bump: vgmstream

need

Signed-off-by: Owen-sz <owen@fyralabs.com>

.github/dependabot.yml

@@ -0,0 +1,8 @@
+version: 2
+updates:
+  # Maintain GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5

.github/workflows/autobuild.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Set workspace as safe
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
       - name: Generate build matrix
@@ -51,7 +51,7 @@ jobs:
       image: ghcr.io/terrapkg/appstream-generator:main
     steps:
       - name: Download artifacts
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           merge-multiple: true
           path: ./artifacts

.github/workflows/bootstrap.yml

@@ -21,7 +21,7 @@ jobs:
           dnf5 swap -y --setopt=install_weak_deps=False systemd-standalone-sysusers systemd
           dnf5 install -y --setopt=install_weak_deps=False curl wget git-core openssl-devel cargo podman fuse-overlayfs dnf5-plugins rpmbuild script
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: f${{ matrix.version }}
           fetch-depth: 1

.github/workflows/build.yml

@@ -29,7 +29,7 @@ jobs:
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
       - name: Setup Git

.github/workflows/json-build.yml

@@ -48,7 +48,7 @@ jobs:
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
@@ -58,7 +58,7 @@ jobs:
       - name: Configure sccache
         id: sccache
         if: ${{ !contains(matrix.pkg.labels.sccache, '0') }}
-        uses: actions/github-script@v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         env:
           SCCACHE_GHA_VERSION: ${{ matrix.version }}-${{ matrix.pkg.arch }}-${{ matrix.pkg.pkg }}
           SCCACHE_GHA_CACHE_FROM: ${{ matrix.version }}-${{ matrix.pkg.arch }}-${{ matrix.pkg.pkg }}
@@ -86,7 +86,7 @@ jobs:
 
       - name: Report Cache Summary
         if: steps.sccache.outcome == 'success'
-        uses: actions/github-script@v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             const script = require('./.github/scripts/sccache-stats.js')
@@ -99,7 +99,7 @@ jobs:
           x=${NAME//\//@}
           echo "name=$x" >> $GITHUB_OUTPUT
 
-      - uses: actions/upload-artifact@v7
+      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: ${{ steps.art.outputs.name }}
           compression-level: 0 # The RPMs are already compressed :p

.github/workflows/scorecard.yml

@@ -73,6 +73,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v4
+        uses: github/codeql-action/upload-sarif@38697555549f1db7851b81482ff19f1fa5c4fedc # v4
         with:
           sarif_file: results.sarif

.github/workflows/sync.yml

@@ -1,13 +1,15 @@
 name: Automatic backport/sync action
 permissions:
-  contents: write
+  contents: read
-  pull-requests: write
 on:
   pull_request_target:
     types: ["labeled", "closed"]
 
 jobs:
   backport:
+    permissions:
+      contents: write
+      pull-requests: write
     name: Backport/sync PR
     runs-on: ubuntu-22.04
     if: github.event.pull_request.merged

.github/workflows/update-branch.yml

@@ -1,6 +1,6 @@
 name: Update per branch
 permissions:
-  contents: write
+  contents: read
 on:
   schedule:
     - cron: "*/30 * * * *"
@@ -8,6 +8,8 @@ on:
 
 jobs:
   autoupdate:
+    permissions:
+      contents: write
     runs-on: ubuntu-24.04-arm
     strategy:
       matrix:
@@ -22,7 +24,7 @@ jobs:
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: ${{ matrix.branch }}
           fetch-depth: 0

.github/workflows/update-comps.yml

@@ -20,7 +20,7 @@ jobs:
     container:
       image: ghcr.io/terrapkg/builder:frawhide
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Push to subatomic
         run: |
           branch=${{ github.ref_name }}

.github/workflows/update-nightly.yml

@@ -1,6 +1,6 @@
 name: Nightly Update
 permissions:
-  contents: write
+  contents: read
 on:
   schedule:
     - cron: "0 0 * * *"
@@ -8,13 +8,15 @@ on:
 
 jobs:
   autoupdate:
+    permissions:
+      contents: write
     runs-on: ubuntu-24.04-arm
     container:
       image: ghcr.io/terrapkg/builder:frawhide
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
           ssh-key: ${{ secrets.SSH_AUTHENTICATION_KEY }}

.github/workflows/update-weekly.yml

@@ -1,6 +1,6 @@
 name: Weekly Update
 permissions:
-  contents: write
+  contents: read
 on:
   schedule:
     - cron: "0 0 * * *"
@@ -8,13 +8,15 @@ on:
 
 jobs:
   autoupdate:
+    permissions:
+      contents: write
     runs-on: ubuntu-24.04-arm
     container:
       image: ghcr.io/terrapkg/builder:frawhide
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
           ssh-key: ${{ secrets.SSH_AUTHENTICATION_KEY }}

.github/workflows/update.yml

@@ -1,6 +1,6 @@
 name: Update
 permissions:
-  contents: write
+  contents: read
 on:
   schedule:
     - cron: "*/10 * * * *"
@@ -8,13 +8,15 @@ on:
 
 jobs:
   autoupdate:
+    permissions:
+      contents: write
     runs-on: ubuntu-24.04-arm
     container:
       image: ghcr.io/terrapkg/builder:frawhide
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
           ssh-key: ${{ secrets.SSH_AUTHENTICATION_KEY }}

