This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
ReleasePort's take
Moderate signalThe release fixes several UI bugs and adds progress indicators while hardening Brewfile handling against path‑traversal attacks.
Why it matters: Path‑traversal hardening (severity 90) blocks traversal exploits in Brewfile and snapshot processing; critical for security engineers protecting package installations.
Summary
AI summaryUpdates Acknowledgments, Tahoe, and Nik across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Critical |
Path‑traversal hardening in Brewfile and snapshot handling prevents traversal attacks. Path‑traversal hardening in Brewfile and snapshot handling prevents traversal attacks. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Low |
Live progress bar shows determinate install/upgrade counts (e.g., "Pouring 10 of 32"). Live progress bar shows determinate install/upgrade counts (e.g., "Pouring 10 of 32"). Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Low |
Window remembers its size and position between launches. Window remembers its size and position between launches. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Low |
Dashboard cards populate from cache on first paint instead of appearing empty. Dashboard cards populate from cache on first paint instead of appearing empty. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Low |
Bundled Homebrew catalog refreshed to 8,404 formulae and 7,703 casks. Bundled Homebrew catalog refreshed to 8,404 formulae and 7,703 casks. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Feature | Low |
Introduces a fully native Swift/SwiftUI macOS 26 (Tahoe) build alongside the existing Tauri cross‑platform build. Introduces a fully native Swift/SwiftUI macOS 26 (Tahoe) build alongside the existing Tauri cross‑platform build. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Bugfix | Medium |
"Upgrade all" no longer reports success as failure when brew exits non‑zero on harmless warnings. "Upgrade all" no longer reports success as failure when brew exits non‑zero on harmless warnings. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Bugfix | Medium |
"Top categories in your library" now filters to installed packages only. "Top categories in your library" now filters to installed packages only. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Bugfix | Medium |
GitHub sign‑in credential stored as a single Keychain item and persists across launches. GitHub sign‑in credential stored as a single Keychain item and persists across launches. Source: llm_adapter@2026-06-07 Confidence: high |
— |
| Bugfix | Medium |
Window remains draggable when the Settings panel is open. Window remains draggable when the Settings panel is open. Source: llm_adapter@2026-06-07 Confidence: high |
— |
Full changelog
brew-browser 0.5.1 — Reliability + a native sibling
Signed + notarized. macOS 13+, Apple Silicon. Auto-updates via the in-app updater.
This release also debuts a second build: a fully native Swift / SwiftUI
app for macOS 26 (Tahoe). Same features, samebrewintegration, same privacy
posture. See the README → "Two builds." The Tauri build below remains the
cross-platform one (macOS 13+ and Linux).
What's new
Live progress during installs and upgrades. Multi-package operations now show
a determinate progress bar with a per-package count — Pouring 10 of 32 — parsed
from brew's own ==> markers, instead of just a wall of streaming text. (#57)
The window remembers its size and position. Resize or move the window, quit,
and relaunch — it reopens exactly where and how you left it. (#17, #19)
The Dashboard fills in on launch. Your GitHub card, the vulnerability Exposure
card, and the sidebar badges now populate from cache on first paint, instead of
looking empty until you poked around.
Fresher catalog. The bundled Homebrew catalog was refreshed (8,404 formulae +
7,703 casks). Hit Refresh anytime for the latest.
Bug fixes
"Upgrade all" no longer cries failure when it succeeded. brew upgrade exits
non-zero on harmless post-install/link warnings even when every package upgraded;
the app treated that as a failure and nudged you to file an issue. Those non-fatal
cases are now reported as success — genuine failures still surface with a clear
message. (Resolves a large cluster of "[brew-browser] Upgrade-all failed" reports.)
"Top categories in your library" filters your library. Clicking a category in
that card now shows your installed packages in it, not the entire Discover
catalog. (#58)
GitHub sign-in is reliable and sticks. The credential is now stored as a single
Keychain item, so signing in is one prompt and the signed-in state persists across
launches (previously it could appear signed-in but not reflect in Settings). (#51)
Window stays draggable with Settings open. The Settings scrim no longer covers
the title bar's drag region. (#8, #10)
Acknowledgments
- @neodave — path-traversal hardening in Brewfile/snapshot handling (#46).
- @Arvuno — a friendly
brew serviceslaunchd-domain hint (#51). - @bytepl (Maciej Chojnacki) — window-state report (#17).
- @unluckyquote (Nik) — unmovable-window-with-Settings-open report (#8).
- Reddit feedback that shaped this release: u/arcadefx1 (operation progress
counts), u/HedgeHog2k and u/sikisabishii (library category filter).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Brew-browser
All releases →Beta — feedback welcome: [email protected]