What's Changed

• docs: drop advice to disable security or lower support tier by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22749
• release: exclude Dependabot PRs from changelog by @ZhongRuoyu in https://github.com/Homebrew/brew/pull/22750
• Document more supply-chain guardrails by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22752
• Allow tap trust in build sandbox by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22751
• Don't warn for partially trusted skipped taps by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22755
• services: check --sudo-service-user exists by @sexagesimal in https://github.com/Homebrew/brew/pull/22763
• Follow symlinked trust stores by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22762
• Annotate upgradable dependencies in install plans by @HaraldNordgren in https://github.com/Homebrew/brew/pull/22761
• livecheck: add compressed option by @samford in https://github.com/Homebrew/brew/pull/22757
• Don't bold upgradable dependencies in install plans by @HaraldNordgren in https://github.com/Homebrew/brew/pull/22765
• formula_installer: skip conflicts if not linking by @cho-m in https://github.com/Homebrew/brew/pull/22766
• Preserve tap remotes in bundle dumps by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22754
• Stabilise formula auditor merge-base specs by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22760
• Enable Sorbet/ConstantsFromStrings and override cops by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22758
• Drop redundant installed guard from pretty_install_status callers by @HaraldNordgren in https://github.com/Homebrew/brew/pull/22767
• Skip self-conflicts during install by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22764
• Add install step config writes by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22759
• Locate installed racks from untrusted taps by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22771
• Read user Git config for private downloads by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22779
• formula_installer: create opt link even when skip_link by @cho-m in https://github.com/Homebrew/brew/pull/22783
• Ask PR authors for motivation and bug reproduction steps by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22787
• Revert pull request #22767 by @HaraldNordgren in https://github.com/Homebrew/brew/pull/22791
• Null Git global config for source_modified_time by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22789
• Skip invalid casks in Cask::Cask.all by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22780
• Trust custom-remote tap by reference in test-bot by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22781
• Tighten issue template wording for brevity by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22790
• Support tap trust in Brewfiles by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22772
• Skip auto-update outdated list before upgrade/outdated by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22786
• Null Git global config for local repository inspections by @carlocab in https://github.com/Homebrew/brew/pull/22797
• manpages: update Struct to T::Struct by @cho-m in https://github.com/Homebrew/brew/pull/22798
• bundle: narrow types by @cho-m in https://github.com/Homebrew/brew/pull/22799
• audit: fix except_cops array by @samford in https://github.com/Homebrew/brew/pull/22800
• support splitting cask versions by arch by @TyceHerrman in https://github.com/Homebrew/brew/pull/22462
• Fix brew bundle topological sort crash on missing dependency node by @bendrucker in https://github.com/Homebrew/brew/pull/22803
• Handle API source patch symlinks by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22806
• Fix caveats replacing order (HOMEBREW_PREFIX) in API formula reconstruction by @umireon in https://github.com/Homebrew/brew/pull/22810
• dev-cmd/tap-new: update actions versions by @simnalamburt in https://github.com/Homebrew/brew/pull/22811
• cask/installer: prepend cask name to macOS requirement error by @cho-m in https://github.com/Homebrew/brew/pull/22816
• Avoid duplicate upgrade warnings by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22805
• Restore test-bot tap trust by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22814
• Secure tap bottle publishing by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22815
• Name the formula or cask in requirement error messages by @p-linnane in https://github.com/Homebrew/brew/pull/22817
• trust: replace T.untyped by @cho-m in https://github.com/Homebrew/brew/pull/22819
• livecheck: prevent unnecessary boolean args by @samford in https://github.com/Homebrew/brew/pull/22823
• generate-zap: load casks via named args and skip unreadable dirs by @p-linnane in https://github.com/Homebrew/brew/pull/22821
• Clarify tap trust warning next steps by @joshka in https://github.com/Homebrew/brew/pull/22777
• Improve generate-zap Full Disk Access errors by @loganrosen in https://github.com/Homebrew/brew/pull/22730
• Respect auto-update cask opt-out by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22825
• Share opt-bin PATH helpers by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22827
• list: add --no-installed-on-request switch by @p-linnane in https://github.com/Homebrew/brew/pull/22829
• workflows/vendor-gems: change app-id to client-id by @p-linnane in https://github.com/Homebrew/brew/pull/22832
• github_runner_matrix: exclude disabled dependents from testing by @dtrodrigues in https://github.com/Homebrew/brew/pull/22834
• Allow sometimes skipping the sandbox inside nested sandboxes by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22793
• patch: add directory for local patch by @daeho-ro in https://github.com/Homebrew/brew/pull/22836
• Rename Homebrew security docs page by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22839
• Fix bundle jobs cask deps by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22838
• github_runner_matrix: exclude deprecated dependents from testing by @dtrodrigues in https://github.com/Homebrew/brew/pull/22843
• Avoid formula objects for stable paths by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/22840

New Contributors

• @TyceHerrman made their first contribution in https://github.com/Homebrew/brew/pull/22462
• @simnalamburt made their first contribution in https://github.com/Homebrew/brew/pull/22811

Full Changelog: https://github.com/Homebrew/brew/compare/6.0.2...6.0.3