Homebrew 7.0.0
Today, I’m proud to announce Homebrew 7.0.0. The most significant changes since 6.0.0 are faster installations and upgrades, stronger sandboxing, a native macOS app, built-in vulnerability checks and an advisory database, the end of macOS 10.15 support and Intel Macs moving to Tier 3.
An auto-update or manual brew update (if you have HOMEBREW_NO_AUTO_UPDATE set) will upgrade Homebrew for you.
Now means 7.0.0. Deprecated interfaces warn until disablement; disabled interfaces reject use and removed interfaces are unavailable.
The following improvements apply across platforms unless stated otherwise.
Greater concurrency across downloads, preparation and installation maximises performance while coordinating failures and summaries.
Homebrew 7.0.0 includes various security fixes and new installation protections.
The first fixed releases are listed below.
Tap trust remains the primary protection against malicious third-party casks; sandboxing mainly limits accidental damage and adds installation safeguards. It cannot make untrusted software safe to run: applications execute with the user’s privileges, and vendor .pkg installers run outside the sandbox and may require sudo. We balance tighter restrictions with keeping existing software working.
Trust and environment migrations and replacements.
Commands provide clearer previews, package information and service configuration.
Brewfiles record language-tool sources alongside other packages, reducing separate installation instructions when reproducing an environment on another machine.
Command and configuration migrations and replacements.
Formula links take precedence when formulae and casks provide the same commands, with warnings explaining how to restore the cask links.
Cask configuration migrations and replacements.
Homebrew moves macOS Intel x86_64 to Tier 3 in September 2026, announced in August 2025 and repeated in the 5.0.0 release notes on 12 November 2025; 7.0.0 also drops macOS 10.15. Homebrew still runs on Intel until September 2027, without project support or routine bottle builds. Apple and GitHub’s retreat from Intel support exceeds what Homebrew’s volunteers can replace.
macOS support migrations
BrewUI is Homebrew’s fully released official graphical interface for macOS, making package management more approachable through a native application.
Homebrew 6.0.0 introduced Bubblewrap sandboxing. Homebrew 7.0.0 replaces it with Landlock, requiring no dependencies or escalated Docker permissions, which caused setup problems with Bubblewrap.
Status in 7.0.0: kernels without Landlock continue working without Linux sandboxing in the less secure pre-6.0.0 configuration; brew doctor reports missing protection as an advisory.
Homebrew relocates compatible bottles to shorter prefixes, avoiding source builds outside the default installation location.
Status in 7.0.0: limits are 13 bytes on Apple Silicon macOS, 26 on Linux and 10 for existing Intel macOS bottles. These count the full path, including slashes; the Cellar must also fit its build-time length. Bottles marked :any or :any_skip_relocation are relocatable to any prefix.
Upcoming rollout: padded builds aim to make every bottle and dependency relocatable to prefixes up to 64 bytes on Apple Silicon macOS and both Linux architectures. This may eventually allow full support within those limits; non-default prefixes remain unsupported for now, with no rollout date.
Homebrew’s new advisory database records vulnerabilities against the formula versions and revisions Homebrew ships, including backported security fixes. brew vulns is built in, checking known vulnerabilities using OSV.dev without another tap or gem.
Homebrew images and GitHub Actions provide maintained migration targets.
Authoring tools reduce manual setup and encourage safer package definitions.
Formula post_install and cask *flight Ruby blocks are deprecated in favour of declared *_steps. Explicit operations and paths allow validation, sandboxing and signed API delivery, making setup safer and avoiding repeated package evaluation.
Status in 7.0.0: official taps reject legacy hooks; third-party taps receive warnings until 11 December 2027.
Install hook migrations
The migration guide lists install-step names, DSLs and public API replacements.
Maintenance command removals and replacements are also documented.
Thanks to all our hard-working volunteer maintainers, contributors, sponsors and supporters for getting us this far.
Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal…
Homebrew 5.1.0 has been released. Homebrew’s most significant changes since 5.0.0 are expanded brew bundle support, brew version-install, new -full formula handling an…
Today, I’d like to announce Homebrew 5.0.0. The most significant changes since 4.6.0 are download concurrency by default, official support for Linux ARM64/AArch64, tim…
Today, I’d like to announce Homebrew 4.6.0. The most significant changes since 4.5.0 are opt-in concurrent downloads with HOMEBREW_DOWNLOAD_CONCURRENCY, preliminary ma…