Who contributed to Arch Linux on August 24, 2026?

5 developers shipped this update, including Jan Steffens, Lukas Fleischer, correctmost, renovate, and Christian Heusel.

What were the notable Arch Linux updates?

update imagemagick to 7.1.2.30-1 in extra-x86_64, update simdjson to 1:4.6.8-1 in extra-x86_64, and update schemacrawler to 17.14.0-1 in extra-any.

@archlinux

The Arch Linux org - the rolling distro and the developers who run it

github ↗

Pick a date

Topics: Infrastructure Full archive →

The Wire · Showcase

ArchLinux Faces Supply Chain Scare With New Cooldown Guard

By RepoJournal · Filed 06:56 UTC on August 24, 2026 · About Arch Linux

5 people shipped this

correctmost @correctmost 4 cited

Jan Steffens @heftig 2 cited

Lukas Fleischer @lfos 2 cited

Christian Heusel @christian-heusel 1 cited

renovate @renovate

Arch moves to slow automated dependency updates to dodge supply chain attacks, right as a debuginfod disk failure went unfixed until the last minute.

The package repo desk is quiet, with routine updates: ImageMagick 7.1.2.30 [1], simdjson 4.6.8 [2], schemacrawler 17.14.0 [3], and pkgconf 3.0.6 [4] all move forward, while unoconv gets dropped from extra-any [5]. More urgent, archinstall adds a 3-day cooldown on dev dependency updates "to help prevent some supply chain attacks" [6], and fixes its renovate auto-merge config [7]. Meanwhile infrastructure bumps the disk on debuginfod.archlinux.org after it filled up and "nobody fixed the alert in time", halting debug info ingestion [8]. The security hardening in archinstall's workflows continues as well, with permissions trimmed and git credentials no longer persisted [9][10].

Action items

→ Rebuild packages that depend on ImageMagick to pick up 7.1.2.30-1 archlinux/state [plan]
→ Monitor debuginfod.archlinux.org disk usage and ensure alerts are acted on promptly archlinux/infrastructure [monitor]
→ Test archinstall with the new cooldown and renovate config to confirm no supply chain gaps archlinux/archinstall [plan]
→ Review the remaining archinstall workflows for excessive permissions and artipacked warnings archlinux/archinstall [monitor]

References

[1] update imagemagick to 7.1.2.30-1 in extra-x86_64 archlinux/state
[2] update simdjson to 1:4.6.8-1 in extra-x86_64 archlinux/state
[3] update schemacrawler to 17.14.0-1 in extra-any archlinux/state
[4] update pkgconf to 3.0.6-1 in core-testing-x86_64 archlinux/state
[5] remove unoconv from extra-any archlinux/state
[6] Add a cooldown period of 3 days for dev dependency updates (#4725) archlinux/archinstall
[7] Fix renovate auto merge config (#4723) archlinux/archinstall
[8] Bump the disk size of debuginfod.archlinux.org archlinux/infrastructure
[9] Unset default permissions for testing and linting workflows ↗ archlinux/archinstall
[10] Don't persist git credentials during testing and linting workflows ↗ archlinux/archinstall

Quick answers

What shipped in Arch Linux on August 24, 2026?: Arch moves to slow automated dependency updates to dodge supply chain attacks, right as a debuginfod disk failure went unfixed until the last minute. In total, 55 commits and 5 pull requests landed.
Who contributed to Arch Linux on August 24, 2026?: 5 developers shipped this update, including Jan Steffens, Lukas Fleischer, correctmost, renovate, and Christian Heusel.
What were the notable Arch Linux updates?: update imagemagick to 7.1.2.30-1 in extra-x86_64, update simdjson to 1:4.6.8-1 in extra-x86_64, and update schemacrawler to 17.14.0-1 in extra-any.

Xbox driver jumps to 5.9.0

Arch's extra repo gets a fresh gamepad driver bump with xpad 5.9.0.

infra 50 shipped

@archlinux Aug 22

ARCH LINUX BUILDER CUTS UNSERVED ARCHITECTURES

Buildbtw dropped all non-x86_64 targets, and a fresh Junior Package Maintainer joined the team.

infra 60 shipped

@archlinux Aug 21

French locale gets overhauled in archinstall

archinstall cleans house as a 416-string French translation refresh lands, but the real story is what it signals for the installer's stability.

infra 56 shipped

@archlinux Aug 20

LINUS PULLS INTEGRITY FIX FOR TPM-BYPASS

Linus merged the integrity-v7.3 tag, addressing a TPM initialization race that could silently bypass IMA.

infra 100 shipped

Elsewhere on the wire

AI Agents Aug 24

CLINE SHIPS V4.1.15 AS TELEMETRY BUGS SURFACE ACROSS THE AGENT STACK

Cline's long-awaited auto-approve fix landed overnight, but it's the telemetry drop in 4.1.11 that should have you checking your session metrics.

ai-agents 44 shipped

Local LLMs Aug 24

VLLM'S P2P WEIGHT SYNC CUTS RL MOE TRANSFER COSTS

Forget all-gathering experts during RL rollout: vLLM's new sharded_rdt backend lets each worker pull only the slice it needs, turning a total_bytes transfer into a total_bytes divided by num_workers one.