5.1.15

What's Changed

• tests: Use full constant names sometimes (for Sorbet rule 5001 compat) by @issyl0 in #22415
• Sorbet now understands our custom mktmpdir helper method by @issyl0 in #22414
• test_runner_formula: treat versioned macOS deps as macOS-only by @ivan-digital in #22420
• Check bundle formula link status by @MikeMcQuaid in #22412
• Improve cleanup ask output by @MikeMcQuaid in #22416
• Fix zsh nested subcommand option completion by @ZhongRuoyu in #22422
• Fix cask upgrade env conflict by @MikeMcQuaid in #22423
• cask/upgrade: re-register application bundle before reopen by @bevanjkay in #22425
• docs/Gemfile: add irb to silence Ruby 4.0 warning by @p-linnane in #22428
• Add CI check against conventional commit messages by @SMillerDev in #22421
• workflows/tests: move to a different Brewfile cask. by @MikeMcQuaid in #22429
• Harden sandboxed install phases by @MikeMcQuaid in #22413
• Preserve GitHub token during eval by @MikeMcQuaid in #22431
• Close API-created issues that do not match a template by @MikeMcQuaid in #22424
• Fetch ask upgrades together by @MikeMcQuaid in #22435
• Accept one-key ask confirmations by @MikeMcQuaid in #22436
• Avoid install warning annotations by @MikeMcQuaid in #22434
• Skip TestFlight apps in cleanup by @MikeMcQuaid in #22439
• sandbox: chdir into tmpdir before exec to avoid getcwd EPERM by @jamessawle in #22440
• keg: fix any_skip_relocation cellar on Linux by @cho-m in #22441
• fetch: add --all-platforms to fetch every variant by @p-linnane in #22426
• cask: extract refresh_for_tag to tolerate asymmetric variations by @p-linnane in #22427
• Clarify autoclose guidance by @MikeMcQuaid in #22446
• build(deps): bump certifi from 2026.4.22 to 2026.5.20 in /Library/Homebrew/formula-analytics in the pip group across 1 directory by @dependabot[bot] in #22444
• build(deps): bump the github-actions group across 1 directory with 6 updates by @dependabot[bot] in #22447
• build(deps): bump the bundler group across 2 directories with 8 updates by @dependabot[bot] in #22445
• Add bundle type disable flags by @MikeMcQuaid in #22452
• Use stable test-bot formulae by @MikeMcQuaid in #22454
• docs/Gemfile: pin jekyll-remote-theme for Ruby 4.x.x compatibility by @p-linnane in #22456
• Make bundle cleanup ask before removal by @MikeMcQuaid in #22453
• formula: include patches in to_hash by @andrew in #22459
• Use worktrees for local core taps by @MikeMcQuaid in #22455
• Install Bubblewrap on hosted Ubuntu by @MikeMcQuaid in #22458
• Upload coverage to GitHub by @MikeMcQuaid in #22451
• Fix Linux Bubblewrap setup by @MikeMcQuaid in #22461
• workflows/tests.yml: skip coverage upload when brew tests is skipped by @p-linnane in #22464
• Support casks in brew missing by @MikeMcQuaid in #22460
• sorbet: Bump test/support/helper files to typed: true by @issyl0 in #22469
• Fix SBOM SPDX references by @MikeMcQuaid in #22468
• Add initial tap trust enforcement by @MikeMcQuaid in #22470
• tests: Run tagged tests with --changed when shared contexts change by @issyl0 in #22471
• Sorbet now understands RSpec's dynamic be_ and have_ matchers by @issyl0 in #22473
• Add tap trust commands by @MikeMcQuaid in #22472
• Audit cask flight step conversions by @MikeMcQuaid in #22411
• sorbet: Regenerate predicate matcher RBI for TrustSpec by @issyl0 in #22475
• sorbet: Bump most test/rubocops/ to typed: true or higher by @issyl0 in #22477
• sorbet: Add shims for methods in the 'integration test' shared context by @issyl0 in #22481
• Mark unused options for deprecation by @MikeMcQuaid in #22478
• sorbet: RBIs for more custom RSpec matchers like not_to_output by @issyl0 in #22483
• sorbet: Handle before blocks using let values from within tests by @issyl0 in #22480
• Enable bundle defaults for developers by @MikeMcQuaid in #22479
• Delete unused setup_remote_tap method from the integration test helper by @issyl0 in #22484
• Clarify env boolean parsing by @MikeMcQuaid in #22482
• Fix default audit test formula by @MikeMcQuaid in #22486
• Use tap trust for eval all by @MikeMcQuaid in #22476
• utils/path: trust symlinked cellar roots by @pboling in #22491
• Warn about HOMEBREW_EVAL_ALL deprecation once by @p-linnane in #22493
• sorbet: Add RBI shims for the remainder of the test helper methods by @issyl0 in #22488
• sorbet: Commands can define subcommands by @issyl0 in #22489
• Fix install step API normalisation by @MikeMcQuaid in #22495
• Limit Sorbet runtime defaults by @MikeMcQuaid in #22496
• Trust taps in test-bot by @MikeMcQuaid in #22497
• livecheck/livecheck: type fix by @bevanjkay in #22499
• Enable recursive CI typechecking by @MikeMcQuaid in #22498
• Add formula install step audit by @MikeMcQuaid in #22474
• Fix prof vernier child hangs by @MikeMcQuaid in #22502
• Refine tap trust warnings by @MikeMcQuaid in #22503
• Fix test-bot tap trust config home by @shivammathur in #22508
• Document XDG trust config by @MikeMcQuaid in #22506
• Handle stale reinstall kegs by @MikeMcQuaid in #22505
• Limit recursive Sorbet in test-bot by @MikeMcQuaid in #22509
• Print ask upgrade summary sooner by @MikeMcQuaid in #22510
• Skip sandbox setup for syntax-only jobs by @MikeMcQuaid in #22507
• Create service path directories by @MikeMcQuaid in #22512
• Fix bottle rebuild parsing by @MikeMcQuaid in #22516
• Add install step rebuild actions by @MikeMcQuaid in #22513
• Fix linked_libraries type in keg_relocate by @daeho-ro in #22517
• pypi_download_strategy: fix source_modified_time by @cho-m in #22518
• Fix services completions by @MikeMcQuaid in #22522
• Document commit style rule by @MikeMcQuaid in #22523
• Fix env_scrypt_all_files symbol of pathname by @daeho-ro in #22524

