What's Changed

• docs: drop advice to disable security or lower support tier by @MikeMcQuaid in #22749
• release: exclude Dependabot PRs from changelog by @ZhongRuoyu in #22750
• Document more supply-chain guardrails by @MikeMcQuaid in #22752
• Allow tap trust in build sandbox by @MikeMcQuaid in #22751
• Don't warn for partially trusted skipped taps by @MikeMcQuaid in #22755
• services: check --sudo-service-user exists by @sexagesimal in #22763
• Follow symlinked trust stores by @MikeMcQuaid in #22762
• Annotate upgradable dependencies in install plans by @HaraldNordgren in #22761
• livecheck: add compressed option by @samford in #22757
• Don't bold upgradable dependencies in install plans by @HaraldNordgren in #22765
• formula_installer: skip conflicts if not linking by @cho-m in #22766
• Preserve tap remotes in bundle dumps by @MikeMcQuaid in #22754
• Stabilise formula auditor merge-base specs by @MikeMcQuaid in #22760
• Enable Sorbet/ConstantsFromStrings and override cops by @MikeMcQuaid in #22758
• Drop redundant installed guard from pretty_install_status callers by @HaraldNordgren in #22767
• Skip self-conflicts during install by @MikeMcQuaid in #22764
• Add install step config writes by @MikeMcQuaid in #22759
• Locate installed racks from untrusted taps by @MikeMcQuaid in #22771
• Read user Git config for private downloads by @MikeMcQuaid in #22779
• formula_installer: create opt link even when skip_link by @cho-m in #22783
• Ask PR authors for motivation and bug reproduction steps by @MikeMcQuaid in #22787
• Revert pull request #22767 by @HaraldNordgren in #22791
• Null Git global config for source_modified_time by @MikeMcQuaid in #22789
• Skip invalid casks in Cask::Cask.all by @MikeMcQuaid in #22780
• Trust custom-remote tap by reference in test-bot by @MikeMcQuaid in #22781
• Tighten issue template wording for brevity by @MikeMcQuaid in #22790
• Support tap trust in Brewfiles by @MikeMcQuaid in #22772
• Skip auto-update outdated list before upgrade/outdated by @MikeMcQuaid in #22786
• Null Git global config for local repository inspections by @carlocab in #22797
• manpages: update Struct to T::Struct by @cho-m in #22798
• bundle: narrow types by @cho-m in #22799
• audit: fix except_cops array by @samford in #22800
• support splitting cask versions by arch by @TyceHerrman in #22462
• Fix brew bundle topological sort crash on missing dependency node by @bendrucker in #22803
• Handle API source patch symlinks by @MikeMcQuaid in #22806
• Fix caveats replacing order (HOMEBREW_PREFIX) in API formula reconstruction by @umireon in #22810
• dev-cmd/tap-new: update actions versions by @simnalamburt in #22811
• cask/installer: prepend cask name to macOS requirement error by @cho-m in #22816
• Avoid duplicate upgrade warnings by @MikeMcQuaid in #22805
• Restore test-bot tap trust by @MikeMcQuaid in #22814
• Secure tap bottle publishing by @MikeMcQuaid in #22815
• Name the formula or cask in requirement error messages by @p-linnane in #22817
• trust: replace T.untyped by @cho-m in #22819
• livecheck: prevent unnecessary boolean args by @samford in #22823
• generate-zap: load casks via named args and skip unreadable dirs by @p-linnane in #22821
• Clarify tap trust warning next steps by @joshka in #22777
• Improve generate-zap Full Disk Access errors by @loganrosen in #22730
• Respect auto-update cask opt-out by @MikeMcQuaid in #22825
• Share opt-bin PATH helpers by @MikeMcQuaid in #22827
• list: add --no-installed-on-request switch by @p-linnane in #22829
• workflows/vendor-gems: change app-id to client-id by @p-linnane in #22832
• github_runner_matrix: exclude disabled dependents from testing by @dtrodrigues in #22834
• Allow sometimes skipping the sandbox inside nested sandboxes by @MikeMcQuaid in #22793
• patch: add directory for local patch by @daeho-ro in #22836
• Rename Homebrew security docs page by @MikeMcQuaid in #22839
• Fix bundle jobs cask deps by @MikeMcQuaid in #22838
• github_runner_matrix: exclude deprecated dependents from testing by @dtrodrigues in #22843
• Avoid formula objects for stable paths by @MikeMcQuaid in #22840

New Contributors

• @TyceHerrman made their first contribution in #22462
• @simnalamburt made their first contribution in #22811

Full Changelog: 6.0.2...6.0.3