7.0.0

What's Changed

• Make macOS installer package Apple Silicon only by @MikeMcQuaid in #23779
• Forbid T.must and T.unsafe with RuboCop by @MikeMcQuaid in #23787
• Warn (don't error) on unavailable Linux sandbox in brew tests by @waldyrious in #23782
• Add std_shards_args and update creator for crystal by @cho-m in #23790
• cask/audit: fix repo names ending in git by @krehel in #23796
• Stop brew tests dirtying the working tree by @dduugg in #23800
• Attest supported third-party tap bottles by @heaths in #23769
• shared_audits: check homepage domain age via RDAP by @bevanjkay in #23752
• Escape dots in domain regexps by @dduugg in #23799
• Deprecate/disable/remove for major/minor release by @MikeMcQuaid in #23729
• Bump resources pinned to a git tag by @daeho-ro in #23802
• utils/tty: avoid caching an unfinished size by @rangaNP in #23804
• cask/quarantine: gate metadata operations behind a single doorway by @aholland in #23628
• Raise minimum macOS to Big Sur (11) by @p-linnane in #23703
• Use non-capturing regexp groups where captures are unused by @dduugg in #23793
• keg: scope node-gyp debris to build trees by @daeho-ro in #23805
• Base macOS migration advice on binary packages by @MikeMcQuaid in #23806
• livecheck: really use referenced livecheck options by @samford in #23775
• extend/ENV/super: add opam defaults by @cho-m in #23810
• Improve PythonVersions cop to reject hardcoded pythonX.Y assignment by @iMichka in #23479
• Fix brew edit crash for an uninstalled tap by @dduugg in #23811
• Restore inherited streams for safe_system by @MikeMcQuaid in #23809
• Stop the uses_from_macos cop crashing by @dduugg in #23813
• unpack_strategy: skip symlinks in each_directory by @p-linnane in #23814
• completions: match Bash candidates literally by @p-linnane in #23816
• tap: print invalid tap names instead of crashing by @krehel in #23818
• Relocate only C strings when patching binaries by @MikeMcQuaid in #23812
• shims/super/cc: Keep dependency -L flags ahead of superenv paths by @krehel in #23821
• Portable Ruby 4.0.6_2 by @p-linnane in #23838
• bottle: verify and extract from a snapshot by @p-linnane in #23815
• Strategy: deprecate user_agent fallback by @samford in #23834
• Require utils/analytics in cmd/info by @waldyrious in #23833
• Crate: add default strategy user agent by @samford in #23832
• install steps: add {{arch}} template token by @daeho-ro in #23836
• patch: harden staged-tree target containment by @dduugg in #23819
• Avoid evaluating cached and installed recipes by @p-linnane in #23822
• create: insert metadata after ERB parsing by @p-linnane in #23825
• vulns: keep unknown subjects unresolved by @p-linnane in #23830
• style: root the RuboCop project index at the tap by @p-linnane in #23835
• tap: link completions only for canonical origins by @p-linnane in #23823
• Reject path components in internal command names by @p-linnane in #23831
• version-install: keep the requested provider by @p-linnane in #23826
• tap: check provenance for migration oldnames by @p-linnane in #23827
• bundle: run go inventory with argument arrays by @p-linnane in #23828
• svn: read externals from the pinned checkout by @p-linnane in #23829
• services: default to canonical Linux service labels by @p-linnane in #23837
• services: keep active systemd timers on cleanup by @p-linnane in #23839
• Mark unsatisfied requirements in brew info by @waldyrious in #23841
• pypi: run metadata inspection in the sandbox by @p-linnane in #23824
• docs/Cask-Cookbook: align with homebrew-cask standards by @bevanjkay in #23842
• info: mark disabled/deprecated casks in title by @HaraldNordgren in #23843
• cask: ignore verified in stored metadata by @Moisan in #23820
• advisory-match: skip unverifiable formula history by @p-linnane in #23845
• bump: handle partially disabled packages by @MikeMcQuaid in #23847
• sorbet: More typechecking fixes for tests by @issyl0 in #23848
• Move bottle CI workflow helpers into brew by @p-linnane in #23852
• Ban command literals in Homebrew source by @p-linnane in #23849
• rubocops/cask: reject nested OS dependencies by @p-linnane in #23861
• Load legacy bottles from formula history by @p-linnane in #23857
• Preserve resource evidence for overrides by @p-linnane in #23856
• rubocops/cask: add cop for font stanza sorting by @krehel in #23851
• sorbet: Bump more tests to typed: true or higher by @issyl0 in #23854
• formula: improve typing conflicts_with by @cho-m in #23855
• Harden advisory history walks by @p-linnane in #23858
• trust: ignore a bare tap name in ARGV by @dduugg in #23864
• trust: normalise the installed-tap reference by @dduugg in #23865
• cask/installer.rb: cast Artifact::GeneratedScript by @toobuntu in #23866
• bundle: install batched casks as casks by @dduugg in #23862
