Brew: 7.0.0 Release

<!-- Release notes generated using configuration in .github/release.yml at main -->

What's Changed

• Make macOS installer package Apple Silicon only by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23779
• Forbid T.must and T.unsafe with RuboCop by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23787
• Warn (don't error) on unavailable Linux sandbox in brew tests by @waldyrious in https://github.com/Homebrew/brew/pull/23782
• Add std_shards_args and update creator for crystal by @cho-m in https://github.com/Homebrew/brew/pull/23790
• cask/audit: fix repo names ending in git by @krehel in https://github.com/Homebrew/brew/pull/23796
• Stop brew tests dirtying the working tree by @dduugg in https://github.com/Homebrew/brew/pull/23800
• Attest supported third-party tap bottles by @heaths in https://github.com/Homebrew/brew/pull/23769
• shared_audits: check homepage domain age via RDAP by @bevanjkay in https://github.com/Homebrew/brew/pull/23752
• Escape dots in domain regexps by @dduugg in https://github.com/Homebrew/brew/pull/23799
• Deprecate/disable/remove for major/minor release by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23729
• Bump resources pinned to a git tag by @daeho-ro in https://github.com/Homebrew/brew/pull/23802
• utils/tty: avoid caching an unfinished size by @rangaNP in https://github.com/Homebrew/brew/pull/23804
• cask/quarantine: gate metadata operations behind a single doorway by @aholland in https://github.com/Homebrew/brew/pull/23628
• Raise minimum macOS to Big Sur (11) by @p-linnane in https://github.com/Homebrew/brew/pull/23703
• Use non-capturing regexp groups where captures are unused by @dduugg in https://github.com/Homebrew/brew/pull/23793
• keg: scope node-gyp debris to build trees by @daeho-ro in https://github.com/Homebrew/brew/pull/23805
• Base macOS migration advice on binary packages by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23806
• livecheck: really use referenced livecheck options by @samford in https://github.com/Homebrew/brew/pull/23775
• extend/ENV/super: add opam defaults by @cho-m in https://github.com/Homebrew/brew/pull/23810
• Improve PythonVersions cop to reject hardcoded pythonX.Y assignment by @iMichka in https://github.com/Homebrew/brew/pull/23479
• Fix brew edit crash for an uninstalled tap by @dduugg in https://github.com/Homebrew/brew/pull/23811
• Restore inherited streams for safe_system by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23809
• Stop the uses_from_macos cop crashing by @dduugg in https://github.com/Homebrew/brew/pull/23813
• unpack_strategy: skip symlinks in each_directory by @p-linnane in https://github.com/Homebrew/brew/pull/23814
• completions: match Bash candidates literally by @p-linnane in https://github.com/Homebrew/brew/pull/23816
• tap: print invalid tap names instead of crashing by @krehel in https://github.com/Homebrew/brew/pull/23818
• Relocate only C strings when patching binaries by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23812
• shims/super/cc: Keep dependency -L flags ahead of superenv paths by @krehel in https://github.com/Homebrew/brew/pull/23821
• Portable Ruby 4.0.6_2 by @p-linnane in https://github.com/Homebrew/brew/pull/23838
• bottle: verify and extract from a snapshot by @p-linnane in https://github.com/Homebrew/brew/pull/23815
• Strategy: deprecate user_agent fallback by @samford in https://github.com/Homebrew/brew/pull/23834
• Require utils/analytics in cmd/info by @waldyrious in https://github.com/Homebrew/brew/pull/23833
• Crate: add default strategy user agent by @samford in https://github.com/Homebrew/brew/pull/23832
• install steps: add {{arch}} template token by @daeho-ro in https://github.com/Homebrew/brew/pull/23836
• patch: harden staged-tree target containment by @dduugg in https://github.com/Homebrew/brew/pull/23819
• Avoid evaluating cached and installed recipes by @p-linnane in https://github.com/Homebrew/brew/pull/23822
• create: insert metadata after ERB parsing by @p-linnane in https://github.com/Homebrew/brew/pull/23825
• vulns: keep unknown subjects unresolved by @p-linnane in https://github.com/Homebrew/brew/pull/23830
• style: root the RuboCop project index at the tap by @p-linnane in https://github.com/Homebrew/brew/pull/23835
• tap: link completions only for canonical origins by @p-linnane in https://github.com/Homebrew/brew/pull/23823
• Reject path components in internal command names by @p-linnane in https://github.com/Homebrew/brew/pull/23831
• version-install: keep the requested provider by @p-linnane in https://github.com/Homebrew/brew/pull/23826
• tap: check provenance for migration oldnames by @p-linnane in https://github.com/Homebrew/brew/pull/23827
• bundle: run go inventory with argument arrays by @p-linnane in https://github.com/Homebrew/brew/pull/23828
