6.0.9

What's Changed

• install_steps: handle EUID/UID like postinstall does by @Bo98 in #22985
• cask/upgrade: don't lose the original exception when rollback itself fails by @aholland in #22997
• Defer reinstall keg backup and silence analytics curl output by @p-linnane in #22994
• cask: don't crash upgrade when staged version directory is missing by @gecube in #22999
• perf/config: gather system configuration concurrently (~31% faster) by @dduugg in #22989
• github_runner_matrix: unique runner for each shard by @cho-m in #22991
• Avoid filesystem checks from Pathname presence tests by @dduugg in #22988
• Warn when all bottles are lost by @MikeMcQuaid in #22971
• cask/upgrade: make the post-install quarantine release actually run by @aholland in #23002
• Write cask receipts on upgrade by @MikeMcQuaid in #23001
• Use sudo user's tap trust by @MikeMcQuaid in #23000
• Dockerfile: add GCC 14 for compiler selection to use by @cho-m in #23003
• Use new Linux self-hosted setup by @Bo98 in #22995
• dev-cmd/bump-formula-pr: avoid attempting same resource update by @cho-m in #23004

New Contributors

• @gecube made their first contribution in #22999

Full Changelog: 6.0.8...6.0.9

6.0.8

What's Changed

• test/bundle/brew_spec: allow running test on generic OS by @cho-m in #22973
• Add source option to brew bundle uv tools by @danielfleischer in #22963
• test/test_bot_spec: use :trust_store context when testing trust by @cho-m in #22972
• Update issue links in docs to use correct template by @SMillerDev in #22982
• Store bottle SBOM data in manifests by @MikeMcQuaid in #22981
• Clarify install output for durations and single deps by @HaraldNordgren in #22980
• perf/sorbet: skip sorbet-runtime dispatch when runtime disabled (~6-8% faster) by @dduugg in #22978
• Fix stale cask upgrade metadata by @MikeMcQuaid in #22986
• perf/tap-info: generate tap hashes concurrently (up to ~77% faster) by @dduugg in #22975
• perf/upgrade: avoid linear scans of core formula names (~20% faster) by @dduugg in #22977
• Add structured link install steps by @MikeMcQuaid in #22987

New Contributors

• @danielfleischer made their first contribution in #22963

Full Changelog: 6.0.7...6.0.8

6.0.7

What's Changed

• ENV/super: set CC and CXX to unversioned gcc on Linux by @cho-m in #22889
• audit: require curl dependencies to have a working HTTP mirror by @p-linnane in #22898
• Force CMake to find shims before $HOMEBREW_PREFIX/bin by @cho-m in #22916
• Improve awkward wording of Backing Up App by @carter-thaxton in #22918
• bump-cask-pr: error when update fails by @samford in #22901
• contributions: fix type error by @samford in #22915
• extend/ENV/super: set CC/CXX to real names for llvm_clang by @cho-m in #22920
• bump: fix with invalid arch by @bevanjkay in #22910
• style: fix infinite loop in array alphabetisation by @bevanjkay in #22912
• os/mac/mach: avoid delegate for dylib_id by @cho-m in #22924
• Isolate the upgrade summary alignment spec from the formula API by @p-linnane in #22935
• Stabilize dependency-related tests by @p-linnane in #22927
• cask/artifact/pkg: fix type error by @samford in #22923
• docs/Formula-Cookbook: write_env_script needs binary path by @abitrolly in #22934
• Allow running bubblewrap in container by @cho-m in #22907
• Clarify Linux build tools installation instructions by @p-linnane in #22925
• Cache formula lookups during dependency expansion by @p-linnane in #22930
• Add CCACHE_FOUND=OFF to default CMake flags by @matteosecli in #22902
• Info: hide unlinkable kegs by @HaraldNordgren in #22897
• formula_auditor: propagate OS requirement to dependents by @cho-m in #22938
• docs/Tap-Trust: replace announcement of future changes with what came to pass by @unitof in #22928
• Adjust Subversion checkout operands by @MikeMcQuaid in #22942
• Remove T.let from frozen constants Sorbet can now infer by @dduugg in #22949
• Prepare cask taps before bundle jobs by @MikeMcQuaid in #22943
• Restrict livecheck redirects by @MikeMcQuaid in #22944
• Limit headered curl redirects by @MikeMcQuaid in #22945
• Uninstall untrusted casks safely by @MikeMcQuaid in #22946
• Add install step write cops by @MikeMcQuaid in #22947
• upgrade: Split deps and find older version better by @HaraldNordgren in #22951
• install_steps: allow gtk_update_icon_cache to run gtk4-update-icon-cache by @cho-m in #22953
• dev-cmd/test-bot: make --skip-recursive-dependents default by @cho-m in #22950
• Ignore same-name cask migrations by @MikeMcQuaid in #22955
• Allow staged install step conversion by @MikeMcQuaid in #22960
• Prune stale cask downloads by @MikeMcQuaid in #22962
• Store cask metadata as JSON more often by @MikeMcQuaid in #22952
• Preserve bottled SBOMs on pour by @MikeMcQuaid in #22956
• cask/staged: check App Management permissions before chown by @MiMoHo in #22967
• doc: Clarify version explanation of --json info by @okuramasafumi in #22877
• test_bot/formulae: handle runtime deps similar to Formula by @cho-m in #22964
• info: bold dependencies of uninstalled packages by @HaraldNordgren in #22965
• Add install step data directories by @MikeMcQuaid in #22961
• Remove redundant T.let annotations by @dduugg in #22974

