- Sources: release notes, HN discussion
- Summary: Intel macOS moves to Tier 3 with no new bottles, Homebrew stops running on Intel on 2027-09-01 and the release notes point those users to MacPorts, macOS 10.15 and earlier are dropped immediately, and Sonoma 14 also moves to Tier 3. Linux sandboxing switches from Bubblewrap to Landlock, which needs no dependencies and no escalated Docker permissions, and a kernel without Landlock keeps the less secure pre-6.0.0 configuration with
brew doctor reporting it as an advisory. brew vulns is built in and checks installed formulae against OSV.dev without another tap or gem, backed by a new Homebrew advisory database published in OSV format under CC0 that records vulnerabilities against the formula versions and revisions Homebrew ships. The release notes separately list eight GHSA entries for Homebrew's own security fixes, including GHSA-rg9r-ppxp-87hm, rated High and fixed in 6.0.12, where unsigned cask-removal metadata could execute commands with sudo. - Why it matters: Intel Mac users get a dated end of support, and CI that pins
ghcr.io/homebrew/ubuntu22.04 or Homebrew/actions/*@master breaks now, because both are removed with no redirect.
send feedback on this story