New Contributors

• @ivan-digital made their first contribution in #22420
• @jamessawle made their first contribution in #22440
• @andrew made their first contribution in #22459
• @pboling made their first contribution in #22491

Full Changelog: 5.1.14...5.1.15

5.1.14

What's Changed

• Show quarantine script usage by @MikeMcQuaid in #22375
• Ignore flaky VirusTotal docs link by @MikeMcQuaid in #22374
• api: fix every formula having a post install defined by @Bo98 in #22378
• Fix dynamic completion audit crash by @MikeMcQuaid in #22380
• build(deps): bump the bundler group across 2 directories with 13 updates by @dependabot[bot] in #22381
• build(deps): bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in #22382
• workflows/incomplete-prs: allow deleting PR template comments by @gibfahn in #22290
• Move away from RSpec's described_class by @issyl0 in #22307
• Remove RuboCop TODO suppressions by @MikeMcQuaid in #22385
• Advance internal API default by @MikeMcQuaid in #22367
• Add cask upgrade quit opt-out by @MikeMcQuaid in #22383
• Filter sensitive environment variables during Ruby evals by @MikeMcQuaid in #22384
• Default ask mode for developers by @MikeMcQuaid in #22369
• Add postinstall/preflight/postflight steps framework by @MikeMcQuaid in #22371
• test_bot: allow testing portable formulae with other PRs in merge queue by @ZhongRuoyu in #22387
• Default Linux sandbox for developers by @MikeMcQuaid in #22370
• Preserve cask choice zeroes by @MikeMcQuaid in #22401
• Speed up slow specs by @MikeMcQuaid in #22390
• bundle: filter VSCode server chatter by @MikeMcQuaid in #22396
• portable-ruby: inline validation into test-bot, automate brew updates by @p-linnane in #22393
• Only warn on rename when migration destination exists by @p-linnane in #22403
• Share cask upgrade download queues by @MikeMcQuaid in #22394
• bundle: extend cleanup coverage by @MikeMcQuaid in #22395
• bundle: add WinGet support by @MikeMcQuaid in #22397
• config: show Windows build on WSL by @MikeMcQuaid in #22398
• install: avoid cask dry-run keg reads by @MikeMcQuaid in #22399
• Secure brew bundle npm installs by @MikeMcQuaid in #22405
• Add formula install steps by @MikeMcQuaid in #22372
• Sandbox cask executable hooks by @MikeMcQuaid in #22406
• cli/parser: don't restrict global options to subcommands by @KEY60228 in #22408
• Add cask install steps by @MikeMcQuaid in #22373
• Portable Ruby 4.0.5_1 by @p-linnane in #22409

