Who contributed to Arch Linux on August 1, 2026?

5 developers shipped this update, including George Rawlinson, Jan Steffens, Caleb Maclennan, Leonidas Spyropoulos, and Rafael Epplée.

What were the notable Arch Linux updates?

remove python-pkg_resources from extra-any, update gnome-user-docs to 50.4-1 in extra-any, and update lux to 0.39.8-1 in extra-x86_64.

@archlinux

The Arch Linux org - the rolling distro and the developers who run it

github ↗

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

AUR ADOPTION FLOW TIGHTENED AFTER ORPHAN PACKAGE BYPASS

By RepoJournal · Filed 06:57 UTC on August 1, 2026 · About Arch Linux

5 people shipped this

George Rawlinson @grawlinson 3 cited

Leonidas Spyropoulos @inglor 2 cited

Jan Steffens @heftig 1 cited

Caleb Maclennan @alerque 1 cited

Rafael Epplée @raffomania 1 cited

Arch's package repository just closed a critical gap where pushing to an orphaned package made you its maintainer with zero oversight.

The AUR web interface was allowing contributors to claim orphan packages by direct push, circumventing the formal adoption request process entirely [6]. That same vulnerability also broke the adoption request flow itself: accepting a request would grant maintainership to the accepting Package Maintainer instead of the actual requester [7]. Both fixes are now live, restoring proper access controls and ensuring adoption requests route correctly. Across the repository stack this period, the team pushed 54 commits managing package updates and infrastructure cleanup [1] [2] [3] [4] [5]. On the build side, the demo data layer has been stripped from buildbtw now that the system can display real builds [8] [9], eliminating confusion during testing.

Action items

→ Pull latest AUR web code to enforce push access controls on orphan packages archlinux/aurweb [immediate]
→ Verify any adoption requests made in the last 48 hours granted to the correct maintainer archlinux/aurweb [plan]
→ Update buildbtw to latest for real build visibility archlinux/buildbtw [monitor]

References

[1] remove python-pkg_resources from extra-any archlinux/state
[2] update gnome-user-docs to 50.4-1 in extra-any archlinux/state
[3] update lux to 0.39.8-1 in extra-x86_64 archlinux/state
[4] update python-shtab to 1.9.2-1 in extra-any archlinux/state
[5] update forgejo to 16.0.2-1 in extra-x86_64 archlinux/state
[6] feat: reject pushes to orphan package bases archlinux/aurweb
[7] fix: grant adoption requests to the requester archlinux/aurweb
[8] Merge branch 'remove-bbtw-show-demo-data' into 'main' archlinux/buildbtw
[9] Remove bbtw show demo data archlinux/buildbtw

Quick answers

What shipped in Arch Linux on August 1, 2026?: Arch's package repository just closed a critical gap where pushing to an orphaned package made you its maintainer with zero oversight. In total, 54 commits landed.
Who contributed to Arch Linux on August 1, 2026?: 5 developers shipped this update, including George Rawlinson, Jan Steffens, Caleb Maclennan, Leonidas Spyropoulos, and Rafael Epplée.
What were the notable Arch Linux updates?: remove python-pkg_resources from extra-any, update gnome-user-docs to 50.4-1 in extra-any, and update lux to 0.39.8-1 in extra-x86_64.

ALPM TESTING GETS CLEARER ERROR MESSAGES AS PYTHON ECOSYSTEM SHIFTS THROUGH TESTING

Arch is tightening error handling in its package manager while pushing python-hypothesis out of testing into stable, signaling confidence in the latest batch of core updates.

infra 51 shipped

@archlinux Aug 5

ARCH MAINTAINERS PUSH V2RAY AND GEXIV2 UPDATES TO TESTING

Geolocation and domain filtering tools move to extra-testing while metadata library sees stability bump across x86_64.

infra 52 shipped

@archlinux Aug 4

ARCHINSTALL TACKLES TYPE CHECKER ERRORS AS ECOSYSTEM ROLLS FORWARD

Archinstall shipped five refactor PRs in 24 hours to resolve type annotation mismatches that pyright and pyrefly flagged across hardware, device, and bootloader models.

infra 62 shipped

@archlinux Aug 3

FEEDPARSER PATCHES SGMLLIB, BENCODE ADDS DEPTH LIMITS

Arch's package ecosystem rolls forward with security and stability patches across two critical desks, 50 commits across the state.

infra 52 shipped

Elsewhere on the wire

AI Agents Aug 6

LANGCHAIN HARDENS ANTHROPIC TOOL CALLING AND GIT CREDENTIALS AS OPENHANDS SHIPS 1.10.0

LangChain fixed a critical credential leak in evaluation runs while Anthropic tool schemas get proper fallback handling, as three major agent frameworks push releases across the ecosystem.

ai-agents 54 shipped

Local LLMs Aug 6

OLLAMA FIXES KV CACHE CORRUPTION, LLAMA.CPP HARDENS FILE SEARCH, VLLM KILLS MOE LEGACY CODE

Ollama patched a critical cache corruption bug that corrupts lazy snapshots during multi-request prefills, while llama.cpp hardened Windows junction traversal and vLLM removed 14 hardcoded MoE shards across quantization methods.