New Contributors

• @carter-thaxton made their first contribution in #22918
• @matteosecli made their first contribution in #22902
• @MiMoHo made their first contribution in #22967
• @okuramasafumi made their first contribution in #22877

Full Changelog: 6.0.6...6.0.7

6.0.5

What's Changed

• rubocop/formula_path_methods: add formula_opt_include method by @botantony in #22867
• Reject patch targets that escape the staged source tree by @p-linnane in #22881
• system_command: use Process.spawn to avoid fork-unsafe exec3 child by @p-linnane in #22880
• formula: std_meson_args prefix param and relative libdir by @cho-m in #22888
• Expand deferred env in curl URLs by @MikeMcQuaid in #22886

Full Changelog: 6.0.4...6.0.5

6.0.4

What's Changed

• Cask Cookbook: document generate_completions_from_executable stanza by @bevanjkay in #22848
• generate_completions: add style for default shells and auto corrections by @daeho-ro in #22841
• Add bump-compatibility-version command by @p-linnane in #22846
• Filter info JSON package types by @MikeMcQuaid in #22851
• Enable formula path helper cop by @MikeMcQuaid in #22845
• Rescue MethodDeprecatedError when attempting to load installed caskfiles by @Rylan12 in #22856
• Speed up tests by @MikeMcQuaid in #22852
• Approve stale lead maintainer PRs by @MikeMcQuaid in #22818
• Rescue MethodDeprecatedError when loading from installed caskfile in installer by @Rylan12 in #22859
• Align upgrade summary columns by @paulogdm in #22844
• Remove dead Formula methods and annotate public DSL by @dduugg in #22733
• download_queue: use tuple instead of T::Array by @botantony in #22861
• Warn about missing libraries in brew info by @HaraldNordgren in #22849
• utils/path: add formula_opt_include helper by @botantony in #22865
• Forward the --quiet flag to all brew bundle subcommands by @wfarr in #22868
• patch: add type and resolves DSL for annotating patches by @andrew in #22466
• Support path helpers in services by @MikeMcQuaid in #22870
• Disable tap Git credential prompts by @MikeMcQuaid in #22869
• Fix HOMEBREW_FORBID_PACKAGES_FROM_PATHS bypasses by @p-linnane in #22872
• formula_auditor: audit new formulae for duplicates by @botantony in #22860
• bump-formula-pr: do not repeat release notes multiple times by @botantony in #22871
• Redact GitHub token in bump dry-run output by @p-linnane in #22874
• Reject inline cask definitions passed to the MCP server by @p-linnane in #22875
• Key Brewfile trust entries by custom tap remotes by @liby in #22862
• Fix core cask tap redirects by @MikeMcQuaid in #22876

New Contributors

• @paulogdm made their first contribution in #22844
• @wfarr made their first contribution in #22868
• @liby made their first contribution in #22862