New Contributors

• @KEY60228 made their first contribution in #22408

Full Changelog: 5.1.13...5.1.14

5.1.13

What's Changed

• info: mark deprecated/disabled pkg in install status by @HaraldNordgren in #22334
• gitignore: ignore test/.npm/ by @HaraldNordgren in #22337
• info, tap-info: skip uninstalled marker and bold when not a problem (align with search) by @HaraldNordgren in #22342
• Remove obsolete --skip-update from command-not-found handlers by @rexmhall09 in #22340
• Check RubyGems licences by @MikeMcQuaid in #22343
• cask: include resolved artifact targets in JSON output by @carlocab in #22346
• Move the 'wsl?' bool from the OS::Linux module up to the OS module by @lstn in #22309
• Make bundle upgrade an alias by @MikeMcQuaid in #22348
• Resolve src through realpath in install_renamed by @dariaguy in #22351
• Omit aliases from completions by @MikeMcQuaid in #22352
• Align ask dry-run prompts by @MikeMcQuaid in #22353
• Portable Ruby 4.0.5 by @p-linnane in #22357
• bundle: try mas install before falling back to mas get by @wojteksbt in #22361
• Add as-console-user command by @MikeMcQuaid in #22358
• Add minimum version gating by @MikeMcQuaid in #22359
• Add list versions JSON by @MikeMcQuaid in #22360
• completions: add missing require. by @MikeMcQuaid in #22366
• Enforce secure redirects by @MikeMcQuaid in #22368
• pathname: eagerly initialize lazy instance variables by @p-linnane in #22362

New Contributors

• @lstn made their first contribution in #22309
• @dariaguy made their first contribution in #22351

