Homebrew 6.0.0 Released With New Security Features
The Homebrew package manager has released version 6.0.0, introducing a new tap trust security mechanism to mitigate risks from third-party taps. The update also features a faster internal API, sandboxing on Linux, and improved defaults based on user feedback, enhancing overall performance and user experience.
Key points
- Homebrew version 6.0.0 was released, featuring significant changes since 5.1.0.
- A new 'tap trust' mechanism requires explicit user trust for third-party taps before their code runs, enhancing security.
- The release includes a faster, smaller internal Homebrew JSON API and sandboxing for Linux.
- Defaults have been improved based on user survey data, and 'brew bundle' functionality has seen enhancements.
- Initial support for macOS 27 (Golden Gate) is also part of the update.
Homebrew, the popular open-source package manager for macOS and Linux, has launched its 6.0.0 version. This significant update introduces a new security protocol called 'tap trust' designed to protect users from potentially malicious or compromised third-party software repositories, known as taps.
Under the new system, users must now explicitly trust taps before Homebrew will execute any code from them. Official Homebrew taps are trusted by default. This change aims to reduce the security risks associated with installing software from less vetted sources. The update also streamlines the process by flagging untrusted taps before installation and allowing users to manage trust lists.
Beyond security, Homebrew 6.0.0 brings performance improvements, including a faster and more compact internal JSON API. The release also incorporates sandboxing capabilities for Linux users and enhances the 'brew bundle' command for managing collections of packages. Furthermore, the update includes improved defaults informed by user survey results and initial support for the upcoming macOS 27.
Sources
The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.