The Wire · Showcase
Node.js jumps to 26.8.1 across extra, signstar locks down YubiHSM keys
By RepoJournal · Filed · About Arch Linux
Arch's rolling release just got faster: Node.js 26.8.1 and a hardened signstar stack are the ones to watch today.
Node.js hit 26.8.1 in extra-x86_64 [1], landing the latest V8 and event-loop improvements for everyone on the core runtime. Meanwhile, signstar's David Runge is tightening the YubiHSM2 integration: the crate jumps to 0.44.0 [2] and the auth key can now be swapped at runtime [3], a feature operators have wanted since day one. The `Display` implementation for `ObjectId` [5] cleans up error messages, and the API now always returns `Domains` instead of an optional, removing a footgun [4]. Felixonmars also refreshed klayout to 0.30.12-1 [6], shadowsocks-rust to 1.25.0-1 [7], and the RISC-V toolchain to GCC 15.2.0-1 [8]. buildbtw added contribution guidelines for tests [9], which should cut down on review friction. The 72 commits this period show steady maintenance across all three repos, but the real pivot is the signstar hardening.
One email a day. Unsubscribe in one click.
Keep up with Arch Linux in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Upgrade nodejs to 26.8.1 in your test environments before your next deploy archlinux/state [immediate]
- → Review signstar's new auth-key rotation and Domains return type for potential breaking changes archlinux/signstar [plan]
- → Adopt the new test contribution guidelines in buildbtw archlinux/buildbtw [monitor]
References
- [1] update nodejs to 26.8.1-1 in extra-x86_64 archlinux/state
- [2] feat(deps): Upgrade crate `yubihsm2` to 0.44.0 archlinux/signstar
- [3] feat: Add support for changing the currently used authentication key archlinux/signstar
- [4] feat!: Change `YubiHsm2UserMapping::domains` to always return `Domains` archlinux/signstar
- [5] feat: Implement `Display` for `ObjectId` archlinux/signstar
- [6] update klayout to 0.30.12-1 in extra-x86_64 archlinux/state
- [7] update shadowsocks-rust to 1.25.0-1 in extra-x86_64 archlinux/state
- [8] update riscv64-linux-gnu-gcc to 15.2.0-1 in extra-x86_64 archlinux/state
- [9] Add test contribution guidelines archlinux/buildbtw