RepoJournal
Arch Linux @archlinux
124 wires and counting
$ status: archived — this briefing has stopped; the archive stays readable. browse live briefings →

$ status

wire 2026-08-08
stories 54
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

METABASE SECURITY PATCH FORCES INFRASTRUCTURE MOVE

By RepoJournal · Filed · About Arch Linux · Composed from the cited sources · methodology

Peter Jung Levente Polyak Leonidas Spyropoulos
3 people shipped this
Peter Jung @ptr1337 3 cited Levente Polyak @anthraxx 2 cited Leonidas Spyropoulos @inglor 1 cited

Arch infrastructure team patched a critical Metabase vulnerability overnight, signaling active security work across the fleet.

Levente Polyak pushed an emergency Metabase upgrade to the finance stack due to a security advisory [1], the kind of move that doesn't happen without real teeth. Meanwhile, the build infrastructure shipped a meaningful refactor merging local and remote executor code paths into unified logic [2], cutting complexity that compounds over time. Package repos are cycling through routine updates: GPU Screen Recorder landed version 6.0.0 [3] and its UI companion hit 1.13.3 [4], while python-proton-core moved to 0.7.4 in testing [5]. The AUR web stack added a database index on PackageRequests.ClosedUID to address performance friction [6], the kind of targeted optimization that keeps query performance from creeping. Fifty-four commits across four repos in a single period shows healthy throughput without heroics.

Action items

References

  1. [1] finance: upgrade metabase due to security advisory ↗ archlinux/infrastructure
  2. [2] Merge branch 'unify-local-remote-executor-code' into 'main' ↗ archlinux/buildbtw
  3. [3] update gpu-screen-recorder to 6.0.0-1 in extra-x86_64 archlinux/state ↗
  4. [4] update gpu-screen-recorder-ui to 1.13.3-1 in extra-x86_64 archlinux/state ↗
  5. [5] update python-proton-core to 0.7.4-1 in extra-testing-any archlinux/state ↗
  6. [6] feat: add index on PackageRequests.ClosedUID ↗ archlinux/aurweb

$ ls archlinux/reviews/ # the step-back reads

the week in review Kernel v7.2.4-arch1 ships with userns sysctl the month in review August's Arch: AUR hardening, kernel churn, and steady package flow
Full archive → Weekly reviews →

Quick answers

What shipped in Arch Linux on August 8, 2026?
Arch infrastructure team patched a critical Metabase vulnerability overnight, signaling active security work across the fleet. In total, 54 commits landed.
Who contributed to Arch Linux on August 8, 2026?
3 developers shipped this update, including Levente Polyak, Peter Jung, and Leonidas Spyropoulos.
What were the notable Arch Linux updates?
finance: upgrade metabase due to security advisory, Merge branch 'unify-local-remote-executor-code' into 'main', and update gpu-screen-recorder to 6.0.0-1 in extra-x86_64.
♥

$ log @archlinux --recent

Felix Yan promotes the xmonad stack to extra, moor lands at 2.19.2 50 shipped Synapse 1.161.0 lands in infrastructure, anki promoted to extra 70 shipped Arch ships a CLONE_NEWUSER kill switch in v7.2.6-arch2 59 shipped mise and asusctl land in extra, tracexec hits 1.0 50 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl rejects conflicting vLLM engine_kwargs, open-instruct adds MILES OPD behind a Megatron learner Interpretability nnsight 0.8.0 cuts import time from 7.6s to 1.6s

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.