Full Changelog: 5.1.12...5.1.13

5.1.12

What's Changed

• info: resolve installed formulae from receipt's tap and warn on shadow by @HaraldNordgren in #22224
• info: resolve aliased deps when checking installed status by @HaraldNordgren in #22228
• audit: don't check livecheck throttle days offline by @bevanjkay in #22233
• Add brew exec command by @MikeMcQuaid in #22222
• Annotate test-bot dependency impact by @MikeMcQuaid in #22221
• Omit platform for all bottles by @MikeMcQuaid in #22227
• test/cask: speed up missing source test by @bevanjkay in #22234
• Skip bot incomplete PR closures by @MikeMcQuaid in #22232
• build(deps): bump urllib3 from 2.6.3 to 2.7.0 in /Library/Homebrew/formula-analytics by @dependabot[bot] in #22235
• Use internal API for developers by @MikeMcQuaid in #22226
• Use AST for source rewrites by @MikeMcQuaid in #22220
• Fix bottled default config upgrades by @MikeMcQuaid in #22223
• shims/super/ninja: omit -j flag when MAKEFLAGS advertises jobserver by @carlocab in #22237
• cli: hide hide_from_man_page commands from 'brew commands' by @HaraldNordgren in #22229
• Parallelise dependent test-bot tests by @MikeMcQuaid in #22239
• Move macOS sandbox logic by @MikeMcQuaid in #22238
• os/mac/hardware/cpu: add M5 and M5 Pro/Max by @fxcoudert in #22242
• workflows/docs: improve and simplify. by @MikeMcQuaid in #22244
• Allow cask macOS dep migration by @MikeMcQuaid in #22246
• Replace brew which-update by @MikeMcQuaid in #22231
• gitignore: ignore brew-rs. by @MikeMcQuaid in #22245
• Add OS dependency style checks by @MikeMcQuaid in #22199
• simulate-macos: use newest supported version by @MikeMcQuaid in #22248
• update-portable-ruby: run brew typecheck --update by @p-linnane in #22250
• Portable Ruby 4.0.4 by @p-linnane in #22236
• bump-cask-pr: tolerate idempotent stanza replace by @MikeMcQuaid in #22252
• Add RubyGems livecheck cooldown by @MikeMcQuaid in #22253
• aliases: break load-time cycle with cmd/alias by @p-linnane in #22260
• cask, formula: run forbidden checks before download by @p-linnane in #22259
• Fix cask OS dependency regressions by @MikeMcQuaid in #22261
• mcp: preserve tool arguments as argv by @RajvardhanPatil07 in #22262
• Clarify Brewfile snapshots documentation by @MikeMcQuaid in #22263
• Add internal API metadata by @MikeMcQuaid in #22264
• Improve bundle check guidance by @MikeMcQuaid in #22265
• Support CPS metadata dirs by @MikeMcQuaid in #22267
• Link shared security policy by @MikeMcQuaid in #22266
• cmd/bundle: fix check --quiet by @branchv in #22273
• cmd/outdated: fix handling of auto_updates by @bevanjkay in #22272
• Move API checks into RuboCop by @MikeMcQuaid in #22283
• build(deps): bump github/codeql-action from 4.35.3 to 4.35.4 in the github-actions group across 1 directory by @dependabot[bot] in #22288
• build(deps): bump the bundler group across 2 directories with 6 updates by @dependabot[bot] in #22287
• Add brew exec formulae environments by @MikeMcQuaid in #22269
• Preserve manual resource stanzas by @MikeMcQuaid in #22292
• Support pinning casks by @MikeMcQuaid in #22276
• Add parser subcommand scaffolding by @MikeMcQuaid in #22278
• expat: bump to 2.7.4 on macOS 26 by @p-linnane in #22274
• Add ask dependency plans and cask support by @MikeMcQuaid in #22275
• docs/Rakefile: ignore iTunes Xcode page. by @MikeMcQuaid in #22298
• Add appimage support for linux by @SMillerDev in #20334
• Serialise bundle formula locks by @MikeMcQuaid in #22297
• cask/upgrade: don't skip quit stanzas by @bevanjkay in #22295
• cask/upgrade: reopen closed apps during upgrade by @bevanjkay in #22296
• info: show other installed versions by @HaraldNordgren in #22241
• Add Linux Bubblewrap sandbox by @MikeMcQuaid in #22240
• Show install status in which-formula by @MikeMcQuaid in #22300
• More tightly scope build API override by @MikeMcQuaid in #22311
• Embed executables in API JSON by @MikeMcQuaid in #22301
• Add appimagedir to default cask directories by @SMillerDev in #22312
• Remove executables fallback by @MikeMcQuaid in #22313
• Convert services subcommands by @MikeMcQuaid in #22279
• Avoid cached manifest downloads by @MikeMcQuaid in #22316
• parse_basename: fix local test failures by @HaraldNordgren in #22317
• show more tap info for packages by @HaraldNordgren in #22304
• Convert bundle subcommands by @MikeMcQuaid in #22280
• workflows/tests: install actionlint. by @MikeMcQuaid in #22320
• Convert remaining subcommands by @MikeMcQuaid in #22281
• Improve Linux sandbox behaviour by @MikeMcQuaid in #22315
• info: indicate upgrade target for outdated @-versioned formulae by @HaraldNordgren in #22321
• Scope subcommand option constraints by @MikeMcQuaid in #22325
• bundle/krew: use kubectl-krew directly by @branchv in #22328
• Share system executable fallback by @MikeMcQuaid in #22322
• Scope subcommand usage help by @MikeMcQuaid in #22326
• Fix npm bundle dump PATH by @MikeMcQuaid in #22332
• Skip empty upgrade ask prompt by @MikeMcQuaid in #22333
• test: fix leaky constants by @Bo98 in #22336
• Fix package API cache install by @MikeMcQuaid in #22335
• Sorbet now understands RSpec's expect block form by @issyl0 in #22329