• Detect shallow taps through linked worktrees by @p-linnane in #23859
• tests: group parallel runs by recorded runtime by @dduugg in #23868
• cask/audit: anchor cask audit regexps to url by @krehel in #23870
• cask/audit: load installation checks by @waldyrious in #23873
• Apply service env overrides to run by @oxsean in #23869
• install: report formulae in a mixed dry run by @dduugg in #23874
• curl: only expand secrets the download declared by @dduugg in #23863
• Isolate formula history loading by @p-linnane in #23872
• Broaden formula history error handling by @p-linnane in #23875
• Restore mixed bundle install batches by @MikeMcQuaid in #23871
• Deduplicate advisory alias hits by @p-linnane in #23877
• cmd/cache: print cask cache paths for Linux platforms by @krehel in #23850
• Fix temporary service plist suffix by @oxsean in #23878
• Options: remove hash support from merge methods by @samford in #23879
• test-bot: add padded prefix output by @p-linnane in #23882
• Use setup-ruby in vendor version workflow by @p-linnane in #23883
• Support registry package overrides by @p-linnane in #23880
• Document remove-disabled window mirror by @p-linnane in #23885
• Add commands for Python resource automation by @p-linnane in #23881
• Decouple macOS release names from support status by @p-linnane in #23887
• Reuse macOS release aliases in cask audit by @p-linnane in #23888
• tar: validate tarballs named with a compound extension by @rawsun007 in #23890
• Even more deprecations by @MikeMcQuaid in #23892
• Narrow mkdir_p sandbox write permissions by @MikeMcQuaid in #23897
• Show red ⊘ for packages that can't be installed by @HaraldNordgren in #23853
• Fix SSH Python resource updates in the sandbox by @MikeMcQuaid in #23896
• Move Cask CI helpers into brew by @p-linnane in #23886
• bump: autobump partially disabled packages by @AlternateRT in #23898
• cask: allow identical macOS sha256 with Linux by @p-linnane in #23902
• advisory-match: protect reviewed ranges by @p-linnane in #23903
• shellenv: prioritise Homebrew across shells by @MikeMcQuaid in #23900
• Ignore uv executable entries in Bundle by @edel67 in #23905
• Allow limiting total build-from-source dependents by @cho-m in #23884
• Adjust macOS subprocess policy by @MikeMcQuaid in #23907
• cask: hoist OS sha256 and sort depends_on by @p-linnane in #23901
• Adjust macOS subprocess policy by @MikeMcQuaid in #23909
• test_bot: source-building more deps on Linux by @cho-m in #23910
• rubocops/cask: reject disallowed uninstall and zap patterns by @bevanjkay in #23908
• Maintain bottle coverage during macOS bootstrap by @p-linnane in #23918
• bump-formula-pr: support bumping resource using revision as version by @cho-m in #23914
• curl_download_strategy: fix caching edgecase by @bevanjkay in #23917
• diagnostic: indent all findings equally by @AlternateRT in #23904
• Soften doctor output issue checklist wording by @MikeMcQuaid in #23921
• docs/Formula-Cookbook: fix broken link by @botantony in #23923
• Refine macOS sandbox compatibility by @MikeMcQuaid in #23920
• Run stale PR approvals with standalone Ruby by @p-linnane in #23915
• advisory-match: derive introduced boundaries by @p-linnane in #23924
• Overwrite cask binary symlinks when linking kegs by @MikeMcQuaid in #23925
• Promote macOS Golden Gate 27 to full support by @p-linnane in #23928
• Scrub invalid UTF-8 relocation diagnostics by @dduugg in #23932
• Update json to 3.0.1 by @dduugg in #23929
• Clarify package commit squashing by @MikeMcQuaid in #23935
• Report tiers and refresh stale bottle metadata by @MikeMcQuaid in #23938
• extend/pathname: accept Pathname as a hash value by @botantony in #23941
• Unify sandbox temporary directory handling by @MikeMcQuaid in #23940
• Use GitHub runners for Golden Gate dependents by @p-linnane in #23942
• Drop gnu/ from ftpmirror.gnu.org URLs by @daeho-ro in #23943
• Shorten sandbox temporary directory names by @p-linnane in #23944
• create: preserve formula template newlines by @MikeMcQuaid in #23947
• Allow runtime Metal compilation by @MikeMcQuaid in #23949
• formula_cellar_checks: flag prebuilt executables from npm packages by @bevanjkay in #23906
• cask/utils: check ownership before using sudo chown by @hyuraku in #23948
• Stop leaking BUNDLER_VERSION into child processes by @daeho-ro in #23950
• Read terminal size without invoking stty by @MikeMcQuaid in #23952
• Reject mismatched real and effective UIDs by @p-linnane in #23955
• tests: run brew.sh smoke checks in the test prefix by @dduugg in #23867
• More deprecations by @MikeMcQuaid in #23783

New Contributors

• @oxsean made their first contribution in #23869
• @edel67 made their first contribution in #23905

Full Changelog: 6.0.22...7.0.0