• svn: read externals from the pinned checkout by @p-linnane in https://github.com/Homebrew/brew/pull/23829
• services: default to canonical Linux service labels by @p-linnane in https://github.com/Homebrew/brew/pull/23837
• services: keep active systemd timers on cleanup by @p-linnane in https://github.com/Homebrew/brew/pull/23839
• Mark unsatisfied requirements in brew info by @waldyrious in https://github.com/Homebrew/brew/pull/23841
• pypi: run metadata inspection in the sandbox by @p-linnane in https://github.com/Homebrew/brew/pull/23824
• docs/Cask-Cookbook: align with homebrew-cask standards by @bevanjkay in https://github.com/Homebrew/brew/pull/23842
• info: mark disabled/deprecated casks in title by @HaraldNordgren in https://github.com/Homebrew/brew/pull/23843
• cask: ignore verified in stored metadata by @Moisan in https://github.com/Homebrew/brew/pull/23820
• advisory-match: skip unverifiable formula history by @p-linnane in https://github.com/Homebrew/brew/pull/23845
• bump: handle partially disabled packages by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23847
• sorbet: More typechecking fixes for tests by @issyl0 in https://github.com/Homebrew/brew/pull/23848
• Move bottle CI workflow helpers into brew by @p-linnane in https://github.com/Homebrew/brew/pull/23852
• Ban command literals in Homebrew source by @p-linnane in https://github.com/Homebrew/brew/pull/23849
• rubocops/cask: reject nested OS dependencies by @p-linnane in https://github.com/Homebrew/brew/pull/23861
• Load legacy bottles from formula history by @p-linnane in https://github.com/Homebrew/brew/pull/23857
• Preserve resource evidence for overrides by @p-linnane in https://github.com/Homebrew/brew/pull/23856
• rubocops/cask: add cop for font stanza sorting by @krehel in https://github.com/Homebrew/brew/pull/23851
• sorbet: Bump more tests to typed: true or higher by @issyl0 in https://github.com/Homebrew/brew/pull/23854
• formula: improve typing conflicts_with by @cho-m in https://github.com/Homebrew/brew/pull/23855
• Harden advisory history walks by @p-linnane in https://github.com/Homebrew/brew/pull/23858
• trust: ignore a bare tap name in ARGV by @dduugg in https://github.com/Homebrew/brew/pull/23864
• trust: normalise the installed-tap reference by @dduugg in https://github.com/Homebrew/brew/pull/23865
• cask/installer.rb: cast Artifact::GeneratedScript by @toobuntu in https://github.com/Homebrew/brew/pull/23866
• bundle: install batched casks as casks by @dduugg in https://github.com/Homebrew/brew/pull/23862
• Detect shallow taps through linked worktrees by @p-linnane in https://github.com/Homebrew/brew/pull/23859
• tests: group parallel runs by recorded runtime by @dduugg in https://github.com/Homebrew/brew/pull/23868
• cask/audit: anchor cask audit regexps to url by @krehel in https://github.com/Homebrew/brew/pull/23870
• cask/audit: load installation checks by @waldyrious in https://github.com/Homebrew/brew/pull/23873
• Apply service env overrides to run by @oxsean in https://github.com/Homebrew/brew/pull/23869
• install: report formulae in a mixed dry run by @dduugg in https://github.com/Homebrew/brew/pull/23874
• curl: only expand secrets the download declared by @dduugg in https://github.com/Homebrew/brew/pull/23863
• Isolate formula history loading by @p-linnane in https://github.com/Homebrew/brew/pull/23872
• Broaden formula history error handling by @p-linnane in https://github.com/Homebrew/brew/pull/23875
• Restore mixed bundle install batches by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23871
• Deduplicate advisory alias hits by @p-linnane in https://github.com/Homebrew/brew/pull/23877
• cmd/cache: print cask cache paths for Linux platforms by @krehel in https://github.com/Homebrew/brew/pull/23850
• Fix temporary service plist suffix by @oxsean in https://github.com/Homebrew/brew/pull/23878
• Options: remove hash support from merge methods by @samford in https://github.com/Homebrew/brew/pull/23879
• test-bot: add padded prefix output by @p-linnane in https://github.com/Homebrew/brew/pull/23882
• Use setup-ruby in vendor version workflow by @p-linnane in https://github.com/Homebrew/brew/pull/23883
• Support registry package overrides by @p-linnane in https://github.com/Homebrew/brew/pull/23880
• Document remove-disabled window mirror by @p-linnane in https://github.com/Homebrew/brew/pull/23885
• Add commands for Python resource automation by @p-linnane in https://github.com/Homebrew/brew/pull/23881
• Decouple macOS release names from support status by @p-linnane in https://github.com/Homebrew/brew/pull/23887
• Reuse macOS release aliases in cask audit by @p-linnane in https://github.com/Homebrew/brew/pull/23888
• tar: validate tarballs named with a compound extension by @rawsun007 in https://github.com/Homebrew/brew/pull/23890
• Even more deprecations by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23892
