A lot of software risk hides in commands people type without thinking.
brew install is one of those commands. It is ordinary, fast, and usually uneventful. Homebrew 6.0 changes what happens before third-party tap code runs.
Third-party taps now need approval before Homebrew evaluates or runs their Ruby code. The release also adds Linux build sandboxing, bundle improvements, performance work, a smaller internal JSON API, and early macOS 27 support.
Also today: Google Search gets new UK conduct requirements, Cloudflare turns Zero Trust work into agent-readable skills, CPP Investments backs CtrlS data centers, AWS adds queryable S3 annotations, Anthropic pauses a Claude Agent SDK billing change, DeepL buys Mixhalo, Microsoft documents Office launch failures after Windows updates, and Thread Group ships smart-home diagnostics.
Technology Briefs
Homebrew Adds a Gate Before Third-Party Tap Code
Homebrew 6.0 shipped with tap trust, Linux build sandboxing, a smaller internal JSON API, bundle improvements, performance work, and early macOS 27 support. The release notes say third-party taps now require explicit trust before Homebrew evaluates or runs their Ruby code, while official taps remain trusted by default.
Filed from: The Register , Homebrew .
UK Competition Order Puts Google Search Ranking Under New Duties
The UK Competition and Markets Authority imposed two conduct requirements on Google Search: fairer and more transparent organic ranking, including AI Overviews, and legally backed data portability for user-approved search data. Google has six months to implement the ranking requirement and three months for data portability.
Filed from: The Register , CMA .
Cloudflare Packages Zero Trust Work as Agent-Readable Skills
Cloudflare released the Cloudflare One stack, a library of agent-loadable skills for planning, deploying, migrating, managing, and troubleshooting Zero Trust environments. The company says the stack covers Access, Gateway, Tunnel, Mesh, WAN, migration guidance, network diagrams, vendor concept translation, and DEX-assisted troubleshooting.
Filed from: Cloudflare , Cloudflare press release .
CPP Investments Backs CtrlS With a C$1 Billion Commitment
CPP Investments agreed to invest up to INR 7,000 crore, about C$1 billion, in India’s CtrlS Datacenters. The announced structure includes INR 4,000 crore for an 8.2% stake and up to INR 3,000 crore for a hyperscale data-center joint venture in which CPP Investments would hold 48%.
Filed from: TechCrunch , CtrlS .
AWS Adds Queryable Context to S3 Objects
AWS introduced S3 annotations, allowing customers to attach named metadata directly to objects and query that context through S3 Metadata annotation tables and Athena. The launch post describes up to 1,000 annotations per object, with individual annotations up to 1 MB and a total annotation limit of 1 GB per object.
Filed from: AWS , AWS documentation .
Anthropic Pauses a Claude Agent SDK Billing Change
Anthropic paused a planned billing change that would have moved Claude Agent SDK, claude -p, and third-party app usage from subscription limits to a separate monthly credit tied to API-rate billing. The support page says the pause applies while Anthropic reviews feedback and re-evaluates the approach.
Filed from: Ars Technica , Anthropic support .
DeepL Buys Mixhalo for Live Voice Translation
DeepL acquired Mixhalo, a live-event audio streaming company, to bring low-latency event audio into its voice translation platform. DeepL says Mixhalo’s team and technology will support real-time audio experiences for conferences, events, support centers, and enterprise workflows, and that the deal includes a new San Francisco office.
Filed from: TechCrunch , DeepL .
Microsoft Confirms Office Launch Failures After Windows Updates
Microsoft’s June 9 Windows updates are causing some third-party applications that use OLE automation to launch Office apps or documents to fail, sometimes without an error message. The support note lists the issue for Windows 11 builds 26200.8655 and 26100.8655.
Filed from: The Register , Microsoft .
Thread Group Ships Smart-Home Mesh Diagnostics
The Thread Group launched Thread Tools, a mobile diagnostics app for Thread networks, with iOS beta availability and Android already in alpha. The app visualizes topology, signal quality, device roles, and diagnostic exports for Thread-based smart-home networks.
Filed from: The Verge , Thread Group .
The Homebrew item is worth returning to after the list.
Package managers are not neutral download buttons. They resolve names, follow sources, run scripts, and change local machines. Most of the time, that disappears into habit.
Tap trust adds a question to that habit. Before third-party tap code runs, Homebrew now asks for approval.
The interesting question is not whether developers will click yes. Many will. The question is what other quiet developer workflows still treat remote trust as if it were already settled.
