Brew: 7.0.10 Release

<!-- Release notes generated using configuration in .github/release.yml at main -->

What's Changed

• Ignore Ubuntu release list link check failures by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24196
• Require test resources in homebrew/core by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24180
• Preserve cask approval for copied helpers by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24191
• Add OSS Scanner Dockerfile and threat model by @p-linnane in https://github.com/Homebrew/brew/pull/24199
• spdx: store downcased licenses in hash across calls by @alebcay in https://github.com/Homebrew/brew/pull/24197
• Harden tap redirect trust and rollback by @p-linnane in https://github.com/Homebrew/brew/pull/24198
• Fix offline, vacuous and repo-leaking specs by @p-linnane in https://github.com/Homebrew/brew/pull/24200
• Ignore hidden directories when listing taps by @p-linnane in https://github.com/Homebrew/brew/pull/24201
• Isolate Bootsnap caches across gem changes by @SSakutaro in https://github.com/Homebrew/brew/pull/24206
• Bump portable-ruby to 4.0.7_1 by @brew-commit-app[bot] in https://github.com/Homebrew/brew/pull/24211
• Check untrusted conflicts without loading them by @p-linnane in https://github.com/Homebrew/brew/pull/24208
• Avoid duplicate source upgrades of dependencies by @p-linnane in https://github.com/Homebrew/brew/pull/24209
• Report net dependency impact in test-bot by @p-linnane in https://github.com/Homebrew/brew/pull/24213
• Avoid nested formula locks while linking by @p-linnane in https://github.com/Homebrew/brew/pull/24207
• formula_versions: allow test-only resources by @daeho-ro in https://github.com/Homebrew/brew/pull/24218
• Show versions of dependencies in dry-run by @HaraldNordgren in https://github.com/Homebrew/brew/pull/24210
• Extend T::Generic in Tapioca DSL compilers by @p-linnane in https://github.com/Homebrew/brew/pull/24219
• rubocop: Always run the "every formula should have a test block" check by @issyl0 in https://github.com/Homebrew/brew/pull/24188
• Suppress developer mode warnings in CI by @p-linnane in https://github.com/Homebrew/brew/pull/24220
• bundle: protect Brewfile formulae during cleanup by @AbdelrahmanHafez in https://github.com/Homebrew/brew/pull/24222
• advisory-match: emit split affected intervals by @p-linnane in https://github.com/Homebrew/brew/pull/24223
• advisory-match: add --rejected-candidates by @p-linnane in https://github.com/Homebrew/brew/pull/24224
• advisory-match: reuse platform-independent history by @p-linnane in https://github.com/Homebrew/brew/pull/24225
• cask/audit: check signing of more artifact types by @bevanjkay in https://github.com/Homebrew/brew/pull/24227
• Check cask receipt tap when untapping by @p-linnane in https://github.com/Homebrew/brew/pull/24228
• pr-publish: reset label inputs per pull request by @p-linnane in https://github.com/Homebrew/brew/pull/24232
• pr-publish: remove large runner uploads by @p-linnane in https://github.com/Homebrew/brew/pull/24233
• advisory-match: fix spec indentation warning by @p-linnane in https://github.com/Homebrew/brew/pull/24234
• advisory-match: cache historical formula source by @p-linnane in https://github.com/Homebrew/brew/pull/24231
• Fix local formula sources in brew info by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24238
• Add cop for ternaries with nil branches by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24239
• Read protected install step symlinks with sudo by @p-linnane in https://github.com/Homebrew/brew/pull/24241
• sort search results by version by @adamv in https://github.com/Homebrew/brew/pull/24240
• utils/pypi: preserve :test resources by @botantony in https://github.com/Homebrew/brew/pull/24242
• bundle: protect alternate formula names by @AbdelrahmanHafez in https://github.com/Homebrew/brew/pull/24229
• Document yearly BottleTransition update by @hyuraku in https://github.com/Homebrew/brew/pull/24243
• cask/audit: skip resource-only bundles by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24247
• test: isolate tty? and command lookup fixtures by @p-linnane in https://github.com/Homebrew/brew/pull/24245
• cask/ci/check: ignore more running Apple apps by @bevanjkay in https://github.com/Homebrew/brew/pull/24244
• bundle: upgrade outdated npm packages by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24254
• docs: unify formula and cask description guidelines by @bevanjkay in https://github.com/Homebrew/brew/pull/24256
• info: show build deps for source installs by @HaraldNordgren in https://github.com/Homebrew/brew/pull/24258
• Exclude end date from approved-review searches by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24260
• Keep ENV build metadata off the shareable ENV by @p-linnane in https://github.com/Homebrew/brew/pull/24249
• Require lead maintainer review for CODEOWNERS by @p-linnane in https://github.com/Homebrew/brew/pull/24265
• Accept dependency tag arrays in API metadata by @p-linnane in https://github.com/Homebrew/brew/pull/24262
• Stop bundle specs leaking Tap and Cask doubles by @p-linnane in https://github.com/Homebrew/brew/pull/24267
• Preserve and validate no_linkage metadata by @p-linnane in https://github.com/Homebrew/brew/pull/24263
• Use full names for tap migration targets by @p-linnane in https://github.com/Homebrew/brew/pull/24266
• utils/curl: guess charset from a <meta> tag by @hyuraku in https://github.com/Homebrew/brew/pull/24257
• info: show revision in headline upgrade version by @HaraldNordgren in https://github.com/Homebrew/brew/pull/24271
• curl: stop retrying local download write failures by @BrandenXia in https://github.com/Homebrew/brew/pull/24275
• audit: flag self-submissions by commit email by @bevanjkay in https://github.com/Homebrew/brew/pull/24277
• shared_audits: parse whois dates with spaces by @bevanjkay in https://github.com/Homebrew/brew/pull/24276
• cask: merge uninstall and zap directives into one pass by @bevanjkay in https://github.com/Homebrew/brew/pull/24194
• Disclaim sandbox TCC responsibility when available by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24272
• audit: require livecheck for new packages by @bevanjkay in https://github.com/Homebrew/brew/pull/24279
• Make source build dependency upgrades more liberal by @HaraldNordgren in https://github.com/Homebrew/brew/pull/24273
• rubocops/cask: disallow bare ToDesktop wildcard by @krehel in https://github.com/Homebrew/brew/pull/24281
• api: revalidate JSON API caches with ETag, not the bumped mtime by @xrl in https://github.com/Homebrew/brew/pull/24193
• Truncate summary versions to fit terminal width by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24283
• Add vulnerability-aware package management by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24274
• unpack: explain extraction disk space failures by @BrandenXia in https://github.com/Homebrew/brew/pull/24278
• Tighten bottle attestation verification by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24282
• Preserve build errors with Pathname arguments by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24292
• Serialise Pathnames in forked child errors by @dduugg in https://github.com/Homebrew/brew/pull/24294
• Publish local patch checksums in the formula API by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24284
• Preserve cask backups across lifecycle phases by @MikeMcQuaid in https://github.com/Homebrew/brew/pull/24295

New Contributors

• @BrandenXia made their first contribution in https://github.com/Homebrew/brew/pull/24275
• @xrl made their first contribution in https://github.com/Homebrew/brew/pull/24193

Full Changelog: https://github.com/Homebrew/brew/compare/7.0.9...7.0.10