Full Changelog: 6.0.3...6.0.4

6.0.3

What's Changed

• docs: drop advice to disable security or lower support tier by @MikeMcQuaid in #22749
• release: exclude Dependabot PRs from changelog by @ZhongRuoyu in #22750
• Document more supply-chain guardrails by @MikeMcQuaid in #22752
• Allow tap trust in build sandbox by @MikeMcQuaid in #22751
• Don't warn for partially trusted skipped taps by @MikeMcQuaid in #22755
• services: check --sudo-service-user exists by @sexagesimal in #22763
• Follow symlinked trust stores by @MikeMcQuaid in #22762
• Annotate upgradable dependencies in install plans by @HaraldNordgren in #22761
• livecheck: add compressed option by @samford in #22757
• Don't bold upgradable dependencies in install plans by @HaraldNordgren in #22765
• formula_installer: skip conflicts if not linking by @cho-m in #22766
• Preserve tap remotes in bundle dumps by @MikeMcQuaid in #22754
• Stabilise formula auditor merge-base specs by @MikeMcQuaid in #22760
• Enable Sorbet/ConstantsFromStrings and override cops by @MikeMcQuaid in #22758
• Drop redundant installed guard from pretty_install_status callers by @HaraldNordgren in #22767
• Skip self-conflicts during install by @MikeMcQuaid in #22764
• Add install step config writes by @MikeMcQuaid in #22759
• Locate installed racks from untrusted taps by @MikeMcQuaid in #22771
• Read user Git config for private downloads by @MikeMcQuaid in #22779
• formula_installer: create opt link even when skip_link by @cho-m in #22783
• Ask PR authors for motivation and bug reproduction steps by @MikeMcQuaid in #22787
• Revert pull request #22767 by @HaraldNordgren in #22791
• Null Git global config for source_modified_time by @MikeMcQuaid in #22789
• Skip invalid casks in Cask::Cask.all by @MikeMcQuaid in #22780
• Trust custom-remote tap by reference in test-bot by @MikeMcQuaid in #22781
• Tighten issue template wording for brevity by @MikeMcQuaid in #22790
• Support tap trust in Brewfiles by @MikeMcQuaid in #22772
• Skip auto-update outdated list before upgrade/outdated by @MikeMcQuaid in #22786
• Null Git global config for local repository inspections by @carlocab in #22797
• manpages: update Struct to T::Struct by @cho-m in #22798
• bundle: narrow types by @cho-m in #22799
• audit: fix except_cops array by @samford in #22800
• support splitting cask versions by arch by @TyceHerrman in #22462
• Fix brew bundle topological sort crash on missing dependency node by @bendrucker in #22803
• Handle API source patch symlinks by @MikeMcQuaid in #22806
• Fix caveats replacing order (HOMEBREW_PREFIX) in API formula reconstruction by @umireon in #22810
• dev-cmd/tap-new: update actions versions by @simnalamburt in #22811
• cask/installer: prepend cask name to macOS requirement error by @cho-m in #22816
• Avoid duplicate upgrade warnings by @MikeMcQuaid in #22805
• Restore test-bot tap trust by @MikeMcQuaid in #22814
• Secure tap bottle publishing by @MikeMcQuaid in #22815
• Name the formula or cask in requirement error messages by @p-linnane in #22817
• trust: replace T.untyped by @cho-m in #22819
• livecheck: prevent unnecessary boolean args by @samford in #22823
• generate-zap: load casks via named args and skip unreadable dirs by @p-linnane in #22821
• Clarify tap trust warning next steps by @joshka in #22777
• Improve generate-zap Full Disk Access errors by @loganrosen in #22730
• Respect auto-update cask opt-out by @MikeMcQuaid in #22825
• Share opt-bin PATH helpers by @MikeMcQuaid in #22827
• list: add --no-installed-on-request switch by @p-linnane in #22829
• workflows/vendor-gems: change app-id to client-id by @p-linnane in #22832
• github_runner_matrix: exclude disabled dependents from testing by @dtrodrigues in #22834
• Allow sometimes skipping the sandbox inside nested sandboxes by @MikeMcQuaid in #22793
• patch: add directory for local patch by @daeho-ro in #22836
• Rename Homebrew security docs page by @MikeMcQuaid in #22839
• Fix bundle jobs cask deps by @MikeMcQuaid in #22838
• github_runner_matrix: exclude deprecated dependents from testing by @dtrodrigues in #22843
• Avoid formula objects for stable paths by @MikeMcQuaid in #22840

New Contributors

• @TyceHerrman made their first contribution in #22462
• @simnalamburt made their first contribution in #22811