• Narrow mkdir_p sandbox write permissions by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23897
• Show red ⊘ for packages that can't be installed by @HaraldNordgren in https://github.com/Homebrew/brew/pull/23853
• Fix SSH Python resource updates in the sandbox by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23896
• Move Cask CI helpers into brew by @p-linnane in https://github.com/Homebrew/brew/pull/23886
• bump: autobump partially disabled packages by @AlternateRT in https://github.com/Homebrew/brew/pull/23898
• cask: allow identical macOS sha256 with Linux by @p-linnane in https://github.com/Homebrew/brew/pull/23902
• advisory-match: protect reviewed ranges by @p-linnane in https://github.com/Homebrew/brew/pull/23903
• shellenv: prioritise Homebrew across shells by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23900
• Ignore uv executable entries in Bundle by @edel67 in https://github.com/Homebrew/brew/pull/23905
• Allow limiting total build-from-source dependents by @cho-m in https://github.com/Homebrew/brew/pull/23884
• Adjust macOS subprocess policy by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23907
• cask: hoist OS sha256 and sort depends_on by @p-linnane in https://github.com/Homebrew/brew/pull/23901
• Adjust macOS subprocess policy by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23909
• test_bot: source-building more deps on Linux by @cho-m in https://github.com/Homebrew/brew/pull/23910
• rubocops/cask: reject disallowed uninstall and zap patterns by @bevanjkay in https://github.com/Homebrew/brew/pull/23908
• Maintain bottle coverage during macOS bootstrap by @p-linnane in https://github.com/Homebrew/brew/pull/23918
• bump-formula-pr: support bumping resource using revision as version by @cho-m in https://github.com/Homebrew/brew/pull/23914
• curl_download_strategy: fix caching edgecase by @bevanjkay in https://github.com/Homebrew/brew/pull/23917
• diagnostic: indent all findings equally by @AlternateRT in https://github.com/Homebrew/brew/pull/23904
• Soften doctor output issue checklist wording by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23921
• docs/Formula-Cookbook: fix broken link by @botantony in https://github.com/Homebrew/brew/pull/23923
• Refine macOS sandbox compatibility by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23920
• Run stale PR approvals with standalone Ruby by @p-linnane in https://github.com/Homebrew/brew/pull/23915
• advisory-match: derive introduced boundaries by @p-linnane in https://github.com/Homebrew/brew/pull/23924
• Overwrite cask binary symlinks when linking kegs by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23925
• Promote macOS Golden Gate 27 to full support by @p-linnane in https://github.com/Homebrew/brew/pull/23928
• Scrub invalid UTF-8 relocation diagnostics by @dduugg in https://github.com/Homebrew/brew/pull/23932
• Update json to 3.0.1 by @dduugg in https://github.com/Homebrew/brew/pull/23929
• Clarify package commit squashing by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23935
• Report tiers and refresh stale bottle metadata by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23938
• extend/pathname: accept Pathname as a hash value by @botantony in https://github.com/Homebrew/brew/pull/23941
• Unify sandbox temporary directory handling by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23940
• Use GitHub runners for Golden Gate dependents by @p-linnane in https://github.com/Homebrew/brew/pull/23942
• Drop gnu/ from ftpmirror.gnu.org URLs by @daeho-ro in https://github.com/Homebrew/brew/pull/23943
• Shorten sandbox temporary directory names by @p-linnane in https://github.com/Homebrew/brew/pull/23944
• create: preserve formula template newlines by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23947
• Allow runtime Metal compilation by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23949
• formula_cellar_checks: flag prebuilt executables from npm packages by @bevanjkay in https://github.com/Homebrew/brew/pull/23906
• cask/utils: check ownership before using sudo chown by @hyuraku in https://github.com/Homebrew/brew/pull/23948
• Stop leaking BUNDLER_VERSION into child processes by @daeho-ro in https://github.com/Homebrew/brew/pull/23950
• Read terminal size without invoking stty by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23952
• Reject mismatched real and effective UIDs by @p-linnane in https://github.com/Homebrew/brew/pull/23955
• tests: run brew.sh smoke checks in the test prefix by @dduugg in https://github.com/Homebrew/brew/pull/23867
• More deprecations by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/23783

New Contributors

• @oxsean made their first contribution in https://github.com/Homebrew/brew/pull/23869
• @edel67 made their first contribution in https://github.com/Homebrew/brew/pull/23905

Full Changelog: https://github.com/Homebrew/brew/compare/6.0.22...7.0.0