diff --git a/.github/workflows/reusable-macos.yml b/.github/workflows/reusable-macos.yml
index f10503055b2259..93b419159fa817 100644
--- a/.github/workflows/reusable-macos.yml
+++ b/.github/workflows/reusable-macos.yml
@@ -38,9 +38,8 @@ jobs:
       run: echo "IMAGE_OS_VERSION=${ImageOS}-${ImageVersion}" >> "$GITHUB_ENV"
     - name: Install Homebrew dependencies
       run: |
-        brew install pkg-config openssl@3.5 xz gdbm tcl-tk@9 make
-        # Because alternate versions are not symlinked into place by default:
-        brew link --overwrite tcl-tk@9
+        brew bundle --file=Misc/Brewfile
+        brew install make
     - name: Configure CPython
       run: |
         MACOSX_DEPLOYMENT_TARGET=10.15 \
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 6878a7d92e3bee..d231538b93a692 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -85,6 +85,8 @@ repos:
         exclude: Lib/test/tokenizedata/coding20731.py
       - id: end-of-file-fixer
         files: '^\.github/CODEOWNERS$'
+      - id: file-contents-sorter
+        files: '^Misc/Brewfile$'
       - id: mixed-line-ending
         args: [--fix=auto]
         exclude: '^Lib/test/.*data/'
diff --git a/Misc/Brewfile b/Misc/Brewfile
new file mode 100644
index 00000000000000..459d9db52ac357
--- /dev/null
+++ b/Misc/Brewfile
@@ -0,0 +1,7 @@
+brew "gdbm"
+brew "mpdecimal"
+brew "openssl@3.5"
+brew "pkg-config"
+brew "tcl-tk@9"
+brew "xz"
+brew "zstd"