Full Changelog: 6.0.2...6.0.3

6.0.2

What's Changed

• rubocops/lines: add JavaVersions cop by @cho-m in #22681
• os/mac/hardware/cpu: fallback to generic CPU detection if sysctl fails by @Bo98 in #22682
• Handle pinned dependency failures in upgrade previews by @rexmhall09 in #22683
• codex/hooks: return JSON. by @MikeMcQuaid in #22686
• build(deps): bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in #22689
• build(deps): bump the bundler group across 2 directories with 11 updates by @dependabot[bot] in #22688
• sandbox: deny all of $HOME except Homebrew dirs by @MikeMcQuaid in #22660
• Trust custom remote items by @MikeMcQuaid in #22695
• Report only successful upgrades by @MikeMcQuaid in #22702
• Restore user alias completions by @MikeMcQuaid in #22693
• Expose sandboxed command execution by @MikeMcQuaid in #22696
• Use API bottle metadata for fetch by @MikeMcQuaid in #22666
• Retarget redirected tap trust by @MikeMcQuaid in #22706
• sandbox: fix deny_read_home crashes and trust check by @MikeMcQuaid in #22700
• Use API cask metadata for fetch by @MikeMcQuaid in #22670
• Start install downloads earlier by @MikeMcQuaid in #22662
• Avoid sandbox user config reads by @MikeMcQuaid in #22712
• Limit sandbox home deny rules by @MikeMcQuaid in #22715
• test: deny shell config reads in sandboxed home by @p-linnane in #22716
• sandbox: scope require "trust" to avoid brew irb failure by @cho-m in #22717
• which-formula: parse all expected cli options by @rrotter in #22709
• Fix Codex stop hook brew lgtm output (again) by @MikeMcQuaid in #22722
• Drop GitHub code coverage upload by @MikeMcQuaid in #22723
• formula: restore missing finding aliases for old tabs by @cho-m in #22714
• Add command to set up sandbox by @SMillerDev in #22691
• Handle mksh in Utils::Shell.set_variable_in_profile by @thiagogenez in #22727
• Make bottle cache checks cheaper by @MikeMcQuaid in #22720
• Keep tap remotes visible in builds by @MikeMcQuaid in #22721
• help: run an external command's own --help when undocumented by @p-linnane in #22725
• Allow Bubblewrap auto-install by @MikeMcQuaid in #22728
• generate-zap: search app bundle identifiers by @loganrosen in #22731
• formula: add Zig CPU to std_zig_args by @cho-m in #22735
• untap: continue processing remaining taps on failure by @aqeelat in #22743
• resource: remove Resource::Go by @cho-m in #22738
• Source utils.sh in items.sh for opoo by @MikeMcQuaid in #22744
• Do not prompt for confirmation on dry-run upgrade by @MikeMcQuaid in #22747

New Contributors

• @thiagogenez made their first contribution in #22727
• @aqeelat made their first contribution in #22743

Full Changelog: 6.0.1...6.0.2

6.0.1

What's Changed

• Remove note on Homebrew sandboxing for Linux by @SMillerDev in #22661
• simulate_system: add missing require by @Bo98 in #22664
• Handle split cask bundle versions by @MikeMcQuaid in #22665
• formula_installer: simplify bubblewrap handling by @Bo98 in #22669
• bundle/dsl: fix kwargs handling for taps by @Bo98 in #22678
• Include cask tap in core taps on all platforms by @p-linnane in #22677
• bundle/parallel_installer: install taps before packages by @Bo98 in #22680

