tl;dr: Homebrew 6.0.0 introduces a tap trust security model requiring explicit trust before third-party tap code runs, makes the internal JSON API the default for faster updates, and adds Bubblewrap sandboxing on Linux to match macOS. Other notable changes include "ask" confirmation prompts as default for developers, parallel brew bundle installs, ~30% faster `brew leaves`, initial macOS 27 support, and a new `brew vulns` command for vulnerability checks. The Rust frontend experiment (brew-rs) was concluded after benchmarks showed no real-world gains over Ruby.