Homebrew: Tightening the Seams on Services and Security
Homebrew shipped a two-phase migration to a new macOS service naming scheme and closed several path and permission gaps in the install pipeline, spanning services, kegs, sandboxing, and cask uninstall safety. The common thread is defensive hardening around processes that touch the filesystem or host system directly.
Duration: PT2M40S
Episode overview
This episode is a short developer briefing from Homebrew.
It explains recent repository work in plain language.
- Show: Homebrew
- Published: 2026-09-03T13:16:04Z
- Audio duration: PT2M40S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
It's September 3rd, 2026, and this is Homebrew, your daily briefing on what shipped.
Today's biggest thread is a security and correctness sweep across the parts of Homebrew that touch the filesystem, the host process, and privileged operations.
Start with services. PR 23741 taught `brew services` to recognize both the legacy `homebrew dot mxcl` label and a new canonical `sh dot brew` label, letting both coexist safely. PR 23750 builds on that by making the canonical label the default for newly generated services, while keeping legacy services fully…
The second theme is path and permission hardening. PR 23749 fixed a gap in keg relocation where bottle metadata could reference a path outside the keg using a leading dot-dot, letting file contents get rewritten outside the intended directory — now contained to the keg, matching guards already used elsewhere. PR…
A smaller but notable fix: PR 23751 ensures version strings from livecheck are rendered as proper string literals when `bump-formula-pr` writes new formula stanzas — previously, a version shaped like a stanza could be evaluated as Ruby code instead of treated as data. That's a real formula-integrity risk closed…
Also merged: PR…