What's Changed
- Ignore Ubuntu release list link check failures by @MikeMcQuaid in #24196
- Require test resources in homebrew/core by @MikeMcQuaid in #24180
- Preserve cask approval for copied helpers by @MikeMcQuaid in #24191
- Add OSS Scanner Dockerfile and threat model by @p-linnane in #24199
- spdx: store downcased licenses in hash across calls by @alebcay in #24197
- Harden tap redirect trust and rollback by @p-linnane in #24198
- Fix offline, vacuous and repo-leaking specs by @p-linnane in #24200
- Ignore hidden directories when listing taps by @p-linnane in #24201
- Isolate Bootsnap caches across gem changes by @SSakutaro in #24206
- Bump portable-ruby to 4.0.7_1 by @brew-commit-app[bot] in #24211
- Check untrusted conflicts without loading them by @p-linnane in #24208
- Avoid duplicate source upgrades of dependencies by @p-linnane in #24209
- Report net dependency impact in test-bot by @p-linnane in #24213
- Avoid nested formula locks while linking by @p-linnane in #24207
- formula_versions: allow test-only resources by @daeho-ro in #24218
- Show versions of dependencies in dry-run by @HaraldNordgren in #24210
- Extend
T::Genericin Tapioca DSL compilers by @p-linnane in #24219 - rubocop: Always run the "every formula should have a test block" check by @issyl0 in #24188
- Suppress developer mode warnings in CI by @p-linnane in #24220
- bundle: protect Brewfile formulae during cleanup by @AbdelrahmanHafez in #24222
- advisory-match: emit split affected intervals by @p-linnane in #24223
- advisory-match: add --rejected-candidates by @p-linnane in #24224
- advisory-match: reuse platform-independent history by @p-linnane in #24225
- cask/audit: check signing of more artifact types by @bevanjkay in #24227
- Check cask receipt tap when untapping by @p-linnane in #24228
- pr-publish: reset label inputs per pull request by @p-linnane in #24232
- pr-publish: remove large runner uploads by @p-linnane in #24233
- advisory-match: fix spec indentation warning by @p-linnane in #24234
- advisory-match: cache historical formula source by @p-linnane in #24231
- Fix local formula sources in brew info by @MikeMcQuaid in #24238
- Add cop for ternaries with nil branches by @MikeMcQuaid in #24239
- Read protected install step symlinks with sudo by @p-linnane in #24241
- sort search results by version by @adamv in #24240
- utils/pypi: preserve
:testresources by @botantony in #24242 - bundle: protect alternate formula names by @AbdelrahmanHafez in #24229
- Document yearly
BottleTransitionupdate by @hyuraku in #24243 - cask/audit: skip resource-only bundles by @MikeMcQuaid in #24247
- test: isolate tty? and command lookup fixtures by @p-linnane in #24245
- cask/ci/check: ignore more running Apple apps by @bevanjkay in #24244
- bundle: upgrade outdated npm packages by @MikeMcQuaid in #24254
- docs: unify formula and cask description guidelines by @bevanjkay in #24256
- info: show build deps for source installs by @HaraldNordgren in #24258
- Exclude end date from approved-review searches by @MikeMcQuaid in #24260
- Keep ENV build metadata off the shareable ENV by @p-linnane in #24249
- Require lead maintainer review for CODEOWNERS by @p-linnane in #24265
- Accept dependency tag arrays in API metadata by @p-linnane in #24262
- Stop bundle specs leaking Tap and Cask doubles by @p-linnane in #24267
- Preserve and validate no_linkage metadata by @p-linnane in #24263
- Use full names for tap migration targets by @p-linnane in #24266
- utils/curl: guess charset from a
<meta>tag by @hyuraku in #24257 - info: show revision in headline upgrade version by @HaraldNordgren in #24271
- curl: stop retrying local download write failures by @BrandenXia in #24275
- audit: flag self-submissions by commit email by @bevanjkay in #24277
- shared_audits: parse whois dates with spaces by @bevanjkay in #24276
- cask: merge uninstall and zap directives into one pass by @bevanjkay in #24194
- Disclaim sandbox TCC responsibility when available by @MikeMcQuaid in #24272
- audit: require livecheck for new packages by @bevanjkay in #24279
- Make source build dependency upgrades more liberal by @HaraldNordgren in #24273
- rubocops/cask: disallow bare ToDesktop wildcard by @krehel in #24281
- api: revalidate JSON API caches with ETag, not the bumped mtime by @xrl in #24193
- Truncate summary versions to fit terminal width by @MikeMcQuaid in #24283
- Add vulnerability-aware package management by @MikeMcQuaid in #24274
- unpack: explain extraction disk space failures by @BrandenXia in #24278
- Tighten bottle attestation verification by @MikeMcQuaid in #24282
- Preserve build errors with Pathname arguments by @MikeMcQuaid in #24292
- Serialise Pathnames in forked child errors by @dduugg in #24294
- Publish local patch checksums in the formula API by @MikeMcQuaid in #24284
- Preserve cask backups across lifecycle phases by @MikeMcQuaid in #24295
New Contributors
- @BrandenXia made their first contribution in #24275
- @xrl made their first contribution in #24193
Full Changelog: 7.0.9...7.0.10