Homebrew 7.0.0
620 points
• 1 day ago
• Article
Link
Homebrew 7.0.0 标志着该软件包管理器的一个重要里程碑，本次发布着重提升性能、强化安全并优化支持架构。一个核心改进是通过在下载、准备和诊断等环节增加并发性，显著加快了安装和升级速度。由此，管理大型包或检查系统配置等复杂操作可以通过并行处理此前必须按序完成的任务，从而更快完成。
安全性也在本次发布中得到加强。 Homebrew 7.0.0 引入了内置的 advisory 数据库和新命令 brew vulns，允许用户在不依赖外部工具的情况下扫描已安装软件的已知漏洞。与此同时，版本中修复了若干安全建议，并增强了安装过程的防护：对更多操作进行沙箱限制，并在安装阶段限制网络访问，以降低第三方 casks 和未经授权命令执行带来的风险。
针对 macOS 用户，7.0.0 推出了官方原生图形界面 BrewUI，让软件包管理更直观、易用。该应用既能浏览、搜索和管理已装软件，也能展示正在执行的底层终端命令。不过本次发布也反映出硬件支持的变化：在 Apple 和 GitHub 做出转向后，Homebrew 7.0.0 将 Intel Macs 划为 Tier 3，表示计划在 2027 年 9 月前逐步停止对其的支持。
在 Linux 方面，Homebrew 已将沙箱机制从 Bubblewrap 切换为 Landlock 。此举移除了先前的一些依赖和容器权限要求，简化了设置流程，使其更容易在各类 Linux 环境中集成。项目同时正朝更结构化的包定义模型演进，弃用传统的基于 Ruby 的安装钩子，转而采用标准化的声明式步骤，旨在提高 formulae 和 casks 在所有支持平台上的可预测性、安全性与可维护性。
作为一个由志愿者运营的非营利项目，此次发布仍然强调长期可持续性。团队继续呼吁社区支持，表示依靠捐款和积极贡献来维持包括持续集成在内的关键基础设施。尽管进行了重要的架构调整并不得不减少对旧硬件的支持，项目依然十分活跃，核心 Homebrew 仓库在开发周期内成功管理工作负载，保持开放问题为零。
Homebrew 7.0.0 marks a major milestone for the package manager, prioritizing performance, enhanced security, and refined support structures. A central theme of this release is significantly improved installation and upgrade speeds, achieved through increased concurrency in downloading, preparation, and diagnostic processes. These performance gains ensure that complex operations, such as managing large bundles or checking system configurations, are completed much faster by overlapping tasks that previously ran sequentially.
Security also receives a substantial upgrade in this release. Homebrew 7.0.0 introduces a built-in advisory database and the new command brew vulns, allowing users to scan installed software for known vulnerabilities without relying on external tools. Alongside these proactive features, the release addresses several security advisories and tightens installation protections. By sandboxing more operations and restricting network access during the installation phase, Homebrew minimizes the risks associated with third-party casks and unauthorized command execution.
For macOS users, the 7.0.0 release introduces BrewUI, an official native graphical interface that makes package management more accessible. This application allows users to browse, search, and manage their installed software while providing visibility into the underlying terminal commands being executed. However, this release also reflects the shifting landscape of hardware support. Following Apple and GitHub's decisions to move away from Intel, Homebrew 7.0.0 demotes Intel Macs to Tier 3 status, signaling a planned phase-out of support by September 2027.
On the Linux front, Homebrew has moved from Bubblewrap to Landlock for sandboxing. This change simplifies setup by removing previous dependencies and container permission requirements, allowing for more seamless integration across various Linux environments. Additionally, the project is moving toward a more structured model for package definitions, deprecating traditional Ruby-based install hooks in favor of standardized, declarative steps. This transition aims to improve the predictability, security, and maintainability of formulae and casks across all supported platforms.
Reflecting its status as a volunteer-run, non-profit project, the release maintains a strict focus on long-term sustainability. The team continues to emphasize the importance of community support, noting that they rely on donations and active contributions to maintain critical infrastructure like continuous integration. Despite the significant architectural changes and the necessary reduction in support for older hardware, the project remains highly active, with the core Homebrew repository successfully managing its workload to keep open issues at zero during the development cycle.
