Homebrew 6.0.2 hardens the install sandbox

Category: Dev tools
Status: confirmed
Sources: Homebrew 6.0.2 release
Summary: Homebrew published 6.0.2 on 2026-06-15, a patch release continuing the 6.0.0 sandbox and tap-trust work: the sandbox now denies access to all of $HOME except Homebrew directories, Bubblewrap can auto-install on Linux, and several tap-trust and redirected-tap-trust handling paths were fixed, alongside fixes for sandboxed-home crashes and brew irb/brew dry-run regressions.
Why it matters: The tighter $HOME deny rules reduce what a malicious formula or cask can read during a build, the same install-time trust surface behind recent package-ecosystem attacks.