README.md

@@ -1,6 +1,8 @@
 # Terra Sources
 
 [![Repository status](https://repology.org/badge/repository-big/terra_rawhide.svg?header=Terra+Rawhide)](https://repology.org/repository/terra_rawhide)
+[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/terrapkg/packages/badge)](https://scorecard.dev/viewer/?uri=github.com/terrapkg/packages) 
+
 
 Terra is a rolling-release Fedora repository for all the software you need.
 With Terra, you can install the latest packages knowing that quality and security are assured.

anda/apps/chdig/chdig.spec

@@ -1,8 +1,8 @@
 %undefine __brp_mangle_shebangs
 
 Name:           chdig
-Version:        26.2.3
+Version:        26.3.1
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        Dig into ClickHouse with TUI interface
 URL:            https://github.com/azat/chdig
 Source0:        %url/archive/refs/tags/v%{version}.tar.gz

anda/apps/discord-canary-openasar/discord-canary-openasar.spec

@@ -6,7 +6,7 @@
 %global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
 
 Name:           discord-canary-openasar
-Version:        0.0.924
+Version:        0.0.930
 Release:        1%{?dist}
 Summary:        A snappier Discord rewrite with features like further customization and theming
 License:        MIT AND https://discord.com/terms

anda/apps/discord-canary/discord-canary.spec

@@ -6,7 +6,7 @@
 %global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
 
 Name:           discord-canary
-Version:        0.0.924
+Version:        0.0.930
 Release:        1%{?dist}
 Summary:        Free Voice and Text Chat for Gamers
 URL:            discord.com

anda/apps/discord-ptb-openasar/discord-ptb-openasar.spec

@@ -6,7 +6,7 @@
 %global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
 
 Name:           discord-ptb-openasar
-Version:        0.0.183
+Version:        0.0.184
 Release:        1%{?dist}
 Summary:        A snappier Discord rewrite with features like further customization and theming
 License:        MIT AND https://discord.com/terms

anda/apps/discord-ptb/discord-ptb.spec

@@ -6,7 +6,7 @@
 %global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
 
 Name:           discord-ptb
-Version:        0.0.183
+Version:        0.0.184
 Release:        1%{?dist}
 Summary:        Free Voice and Text Chat for Gamers.
 URL:            https://discord.com

anda/apps/envision/envision.spec

@@ -1,5 +1,5 @@
-%global commit 98004883360d7e69ecbd188987f93200393d7346
+%global commit 2f731053537044b1f72b259bea795473ea0c205a
-%global commit_date 20260322
+%global commit_date 20260324
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 Name:           envision-nightly

anda/apps/flameshot/flameshot-nightly.spec

@@ -1,9 +1,9 @@
 #? https://github.com/flameshot-org/flameshot/blob/master/packaging/rpm/fedora/flameshot.spec
 
 %global ver 13.3.0
-%global commit b26cf40e514b1b08484096d193ef6ae282637759
+%global commit bdb1eda421937f2d28d588255343e895f68438a8
 %global shortcommit %{sub %{commit} 1 7}
-%global commit_date 20260322
+%global commit_date 20260329
 %global devel_name QtColorWidgets
 %global _distro_extra_cflags -fuse-ld=mold
 %global _distro_extra_cxxflags -fuse-ld=mold

anda/apps/helium-browser-bin/helium-browser-bin.spec

@@ -11,7 +11,7 @@
 %endif
 
 Name:           helium-browser-bin
-Version:        0.10.6.1
+Version:        0.10.7.1
 Release:        1%{?dist}
 Summary:        Private, fast, and honest web browser based on Chromium
 

anda/apps/legcord/nightly/legcord-nightly.spec

@@ -1,5 +1,5 @@
-%global commit fbf0c0a6199b5964f1babe47050191180161d56e
+%global commit c7fe14088cc22c3838250cd7837bc1eb20b44194
-%global commit_date 20260323
+%global commit_date 20260328
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 %global debug_package %nil
 %global __strip /bin/true

anda/apps/mpv/mpv-nightly.spec

@@ -1,9 +1,9 @@
 # Disable X11 for RHEL 10+
 %bcond x11 %[%{undefined rhel} || 0%{?rhel} < 10]
 
-%global commit 89febe90c244cb767d37a36efdcf61692e2034b2
+%global commit 4f9f1ffaf375c14058024215423b969f44d48b2f
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global commit_date 20260323
+%global commit_date 20260329
 %global ver 0.41.0
 
 Name:           mpv-nightly

anda/apps/proton-vpn/proton-vpn.spec

@@ -1,11 +1,14 @@
+%global metainfo_commit eddfed5f7e2cd6f097cd11ad1bc8773c22a418a1
+
 Name:			proton-vpn-gtk-app
 Version:		4.15.1
-Release:		1%{?dist}
+Release:		2%{?dist}
 Summary:		Official ProtonVPN Linux app
 License:		GPL-3.0-only
 URL:			https://protonvpn.com/download-linux
 Source0:		https://github.com/ProtonVPN/proton-vpn-gtk-app/archive/refs/tags/v%version.tar.gz
-Source1:        https://github.com/flathub/com.protonvpn.www/blob/master/com.protonvpn.www.metainfo.xml
+# So cursed but makes our lives easier
+Source1:        https://github.com/flathub/com.protonvpn.www/archive/%{metainfo_commit}/com.protonvpn.www-%{metainfo_commit}.tar.gz
 BuildArch:      noarch
 
 BuildRequires:  python3-devel
@@ -42,6 +45,7 @@ with the user signup process handled on the website.
 