248 comments • Comments Link
Homebrew 7.0.0 带来了明显的性能提升、在 Linux 上借助 Landlock 增强的沙盒、本地 macOS 应用以及内置的漏洞扫描功能。对 Ruby 前端的性能优化被证明比实验性的 Rust 重写更为有效，后者在非合成基准测试中并未超越现有代码库。 Homebrew 坚持反对为软件包更新设置"冷却期"，以确保安全补丁能够即时交付，这一点区别于其他生态系统。维护者积极利用 AI/LLM 辅助开发，构建了定制工具来支持"提示 - 审查 - 推送"的工作流，强调对生成代码在本地进行验证。项目正在逐步停止对 Intel Macs 的支持，此举与 Apple 在 macOS 中弃用 x86_64 以及 GitHub Actions 计划淘汰基于 Intel 的运行器相呼应。需要继续支持旧硬件的用户被鼓励迁移到 MacPorts，该项目在依赖管理和向后兼容性方面持不同理念。关于系统级软件包与面向用户应用之间的界限仍在讨论中，一些用户倾向于使用 Mise 等工具构建模块化的开发专用工具链，并将 Homebrew 用于通用 CLI 实用程序。对于 Homebrew 供应链安全性的担忧，常有提醒指出：该项目基于一种高信任、低摩擦的运行模式，类似于 npm 或 PyPI 。 Homebrew 在 Linux 上的安装对部分人仍具争议，尤其是要求对目录前缀做根级别修改，尽管项目正努力支持更灵活、更短的前缀长度。总体而言，Homebrew 作为 macOS 事实上的包管理器，填补了安装开发工具和开源库方面的关键空白。
Homebrew 7.0.0 的反响总体积极，用户称赞可量化的速度提升和新增的原生 GUI 。尽管放弃对 Intel Macs 的支持的决定令一些长期用户不满，但普遍被视为依赖 Apple 与 GitHub 上游支持的必然结果。持续的技术讨论凸显了现代包管理在便利性与特定开发环境对更严格安全性或可移植性要求之间的张力，促使部分用户采用多工具工作流，将系统依赖与项目特定依赖隔离开来。 • Homebrew 7.0.0 introduces significant performance improvements, enhanced sandboxing through Landlock on Linux, a native macOS application, and built-in vulnerability scanning.
• Performance optimizations in the Ruby frontend proved more effective than an experimental Rust rewrite, which failed to outperform the existing codebase in non-synthetic benchmarks.
• Homebrew maintains a deliberate policy against "cooldowns" for package updates to ensure security patches are delivered immediately, distinguishing its model from other ecosystems.
• AI/LLM-assisted development is actively utilized, with maintainers building custom tools to facilitate a prompt-review-push workflow that emphasizes local verification of generated code.
• The project is ending support for Intel Macs, aligning with Apple's deprecation of x86_64 in macOS and the planned retirement of Intel-based GitHub Actions runners.
• Users requiring continued support for older hardware are encouraged to migrate to MacPorts, which maintains a different philosophy regarding dependency management and backward compatibility.
• Debates persist regarding the distinction between system-level packages and user-facing applications, with some users favoring a modular approach using tools like Mise for development-specific toolchains alongside Homebrew for general CLI utilities.
• Concerns regarding Homebrew's supply chain security are often met with reminders that the project operates on a high-trust, low-friction model similar to other major package managers like npm or PyPI.
• Installation of Homebrew on Linux remains a point of contention for some, specifically regarding the requirement for root-level changes to directory prefixes, though the project is working to support flexible, shorter prefix lengths.
• Homebrew fills a critical gap as the de facto package manager for macOS, which lacks a first-party solution for installing developer tools and open-source software libraries.
The reception of Homebrew 7.0.0 is largely positive, with users praising the measurable speed improvements and the addition of a native GUI. While the decision to drop support for Intel Macs has caused frustration for some long-time users, there is a clear consensus that it is an unavoidable consequence of the project's reliance on upstream support from Apple and GitHub. The ongoing technical discourse highlights a tension between the convenience of modern package managers and the stricter security or portability requirements of certain development environments, leading some to adopt multi-tool workflows to isolate system and project-specific dependencies.