brew-browser 0.7.2 / Brew Browser native 0.3.2

A bug-fix patch. Signed + notarized; Tauri is the macOS 13+ / Linux build,
native is the macOS 26 SwiftUI build. Split-track versions track the same batch
(native 0.3.2 ≙ Tauri 0.7.2).

Fixes

Homebrew 6.0+ compatibility for vulnerability scanning

The headline fix. In Homebrew 6.0+, the vulns subcommand moved into core and
the standalone homebrew/brew-vulns tap/formula was deprecated and deleted. As
a result, on current Homebrew the vulnerability-scan feature was effectively
broken: detection failed and the "Install brew-vulns" button chased a
formula that no longer exists. Now:

• Detection falls back to brew help vulns (the built-in subcommand) when the
  legacy prefix check fails — both shells.
• The install/remediation command is brew update (which is how you get the
  now-built-in subcommand) instead of installing a deleted formula.
• Formula-name validation accepts 2-segment tap-qualified names (user/name)
  in addition to user/repo/name, while still rejecting shell metacharacters
  and path traversal.

Thanks to @fallenmaverick (#152).

No more startup macOS Keychain prompts

The app read GitHub credential status eagerly on launch, which could trigger a
macOS Keychain access prompt for users who'd never signed in. Both shells now
gate that startup read behind a persisted "has signed in before" flag
(localStorage on Tauri via #152, UserDefaults on native via #155), so a user
who never touches GitHub sees no Keychain prompt on launch.

"59 minutes ago" scan time (WebKit)

Under WebKit, parsing the backend's nanosecond-precision ISO timestamps could
mis-parse the timezone and show a fresh scan as "59 minutes ago" / "1 hour ago".
Timestamps are now truncated to millisecond precision before parsing (#152).

Homebrew subprocess environment

• Native VulnsService subprocesses now inherit the same Homebrew environment
  ($HOME, analytics-off flags) as the rest of the app, so brew runs
  correctly under the launchd GUI-app context (#152).
• The Tauri backend prepends Homebrew bin paths to PATH for spawned commands,
  now including Linuxbrew (/home/linuxbrew/.linuxbrew/{bin,sbin}) alongside
  macOS /opt/homebrew + /usr/local (#152, #155).

Acknowledgments

• @fallenmaverick — the Homebrew 6.0+ vuln compatibility, startup Keychain
  prompt, WebKit date-parsing, and Swift subprocess-env fixes (#152).

Issues & feedback

github.com/msitarzewski/brew-browser/issues.
Every error toast in the app has a "Report" button that pre-fills the issue with
your context.