RepoJournal
Arch Linux

@archlinux

The Arch Linux org — the rolling distro and the developers who run it

Pick a date

  1. Wed 20 may
  2. Thu 21 may
  3. Sat 23 may
  4. Sun 24 may
  5. Mon 25 may
  6. Tue 26 may
  7. Thu 28 may
  8. Fri 29 may
  9. Sat 30 may
  10. Sun 31 may
  11. Mon 1 jun
  12. Mon 8 jun
  13. Tue 9 jun
  14. Wed 10 jun
  15. Thu 11 jun
  16. Fri 12 jun
  17. Sat 13 jun
  18. Sun 14 jun
  19. Mon 15 jun
  20. Tue 16 jun
  21. Wed 17 jun
  22. Thu 18 jun
  23. Fri 19 jun
  24. Sat 27 jun
  25. Sun 28 jun
  26. Mon 29 jun
  27. Tue 30 jun
  28. Wed 1 jul
  29. Thu 2 jul
  30. Today 3 jul

The Wire · Showcase

PGP LIBRARY OVERHAUL FORCES SIGNSTAR CODE REWRITE

By RepoJournal · Filed · About Arch Linux

Arch's package signing infrastructure absorbed a breaking change in the pgp crate that required immediate adjustments to Ed25519 key handling.

The signstar project updated its Rust dependency to pgp 0.20 [1], which introduced breaking changes to how the library handles legacy Ed25519 secret key parameters. The migration forced code adjustments in the core package signing layer to accommodate the new PlainSecretParams API [1]. Meanwhile, across the broader repository state, routine maintenance continued with GNOME ecosystem updates: gnome-maps bumped to 50.2-1 [2], gnome-sudoku to 50.2.1-1 [3], and libshumate to 1.6.2-1 [4] to maintain compatibility with the latest GNOME 50 stack. miniflux, the lightweight feed reader, shipped 2.3.2-1 [5] with its own set of improvements. These ecosystem updates are solid but routine. The real story is signstar's forced adaptation: it's the kind of upstream breaking change that catches package maintainers mid-cycle, and Arch handled it cleanly.

Action items

References

  1. [1] fix(deps): Update Rust crate pgp to 0.20 archlinux/signstar
  2. [2] update gnome-maps to 50.2-1 in extra-x86_64 archlinux/state
  3. [3] update gnome-sudoku to 50.2.1-1 in extra-x86_64 archlinux/state
  4. [4] update libshumate to 1.6.2-1 in extra-x86_64 archlinux/state
  5. [5] update miniflux to 2.3.2-1 in extra-x86_64 archlinux/state

FAQ

What changed in Arch Linux on June 27, 2026?
Arch's package signing infrastructure absorbed a breaking change in the pgp crate that required immediate adjustments to Ed25519 key handling.
What should Arch Linux teams do about it?
Verify signstar builds cleanly in your test environment against pgp 0.20 • Plan GNOME ecosystem upgrades if you maintain packages in the 50.x stack
Which Arch Linux repositories shipped on June 27, 2026?
archlinux/signstar, archlinux/state

Related across the cluster

For your repos

The showcase is a teaser.
Your wire is the product.

Same engine. Different stack. Below: what changes when the wire is yours.

Showcase wire

  • •14 famous open source orgs
  • •One wire per day
  • •Public, generic
  • •Read on the web, when you remember

Your wire

  • →Up to 1,500 of your repos - orgs, deps, vendors
  • →Morning and evening briefs
  • →Action items routed to your team
  • →Slack delivery, email, breaking-news CVE alerts

Want a hands-on demo first? Ask a current user for an invite link.