Homebrew 6.0.0 was officially released on June 11, introducing new features to improve security and performance for developers worldwide [1]. The update includes tap trust, which requires users to explicitly trust third-party taps before their code executes. This feature aims to strengthen supply-chain security by limiting untrusted code from running during installations [1, 2].
The Linux experience received a significant upgrade through improved sandboxing. Homebrew now uses the Bubblewrap sandbox by default on Linux, bringing Linux closer to macOS in terms of secure environment isolation. The macOS sandbox logic was also refactored to share its codebase with Linux sandboxing, streamlining maintenance and consistency across platforms [1].
Homebrew 6.0.0 also switches its internal API to JSON as the default format. This change consolidates all metadata into a single download, speeding up the update process while reducing network use. According to the release notes, users will see faster brew updates and a smaller data footprint [1].
Performance enhancements and better default settings planned for this release were influenced by a recent user survey, ensuring improvements align with community needs [1, 2].
Homebrew’s developer team highlighted that these combined changes enhance both security and usability across macOS and Linux, aiming for a smoother and safer package management experience.
The new Homebrew 6.0.0 release is available immediately, with users encouraged to upgrade to benefit from the security and performance improvements.