Full Changelog: 6.0.0...6.0.1

6.0.0

What's Changed

• services: fix not loading with --sudo-service-user by @sexagesimal in #22500
• livecheck/strategy: convert Version to String by @botantony in #22526
• brew bundle dump trusted bundle entries by @MikeMcQuaid in #22528
• pathname: accept Pathname in write_env_script method by @botantony in #22529
• docs: link to Tap-Trust from index by @scpeters in #22533
• Block worktree updates by @MikeMcQuaid in #22525
• Handle untrusted bundle formulae by @MikeMcQuaid in #22527
• test: use language-specific heredoc delimiters by @botantony in #22536
• pathname: change env_script_all_files type by @botantony in #22538
• Allow logs in build sandbox by @MikeMcQuaid in #22539
• HeaderMatch: fix type error by @samford in #22530
• test_bot/formulae_dependents: avoid overwriting shard_index by @cho-m in #22543
• Default bundle jobs to auto by @MikeMcQuaid in #22545
• Hide maintainer commands by @MikeMcQuaid in #22547
• sorbet: Less RBI duplication to successfully typecheck RSpec tests by @issyl0 in #22540
• Speed up cask backup copies by @MikeMcQuaid in #22552
• Allow rebuild install step methods by @MikeMcQuaid in #22554
• Add Bundler cooldown by @MikeMcQuaid in #22555
• Skip untrusted cleanup formulae by @MikeMcQuaid in #22553
• sorbet: Bump more tests to typed: true by @issyl0 in #22542
• generate-cask-ci-matrix: respect maximum_macos requirement by @p-linnane in #22556
• workflows/tests: test test-bot on containerless Linux by @Bo98 in #22557
• Label WSL analytics by @MikeMcQuaid in #22558
• Remove PLC references by @MikeMcQuaid in #22561
• Silence trust warnings in completion by @MikeMcQuaid in #22559
• Default to internal API by @MikeMcQuaid in #22546
• Audit redundant service path setup by @MikeMcQuaid in #22514
• rubocops/cask/url: fix keyword parameter check and autocorrect by @carlocab in #22562
• formula_creator: update Ruby to match common env order by @cho-m in #22564
• Use public API for autobump by @MikeMcQuaid in #22565
• Add Homebrew/UnreferencedLet cop by @dduugg in #22566
• build(deps): bump the bundler group across 2 directories with 9 updates by @dependabot[bot] in #22550
• Fix skip_relocation? on Linux by @cho-m in #22567
• test: disable return false handling by @hyuraku in #22147
• Add rebuild step RuboCop checks by @MikeMcQuaid in #22515
• Migrate to Ubuntu 24.04 by @cho-m in #21761
• cask/dsl/caveats: fix built_in_caveats type by @samford in #22534
• Avoid frozen update report arrays by @MikeMcQuaid in #22573
• Avoid untap tracebacks by @MikeMcQuaid in #22572
• keg: make share/mime into a real directory by @cho-m in #22579
• cask/audit: normalize 10.16 minimum macOS by @SSakutaro in #22574
• Cask::Auditor: fix audit return type by @samford in #22578
• info: clarify same-named conflicts and shadowed formulae by @HaraldNordgren in #22537
• Homebrew 6 deprecations by @MikeMcQuaid in #22549
• Remove remote theme usage, improve README by @MikeMcQuaid in #22563
• Skip valid cached cask fetches by @MikeMcQuaid in #22580
• workflows/docker: build Ubuntu 26.04 images by @ZhongRuoyu in #22586
• generate-cask-ci-matrix: remove deprecated --signing flag from audit arguments by @botantony in #22587
