RepoJournal
Arch Linux

@archlinux

The Arch Linux org — the rolling distro and the developers who run it

Pick a date

  1. Sun 3 may
  2. Mon 4 may
  3. Tue 5 may
  4. Wed 6 may
  5. Thu 7 may
  6. Fri 8 may
  7. Sat 9 may
  8. Sun 10 may
  9. Mon 11 may
  10. Tue 12 may
  11. Wed 13 may
  12. Thu 14 may
  13. Fri 15 may
  14. Sat 16 may
  15. Sun 17 may
  16. Tue 19 may
  17. Wed 20 may
  18. Thu 21 may
  19. Sat 23 may
  20. Sun 24 may
  21. Mon 25 may
  22. Tue 26 may
  23. Thu 28 may
  24. Fri 29 may
  25. Sat 30 may
  26. Sun 31 may
  27. Mon 1 jun
  28. Mon 8 jun
  29. Tue 9 jun
  30. Today 10 jun

The Wire · Showcase

ARCHWEB CLEANS HOUSE ON DJANGO CRUFT WHILE ARCHINSTALL OVERHAULS CONFIG TYPES

By RepoJournal · Filed · About Arch Linux

Archweb dropped two deprecated Django settings that should have been gone years ago, while archinstall locked down its configuration architecture with a new abstract base class.

Archweb is cutting technical debt faster than usual: SECURE_BROWSER_XSS_FILTER [1] got axed (Django removed it in 4.0), and AUTH_PROFILE_MODULE [2] finally went away after sitting deprecated since Django 1.5 and removed in 1.7 — this is the kind of cleanup that unblocks future upgrades. The same repo bumped Django to 5.2.14 [3], picking up a CVE fix for caching behavior on Vary headers. Over in archinstall, the big structural win is the new SubConfig abstract class [4] that mandates json() and a fresh summary() method across all sub-configurations — this hardens the config layer and makes the system easier to reason about going forward. Meanwhile, staging got a wave of Haskell ecosystem updates [5][6][7] and a git-repair bump [8], standard maintenance across the stack.

Action items

References

  1. [1] settings: Remove SECURE_BROWSER_XSS_FILTER archlinux/archweb
  2. [2] settings: drop long deprecated AUTH_PROFILE_MODULE archlinux/archweb
  3. [3] build(deps): bump django from 5.2.13 to 5.2.14 ↗ archlinux/archweb
  4. [4] Enhance config types and summary ↗ archlinux/archinstall
  5. [5] update haskell-network-protocol-xmpp to 0.5.2-88 in extra-staging-x86_64 archlinux/state
  6. [6] update haskell-clientsession to 0.9.3.0-88 in extra-staging-x86_64 archlinux/state
  7. [7] update haskell-data-serializer to 0.3.5-358 in extra-staging-x86_64 archlinux/state
  8. [8] update git-repair to 1.20230814-208 in extra-staging-x86_64 archlinux/state

FAQ

What changed in Arch Linux on May 11, 2026?
Archweb dropped two deprecated Django settings that should have been gone years ago, while archinstall locked down its configuration architecture with a new abstract base class.
What should Arch Linux teams do about it?
Review archweb's Django 5.2.14 upgrade for CVE-2026-6907 caching impact • Test archinstall builds after SubConfig refactor before tagging • Verify staging packages test cleanly before promotion to extra
Which Arch Linux repositories shipped on May 11, 2026?
archlinux/archweb, archlinux/archinstall, archlinux/state

Related across the cluster

For your repos

The showcase is a teaser.
Your wire is the product.

Same engine. Different stack. Below: what changes when the wire is yours.

Showcase wire

  • •14 famous open source orgs
  • •One wire per day
  • •Public, generic
  • •Read on the web, when you remember

Your wire

  • →Up to 1,500 of your repos - orgs, deps, vendors
  • →Morning and evening briefs
  • →Action items routed to your team
  • →Slack delivery, email, breaking-news CVE alerts

Want a hands-on demo first? Ask a current user for an invite link.