Who contributed to Arch Linux on May 11, 2026?

2 developers shipped this update, including dependabot[bot] and svartkanin.

What were the notable Arch Linux updates?

settings: Remove SECURE_BROWSER_XSS_FILTER, settings: drop long deprecated AUTH_PROFILE_MODULE, and build(deps): bump django from 5.2.13 to 5.2.14.

@archlinux

The Arch Linux org - the rolling distro and the developers who run it

github ↗

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

ARCHWEB CLEANS HOUSE ON DJANGO CRUFT WHILE ARCHINSTALL OVERHAULS CONFIG TYPES

By RepoJournal · Filed 06:01 UTC on May 11, 2026 · About Arch Linux

2 people shipped this

dependabot[bot] @dependabot[bot] 1 cited

svartkanin @svartkanin 1 cited

Archweb dropped two deprecated Django settings that should have been gone years ago, while archinstall locked down its configuration architecture with a new abstract base class.

Archweb is cutting technical debt faster than usual: SECURE_BROWSER_XSS_FILTER [1] got axed (Django removed it in 4.0), and AUTH_PROFILE_MODULE [2] finally went away after sitting deprecated since Django 1.5 and removed in 1.7 — this is the kind of cleanup that unblocks future upgrades. The same repo bumped Django to 5.2.14 [3], picking up a CVE fix for caching behavior on Vary headers. Over in archinstall, the big structural win is the new SubConfig abstract class [4] that mandates json() and a fresh summary() method across all sub-configurations — this hardens the config layer and makes the system easier to reason about going forward. Meanwhile, staging got a wave of Haskell ecosystem updates [5][6][7] and a git-repair bump [8], standard maintenance across the stack.

Action items

→ Review archweb's Django 5.2.14 upgrade for CVE-2026-6907 caching impact archlinux/archweb [plan]
→ Test archinstall builds after SubConfig refactor before tagging archlinux/archinstall [monitor]
→ Verify staging packages test cleanly before promotion to extra archlinux/state [plan]

References

[1] settings: Remove SECURE_BROWSER_XSS_FILTER archlinux/archweb
[2] settings: drop long deprecated AUTH_PROFILE_MODULE archlinux/archweb
[3] build(deps): bump django from 5.2.13 to 5.2.14 ↗ archlinux/archweb
[4] Enhance config types and summary ↗ archlinux/archinstall
[5] update haskell-network-protocol-xmpp to 0.5.2-88 in extra-staging-x86_64 archlinux/state
[6] update haskell-clientsession to 0.9.3.0-88 in extra-staging-x86_64 archlinux/state
[7] update haskell-data-serializer to 0.3.5-358 in extra-staging-x86_64 archlinux/state
[8] update git-repair to 1.20230814-208 in extra-staging-x86_64 archlinux/state

Quick answers

What shipped in Arch Linux on May 11, 2026?: Archweb dropped two deprecated Django settings that should have been gone years ago, while archinstall locked down its configuration architecture with a new abstract base class. In total, 54 commits and 4 pull requests landed.
Who contributed to Arch Linux on May 11, 2026?: 2 developers shipped this update, including dependabot[bot] and svartkanin.
What were the notable Arch Linux updates?: settings: Remove SECURE_BROWSER_XSS_FILTER, settings: drop long deprecated AUTH_PROFILE_MODULE, and build(deps): bump django from 5.2.13 to 5.2.14.

LINUX-LTS CLEARS TESTING, ARCHINSTALL FIXES ARM64 GRUB AND LIMINE

Linux-LTS moved from core-testing to stable across x86_64 after validation [ref:1], while archinstall patches critical EFI installation failures on aarch64 that broke both GRUB and Limine [ref:10].

infra 60 shipped 1-min read

@archlinux 1 day ago

KEYCHAIN 3.0 LANDS IN TESTING, ARCHINSTALL TIGHTENS VALIDATION

Arch's package repos are moving fast: keychain climbs to 3.0.0, Deno reaches 2.9.4, and archinstall ships critical validator fixes across Pydantic models.

infra 62 shipped 1-min read

@archlinux 2 days ago

ARCHINSTALL FIXES LOCALIZATION BUILD THAT BROKE THREE TIMES

Archinstall's translation pipeline finally handles runtime binding descriptions correctly, after manual patches kept getting wiped by automated regeneration.

infra 56 shipped 1-min read

@archlinux 3 days ago

ARCHINSTALL TIGHTENS CODE QUALITY, BUILDBTW MODERNIZES ORM LAYER

Archinstall shipped four quality fixes in 24 hours while buildbtw migrated off deprecated SeaORM patterns, setting both projects up for stable releases.

infra 79 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.