Homebrew: Cask Metadata Fallout and a Sorbet Speed Trip
A cask metadata migration rollout exposed crashes in outdated and upgrade paths, while a performance tweak to Sorbet's type system got merged, broke tests, and was reverted within a day. Homebrew also shipped a new built-in vulnerability scanner.
Duration: PT2M35S
Episode overview
This episode is a short developer briefing from Homebrew.
It explains recent repository work in plain language.
- Show: Homebrew
- Published: 2026-07-14T13:14:43Z
- Audio duration: PT2M35S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning. It's July 14th, and today's Homebrew activity centers on two threads: fallout from a cask metadata change, and a fast-moving Sorbet performance experiment that didn't survive contact with reality.
First, casks. PR 22958 turned on JSON metadata migration for all users, not just developers. That immediately surfaced edge cases: PR 23084 fixed a crash in "brew outdated dash dash greedy" when installed casks had no URL, and PR 23087, still open, addresses missing array fields when generating cask structs. PR…
Second, Sorbet. PR 23078 made type constructors return a shared instance when runtime checking is off, aiming to speed up commands like "brew upgrade dash dash dry-run." Within hours, that change broke prop optionality logic, and PR 23091 reverted it. PR 23093 is now working on a safer version that keeps non-nilable…
Elsewhere, Michael Cho landed a cluster of test infrastructure fixes, 23081, 23085, 23088, and 23083, tightening up portable Ruby and cask audit tests on macOS runners. And PR 23080 upstreamed a new "brew vulns" command, pulling vulnerability scanning against the OSV database directly into brew instead of a separate…
What's next: watch for 23087 and 23100…
T…
Nearby episodes from Homebrew
- Shaving Milliseconds and Fixing Silent Failures
- Weekly Recap - Casks Get Faster, Safer, and Less Swift-Dependent
- Cask Security Gets Simpler and Safer
- Cask Installs Get Faster and More Permissive
- Cask Installs Get Faster and Safer
- Cleaning Up the Test Sandbox and Upgrade Edge Cases
- Cask Upgrades Get an Integrity Pass
- Performance Sweep and Cask Upgrade Fixes