Who contributed to Arch Linux on August 10, 2026?

3 developers shipped this update, including Felix Yan, dependabot, and Josephine Pfeiffer.

What were the notable Arch Linux updates?

fix(migrations): drop the ClosedUID foreign key around the index drop, chore: lint the alembic revision chain on pre-push and in CI, and test: run migration downgrade/upgrade round trips against MariaDB.

@archlinux

The Arch Linux org - the rolling distro and the developers who run it

github ↗

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

AURWEB MIGRATION OVERHAUL SHIPS WITH DOWNGRADE TESTING

By RepoJournal · Filed 06:57 UTC on August 10, 2026 · About Arch Linux

3 people shipped this

Felix Yan @felixonmars 4 cited

Josephine Pfeiffer @pfeifferj 3 cited

dependabot @dependabot 1 cited

Arch Linux's package repository just locked down its database migrations with automated testing that catches divergent branches and verifies round-trip downgrades against MariaDB.

Josephine Pfeiffer landed three critical fixes to aurweb that harden the migration pipeline [1] [2] [3]. The series started with a fix for a foreign key ordering bug that was breaking downgrades with InnoDB errno 1553, then added linting to catch divergent alembic heads before they hit CI, and capped it with round-trip testing that validates every migration can upgrade and downgrade cleanly. This matters: divergent migration branches have already scattered twice in recent history, and now they'll fail pre-commit. The test suite now runs full up/down cycles against MariaDB instead of just stamping head, which catches schema drift that the old create_all approach would miss. Over in the extras repository, Felix Yan shipped updates across the Python ecosystem: ruby-falcon to 0.57.0-1 [4], python-langsmith to 0.10.8-1 [5], python-tracerite to 2.6.0-1 [6], and python-cmd2 to 4.1.0-1 [7]. Django 5.2.16 landed in archweb's dependencies [8], patching a newline injection vulnerability in DOM attribute handling.

Action items

→ Review aurweb migration linting in your pre-push hooks - divergent branches now fail fast archlinux/aurweb [plan]
→ Test any custom aurweb deployment migrations against the new round-trip validation archlinux/aurweb [monitor]
→ Verify Django 5.2.16 rolls into your next archweb deployment archlinux/archweb [plan]

References

[1] fix(migrations): drop the ClosedUID foreign key around the index drop archlinux/aurweb
[2] chore: lint the alembic revision chain on pre-push and in CI archlinux/aurweb
[3] test: run migration downgrade/upgrade round trips against MariaDB archlinux/aurweb
[4] update ruby-falcon to 0.57.0-1 in extra-any archlinux/state
[5] update python-langsmith to 0.10.8-1 in extra-any archlinux/state
[6] update python-tracerite to 2.6.0-1 in extra-any archlinux/state
[7] update python-cmd2 to 4.1.0-1 in extra-any archlinux/state
[8] build(deps): bump django from 5.2.14 to 5.2.16 ↗ archlinux/archweb

Quick answers

What shipped in Arch Linux on August 10, 2026?: Arch Linux's package repository just locked down its database migrations with automated testing that catches divergent branches and verifies round-trip downgrades against MariaDB. In total, 53 commits and 1 pull requests landed.
Who contributed to Arch Linux on August 10, 2026?: 3 developers shipped this update, including Felix Yan, dependabot, and Josephine Pfeiffer.
What were the notable Arch Linux updates?: fix(migrations): drop the ClosedUID foreign key around the index drop, chore: lint the alembic revision chain on pre-push and in CI, and test: run migration downgrade/upgrade round trips against MariaDB.

ARCH LINUX KERNEL 7.1.8-ARCH1 SHIPS WITH SECURITY FIXES

Arch Linux kernel v7.1.8-arch1 lands with three critical patches covering unprivileged namespace creation, memory corruption, and I/O scheduling.

infra 67 shipped

@archlinux Aug 9

ARCH LINUX ROLLS FIVE PACKAGES FROM STAGING TO STABLE

Five packages cleared testing and moved to the extra repository overnight, with Felix Yan handling the bulk of the promotions.

infra 50 shipped

@archlinux Aug 8

METABASE SECURITY PATCH FORCES INFRASTRUCTURE MOVE

Arch infrastructure team patched a critical Metabase vulnerability overnight, signaling active security work across the fleet.

infra 54 shipped

@archlinux Aug 7

ALPM PARSER REFACTOR LANDS ACROSS ARCH ECOSYSTEM

Nukesor shipped a major refactor to alpm's type parsing layer, consolidating five separate parser implementations into a unified AlpmParser pattern.

infra 111 shipped

Elsewhere on the wire

AI Agents Aug 11

LANGCHAIN PATCHES TOOL CALLS, OPENHANDS SURFACES HIDDEN INTEGRATIONS

LangChain's OpenAI wrapper shipped a fix for invalid tool calls that were silently dropped, while OpenHands surfaced integrations the automation layer was burying.

ai-agents 44 shipped

Local LLMs Aug 11

OLLAMA PATCHES CRITICAL PARSER BUG, NEMOTRON 3 LANDS WITH SPECULATIVE DECODING

Ollama shipped v0.32.7 with a critical fix for boundary token corruption in model invocation, while full MLX support for Nemotron 3 Nano Omni brings self-draft speculation to inference without a separate draft model.

+11

llms 271 shipped

@CachyOS Aug 11

CACHYOS LINUX 7.1.8 SHIPS WITH VMALLOC OPTIMIZATIONS; NOCTALIA CONFIG UPDATED FOR BETA 8

CachyOS Linux 7.1.8 landed overnight with upstream rebase and performance tuning across memory allocation, while Noctalia configuration hardened for beta 8 stability with direct_scanout gaming support.

infra 83 shipped

Elixir & Phoenix Aug 11

PHOENIX LIVE VIEW PATCHES OPEN REDIRECT VULNERABILITY ACROSS TWO VERSIONS

Phoenix Live View shipped emergency security fixes for CVE-2026-64941 in both v1.1.33 and v1.2.9 to close an open redirect hole via ASCII control characters in the redirect/2 function.