• Tweak macOS .pkg package-user plist handling by @MikeMcQuaid in #22581
• Clean up leftover .reinstall kegs by @MikeMcQuaid in #22584
• cmd/info: fix --installed by @Bo98 in #22588
• Handle formulae and casks more uniformly across commands by @HaraldNordgren in #22585
• Pin tap allow/forbid/trust lists to remotes by @MikeMcQuaid in #22590
• Ignore .git suffix when matching GitHub tap remotes by @p-linnane in #22604
• utils/inreplace: fix errors type by @botantony in #22605
• Preliminary macOS 27 (Golden Gate) support by @Bo98 in #22592
• trust: support trusting tap by remote URL by @carlocab in #22611
• tap: recognise more equivalent remote forms by @carlocab in #22612
• docs: improve docs. by @MikeMcQuaid in #22598
• Stop auto-tapping untrusted taps by @MikeMcQuaid in #22599
• Make brew bundle honour the trusted: option by @MikeMcQuaid in #22594
• cmd/untap: allow to untap a repo if package raises MethodDeprecatedError by @botantony in #22602
• description_cache_store: require formula_versions by @aholland in #22610
• Fix brew tests tap trust config home by @p-linnane in #22614
• sorbet: Typecheck even more tests by @issyl0 in #22575
• Deflake bzip2 cask installer test by @MikeMcQuaid in #22615
• Consolidate tap remote normalisation logic by @MikeMcQuaid in #22616
• Deprecate default opt-ins by @MikeMcQuaid in #22601
• tap: add trusted field to tap-info by @Bo98 in #22613
• Trust qualified tap items before install by @MikeMcQuaid in #22621
• Defer HOMEBREW_ env secrets to download time by @MikeMcQuaid in #22623
• Mark custom-remote taps trusted in bundle dump by @MikeMcQuaid in #22625
• description_cache_store/cask: require formula_versions by @aholland in #22626
• cmd/trust: add --json=v1 flag by @Bo98 in #22624
• Loosen issue/PR template completeness checks by @MikeMcQuaid in #22627
• extend/ENV/std: remove unused Clang < 700 by @cho-m in #22630
• bottle_specification: add constants for cellar symbols by @cho-m in #22629
• Fix brew bundle failures for trusted taps by @p-linnane in #22634
• Emit Linux variations for casks with Linux checksums by @p-linnane in #22632
• pathname: change write_env_script type by @botantony in #22638
• Avoid loading tap commands on completion rebuild by @MikeMcQuaid in #22637
• Document Brewfile tap trust by @MikeMcQuaid in #22635
• Run brew lgtm on stop in AI hooks by @MikeMcQuaid in #22639
• Deprecate now-default bundle and internal API env vars by @MikeMcQuaid in #22641
• docs: only lint index.md when it exists by @MikeMcQuaid in #22640
• Fix typo in FFmpeg audit command by @qzubad in #22642
• Base --changed commands on origin/HEAD by @MikeMcQuaid in #22644
• utils/ast: find resources if they are in stable block by @botantony in #22646
• workflows/tests: speed up glibc test runner by @cho-m in #22648
• Isolate trust store specs to fix flaky test by @MikeMcQuaid in #22649
• cask/caskroom: handle untrusted errors better by @Bo98 in #22652
• livecheck/strategy/extract_plist: fix runtime type issue by @bevanjkay in #22653
• cmd/trust: add --taps by @Bo98 in #22654
• Remove dead code in Library/Homebrew/utils/ by @dduugg in #22650
  ...