 %prep
 %autosetup -n %{name}-%{version}
+tar -xvf %{SOURCE1}
 
 %build
 %pyproject_wheel
@@ -50,18 +54,25 @@ with the user signup process handled on the website.
 %pyproject_install
 %pyproject_save_files proton
 install -Dm644 rpmbuild/SOURCES/proton-vpn-logo.svg %{buildroot}%{_scalableiconsdir}/proton-vpn-logo.svg
-install -Dm644 %{SOURCE1} %{buildroot}%{_metainfodir}/com.protonvpn.www.metainfo.xml
+install -Dm644 com.protonvpn.www-%{metainfo_commit}/com.protonvpn.www.metainfo.xml %{buildroot}%{_metainfodir}/com.protonvpn.www.metainfo.xml
-# Match metainfo
+install -Dm644 rpmbuild/SOURCES/proton.vpn.app.gtk.desktop %{buildroot}%{_appsdir}/proton.vpn.app.gtk.desktop
-install -Dm644 rpmbuild/SOURCES/proton.vpn.app.gtk.desktop %{buildroot}%{_appsdir}/com.protonvpn.www.desktop
+
+# We pull in a metainfo file that often changes upstream, that calls the .desktop file what we are symlinking it to.
+# If we install the .desktop file with the new name, the icon does not show properly on KDE Plasma.
+%{__ln_s} -f %{_appsdir}/proton.vpn.app.gtk.desktop %{buildroot}%{_appsdir}/com.protonvpn.www.desktop
 
 %files -f %{pyproject_files}
 %doc README.md CONTRIBUTING.md CODEOWNERS
 %license LICENSE COPYING.md
 %{_bindir}/protonvpn-app
+%{_appsdir}/proton.vpn.app.gtk.desktop
 %{_appsdir}/com.protonvpn.www.desktop
 %{_scalableiconsdir}/proton-vpn-logo.svg
 %{_metainfodir}/com.protonvpn.www.metainfo.xml
 
 %changelog
+* Wed Mar 25 2026 Owen Zimmerman <owen@fyralabs.com>
+- Fix metainfo and .desktop file
+
 * Sat Jan 17 2026 Owen Zimmerman <owen@fyralabs.com>
 - Initial commit

anda/apps/proton-vpn/update.rhai

@@ -1 +1,3 @@
 rpm.version(gh_tag("ProtonVPN/proton-vpn-gtk-app"));
+
+rpm.global("metainfo_commit", gh_commit("flathub/com.protonvpn.www"));

anda/apps/protontricks/protontricks.spec

@@ -2,8 +2,8 @@
 %global pypi_name protontricks
 
 Name:       terra-%{pypi_name}
-Version:    1.14.0
+Version:    1.14.1
-Release:    1%?dist
+Release:    1%{?dist}
 Summary:    Simple wrapper that does winetricks things for Proton enabled games
 BuildArch:  noarch
 

anda/apps/rasputin/rasputin.spec

@@ -1,10 +1,10 @@
-%global commit 605d9dd8c825b650deeaa614e1b83e8dbb41e87d
+%global commit b8a8e25fdc8a9f7c479535144ca8f99a31aa299f
-%global commit_date 20260128
+%global commit_date 20260325
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 Name:           rasputin
 Version:        0~%commit_date.git~%shortcommit
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        Mouse and keyboard settings for Raspberry Pi Desktop
 License:        BSD-3-Clause
 URL:            https://github.com/raspberrypi-ui/rasputin

anda/apps/rp-appset/rp-appset.spec

@@ -1,10 +1,10 @@
-%global commit 605d9dd8c825b650deeaa614e1b83e8dbb41e87d
+%global commit b8a8e25fdc8a9f7c479535144ca8f99a31aa299f
-%global commit_date 20260128
+%global commit_date 20260325
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 Name:           appset
 Version:        0~%commit_date.git~%shortcommit
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        Application for customisation of appearance of Raspberry Pi Desktop
 License:        BSD-3-Clause
 URL:            https://github.com/raspberrypi-ui/appset

anda/apps/ruffle/ruffle-nightly.spec

@@ -1,4 +1,4 @@
-%global ver 2026-03-24
+%global ver 2026-03-29
 %global goodver %(echo %ver | sed 's/-//g')
 %global __brp_mangle_shebangs %{nil}
 %bcond_without mold

anda/apps/signal-desktop/fix-runtime.patch

@@ -0,0 +1,11 @@
+--- a/package.json	2026-03-23 09:45:41.545576312 +0100
++++ b/package.json	2026-03-23 09:46:51.714180613 +0100
+@@ -424,7 +424,7 @@
+     ]
+   },
+   "engines": {
+-    "node": "24.14.0"
++    "node": ">= 22"
+   },
+   "build": {
+     "appId": "org.whispersystems.signal-desktop",

anda/apps/signal-desktop/signal-desktop.spec

@@ -2,13 +2,14 @@
 
 Name:			signal-desktop
 %electronmeta -aD
-Version:		8.3.0
+Version:		8.4.1
 Release:		1%{?dist}
 Summary:		A private messenger for Windows, macOS, and Linux
 URL:			https://signal.org
 Source0:		https://github.com/signalapp/Signal-Desktop/archive/refs/tags/v%{version}.tar.gz
 Source1:		signal.desktop
 Source2:        org.signal.Signal.metainfo.xml
+Patch0:      fix-runtime.patch
 License:		AGPL-3.0-only AND %{electron_license}
 
