Homebrew 7.0.0, released today, marks the package manager’s most significant update since version 6.0.0, introducing performance improvements, enhanced security features, and changes to platform support.
According to the announcement, the release includes faster installations and upgrades through greater concurrency. The update overlaps package preparation and downloads during brew install, brew reinstall, and brew upgrade operations, reducing wait times between packages. Brew config now gathers system details concurrently, and brew cleanup avoids repeated cache scans. Additionally, brew fetch reads download information directly from API metadata, starting downloads without loading complete package definitions.
Security enhancements are central to this release. Homebrew 7.0.0 adds built-in vulnerability checks and an advisory database. The update addresses multiple security advisories, including a high-severity issue fixed in 6.0.12 where unsigned cask-removal metadata could execute commands with sudo. A moderate-severity vulnerability fixed in 7.0.0 involved malicious casks executing code outside the macOS install sandbox through LaunchServices; Homebrew now restricts application launching, Mach services, and Unix socket connections.
The release introduces stronger sandboxing protections. Homebrew delivers structured setup as signed data and sandboxes formula and cask operations. The package manager begins migrating dependency downloads into a fetch phase, where formulae download with network access and writable caches before install disables networking and makes caches read-only. Homebrew blocks sandboxed reads of the home directory by default and rejects mismatched real and effective user IDs.
Command improvements provide clearer previews and configuration options. New features include brew install –dry-run for previewing installations, brew list –no-installed-on-request to identify dependency-installed formulae, and enhanced brew info output distinguishing uninstallable packages. Brew services now reads persistent overrides from environment files, and brew bundle restores language tools from declared sources. Brew doctor now offers JSON output for automation and warns when another brew shadows the current installation in PATH.
Platform support changes significantly. macOS 10.15 and earlier are no longer supported; users must upgrade to macOS 11 or later. Intel Macs are moving to Tier 3 support, with no new bottles after September 1, 2027. macOS Sonoma 14 also moves to Tier 3, with users encouraged to upgrade to Sequoia 15 or later for bottles and installations. macOS Golden Gate 27 on Apple Silicon receives full Tier 1 support with prebuilt bottles.
A native macOS app is included with the release, though specific details about its functionality were not provided in the announcement.
Key facts
- Homebrew 7.0.0 increases installation and upgrade speed through concurrent downloads and preparation
- The release adds built-in vulnerability checks and an advisory database for enhanced security
- Multiple security vulnerabilities were fixed, including high, moderate, and low-severity issues
- macOS 10.15 support ends; Intel Macs move to Tier 3 support starting immediately
- New commands include brew install –dry-run, brew list –no-installed-on-request, and enhanced brew info output
- A native macOS app is included with the release