New Contributors

• @RajvardhanPatil07 made their first contribution in #22262

Full Changelog: 5.1.11...5.1.12

5.1.11

What's Changed

• info: list installed dependents with --verbose by @HaraldNordgren in #22163
• bundle/checker: enable typed: strict by @bittoby in #22157
• Supports in repository patch files by @rexmhall09 in #22144
• bundle/commands/exec: enable typed: strict by @bittoby in #22167
• dev-cmd/tests: remove obsolete HOMEBREW_REALLY_USE_INTERNAL_API cleanup by @bittoby in #22168
• docs: formula-cookbook remove deprecated string replacement instructions by @GunniBusch in #22169
• Test bare cask macOS dependencies by @MikeMcQuaid in #22166
• build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 in the github-actions group across 1 directory by @dependabot[bot] in #22179
• build(deps): bump the bundler group across 2 directories with 9 updates by @dependabot[bot] in #22178
• info: show installed deps correctly by @HaraldNordgren in #22164
• dev-cmd/lgtm: require formula explicitly by @p-linnane in #22176
• Warn for Nix-managed Homebrew by @MikeMcQuaid in #22182
• Use full-name helpers for split names by @MikeMcQuaid in #22183
• Dockerfile: set HOMEBREW_* variables by @ZhongRuoyu in #22189
• Use PyPI mtimes for source dates by @MikeMcQuaid in #22181
• unpack_strategy/bzip2: use Homebrew bzip2 when installed by @p-linnane in #22197
• cask/caskroom: use the user's primary group on Linux by @XuehaiPan in #22202
• Align cask macOS dependencies by @MikeMcQuaid in #22185
• download_queue: kill curl on cancellation by @rangaNP in #22201
• Track macOS support explicitly by @MikeMcQuaid in #22187
• workflows: close incomplete PRs by @MikeMcQuaid in #22186
• sorbet: Add RSpec shims and typecheck some tests by @issyl0 in #22205
• livecheck: fix formula throttle days by @daeho-ro in #22209
• tap-info: list formulae and casks by @HaraldNordgren in #22180
• Fix cask tab marking with missing tab file by @rexmhall09 in #22211
• Add Linux OS dependencies by @MikeMcQuaid in #22192
• Split one-class-per-file todos by @MikeMcQuaid in #22212
• exceptions: hint when a download is HTML, not a binary by @jarimustonen in #22184
• livecheck: speed up formula throttle days check by @daeho-ro in #22214
• Add maximum macOS cask deps by @MikeMcQuaid in #22198
• Route rs-* commands to experimental Rust frontend by @MikeMcQuaid in #22217
• Move test-bot OS logic to extend/os by @MikeMcQuaid in #22213
• Fix RSpec named subjects by @MikeMcQuaid in #22218
• cmd/which-formula: don't downcase cmd by @ZhongRuoyu in #22219
• Remove aggregate examples todos by @MikeMcQuaid in #22216
• Remove stale RuboCop disables by @MikeMcQuaid in #22215

New Contributors

• @bittoby made their first contribution in #22157
• @jarimustonen made their first contribution in #22184

Full Changelog: 5.1.10...5.1.11

5.1.10

What's Changed

• Improve Docker cache reuse by @MikeMcQuaid in #22134
• caveats: sort shadowed executables alphabetically by @HaraldNordgren in #22139
• Extract patch classes into separate files by @rexmhall09 in #22142
• Explain upgrade metadata fetch by @MikeMcQuaid in #22143
• info: add Binaries section listing executables by @HaraldNordgren in #22150
• diagnostic: cap OCLP tier when macOS is outdated by @p-linnane in #22154
• upgrade: add final summary by @MikeMcQuaid in #22140
• utils/formatter: avoid loading URI library for Formatter.url by @p-linnane in #22160
• list: make --multiple imply --versions by @HaraldNordgren in #22156
• Fix incorrect depends_on: macos serialization in JSON API for Linux variations by @hangone in #22137
• Stop relying on transitive uri loads by @p-linnane in #22161
• Filter Linux cask loads by support by @MikeMcQuaid in #22149
• Add installed info inventory by @MikeMcQuaid in #22141

