Who contributed to Arch Linux on May 19, 2026?

1 developer shipped this update, including Softer.

What were the notable Arch Linux updates?

fix: restrict EFI partition permissions with fmask/dmask=0077 (#4506), Add translation CI validation, and update dovecot to 2.4.4-1 in extra-testing-x86_64.

@archlinux

The Arch Linux org - the rolling distro and the developers who run it

github ↗

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

ARCHINSTALL CLOSES SECURITY GAP IN EFI BOOT PARTITION

By RepoJournal · Filed 06:02 UTC on May 19, 2026 · About Arch Linux

1 person shipped this

Softer @Softer 1 cited

The installer now restricts ESP permissions to prevent world-readable secrets like random-seed files from leaking during boot.

Archinstall merged a critical fix that mounts the EFI System Partition with fmask=0077 and dmask=0077 [1], blocking unauthorized access to sensitive boot-time files. The same PR series also landed translation CI validation [2] that catches a subtle but pervasive bug where f-string interpolation happens before translation lookup, causing localized messages to silently fail at runtime. A new pot_tools utility shipped with the CI work to help maintainers validate and manage the translation catalog without manual overhead. On the mail stack, Dovecot and Pigeonhole both landed testing updates [3][4] ahead of wider release, while buildbtw hit 0.0.5 [7] with changelog housekeeping complete. Desktop sees steady updates across xorg-xev and fooyin [5][6].

Action items

→ Review EFI permission change for your installation workflow; verify /efi/loader/random-seed is not world-readable after next install archlinux/archinstall [plan]
→ Test Dovecot and Pigeonhole from extra-testing before next production mail server upgrade archlinux/packages [plan]
→ Monitor translation CI checks in new archinstall PRs; old f-string pattern will now fail validation archlinux/archinstall [monitor]

References

[1] fix: restrict EFI partition permissions with fmask/dmask=0077 (#4506) archlinux/archinstall
[2] Add translation CI validation ↗ archlinux/archinstall
[3] update dovecot to 2.4.4-1 in extra-testing-x86_64 archlinux/state
[4] update pigeonhole to 2.4.4-1 in extra-testing-x86_64 archlinux/state
[5] update xorg-xev to 1.2.7-1 in extra-x86_64 archlinux/state
[6] update fooyin to 0.10.7-2 in extra-x86_64 archlinux/state
[7] Release buildbtw version 0.0.5 archlinux/buildbtw

Quick answers

What shipped in Arch Linux on May 19, 2026?: The installer now restricts ESP permissions to prevent world-readable secrets like random-seed files from leaking during boot. In total, 57 commits and 2 pull requests landed.
Who contributed to Arch Linux on May 19, 2026?: 1 developer shipped this update, including Softer.
What were the notable Arch Linux updates?: fix: restrict EFI partition permissions with fmask/dmask=0077 (#4506), Add translation CI validation, and update dovecot to 2.4.4-1 in extra-testing-x86_64.

LINUX-LTS CLEARS TESTING, ARCHINSTALL FIXES ARM64 GRUB AND LIMINE

Linux-LTS moved from core-testing to stable across x86_64 after validation [ref:1], while archinstall patches critical EFI installation failures on aarch64 that broke both GRUB and Limine [ref:10].

infra 60 shipped 1-min read

@archlinux 1 day ago

KEYCHAIN 3.0 LANDS IN TESTING, ARCHINSTALL TIGHTENS VALIDATION

Arch's package repos are moving fast: keychain climbs to 3.0.0, Deno reaches 2.9.4, and archinstall ships critical validator fixes across Pydantic models.

infra 62 shipped 1-min read

@archlinux 2 days ago

ARCHINSTALL FIXES LOCALIZATION BUILD THAT BROKE THREE TIMES

Archinstall's translation pipeline finally handles runtime binding descriptions correctly, after manual patches kept getting wiped by automated regeneration.

infra 56 shipped 1-min read

@archlinux 3 days ago

ARCHINSTALL TIGHTENS CODE QUALITY, BUILDBTW MODERNIZES ORM LAYER

Archinstall shipped four quality fixes in 24 hours while buildbtw migrated off deprecated SeaORM patterns, setting both projects up for stable releases.

infra 79 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.