6.0.2

What's Changed

• rubocops/lines: add JavaVersions cop by @cho-m in #22681
• os/mac/hardware/cpu: fallback to generic CPU detection if sysctl fails by @Bo98 in #22682
• Handle pinned dependency failures in upgrade previews by @rexmhall09 in #22683
• codex/hooks: return JSON. by @MikeMcQuaid in #22686
• build(deps): bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in #22689
• build(deps): bump the bundler group across 2 directories with 11 updates by @dependabot[bot] in #22688
• sandbox: deny all of $HOME except Homebrew dirs by @MikeMcQuaid in #22660
• Trust custom remote items by @MikeMcQuaid in #22695
• Report only successful upgrades by @MikeMcQuaid in #22702
• Restore user alias completions by @MikeMcQuaid in #22693
• Expose sandboxed command execution by @MikeMcQuaid in #22696
• Use API bottle metadata for fetch by @MikeMcQuaid in #22666
• Retarget redirected tap trust by @MikeMcQuaid in #22706
• sandbox: fix deny_read_home crashes and trust check by @MikeMcQuaid in #22700
• Use API cask metadata for fetch by @MikeMcQuaid in #22670
• Start install downloads earlier by @MikeMcQuaid in #22662
• Avoid sandbox user config reads by @MikeMcQuaid in #22712
• Limit sandbox home deny rules by @MikeMcQuaid in #22715
• test: deny shell config reads in sandboxed home by @p-linnane in #22716
• sandbox: scope require "trust" to avoid brew irb failure by @cho-m in #22717
• which-formula: parse all expected cli options by @rrotter in #22709
• Fix Codex stop hook brew lgtm output (again) by @MikeMcQuaid in #22722
• Drop GitHub code coverage upload by @MikeMcQuaid in #22723
• formula: restore missing finding aliases for old tabs by @cho-m in #22714
• Add command to set up sandbox by @SMillerDev in #22691
• Handle mksh in Utils::Shell.set_variable_in_profile by @thiagogenez in #22727
• Make bottle cache checks cheaper by @MikeMcQuaid in #22720
• Keep tap remotes visible in builds by @MikeMcQuaid in #22721
• help: run an external command's own --help when undocumented by @p-linnane in #22725
• Allow Bubblewrap auto-install by @MikeMcQuaid in #22728
• generate-zap: search app bundle identifiers by @loganrosen in #22731
• formula: add Zig CPU to std_zig_args by @cho-m in #22735
• untap: continue processing remaining taps on failure by @aqeelat in #22743
• resource: remove Resource::Go by @cho-m in #22738
• Source utils.sh in items.sh for opoo by @MikeMcQuaid in #22744
• Do not prompt for confirmation on dry-run upgrade by @MikeMcQuaid in #22747

New Contributors

• @thiagogenez made their first contribution in #22727
• @aqeelat made their first contribution in #22743

Full Changelog: 6.0.1...6.0.2