4.3.11

What's Changed

• shellenv: prepend colon to MANPATH if set by @gromgit in #17633
• Introduce UnpackStrategyType by @dduugg in #17640
• livecheck: finish expanding typed: strict by @samford in #17643
• Use struct for #audit_formula args by @samford in #17651
• dev-cmd/bump-formula-pr: Fix fetch_resource_and_forced_version types by @issyl0 in #17655
• context: fix original context not being restored by @EricFromCanada in #17654
• cask/dsl/caveats: allow for simulated system checks in rosetta caveat by @bevanjkay in #17659
• docker: revert back linuxbrew's UID to 1000 by @andreineculau in #17660
• Assume the --greedy flag for brew outdated when HOMEBREW_UPGRADE_GREEDY is set by @andrewbraxton in #17668
• cmd/shellenv.sh: handle undefined MANPATH and set -eu. by @MikeMcQuaid in #17674
• cli/named_args: raise priority of core casks by @Bo98 in #17681
• sorbet: Make more files (that have public APIs defined in them) typed: strict by @issyl0 in #17636
• test/dev-cmd/bottle: Mark the bottling test as needs_network by @issyl0 in #17680
• unpack_strategy/dmg: Convert to Sorbet typed: strict by @issyl0 in #17683
• formula_assertions: Fix type of cmd param in shell_output by @issyl0 in #17688
• Add cask install receipts by @Rylan12 in #17554
• workflows: pin actions by @Moisan in #17691
• Use Downloadable API in FromBottleLoader. by @reitermarkus in #17695
• Restrict direct url installs to the file:// scheme by @Rylan12 in #17697
• Portable Ruby 3.3.4 by @MikeMcQuaid in #17696
• workflows/vendor-gems: handle input string more robustly by @ZhongRuoyu in #17698
• attestations: widen the beta by @woodruffw in #17692
• attestation: don't dupe stderr by @woodruffw in #17704
• Don't allow special characters in sandbox rule paths by @Rylan12 in #17700
• curl_spec: remove no-op Marshal use by @woodruffw in #17699
• formula_installer: skip attestations on local_bottle_path by @woodruffw in #17706
• feat: do not use existing sudo authentication in brew commands by @SMillerDev in #17694
• Deny file mode changes outside of specified paths in sandbox by @Rylan12 in #17708
• Create Resource::BottleManifest. by @reitermarkus in #17709
• attestation: allow disabling verification. by @MikeMcQuaid in #17712
• attestation: only enable for developers outside CI by @MikeMcQuaid in #17713
• Rearrange requires by @MikeMcQuaid in #17707
• Remove maintainers.json by @MikeMcQuaid in #17715
• bump: add utils/repology require by @samford in #17717
• workflows/vendor-gem: remove use of pull_request target. by @MikeMcQuaid in #17718
• Port brew help (without arguments) to Bash by @MikeMcQuaid in #17710
• Widen attestation verification rollout by @MikeMcQuaid in #17716
• Port brew --repository to Bash by @ZhongRuoyu in #17726
• global: fix require order. by @MikeMcQuaid in #17730
• vendor_gems: require utils/git by @Moisan in #17732
• cmd/--repository: improve tap name error checking by @ZhongRuoyu in #17733
• pypi: allow universal wheels as resources by @woodruffw in #17724
• sandbox: deny signal to other processes by @Moisan in #17719
• brew.sh: speed up brew --help, brew -h, etc. by @ZhongRuoyu in #17735
• workflows/tests: enable attestations by @woodruffw in #17736
• utils/analytics: strip out more data. by @MikeMcQuaid in #17729
• Output disable date for deprecated packages by @MikeMcQuaid in #17721
• global: more require ordering fixes. by @MikeMcQuaid in #17737
• Require utils/backtrace when install fails to load formula by @Rylan12 in #17738
• Make ignore_interrupts thread-safe. by @reitermarkus in #17722
• dev-cmd/bottle: add missing require. by @MikeMcQuaid in #17739
• dev-cmd/pr-publish: add missing require by @p-linnane in #17741
• brew bump: do not call repology by default by @Moisan in #17740
• attestation: improve error message when gh is too old by @nandahkrishna in #17727
• brew.sh: fix nested developer command detection by @Bo98 in #17745
• dev-cmd/update-test: fix dev channel testing by @Bo98 in #17747
• dev-cmd/bump-formula-pr: fix missing require by @ZhongRuoyu in #17749
• cmd/tap: add missing require by @p-linnane in #17746
• utils/pypi: add missing import by @woodruffw in #17753
• Add stub Ruby commands for all Bash commands. by @MikeMcQuaid in #17742
• formula: add require utils/gzip by @Moisan in #17755
• formula: require utils/git_repository by @Moisan in #17754
• Revert "sandbox: deny signal to other processes" by @Rylan12 in #17759
• cask/info: fix installed size reporting by @krehel in #17757
• Have tap_git_head return nil when no tap is installed by @Rylan12 in #17763
• Add ShellCommand module for shell command stubs by @ZhongRuoyu in #17758
• brew bump: cleanup and improve --eval-all handling by @nandahkrishna in #17748