New Contributors

• @hangone made their first contribution in #22137

Full Changelog: 5.1.9...5.1.10

5.1.9

What's Changed

• Fix brew update with HOMEBREW_USE_INTERNAL_API by @Rylan12 in #22097
• Gemfile: Unconstrain the tapioca version by @issyl0 in #22095
• Fixed the problem that brew services cleanup would not really remove … by @choems in #22100
• fix: fall back to default ghcr.io URL when HOMEBREW_ARTIFACT_DOMAIN fails by @pierluigilenoci in #22078
• docs: fix link to "C++ Standard Libraries" page by @ZhongRuoyu in #22103
• docs: clean up generated pages by @ZhongRuoyu in #22104
• Start systemd timers for services by @MikeMcQuaid in #22105
• Fixed the format problem of the generated .timer file. by @choems in #22107
• info: clarify recursive runtime dependencies line by @HaraldNordgren in #22113
• OS::Linux: fix Pathname type signature issues by @samford in #22108
• sync installed_as_dependency when changing installed_on_request by @ooye-sanket in #21755
• build(deps): bump the bundler group across 2 directories with 6 updates by @dependabot[bot] in #22117
• Fix to not link keg_only if it doesn't installed by request by @daeho-ro in #22119
• build(deps): bump the pip group across 1 directory with 3 updates by @dependabot[bot] in #22116
• formula_auditor: align throttle checks with livecheck by @dasmfm in #22114
• Avoid redundant Caskroom chgrp by @MikeMcQuaid in #22121
• Add user agent to HTMLProofer by @samford in #22127
• sorbet-runtime.rbi: use typed: strict by @samford in #22122
• upgrade: parallelize bottle tab fetching by @ZhongRuoyu in #22118
• list.sh: only show headings when there are items to show by @ZhongRuoyu in #22123
• HeaderMatch: pass all headers into strategy block by @samford in #22124
• Dockerfile: retry add-apt-repository by @p-linnane in #22125
• info: show installed version and upgrade hint on headline by @HaraldNordgren in #22128
• Route update-report to Rust by @MikeMcQuaid in #22126
• caveats: warn when formula executables are shadowed on PATH by @HaraldNordgren in #22130
• Route more commands to brew-rs by @MikeMcQuaid in #22132
• Fix bundle tap cask handling by @MikeMcQuaid in #22131
• system_command: avoid loading plist and URI libraries at startup by @dduugg in #22133

New Contributors

• @choems made their first contribution in #22100
• @pierluigilenoci made their first contribution in #22078

