Homebrew 7.0.0 landed on September 13 with the biggest architectural shake-up since 6.0.0, and the headline change is the long-telegraphed death of Intel Mac support.
Intel Goes Tier 3
Effective immediately, macOS Intel x86_64 is Tier 3: existing bottles remain available, but updated formulae may require source builds as GitHub Actions and Apple have both dropped reliable Intel infrastructure. The full removal date is September 1, 2027. Homebrew's maintainers are blunt about it: if Apple and Microsoft's own GitHub can't sustain Intel macOS support, a volunteer-run project cannot either. MacPorts is recommended as an alternative for Intel holdouts.
macOS 10.15 Catalina and earlier are dropped entirely — users must upgrade to Big Sur or later. macOS Sonoma 14 is also now Tier 3, with Sequoia 15 and Golden Gate 27 on Apple Silicon as the supported Tier 1 targets.
BrewUI: Homebrew Gets a Native App
The release ships BrewUI, a native macOS graphical interface available via `brew install homebrew-app` on Tahoe 26 or later. It provides package browsing, search, and installed-version details in a single window, and crucially shows the underlying brew commands for every graphical action — bridging the GUI-terminal gap.
Built-in Vulnerability Scanning
Homebrew now ships its own advisory database and `brew vulns` command, checking installed formulae against OSV.dev without requiring third-party taps. It supports severity filtering, dependency-chain checks, and Brewfile-level scans. The advisory index is published in OSV format under CC0, giving security teams reusable vulnerability data tied to Homebrew-shipped package versions.
Security Hardening
Several security fixes landed alongside the release:
- A high-severity issue (GHSA-rg9r) where unsigned cask-removal metadata could execute commands with sudo has been patched. - A moderate issue (GHSA-5263) where malicious casks could execute code outside the macOS install sandbox through LaunchServices is now blocked. - Installation sandboxes now block home directory reads by default, and mismatched real/effective user IDs are rejected.
Linux: Bubblewrap Replaced by Landlock
On Linux, Homebrew replaces Bubblewrap sandboxing with Landlock, eliminating external dependencies and Docker permission issues. Kernels without Landlock continue working but without sandbox protection, reported as an advisory by `brew doctor`.
Performance
Downloads, preparation, and installation now overlap more aggressively. `brew update` pre-warms Ruby caches, and startup launches fewer subprocesses. The net effect is noticeably faster installs, particularly for Brewfile batches.
What It Means
For developers: if you're still on Intel Macs, the clock is ticking. Homebrew will keep running until September 2027, but without bottles or CI, the experience will degrade as formulae drop Intel from their build matrices. The migration path is clear — Apple Silicon or MacPorts.
For the ecosystem: Homebrew's vulnerability database and BrewUI represent a maturation of the project from a developer utility into infrastructure with security tooling and user-facing surfaces.
