RepoJournal
Arch Linux @archlinux
124 wires and counting
$ status: archived — this briefing has stopped; the archive stays readable. browse live briefings →

$ status

wire 2026-05-11
stories 58
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

ARCHWEB CLEANS HOUSE ON DJANGO CRUFT WHILE ARCHINSTALL OVERHAULS CONFIG TYPES

By RepoJournal · Filed · About Arch Linux · Composed from the cited sources · methodology

dependabot[bot] svartkanin
2 people shipped this
dependabot[bot] @dependabot[bot] 1 cited svartkanin @svartkanin 1 cited

Archweb dropped two deprecated Django settings that should have been gone years ago, while archinstall locked down its configuration architecture with a new abstract base class.

Archweb is cutting technical debt faster than usual: SECURE_BROWSER_XSS_FILTER [1] got axed (Django removed it in 4.0), and AUTH_PROFILE_MODULE [2] finally went away after sitting deprecated since Django 1.5 and removed in 1.7 — this is the kind of cleanup that unblocks future upgrades. The same repo bumped Django to 5.2.14 [3], picking up a CVE fix for caching behavior on Vary headers. Over in archinstall, the big structural win is the new SubConfig abstract class [4] that mandates json() and a fresh summary() method across all sub-configurations — this hardens the config layer and makes the system easier to reason about going forward. Meanwhile, staging got a wave of Haskell ecosystem updates [5][6][7] and a git-repair bump [8], standard maintenance across the stack.

Action items

References

  1. [1] settings: Remove SECURE_BROWSER_XSS_FILTER ↗ archlinux/archweb
  2. [2] settings: drop long deprecated AUTH_PROFILE_MODULE ↗ archlinux/archweb
  3. [3] build(deps): bump django from 5.2.13 to 5.2.14 ↗ archlinux/archweb
  4. [4] Enhance config types and summary ↗ archlinux/archinstall
  5. [5] update haskell-network-protocol-xmpp to 0.5.2-88 in extra-staging-x86_64 archlinux/state ↗
  6. [6] update haskell-clientsession to 0.9.3.0-88 in extra-staging-x86_64 archlinux/state ↗
  7. [7] update haskell-data-serializer to 0.3.5-358 in extra-staging-x86_64 archlinux/state ↗
  8. [8] update git-repair to 1.20230814-208 in extra-staging-x86_64 archlinux/state ↗

$ ls archlinux/reviews/ # the step-back reads

the week in review Kernel v7.2.4-arch1 ships with userns sysctl the month in review August's Arch: AUR hardening, kernel churn, and steady package flow
Full archive → Weekly reviews →

Quick answers

What shipped in Arch Linux on May 11, 2026?
Archweb dropped two deprecated Django settings that should have been gone years ago, while archinstall locked down its configuration architecture with a new abstract base class. In total, 54 commits and 4 pull requests landed.
Who contributed to Arch Linux on May 11, 2026?
2 developers shipped this update, including dependabot[bot] and svartkanin.
What were the notable Arch Linux updates?
settings: Remove SECURE_BROWSER_XSS_FILTER, settings: drop long deprecated AUTH_PROFILE_MODULE, and build(deps): bump django from 5.2.13 to 5.2.14.
♥

$ log @archlinux --recent

Felix Yan promotes the xmonad stack to extra, moor lands at 2.19.2 50 shipped Synapse 1.161.0 lands in infrastructure, anki promoted to extra 70 shipped Arch ships a CLONE_NEWUSER kill switch in v7.2.6-arch2 59 shipped mise and asusctl land in extra, tracexec hits 1.0 50 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl rejects conflicting vLLM engine_kwargs, open-instruct adds MILES OPD behind a Megatron learner Interpretability nnsight 0.8.0 cuts import time from 7.6s to 1.6s

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.