RepoJournal
Arch Linux

@archlinux

The Arch Linux org - the rolling distro and the developers who run it

Keep up with Arch Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Fri 19 jun
  2. Sat 27 jun
  3. Sun 28 jun
  4. Mon 29 jun
  5. Tue 30 jun
  6. Wed 1 jul
  7. Thu 2 jul
  8. Fri 3 jul
  9. Sat 4 jul
  10. Sun 5 jul
  11. Mon 6 jul
  12. Tue 7 jul
  13. Wed 8 jul
  14. Thu 9 jul
  15. Fri 10 jul
  16. Sat 11 jul
  17. Sun 12 jul
  18. Mon 13 jul
  19. Tue 14 jul
  20. Wed 15 jul
  21. Thu 16 jul
  22. Fri 17 jul
  23. Sat 18 jul
  24. Sun 19 jul
  25. Mon 20 jul
  26. Tue 21 jul
  27. Wed 22 jul
  28. Thu 23 jul
  29. Fri 24 jul
  30. Today 25 jul
Topics: Infrastructure Full archive →

The Wire · Showcase

ARCHWEB MATRIX ISOLATION TIGHTENS SECURITY POSTURE

By RepoJournal · Filed · About Arch Linux

Arch infrastructure locked down Matrix well-known directory to primary host only, closing a lateral exposure vector across mirror and secondary deployments.

The infrastructure team merged a critical change [1] [2] that restricts `.well-known/matrix` installation to the main archweb instance, preventing accidental or malicious matrix protocol exposure on distributed deployments. This closes a known work item and hardens the attack surface for services running on secondary infrastructure. On the packages side, python-requests bumped to 2.34.0 [3], bringing dependency freshness across the ecosystem. nvhpc updated to 26.3-3 [4] for users running NVIDIA HPC workflows. Stalwart mail stack received dual updates—webadmin to 1.0.4 and cli to 1.0.6 —addressing improvements in the mail server toolchain. Ruby tooling also moved forward with mixlib-config to 3.1.5 .

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Merge branch 'limit_matrix_archweb' archlinux/infrastructure
  2. [2] archweb: Limit installation of `.well-known/matrix` dir & files to main archweb host archlinux/infrastructure
  3. [3] update python-requests to 2.34.0-1 in extra-any archlinux/state
  4. [4] update nvhpc to 26.3-3 in extra-x86_64 archlinux/state

Quick answers

What shipped in Arch Linux on May 12, 2026?
Arch infrastructure locked down Matrix well-known directory to primary host only, closing a lateral exposure vector across mirror and secondary deployments. In total, 52 commits landed.
What were the notable Arch Linux updates?
Merge branch 'limit_matrix_archweb', archweb: Limit installation of `.well-known/matrix` dir & files to main archweb host, and update python-requests to 2.34.0-1 in extra-any.

More from @archlinux

Arch Linux @archlinux

LINUX-LTS CLEARS TESTING, ARCHINSTALL FIXES ARM64 GRUB AND LIMINE

Linux-LTS moved from core-testing to stable across x86_64 after validation [ref:1], while archinstall patches critical EFI installation failures on aarch64 that broke both GRUB and Limine [ref:10].

Andreas Radke Felix Yan George Rawlinson nl6720 +3
infra 60 shipped 1-min read
Arch Linux @archlinux

KEYCHAIN 3.0 LANDS IN TESTING, ARCHINSTALL TIGHTENS VALIDATION

Arch's package repos are moving fast: keychain climbs to 3.0.0, Deno reaches 2.9.4, and archinstall ships critical validator fixes across Pydantic models.

Antonio Rojas Felix Yan renovate codefiles
infra 62 shipped 1-min read
Arch Linux @archlinux

ARCHINSTALL FIXES LOCALIZATION BUILD THAT BROKE THREE TIMES

Archinstall's translation pipeline finally handles runtime binding descriptions correctly, after manual patches kept getting wiped by automated regeneration.

Jan Alexander Steffens (heftig) Softer codefiles Alexander Rødseth +1
infra 56 shipped 1-min read
Arch Linux @archlinux

ARCHINSTALL TIGHTENS CODE QUALITY, BUILDBTW MODERNIZES ORM LAYER

Archinstall shipped four quality fixes in 24 hours while buildbtw migrated off deprecated SeaORM patterns, setting both projects up for stable releases.

Felix Yan Christian Hesse Sven-Hendrik Haase Levente Polyak +2
infra 79 shipped 1-min read

Daily updates, in your inbox

Follow Arch Linux

Keep up with Arch Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

github-actions[bot] hntrl dependabot ak684 +6
ai-agents 28 shipped 1-min read
Local LLMs Local LLMs

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.

dhiltgen ParthSareen Xuan-Son Nguyen Johannes Gäßler +11
llms 210 shipped 2-min read
CachyOS @CachyOS

HYPRLAND V0.56 FIXES LAND, PACKAGE ECOSYSTEM ROLLS FORWARD

Hyprland configuration updated for v0.56 compatibility across multiple desks, while the AUR-derived ecosystem locked in four automated package bumps.

cantosun99 Jinra Aarrayy Valeri +7
infra 85 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

LIVEVIEW ASYNC CLEANUP FIX SHIPS ALONGSIDE RANGE OPTIMIZATIONS

Phoenix LiveView closes a critical async task test failure while Elixir cuts unnecessary abs calls from Range operations.

Barna Kovacs Alexander Gubarev SteffenDE José Valim +1
elixir 19 shipped 1-min read
Want every project, not just this one?