RepoJournal
Arch Linux

@archlinux

The Arch Linux org - the rolling distro and the developers who run it

Keep up with Arch Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Sun 28 jun
  2. Mon 29 jun
  3. Tue 30 jun
  4. Wed 1 jul
  5. Thu 2 jul
  6. Fri 3 jul
  7. Sat 4 jul
  8. Sun 5 jul
  9. Mon 6 jul
  10. Tue 7 jul
  11. Wed 8 jul
  12. Thu 9 jul
  13. Fri 10 jul
  14. Sat 11 jul
  15. Sun 12 jul
  16. Mon 13 jul
  17. Tue 14 jul
  18. Wed 15 jul
  19. Thu 16 jul
  20. Fri 17 jul
  21. Sat 18 jul
  22. Sun 19 jul
  23. Mon 20 jul
  24. Tue 21 jul
  25. Wed 22 jul
  26. Thu 23 jul
  27. Fri 24 jul
  28. Sat 25 jul
  29. Sun 26 jul
  30. Mon 27 jul
Topics: Infrastructure Full archive →

The Wire · Showcase

SIGNSTAR AUTHENTICATION OVERHAUL SHIPS, HASKELL ECOSYSTEM CASCADES

By RepoJournal · Filed · About Arch Linux

Arch's signing infrastructure underwent a breaking refactor that rearchitects how authenticated commands chain together, while the Haskell stack rippled with coordinated updates across Yesod and its dependents.

The signstar project landed two major breaking changes that reshape its authentication model [1] [2]. The `Scenario` object now wraps authenticated command chains directly, eliminating the need for nested `Command::Auth` variants and removing mutability requirements from the runner. File-backed authentication is now CLI-only, with core infrastructure relying on `Credentials` objects instead. This is a significant architecture win for maintainability. Supporting these changes, three new passphrase and key management features landed [3] [4] [5], adding policy-driven validation for authentication keys and passphrases created from strings or files. Over in buildbtw, two compilation fixes merged: a GraphQL schema path correction [6] and a build system optimization that prevents unnecessary recompilation during database migrations [7] [8]. The executor also gained graceful build cancellation with SIGTERM support [9]. Meanwhile, the Haskell staging area cycled through coordinated bumps to hledger-web, tamarin-prover, and the full Yesod stack [10] [11] [12] [13] [14], likely triggered by a dependency solver pass. Infrastructure bumped Synapse to 1.155.0 [15].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] refactor!: Restructure `Scenario` as chain of authenticated commands archlinux/signstar
  2. [2] feat!: Use file-backed authentication only for the CLI archlinux/signstar
  3. [3] feat: Add `AuthenticationKey`, wrapping `yubihsm::authentication::Key` archlinux/signstar
  4. [4] feat: Add `Passphrase::check_against_policy` archlinux/signstar
  5. [5] feat: Add `Passphrase::new_with_policy` archlinux/signstar
  6. [6] Merge branch 'fix-graphql-schema-path-in-build.rs' into 'main' archlinux/buildbtw
  7. [7] Merge branch 'prevent-extra-compilation-in-just-migrate-database' into 'main' archlinux/buildbtw
  8. [8] Prevent extra compilation in `just migrate-database` archlinux/buildbtw
  9. [9] Merge branch 'executor-allow-cancelling-builds' into 'main' archlinux/buildbtw
  10. [10] update tamarin-prover to 1.12.0-56 in extra-staging-x86_64 archlinux/state
  11. [11] update hledger-web to 1.52.1-19 in extra-staging-x86_64 archlinux/state
  12. [12] update haskell-yesod-static to 1.6.1.2-22 in extra-staging-x86_64 archlinux/state
  13. [13] update haskell-yesod to 1.6.2.1-502 in extra-staging-x86_64 archlinux/state
  14. [14] update haskell-yesod-test to 1.6.23-176 in extra-staging-x86_64 archlinux/state
  15. [15] matrix: Update synapse to 1.155.0 archlinux/infrastructure

Quick answers

What shipped in Arch Linux on June 17, 2026?
Arch's signing infrastructure underwent a breaking refactor that rearchitects how authenticated commands chain together, while the Haskell stack rippled with coordinated updates across Yesod and its dependents. In total, 102 commits landed.
What were the notable Arch Linux updates?
refactor!: Restructure `Scenario` as chain of authenticated commands, feat!: Use file-backed authentication only for the CLI, and feat: Add `AuthenticationKey`, wrapping `yubihsm::authentication::Key`.

More from @archlinux

Arch Linux @archlinux

AURWEB PLUGS EMAIL VALIDATION LOOPHOLE AS PACKAGE REPO TRIMS CRUFT

The AUR web backend just closed a registration flaw that could let attackers bypass email uniqueness checks using Gmail dot-notation tricks, while the main repository purges two stalled packages.

Caleb Maclennan Antonio Rojas Leonidas Spyropoulos
infra 53 shipped 1-min read
Arch Linux @archlinux

ARCH LINUX KERNEL 7.1.5 LANDS WITH SECURITY AND STABILITY FIXES

The Arch Linux kernel team shipped v7.1.5-arch1, patching critical GPU deadlocks and unprivileged namespace vulnerabilities in one of the distribution's most closely watched packages.

Jan Steffens Linus Torvalds
infra 55 shipped 1-min read
Arch Linux @archlinux

LINUX-LTS CLEARS TESTING, ARCHINSTALL FIXES ARM64 GRUB AND LIMINE

Linux-LTS moved from core-testing to stable across x86_64 after validation [ref:1], while archinstall patches critical EFI installation failures on aarch64 that broke both GRUB and Limine [ref:10].

Andreas Radke Felix Yan George Rawlinson nl6720 +3
infra 60 shipped 1-min read
Arch Linux @archlinux

KEYCHAIN 3.0 LANDS IN TESTING, ARCHINSTALL TIGHTENS VALIDATION

Arch's package repos are moving fast: keychain climbs to 3.0.0, Deno reaches 2.9.4, and archinstall ships critical validator fixes across Pydantic models.

Antonio Rojas Felix Yan renovate codefiles
infra 62 shipped 1-min read

Daily updates, in your inbox

Follow Arch Linux

Keep up with Arch Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

langchain-oss-model-profiles langchain-oss-model-profiles[bot] saoudrizwan
ai-agents 16 shipped 2-min read
Local LLMs Local LLMs

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

github-actions[bot] dhiltgen timkhronos Pascal +10
llms 125 shipped 1-min read
CachyOS @CachyOS

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

Piotr Gorski github-actions Vladislav Nepogodin ptr1337 +7
infra 97 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.

Benjamin Milde Alexander Gubarev lukaszsamson makoto-developer
elixir 10 shipped 1-min read
Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.