5.1.15

What's Changed

• tests: Use full constant names sometimes (for Sorbet rule 5001 compat) by @issyl0 in #22415
• Sorbet now understands our custom mktmpdir helper method by @issyl0 in #22414
• test_runner_formula: treat versioned macOS deps as macOS-only by @ivan-digital in #22420
• Check bundle formula link status by @MikeMcQuaid in #22412
• Improve cleanup ask output by @MikeMcQuaid in #22416
• Fix zsh nested subcommand option completion by @ZhongRuoyu in #22422
• Fix cask upgrade env conflict by @MikeMcQuaid in #22423
• cask/upgrade: re-register application bundle before reopen by @bevanjkay in #22425
• docs/Gemfile: add irb to silence Ruby 4.0 warning by @p-linnane in #22428
• Add CI check against conventional commit messages by @SMillerDev in #22421
• workflows/tests: move to a different Brewfile cask. by @MikeMcQuaid in #22429
• Harden sandboxed install phases by @MikeMcQuaid in #22413
• Preserve GitHub token during eval by @MikeMcQuaid in #22431
• Close API-created issues that do not match a template by @MikeMcQuaid in #22424
• Fetch ask upgrades together by @MikeMcQuaid in #22435
• Accept one-key ask confirmations by @MikeMcQuaid in #22436
• Avoid install warning annotations by @MikeMcQuaid in #22434
• Skip TestFlight apps in cleanup by @MikeMcQuaid in #22439
• sandbox: chdir into tmpdir before exec to avoid getcwd EPERM by @jamessawle in #22440
• keg: fix any_skip_relocation cellar on Linux by @cho-m in #22441
• fetch: add --all-platforms to fetch every variant by @p-linnane in #22426
• cask: extract refresh_for_tag to tolerate asymmetric variations by @p-linnane in #22427
• Clarify autoclose guidance by @MikeMcQuaid in #22446
• build(deps): bump certifi from 2026.4.22 to 2026.5.20 in /Library/Homebrew/formula-analytics in the pip group across 1 directory by @dependabot[bot] in #22444
• build(deps): bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] in #22447
• build(deps): bump the bundler group across 2 directories with 8 updates by @dependabot[bot] in #22445
• Add bundle type disable flags by @MikeMcQuaid in #22452
• Use stable test-bot formulae by @MikeMcQuaid in #22454
• docs/Gemfile: pin jekyll-remote-theme for Ruby 4.x.x compatibility by @p-linnane in #22456
• Make bundle cleanup ask before removal by @MikeMcQuaid in #22453
• formula: include patches in to_hash by @andrew in #22459
• Use worktrees for local core taps by @MikeMcQuaid in #22455
• Install Bubblewrap on hosted Ubuntu by @MikeMcQuaid in #22458
• Upload coverage to GitHub by @MikeMcQuaid in #22451
• Fix Linux Bubblewrap setup by @MikeMcQuaid in #22461
• workflows/tests.yml: skip coverage upload when brew tests is skipped by @p-linnane in #22464
• Support casks in brew missing by @MikeMcQuaid in #22460
• sorbet: Bump test/support/helper files to typed: true by @issyl0 in #22469
• Fix SBOM SPDX references by @MikeMcQuaid in #22468
• Add initial tap trust enforcement by @MikeMcQuaid in #22470
• tests: Run tagged tests with --changed when shared contexts change by @issyl0 in #22471
• Sorbet now understands RSpec's dynamic be_ and have_ matchers by @issyl0 in #22473
• Add tap trust commands by @MikeMcQuaid in #22472
• Audit cask flight step conversions by @MikeMcQuaid in #22411
• sorbet: Regenerate predicate matcher RBI for TrustSpec by @issyl0 in #22475
• sorbet: Bump most test/rubocops/ to typed: true or higher by @issyl0 in #22477
• sorbet: Add shims for methods in the 'integration test' shared context by @issyl0 in #22481
• Mark unused options for deprecation by @MikeMcQuaid in #22478
• sorbet: RBIs for more custom RSpec matchers like not_to_output by @issyl0 in #22483
• sorbet: Handle before blocks using let values from within tests by @issyl0 in #22480
• Enable bundle defaults for developers by @MikeMcQuaid in #22479
• Delete unused setup_remote_tap method from the integration test helper by @issyl0 in #22484
• Clarify env boolean parsing by @MikeMcQuaid in #22482
• Fix default audit test formula by @MikeMcQuaid in #22486
• Use tap trust for eval all by @MikeMcQuaid in #22476
• utils/path: trust symlinked cellar roots by @pboling in #22491
• Warn about HOMEBREW_EVAL_ALL deprecation once by @p-linnane in #22493
• sorbet: Add RBI shims for the remainder of the test helper methods by @issyl0 in #22488
• sorbet: Commands can define subcommands by @issyl0 in #22489
• Fix install step API normalisation by @MikeMcQuaid in #22495
• Limit Sorbet runtime defaults by @MikeMcQuaid in #22496
• Trust taps in test-bot by @MikeMcQuaid in #22497
• livecheck/livecheck: type fix by @bevanjkay in #22499
• Enable recursive CI typechecking by @MikeMcQuaid in #22498
• Add formula install step audit by @MikeMcQuaid in #22474
• Fix prof vernier child hangs by @MikeMcQuaid in #22502
• Refine tap trust warnings by @MikeMcQuaid in #22503
• Fix test-bot tap trust config home by @shivammathur in #22508
• Document XDG trust config by @MikeMcQuaid in #22506
• Handle stale reinstall kegs by @MikeMcQuaid in #22505
• Limit recursive Sorbet in test-bot by @MikeMcQuaid in #22509
• Print ask upgrade summary sooner by @MikeMcQuaid in #22510
• Skip sandbox setup for syntax-only jobs by @MikeMcQuaid in #22507
• Create service path directories by @MikeMcQuaid in #22512
• Fix bottle rebuild parsing by @MikeMcQuaid in #22516
• Add install step rebuild actions by @MikeMcQuaid in #22513
• Fix linked_libraries type in keg_relocate by @daeho-ro in #22517
• pypi_download_strategy: fix source_modified_time by @cho-m in #22518
• Fix services completions by @MikeMcQuaid in #22522
• Document commit style rule by @MikeMcQuaid in #22523
• Fix env_scrypt_all_files symbol of pathname by @daeho-ro in #22524

New Contributors

• @ivan-digital made their first contribution in #22420
• @jamessawle made their first contribution in #22440
• @andrew made their first contribution in #22459
• @pboling made their first contribution in #22491

Full Changelog: 5.1.14...5.1.15