7.0.11

What's Changed

• Verify API formula patch downloads by @MikeMcQuaid in #24285
• Require verifiable official formula sources by @MikeMcQuaid in #24287
• Honour explicit cask checksum requirements by @MikeMcQuaid in #24288
• livecheck: prefer Git livecheck over GithubLatest by @bevanjkay in #24280
• Keep outdated :no_linkage build dependencies by @HaraldNordgren in #24290
• cask/audit: skip livecheck requirement for :latest by @bevanjkay in #24297
• advisory-match: exclude reviewed false aliases by @p-linnane in #24296
• Extract tarballs with a UTF-8 locale by @IngmarStein in #24304
• Combine dependency role tags from API metadata by @p-linnane in #24302
• Match newlines in tap path regex by @p-linnane in #24303
• Warn when the upstream remote isn't origin by @HaraldNordgren in #24299
• Treat archive filenames literally by @p-linnane in #24305
• Keep patches in stable blocks during bumps by @MikeMcQuaid in #24307
• cask/audit: reject new casks requiring Rosetta by @bevanjkay in #24309
• generate-cask-ci-matrix: skip signing on macOS 15 by @bevanjkay in #24312
• Fix ZIP volume label specs on macOS 27 by @p-linnane in #24313
• Don't flag newer CLT releases as outdated by @p-linnane in #24314
• info: remove stale installed_as_dependency TODO by @hyuraku in #24318
• bundle cleanup: report failed removals by @edel67 in #24289
• Require zap stanzas in new casks by @bevanjkay in #24315
• Prefill app and zap in brew create --cask by @bevanjkay in #24316
• Skip unavailable MacPorts website links by @MikeMcQuaid in #24326
• Sign temporary keg copies before restoring them by @MikeMcQuaid in #24325
• Bump portable-ruby to 4.0.8 by @brew-commit-app[bot] in #24323
• Warn about Git sandbox configuration failures by @MikeMcQuaid in #24329
• formula: deuniversalize the keg being installed by @zbeekman in #24327
• Bump portable-ruby to 4.0.9 by @brew-commit-app[bot] in #24334
• Honour curl environment options consistently by @MikeMcQuaid in #24328
• dmg: skip legacy desktop metadata by @QuillVot in #24331
• Re-read terminal size on resize during downloads by @mxtymoshyk in #24338
• Allow Keychain tokens for Git downloads by @MikeMcQuaid in #24341
• Restart systemd services on unsuccessful exit by @xucian in #24342
• cask/audit: strip gktool progress from errors by @bevanjkay in #24344
• list: fail clearly for uninstalled casks when piped by @aktanazat in #24345
• Speed up linking and unlinking kegs by @krehel in #24332
• keg_relocate: strip high bytes before matched paths by @andrew in #24321
• Preserve UTF-8 paths in ELF loader strings by @andrew in #24349
• Prefer reliable installed download tools by @MikeMcQuaid in #24346
• Share analytics queries and package downloads by @MikeMcQuaid in #24350
• Allow reading private sandbox temporary files by @MikeMcQuaid in #24351
• Limit implicit item trust to install commands by @MikeMcQuaid in #24352
• download_queue: name the download in checksum mismatch errors by @Moisan in #24353
• Document Homebrew and MDM administration by @MikeMcQuaid in #24355

New Contributors

• @QuillVot made their first contribution in #24331
• @mxtymoshyk made their first contribution in #24338
• @xucian made their first contribution in #24342
• @aktanazat made their first contribution in #24345

Full Changelog: 7.0.10...7.0.11