Full Changelog: 5.1.8...5.1.9

5.1.8

What's Changed

• tap_auditor: check rename files in local tap by @bevanjkay in #22028
• fix: allow absolute --path/--dir for typechecking by @danielbayley in #22029
• formula: dedupe link_overwrite_formulae across aliases by @p-linnane in #22046
• retryable_download: preserve partial download on network errors by @liukun in #22048
• diagnostic: add new FUSE-T static lib by @gromgit in #22049
• cachable: add Sorbet generics for key and value types by @dduugg in #22039
• test/dev-cmd/unbottled_spec: add usage test by @scpeters in #22050
• services: fix timed? and keep_alive? return type to T::Boolean by @hyuraku in #21950
• cask: restrict no_autobump! usage to official Homebrew taps by @hyuraku in #21982
• cask: avoid repeat upgrade alerts by @MikeMcQuaid in #22053
• perf: replace inject("+") with sum and use filter_map in utils by @dduugg in #22054
• docs: clarify upstream lifecycle requests by @MikeMcQuaid in #22052
• Stabilize PyPI source spec by @MikeMcQuaid in #22051
• Re-enable HOMEBREW_USE_INTERNAL_API by @Rylan12 in #22042
• Portable Ruby 4.0.3 by @p-linnane in #22057
• livecheck throttle: fix bump commands to follow throttle logic by @dasmfm in #22043
• rubocops/resource_requires_dependencies: add bcrypt by @p-linnane in #22055
• test/dev-cmd/developer_spec: add usage test by @scpeters in #22056
• build(deps-dev): bump yard from 0.9.39 to 0.9.42 in /Library/Homebrew by @dependabot[bot] in #22059
• info: avoid broken GitHub URL for removed formulae by @bayandin in #22062
• dev-cmd: add update-portable-ruby to automate version bumps by @p-linnane in #22058
• bundle: fix flaky installer spec by @MikeMcQuaid in #22060
• Update bundler in ruby.sh and fix yard version in setup.rb by @p-linnane in #22068
• workflows/vendor-gems: fail PRs with out-of-sync vendored gems by @p-linnane in #22069
• audit: respect livecheck throttle days by @bevanjkay in #22061
• Reject unsupported API casks earlier by @MikeMcQuaid in #22070
• build(deps): bump the github-actions group across 1 directory with 3 updates by @dependabot[bot] in #22073
• build(deps-dev): bump the bundler group across 2 directories with 2 updates by @dependabot[bot] in #22072
• workflows/vendor-gems: stop PR auto-pushes. by @MikeMcQuaid in #22077
• lgtm: cover tap audits and formula tests by @MikeMcQuaid in #22075
• Reduce platform-gated test specs by @MikeMcQuaid in #22079
• bundle: split missing service manager handling by @MikeMcQuaid in #22076
• pkg: clean Homebrew git state by @MikeMcQuaid in #22081
• requirement: include HOMEBREW_PREFIX/sbin inPATH skip list by @hyuraku in #22087
• Prepare for opt-in HOMEBREW_SBOM by @MikeMcQuaid in #22083
• Silence short name core/cask migration warning by @MikeMcQuaid in #22084
• cask: implement Linux freedesktop trash by @MikeMcQuaid in #22086
• upgrade: ignore failed shared prefetches by @MikeMcQuaid in #22091
• api: don't refresh cache mtime after failed JSON download by @RtYkk in #22093
• pkg: replace installer git dir by @MikeMcQuaid in #22090
• docs: clarify upstream expectations by @MikeMcQuaid in #22085

New Contributors

• @liukun made their first contribution in #22048
• @RtYkk made their first contribution in #22093

Full Changelog: 5.1.7...5.1.8

5.1.7

What's Changed

• rubydoc: undo temporary yard fix by @GunniBusch in #21999
• Don't compact service_args in FormulaStruct#serialize by @Rylan12 in #22002
• bump-cask-pr: handle depends_on arch scoped to on_os block by @p-linnane in #21995
• perf: avoid Formulary.resolve per dep in autoremove/cleanup/doctor by @dduugg in #21938
• cask: further auto_updates refinement by @bevanjkay in #22003
• cli/parser: fix unwanted snippets of hidden args by @cho-m in #22005
• sorbet: upgrade remaining 19 files to typed: strict by @dduugg in #21996
• utils/github: use WithoutRuntime sig for create_bump_pr by @dduugg in #22012
• workflows/tests: typecheck core & cask taps by @Bo98 in #22013
• Replace throw/catch control flow with block return values by @dduugg in #22015
• fix: popen PATH for bundle exts depending on brew-installed deps by @heussd in #21991
• Refactor GitHub.create_bump_pr by @Bo98 in #22014
• Support HOMEBREW_CASK_OPTS_REQUIRE_SHA by @MikeMcQuaid in #22007
• Support bare depends_on :macos in casks by @MikeMcQuaid in #22006
• bump: require "tap.rb" by @botantony in #22019
• Clarify contribution guidelines by @MikeMcQuaid in #22018
• Hide HOMEBREW_CASK_OPTS_* from help by @MikeMcQuaid in #22017
• Add VCS revision as scm_revision in tab by @MikeMcQuaid in #22020
• Enforce public API visibility and docs by @MikeMcQuaid in #21993
• Fix DSL#env override covariance error by @MikeMcQuaid in #22023
• fix(bundle): don't skip tap-qualified casks on Linux before tap is installed by @costajohnt in #22021
• docs: bump yard to 0.9.39 by @GunniBusch in #22024
• deps: skip recursive_req_includes when --include-requirements not passed by @dduugg in #22027
• bundle: add --jobs flag for parallel formula installation by @mvanhorn in #21891
• Use joint packages JSON file in Homebrew::API::Internal by @Rylan12 in #22033
• Fix build.rb receiving formula.jws.json instead of .rb source path by @p-linnane in #22034
• build(deps): bump the github-actions group across 1 directory with 3 updates by @dependabot[bot] in #22037
• build(deps): bump the bundler group across 2 directories with 7 updates by @dependabot[bot] in #22038
• build(deps): bump yard from 0.9.39 to 0.9.42 in /docs by @dependabot[bot] in #22041
• Fix requirement which override by @MikeMcQuaid in #22040