• formula: fix missing require by @branchvincent in #17772
• cask/audit: handle cask_min_os is nil by @khipp in #17768
• utils/analytics: fix handling of newlines by @Bo98 in #17775
• Add utils/backtrace requires by @samford in #17762
• formula_assertions: Fix pipe_output type sig by @issyl0 in #17780
• dev-cmd/pr-automerge: add missing require by @shivammathur in #17783
• Fix UID handling with cask installer script: by @Bo98 in #17782
• download_strategy: fix UID handling for Git submodules by @carlocab in #17786
• attestation: avoid touching working directory by @Bo98 in #17785
• Ensure early installation of gh for attestations by @nandahkrishna in #17760
• FormulaURILoader: use regex to validate refs before attempting to cast by @Rylan12 in #17766
• Formula-Cookbook: add std_*_args explanations by @p-linnane in #17792
• Update How-To-Open-a-Homebrew-Pull-Request.md: add links to Manpage by @muescha in #17797
• dependency: fix missed upgrades when an alias is changed to a formula by @Bo98 in #17799
• attestation: handle bad configurations better by @Bo98 in #17800
• attestation: fix comment by @woodruffw in #17805
• Update Brew-Livecheck.md: add examples for modify version information by @muescha in #17798
• Fix missing requires for tap-info command by @kmontag in #17778
• Add missing_formula require to Homebrew::CLI::NamedArgs by @ah91086 in #17809
• contributions, github: add missing requires, fix type errors by @samford in #17806
• Avoid frozen array errors in brew upgrade by @apainintheneck in #17793
• Add better "--quiet" support to cask upgrade by @ericsampson in #17761
• resource_auditor: add missing require by @chenrui333 in #17822
• download_strategy: fix handling of Apache projects moved to Attic by @Bo98 in #17829
• attestation: only fallback to backfill on 404 by @Bo98 in #17834
• cmd/update: silence git advice where possible by @Bo98 in #17836
• system_command: fix EBADF on Ctrl+C by @Bo98 in #17835
• Add env to disable Debrew by @Bo98 in #17841
• cask/dsl/caveats: fix conditional by @bevanjkay in #17849
• sorbet: Bump more files to typed: strict by @issyl0 in #17788
• cmd/--repository: fix homebrew- prefix handling by @Bo98 in #17850
• version: loosen Debian orig tarball regex by @samford in #17844
• utils/github/api: handle systems with misconfigured NSS by @Bo98 in #17851
• software_spec: remove confusing missing version error by @Bo98 in #17852
• formula: add std_npm_args by @branchvincent in #17774
• rubocops/text: Enforce bin/"formula" instead of "#{bin}/formula" by @issyl0 in #17826
• Add env to disable finding packages from paths by @Bo98 in #17840
• version: use T.unsafe for https://srb.help/7019 by @MikeMcQuaid in #17854
• Interpolated shell_output("#{bin}/foo -v"), for example, is fine by @issyl0 in #17856
• contributions, github: reorder requires by @samford in #17857
• cli/named_args: improve missing_formula requires. by @MikeMcQuaid in #17855
• livecheck: remove unused require calls by @samford in #17861
• [livecheck] Help to check head only formulae by @sazriel26 in #17842
• bin/brew: do not exit on sudo errors for resetting timestamp by @avsm in #17862
• Strategy#from_url: remove unused param by @samford in #17863
• formula: remove std_npm_args from system's pretty_args by @branchvincent in #17865
• rubocops/lines: rustup-init -> rustup by @branchvincent in #17866
• rubocops/lines: remove existing npm audit by @branchvincent in #17868
• sbom: ensure Homebrew versions are more consistent. by @MikeMcQuaid in #17876
• docs/Maintainer-Guidelines: tweak auto-merging. by @MikeMcQuaid in #17877
• attestation: handle mirrored bottles correctly by @woodruffw in #17878
• extend/kernel: add missing utils require. by @MikeMcQuaid in #17879
• cask/installer: improve *_FORBIDDEN_* env handling. by @MikeMcQuaid in #17882
• utils/github/api: Fix uninitialized constant Etc by @issyl0 in #17885
• dev-cmd/contributions: Show only the CSV output for --csv by @issyl0 in #17887
• unpack_strategy: update types by @bevanjkay in #17883
• rubocops/text: Allow all "#{bin}/foo" interpolated strings with spaces by @issyl0 in #17888
• Revert "dev-cmd/contributions: Show only the CSV output for --csv" by @issyl0 in #17889
• dev-cmd/release: add missing require. by @MikeMcQuaid in #17893

New Contributors

• @andreineculau made their first contribution in #17660
• @andrewbraxton made their first contribution in #17668
• @khipp made their first contribution in #17768
• @kmontag made their first contribution in #17778
• @ah91086 made their first contribution in #17809
• @ericsampson made their first contribution in #17761
• @avsm made their first contribution in #17862

Full Changelog: 4.3.10...4.3.11