.0 (brew.sh)

Article summary

Homebrew 6.0.0 has been released, introducing a new tap trust security mechanism, a faster internal JSON API, and improved performance. The release also includes sandboxing on Linux, better defaults informed by a user survey, and initial support for macOS 27. Additionally, Homebrew has improved its handling of casks, including parallel formula installation and support for AppImage on Linux. The release also includes various deprecations and new features, such as a cooldown mechanism for Bundler and improved security measures.

Main themes

• Homebrew 6.0.0 release
• Security features
• Performance improvements
• Cask management
• macOS support
• Package management
• Supply chain security

What commenters say

• The new release of Homebrew updates all casks by default, even those with auto_updates set to true, which may not be the intended behavior for all users.
• Some users prefer a cooldown mechanism to delay the installation of new packages, reducing the risk of supply chain attacks, while others argue that Homebrew's current approach is sufficient.
• Homebrew's aggressive support phase-out schedule is seen as a drawback by some users, who have switched to alternative package managers like MacPorts or Mise.
• The use of a cooldown mechanism is not a silver bullet for security, and a more comprehensive approach to security, including human review and automated testing, is necessary.
• Some users appreciate the new features and improvements in Homebrew 6.0.0, while others have switched to alternative package managers due to issues with permission, versioning, or surprise updates.
• The trade-off between security and convenience is a concern for some users, who prefer to prioritize one over the other, while others argue that a balance between the two can be achieved.