New Contributors

• @heussd made their first contribution in #21991

Full Changelog: 5.1.6...5.1.7

5.1.6

What's Changed

• cask/artifact: enable typed: strict across Library/Homebrew/cask/artifact/ by @dduugg in #21939
• source: retry PyPI API requests to avoid transient errors by @p-linnane in #21944
• build(deps): bump addressable from 2.8.9 to 2.9.0 in /Library/Homebrew by @dependabot[bot] in #21948
• build(deps): bump addressable from 2.8.9 to 2.9.0 in /docs by @dependabot[bot] in #21949
• cask: upgrade auto_updates casks when bundle version is stale by @bevanjkay in #21882
• refactor: remove dead code and deprecate unused public APIs by @dduugg in #21925
• Add brew doctor and brew cleanup for corrupt Caskroom directories by @koddsson in #21880
• refactor: remove unused require statements by @dduugg in #21952
• cmd/*-sync: fix uninitialized constants by @cho-m in #21956
• docs: reflect new auto_updates behaviour by @bevanjkay in #21957
• Add 'LANG' to the environment filter to ensure it passes into brew if/when set in the user's environment by @jamesrtnz in #21945
• docs: add and consolidate deprecation policy by @MikeMcQuaid in #21946
• Improve updates of auto_updates casks by @MikeMcQuaid in #21962
• search: fix uninitialized constant by @cho-m in #21968
• bump: add cooldown for npm and PyPI by @samford in #21888
• cask: refine auto_updates behaviour by @bevanjkay in #21974
• generate-cask-ci-matrix: fix Linux runner for single-arch casks by @p-linnane in #21970
• GitDownloadStrategy: fix slow repo_valid? by using -C flag by @ismail in #21969
• build(deps): bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in #21979
• Fix outdated greedy cask handling by @MikeMcQuaid in #21976
• Stop cleaning corrupt cask dirs by @MikeMcQuaid in #21980
• build(deps): bump the bundler group across 2 directories with 16 updates by @dependabot[bot] in #21978
• Fix flaky run_actionlint! tests by @MikeMcQuaid in #21975
• Fix flaky conflicts_with brew spec by @MikeMcQuaid in #21977
• Share full-name parsing helpers by @MikeMcQuaid in #21966
• Use merge-base for git audit comparisons by @MikeMcQuaid in #21967
• docs: document developer update channel and MCP tools by @MikeMcQuaid in #21983
• info: avoid Formula/Cask objects for counts by @MikeMcQuaid in #21963
• sorbet: add strict type signatures to cask files by @dduugg in #21987
• sorbet: remove redundant T.let in initialize methods by @dduugg in #21990
• Harden cask uninstall path checks by @MikeMcQuaid in #21989
• cask: gate auto-updates behind opt-in by @MikeMcQuaid in #21985
• extend/os/linux/cask/config: actually use XDG_DATA_HOME by @cho-m in #21994
• shellenv: export FPATH so child zsh shells inherit fpath by @sumanthratna in #21910
• Add brew generate-internal-api command by @Rylan12 in #21973
• cask/artifact/qlplugin: fix type override by @bevanjkay in #22004

New Contributors

• @jamesrtnz made their first contribution in #21945
• @ismail made their first contribution in #21969
• @sumanthratna made their first contribution in #21910

Full Changelog: 5.1.5...5.1.6