 BuildRequires:	pulseaudio-libs-devel
@@ -18,7 +19,7 @@ BuildRequires:  anda-srpm-macros
 BuildRequires:	pnpm
 BuildRequires:  python3
 BuildRequires:  terra-appstream-helper
-BuildRequires:  nodejs-full-i18n
+BuildRequires:  libxcrypt-compat
 
 Requires:		libwayland-cursor
 Requires:		libwayland-client
@@ -56,16 +57,20 @@ Signal Desktop links with Signal on Android or iOS and lets you message from you
 
 %prep
 %autosetup -n Signal-Desktop-%{version}
+sed -i 's/--config.directories.output=release//g' package.json
 
 %build
 export SIGNAL_ENV=production
+export SOURCE_DATE_EPOCH="$(date +"%s")"
 %{__pnpm} install --frozen-lockfile
 %{__pnpm} run clean-transpile
 pushd sticker-creator
 %{__pnpm} install --frozen-lockfile
 %{__pnpm} run build
 popd
-%pnpm_build -r generate,prepare-beta-build
+%dnl %pnpm_build -r generate,build:policy-files,generate,build:esbuild:prod
+%{__pnpm} run generate
+%{__pnpm} run build-linux
 
 %install
 %electron_install -i signal -l -I build/icons/png

anda/apps/signal-desktop/signal.desktop

@@ -1,6 +1,6 @@
 [Desktop Entry]
 Name=Signal
-Exec=signal-desktop %U
+Exec=signal-desktop --use-tray-icon %U
 Terminal=false
 Type=Application
 Icon=signal
@@ -8,6 +8,3 @@ StartupWMClass=Signal
 Comment=Private messaging from your desktop
 MimeType=x-scheme-handler/sgnl;x-scheme-handler/signalcaptcha;
 Categories=Network;InstantMessaging;Chat;
-X-Desktop-File-Install-Version=0.27
-X-Purism-FormFactor=Workstation;Mobile;
-X-Flatpak-RenamedFrom=signal-desktop.desktop;

anda/apps/throne/Sagernet.SingBox.Version.txt

@@ -1 +1 @@
-v1.13.33
+v1.13.43

anda/desktops/driftwm/driftwm.spec

@@ -1,5 +1,5 @@
 Name:           driftwm
-Version:        0.1.1
+Version:        0.1.2
 Release:        1%{?dist}
 Summary:        A trackpad-first infinite canvas Wayland compositor
 License:        GPL-3.0-or-later

anda/desktops/gnome/gnome-shell-extension-multi-monitors-bar/gnome-shell-extension-multi-monitors-bar.spec

@@ -1,5 +1,5 @@
-%global commit 911134bb3a8c7153095dc9d3b53af6a097a9d719
+%global commit 376fe37ca7e6b8535fa7de1629cdca5d311cef88
-%global commit_date 20260306
+%global commit_date 20260328
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %global extension   multi-monitors-bar

anda/desktops/hyprland/hyprutils/hyprutils.nightly.spec

@@ -3,8 +3,8 @@
 %global realname hyprutils
 %global ver 0.11.1
 
-%global commit cb4e152dc72095a2af422956c6b689590572231a
+%global commit 762166b516432ce4b02bfbae365f1daa6f88f76d
-%global commit_date 20260323
+%global commit_date 20260327
 %global shortcommit %{sub %commit 1 7}
 
 Name:           %realname.nightly

anda/desktops/lomiri-unity/lomiri-ui-toolkit/lomiri-ui-toolkit.spec

@@ -1,10 +1,10 @@
 %global forgeurl https://gitlab.com/ubports/development/core/lomiri-ui-toolkit
-%global commit 77935cd890e5d04ac91e1c53e80ab4c39bad8fe7
+%global commit 1b9919232ef77285765b6fdf3c963039f8a2e462
 %forgemeta
 
 Name:           lomiri-ui-toolkit
-Version:        1.3.5903
+Version:        1.3.5904
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        QML components to ease the creation of beautiful applications in QML for Lomiri
 
 License:        LGPL-3.0

anda/desktops/mangowm/mangowm.spec

@@ -1,7 +1,7 @@
 %global mangowc_ver 0.12.5-1
 
 Name:           mangowm
-Version:        0.12.7
+Version:        0.12.8
 Release:        1%{?dist}
 Summary:        A modern, lightweight, high-performance Wayland compositor built on dwl
 License:        GPL-3.0-or-later AND MIT AND X11 AND CC0-1.0

anda/desktops/noctalia-qs/noctalia-qs.spec

@@ -2,7 +2,7 @@
 
 Name:	       noctalia-qs
 Version:       0.0.10
-Release:       1%{?dist}
+Release:       2%{?dist}
 Summary:       Flexible QtQuick based desktop shell toolkit
 License:       LGPL-3.0-only AND GPL-3.0-only
 URL:	       https://github.com/noctalia-dev/noctalia-qs
@@ -38,6 +38,9 @@ BuildRequires: polkit-devel
 Conflicts:    quickshell
 Provides:     quickshell
 
+Provides:     desktop-notification-daemon
+Provides:     PolicyKit-authentication-agent
+
 %description
 Flexible QtQuick based desktop shell toolkit.
 
