$ the-wire · showcase
python-flask-security-too 5.8.2 lands in extra-testing, Hyacinthe promoted to Package Maintainer
By RepoJournal · Filed · About Arch Linux · Composed from the cited sources · methodology
Arch Linux updated python-flask-security-too to 5.8.2-1 in extra-staging and moved it to extra-testing, while the infrastructure repo promoted Hyacinthe to Package Maintainer and merged a rate-limited, cached mirrorlist endpoint.
python-flask-security-too jumped to 5.8.2-1 in extra-staging-any and was moved to extra-testing-any the same day [1][2]. The parallel promotion of python-click and python-ast-serialize into extra-testing [4][5] suggests a coordinated Python dependency refresh, but only the flask-security-too version bump is confirmed here. If you track extra-testing, expect the new release in your next sync.
On the infrastructure side, Robin Candau promoted Hyacinthe to Package Maintainer after two months of package pushes, citing "high-quality contributions and a good understandting of our packaging workflow" [6]. Separately, Sven-Hendrik Haase merged the ratelimit-and-cache-mirrorlist branch, which limits and caches the archweb mirrorlist endpoint [7]. Mirror clients hitting that endpoint should see fewer upstream requests as a result.
Arch Linux's signstar tooling got a stack of fixes. Coverage reporting from containerized tests used to keep only the last run's files because the workspace was cleaned each time; it now accumulates and combines reports across targets [9], with a new `clean_coverage_workspace` variable that lets you opt out of the cleanup [10]. The `send` subcommand of `signstar-request-signature` now always requires the `user` argument [12], and the Rust `russh` dependency moved to v0.63.3 [11]. A stale Threat Dragon link was also corrected [8].
Elsewhere, telegram-desktop moved from extra-testing-x86_64 to extra-x86_64 [3], which means it is now available to users tracking the stable extra repo rather than testing.
Action items
- → Sync extra-testing to pick up python-flask-security-too 5.8.2-1 archlinux/state [monitor]
- → Update signstar invocations of signstar-request-signature send to pass the now-required user argument archlinux/signstar [plan]
- → Refresh signstar just coverage runs; set clean_coverage_workspace=false to accumulate reports archlinux/signstar [plan]
- → Pull telegram-desktop from extra now that it has left extra-testing archlinux/state [monitor]
References
- [1] move python-flask-security-too from extra-staging-any to extra-testing-any ↗ archlinux/state
- [2] update python-flask-security-too to 5.8.2-1 in extra-staging-any ↗ archlinux/state
- [3] move telegram-desktop from extra-testing-x86_64 to extra-x86_64 ↗ archlinux/state
- [4] move python-click from extra-staging-any to extra-testing-any ↗ archlinux/state
- [5] move python-ast-serialize from extra-staging-x86_64 to extra-testing-x86_64 ↗ archlinux/state
- [6] Promote Hyacinthe to Package Maintainer ↗ archlinux/infrastructure
- [7] Merge branch 'ratelimit-and-cache-mirrorlist' into 'main' ↗ archlinux/infrastructure
- [8] fix: Adjust the threat dragon link to a working URL ↗ archlinux/signstar
- [9] fix(just): Accumulate and combine coverage for containerized tests ↗ archlinux/signstar
- [10] feat(just): Allow to not clean the coverage workspace using a variable ↗ archlinux/signstar
- [11] fix(deps): Update Rust crate russh to v0.63.3 ↗ archlinux/signstar
- [12] feat: Always require the `user` argument when running `signstar-request-signature send` ↗ archlinux/signstar
