Top
Best
New

Posted by mikemcquaid 12 hours ago

Show HN: Homebrew 6.0.0(brew.sh)
Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal Homebrew JSON API, sandboxing on Linux, better defaults informed by our user survey, many brew bundle improvements, improved performance and initial support for macOS 27 (Golden Gate).

Happy to discuss any questions here!

919 points | 215 commentspage 6
tiahura 3 hours ago|
Seems like the sort of package that waiting on 6.0.1 might make sense.
tommica 5 hours ago||
Such an amazing project!
pdntspa 6 hours ago||
Does this handle macOS installs with multiple local users? I have to su into account 1 if I want to brew install something from account 2
phs318u 4 hours ago||
Back in the day, pkgsrc was a thing (cross-platform; originally from NetBSD). Source based package distribution, it explicitly allowed for unprivileged installation to a prefix of your choice. I became very familiar with it as an ordinary Solaris user 20 years ago.
jperkin 3 hours ago|
It's still a thing: https://pkgsrc.smartos.org/install-on-macos/
paulddraper 7 hours ago||
I tried hosting a homebrew tap, after hosting apt and yum repositories.

That was when I realized Homebrew is much, much harder.

Your server needs to implement the git protocol. You can't just stick it on some server with a CDN in front of it, you need to run and fortify a git server.

Strange choices IMHO.

reactordev 8 hours ago||
Hell yeah, tap trust!!!
gigatexal 5 hours ago||
Homebrew is the first thing I install on a new Mac. I love it. Thank you everyone for all the work. Looking forward to 6.0 and all the security stuff yay. I hope the apps I use that their maintainers adopt the changes.
alwillis 1 hour ago|
> Homebrew is the first thing I install on a new Mac.

Absolutely!

napolux 6 hours ago||
did google apologize for not hiring you?
mikemcquaid 6 hours ago|
You’re thinking of mxcl, the creator, not me.

I also applied and failed a final stage job interview at Google (and various other places over the years) but never really bothered me that much.

Ironically I think I’d probably never have started working on Homebrew if it had.

napolux 5 hours ago||
oh sorry i was wrong, glad it happened then, and thx for your work!
awesome_dude 5 hours ago||
Dependency management is still one of the hardest jobs in systems (languages, Operating systems, distributed applications, etc) - hat's off to you and your team for the hard work keeping everything together
Hamuko 5 hours ago|
I don't understand how the tap trust improves security at all. If I'm installing something from a third-party tap, instead of running tap + install, I now run tap + trust + install? How does this protect me against compromised taps?
thealistra 2 hours ago|
Exactly - so far seems like a windows vista “are you sure?” Modal. Are we missing something here?
More comments...