@@ -70,6 +73,9 @@ Flexible QtQuick based desktop shell toolkit.
 %{_libdir}/qt6/qml/Quickshell
 
 %changelog
+* Sun Mar 29 2026 Willow C Reed <terra@willowidk.dev>
+- Add provides for a polkit agent and desktop notification daemon (so gnome doesn't get installed)
+
 * Thu Mar 05 2026 Willow C Reed <terra@willowidk.dev>
 - Fix reision to actually be defined as a specific git commit since it never gets initialized rn
 - Also fix that noctalia-qs is replacing quickshell overall and not just for noctlaia users

anda/devs/android-studio/canary/android-studio-canary.spec

@@ -16,7 +16,7 @@
 %global __requires_exclude ^libaaudio\\.so.*|^libandroid\\.so.*|^libmediandk\\.so.*|^liblog\\.so.*|^libc\\.so.*|^libm\\.so.*|^libdl\\.so.*|^libcrypt\\.so.*|^libstdc\\+\\+\\.so.*|^libncursesw\\.so.*|^libtinfo\\.so.*|^libnsl\\.so.*|^libpanelw\\.so.*$
 
 Name:           android-studio-canary
-Version:        2025.3.4.1
+Version:        2025.3.4.2
 Release:        1%{?dist}
 Summary:        Official IDE for Android development (Canary build)
 License:        Apache-2.0
@@ -24,7 +24,7 @@ Packager:       veuxit <erroor234@gmail.com>
 ExclusiveArch:  x86_64
 URL:            https://developer.android.com/studio/preview
 
-%define suffixS panda4-canary1
+%define suffixS panda4-canary2
 
 Source0:        https://dl.google.com/dl/android/studio/ide-zips/%{version}/android-studio-%{suffixS}-linux.tar.gz
 

anda/devs/asar/asar.spec

@@ -7,8 +7,8 @@
 %global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
 
 Name:           asar
-Version:        4.1.0
+Version:        4.1.2
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        Simple extensive tar-like archive format with indexing
 License:        MIT
 URL:            https://github.com/electron/asar

anda/devs/deno/rust-deno.spec

@@ -6,7 +6,7 @@
 %global crate deno
 
 Name:           rust-deno
-Version:        2.7.7
+Version:        2.7.9
 Release:        1%{?dist}
 Summary:        Deno executable
 

anda/devs/flutter/flutter.spec

@@ -1,5 +1,5 @@
 Name:			flutter
-Version:		3.41.5
+Version:		3.41.6
 Release:		1%{?dist}
 Summary:		SDK for crafting beautiful, fast user experiences from a single codebase
 License:		BSD-3-Clause

anda/devs/ghostty/nightly/ghostty-nightly.spec

@@ -1,6 +1,6 @@
-%global commit 1d54a94cedd4405584d2dcdde948262a33110018
+%global commit debcffbadb75221a030319c075fae12cfe114176
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global fulldate 2026-03-22
+%global fulldate 2026-03-29
 %global commit_date %(echo %{fulldate} | sed 's/-//g')
 %global public_key RWQlAjJC23149WL2sEpT/l0QKy7hMIFhYdQOFy0Z7z7PbneUgvlsnYcV
 %global ver 1.3.2

anda/devs/micro/micro-nightly.spec

@@ -12,8 +12,8 @@
 
 # Naming variable as something other than "commit" is necessary
 # to stop %%gometa from putting commit hash in release
-%global commit_hash d976b3f170aac3823d8b62e0f9ad7e07b273b1f2
+%global commit_hash 4d04ad7290c3200c140732b2a1ed11924cc68cf8
-%global commit_date 20260323
+%global commit_date 20260329
 %global shortcommit %{sub %{commit_hash} 1 7}
 %global ver 2.0.15
 

anda/devs/zed/nightly/zed-nightly.spec

@@ -1,7 +1,7 @@
-%global commit fb1a98cfeffd1413661416ac35f84ea5d3eca7c4
+%global commit 6694a3bd14bba5d52c375cc4c3ce9681445cbc22
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global commit_date 20260323
+%global commit_date 20260329
-%global ver 0.230.0
+%global ver 0.231.0
 
 %bcond_with check
 %bcond_with debug_no_build

anda/devs/zed/preview/zed-preview.spec

@@ -5,7 +5,7 @@
 %global debug_package %{nil}
 %endif
 
-%global ver 0.229.0-pre
+%global ver 0.230.0-pre
 # Exclude input files from mangling
 %global __brp_mangle_shebangs_exclude_from ^/usr/src/.*$
 

anda/devs/zed/stable/zed.spec

@@ -15,7 +15,7 @@
 %global rustflags_debuginfo 0
 
 Name:           zed
-Version:        0.228.0
+Version:        0.229.0
 Release:        1%{?dist}
 Summary:        Zed is a high-performance, multiplayer code editor
 SourceLicense:  AGPL-3.0-only AND Apache-2.0 AND GPL-3.0-or-later

anda/fonts/iosevka/iosevka-fonts.spec

@@ -52,8 +52,8 @@
 %global fontdescription   %{expand:
 Versatile typeface for code, from code.}
 
-Version:		34.2.1
+Version:		34.3.0
-Release:		1%?dist
+Release:		1%{?dist}
 Packager:       Cappy Ishihara <cappy@fyralabs.com>
 Summary:		Versatile typeface for code, from code.
 BuildRequires:  rpm_macro(fontpkg)

anda/fonts/sarasa-gothic/sarasa-gothic-fonts.spec

@@ -1,6 +1,6 @@
 Name:		sarasa-gothic-fonts
-Version:	1.0.36
+Version:	1.0.37
-Release:	1%?dist
+Release:	1%{?dist}
 URL:		https://github.com/be5invis/Sarasa-Gothic
 Source0:	%url/releases/download/v%version/Sarasa-TTC-%version.7z
 Source1:	%url/releases/download/v%version/Sarasa-SuperTTC-%version.7z

anda/games/gamescope-session-ogui-steam/gamescope-session-ogui-steam.spec

@@ -1,12 +1,12 @@
 %define debug_package %nil
 
-%global commit 6835776876a2b9e5fc819bd8d98f06ae51fa6394
+%global commit fbdc7682f39088b4fe480a9285808ca81b3f9d03
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global commit_date 20231030
+%global commit_date 20260325
 
 Name:           gamescope-session-ogui-steam
 Version:        0~%{commit_date}git.%{shortcommit}
-Release:        2%?dist
+Release:        1%?dist
 Summary:        gamescope-session-steam
 License:        GPL-3.0-only
 URL:            https://github.com/OpenGamingCollective/gamescope-session-ogui-steam
@@ -25,14 +25,16 @@ Gamescope Session for OpenGamepadUI in overlay mode with Steam
 %build
 
 %install
-install -Dpm0755 -t "%buildroot%_datadir/gamescope-session-plus/sessions.d/" ".%_datadir/gamescope-session-plus/sessions.d/steam-plus"
+install -Dpm0755 -t "%buildroot%_datadir/gamescope-session-plus/sessions.d/" ".%_datadir/gamescope-session-plus/sessions.d/ogui-steam"
+install -Dpm0644 -t "%buildroot%_datadir/wayland-sessions/" ".%_datadir/wayland-sessions/gamescope-session-ogui-steam.desktop"
 install -Dpm0644 -t "%buildroot%_datadir/wayland-sessions/" ".%_datadir/wayland-sessions/gamescope-session-steam-plus.desktop"
 install -Dpm0644 -t "%buildroot%_datadir/wayland-sessions/" ".%_datadir/wayland-sessions/gamepadui-with-qam-session.desktop"
 
 %files
 %doc README.md
 %license LICENSE
-%{_datadir}/gamescope-session-plus/sessions.d/steam-plus
+%{_datadir}/gamescope-session-plus/sessions.d/ogui-steam
+%{_datadir}/wayland-sessions/gamescope-session-ogui-steam.desktop
 %{_datadir}/wayland-sessions/gamescope-session-steam-plus.desktop
 %{_datadir}/wayland-sessions/gamepadui-with-qam-session.desktop
 

anda/games/gamescope-session-opengamepadui/gamescope-session-opengamepadui.spec

@@ -1,6 +1,6 @@
-%global commit d9412bf01f3ffbe55e15f34445fe4c682fde5ede
+%global commit 72df08d154fefb6354f6bb1a8d8cf587e86ee227
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global commit_date 20260320
+%global commit_date 20260327
 
 Name:           gamescope-session-opengamepadui
 Version:        0~%{commit_date}git.%{shortcommit}

anda/games/gamescope-session-steam/gamescope-session-steam.spec

@@ -1,12 +1,12 @@
 %define debug_package %nil
 
-%global commit d9412bf01f3ffbe55e15f34445fe4c682fde5ede
+%global commit 72df08d154fefb6354f6bb1a8d8cf587e86ee227
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global commit_date 20260314
+%global commit_date 20260325
 
 Name:           gamescope-session-steam
 Version:        0~%{commit_date}git.%{shortcommit}
-Release:        2%{?dist}
+Release:        1%{?dist}
 Summary:        gamescope-session-steam
 License:        MIT
 URL:            https://github.com/OpenGamingCollective/gamescope-session-steam

anda/games/gamescope-session/gamescope-session.spec

@@ -6,7 +6,7 @@
 
 Name:           gamescope-session
 Version:        0~%{commit_date}git.%{shortcommit}
-Release:        2%?dist
+Release:        3%?dist
 Summary:        Gamescope session based on Valve's gamescope
 License:        MIT
 URL:            https://github.com/OpenGamingCollective/gamescope-session
@@ -31,7 +31,7 @@ install -Dpm0755 -t "%buildroot%_bindir/" ".%_bindir/gamescope-session-plus"
 install -Dpm0644 -t "%buildroot%_userunitdir/" ".%_userunitdir/gamescope-session-plus@.service"
 install -Dpm0644 -t "%buildroot%_userunitdir/" ".%_userunitdir/gamescope-session.target"
 install -Dpm0644 -t "%buildroot%_datadir/gamescope-session-plus/" ".%_datadir/gamescope-session-plus/device-quirks"
-install -Dpm0644 -t "%buildroot%_datadir/gamescope-session-plus/" ".%_datadir/gamescope-session-plus/gamescope-session-plus"
+install -Dpm0755 -t "%buildroot%_datadir/gamescope-session-plus/" ".%_datadir/gamescope-session-plus/gamescope-session-plus"
 install -Dpm0644 -t "%buildroot%_datadir/gamescope/scripts/50-custom/50-disable-explicit-sync.lua" ".%_datadir/gamescope/scripts/50-custom/50-disable-explicit-sync.lua"
 
 %files

anda/games/opengamepadui/opengamepadui.spec

@@ -1,6 +1,6 @@
 Name:           opengamepadui
-Version:        0.44.3
+Version:        0.45.0
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        Open source gamepad-native game launcher and overlay
 
 License:        GPLv3

anda/games/prismlauncher-nightly/prismlauncher-nightly.spec

@@ -3,10 +3,10 @@
 %global name_pretty %{quote:Prism Launcher (Nightly)}
 %global appid org.prismlauncher.PrismLauncher-nightly
 
-%global commit 09823dbb4a31bcf5449560d8d54b81bd3692f16a
+%global commit 01a4a6a528765b4302ff9e17ed8c247f4b5f90a1
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
-%global commit_date 20260323
+%global commit_date 20260329
 %global snapshot_info %{commit_date}.%{shortcommit}
 
 # Change this variables if you want to use custom keys

anda/games/rpcs3/rpcs3.spec

@@ -9,8 +9,8 @@
 # GLIBCXX_ASSERTIONS is known to break RPCS3
 %global build_cflags %(echo "%{__build_flags_lang_c}" | sed 's|-Wp,-D_GLIBCXX_ASSERTIONS ||g') %{?_distro_extra_cflags}
 %global build_cxxflags %(echo "%{__build_flags_lang_cxx}" | sed 's|-Wp,-D_GLIBCXX_ASSERTIONS ||g') %{?_distro_extra_cflags}
-%global commit 2bcc27d581875025610f6f0ad4b34053cd5a470b
+%global commit aa7cf5ea153ececef87d0dc0982522ea690b281e
-%global ver 0.0.40-19089
+%global ver 0.0.40-19125
 
 Name:           rpcs3
 Version:        %(echo %{ver} | sed 's/-/^/g')

anda/games/steamos-manager-powerstation/steamos-manager-powerstation.spec

@@ -1,28 +1,35 @@
-%global commit 8b5bb14a7a2c6e5dd86f13efce6bc242639265ef
+%global commit 7b4d0f49351a60d1f93d48f081b4c0e35e10fa6d
 %global shortcommit %{sub %{commit} 0 7}
-%global commitdate 20260319
+%global commitdate 20260325
 
-Name:           steamos-manager-powerstation
+Name:             steamos-manager-powerstation
-Version:        0~%{commitdate}.git%{shortcommit}
+Version:          0~%{commitdate}.git%{shortcommit}
-Release:        1%{?dist}
+Release:          3%{?dist}
-Summary:        SteamOS Manager is a system daemon that aims to abstract Steam's interactions with the operating system
+Summary:          SteamOS Manager is a system daemon that aims to abstract Steam's interactions with the operating system
-License:        MIT AND (MIT OR Apache-2.0) AND Unicode-3.0 AND (Apache-2.0 OR BSL-1.0) AND Apache-2.0 OR MIT AND )Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-3-Clause OR MIT OR Apache-2.0) AND ISC AND (LGPL-2.1 OR MIT OR Apache-2.0) AND MIT AND (MIT OR Apache-2.0) AND (MIT OR Apache-2.0 OR LGPL-2.1-or-later) AND (Unlicense OR MIT) AND (Zlib OR Apache-2.0 OR MIT)
+License:          MIT AND (MIT OR Apache-2.0) AND Unicode-3.0 AND (Apache-2.0 OR BSL-1.0) AND Apache-2.0 OR MIT AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-3-Clause OR MIT OR Apache-2.0) AND ISC AND (LGPL-2.1 OR MIT OR Apache-2.0) AND MIT AND (MIT OR Apache-2.0) AND (MIT OR Apache-2.0 OR LGPL-2.1-or-later) AND (Unlicense OR MIT) AND (Zlib OR Apache-2.0 OR MIT)
-URL:            https://github.com/OpenGamingCollective/steamos-manager
+URL:              https://github.com/OpenGamingCollective/steamos-manager
-Source0:        %{url}/archive/%{commit}.tar.gz
+Source0:          %{url}/archive/%{commit}.tar.gz
-BuildRequires:  anda-srpm-macros
+Source1:          steamos_manager.te
-BuildRequires:  cargo-rpm-macros
+Source2:          steamos_manager.if
-BuildRequires:  clang-devel
+Source3:          steamos_manager.fc
-BuildRequires:  rust
+BuildRequires:    anda-srpm-macros
-BuildRequires:  mold
+BuildRequires:    cargo-rpm-macros
-BuildRequires:  glib2-devel
+BuildRequires:    clang-devel
-BuildRequires:  speech-dispatcher-devel
+BuildRequires:    rust
-BuildRequires:  pkgconfig(libudev)
+BuildRequires:    mold
-Packager:       Kyle Gospodnetich <me@kylegospodneti.ch>
+BuildRequires:    glib2-devel
+BuildRequires:    speech-dispatcher-devel
+BuildRequires:    pkgconfig(libudev)
+BuildRequires:    selinux-policy-devel
+Packager:         Kyle Gospodnetich <me@kylegospodneti.ch>
 
-Provides:       steamos-manager
+Provides:         steamos-manager
-Conflicts:      steamos-manager
+Conflicts:        steamos-manager
-Requires:       powerstation
+Requires:         powerstation
-Requires:       gamescope-session-ogui-steam
+Requires:         gamescope-session-ogui-steam
+Requires:         selinux-policy
+Requires(post):   policycoreutils
+Requires(postun): policycoreutils
 
 %description
 SteamOS Manager is a system daemon that aims to abstract Steam's interactions
@@ -41,16 +48,19 @@ Requires:       %{name} = %{evr}
 
 %prep
 %autosetup -n steamos-manager-%{commit}
+install -Dp -m644 -t data/selinux %{SOURCE1} %{SOURCE2} %{SOURCE3}
 %cargo_prep_online
 
 %build
 %cargo_build
+make -f /usr/share/selinux/devel/Makefile -C data/selinux steamos_manager.pp
 
 %install
 %{cargo_license_online -a} > LICENSE.dependencies
 %make_install
 rm %{buildroot}%{_unitdir}/sddm.service.d/reset-oneshot-boot.conf # steamOS specific
 rm %{buildroot}%{_userunitdir}/orca.service # not used by anyone apparently, steamOS specific(?)
+install -D -m644 data/selinux/steamos_manager.pp %{buildroot}%{_datadir}/selinux/packages/steamos_manager.pp
 install -d %{buildroot}%{_userunitdir}/gamescope-session-plus.service.wants/steamos-manager.service
 ln -s %{_userunitdir}/steamos-manager.service %{buildroot}%{_userunitdir}/gamescope-session-plus.service.wants/steamos-manager.service
 
@@ -59,6 +69,8 @@ ln -s %{_userunitdir}/steamos-manager.service %{buildroot}%{_userunitdir}/gamesc
 %systemd_user_post steamos-manager.service
 %systemd_user_post steamos-manager-configure-cecd.service
 %systemd_user_post steamos-manager-session-cleanup.service
+semodule -i %{_datadir}/selinux/packages/steamos_manager.pp 2>/dev/null || :
+restorecon -R /usr/lib/steamos-manager /usr/bin/steamosctl /usr/share/steamos-manager /etc/steamos-manager 2>/dev/null || :
 
 %preun
 %systemd_preun steamos-manager.service
@@ -71,6 +83,9 @@ ln -s %{_userunitdir}/steamos-manager.service %{buildroot}%{_userunitdir}/gamesc
 %systemd_user_postun steamos-manager.service
 %systemd_user_postun steamos-manager-configure-cecd.service
 %systemd_user_postun steamos-manager-session-cleanup.service
+if [ $1 -eq 0 ]; then
+    semodule -r steamos_manager 2>/dev/null || :
+fi
 
 %files
 %license %{_datadir}/licenses/steamos-manager/LICENSE
@@ -89,6 +104,7 @@ ln -s %{_userunitdir}/steamos-manager.service %{buildroot}%{_userunitdir}/gamesc
 %{_userunitdir}/steamos-manager.service
 %{_userunitdir}/steamos-manager-configure-cecd.service
 %{_userunitdir}/steamos-manager-session-cleanup.service
+%{_datadir}/selinux/packages/steamos_manager.pp
 
 %files gamescope-session-plus
 %{_userunitdir}/gamescope-session-plus.service.wants/steamos-manager.service

anda/games/steamos-manager-powerstation/steamos_manager.fc

@@ -0,0 +1,13 @@
+# steamos-manager SELinux file contexts
+
+# Daemon binary
+/usr/lib/steamos-manager		--	gen_context(system_u:object_r:steamos_manager_exec_t,s0)
+
+# CLI tool
+/usr/bin/steamosctl			--	gen_context(system_u:object_r:steamos_manager_exec_t,s0)
+
+# Data directory
+/usr/share/steamos-manager(/.*)?		gen_context(system_u:object_r:steamos_manager_data_t,s0)
+
+# Configuration directory
+/etc/steamos-manager(/.*)?			gen_context(system_u:object_r:steamos_manager_conf_t,s0)

anda/games/steamos-manager-powerstation/steamos_manager.if

@@ -0,0 +1,20 @@
+## <summary>policy for steamos_manager</summary>
+
+########################################
+## <summary>
+##	Execute steamos_manager in the steamos_manager domain.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed to transition.
+##	</summary>
+## </param>
+#
+interface(`steamos_manager_domtrans',`
+	gen_require(`
+		type steamos_manager_t, steamos_manager_exec_t;
+	')
+
+	corecmd_search_bin($1)
+	domtrans_pattern($1, steamos_manager_exec_t, steamos_manager_t)
+')

anda/games/steamos-manager-powerstation/steamos_manager.te

@@ -0,0 +1,194 @@
+policy_module(steamos_manager, 1.0.0)
+
+########################################
+# Init
+########################################
+
+type steamos_manager_t;
+type steamos_manager_exec_t;
+type steamos_manager_data_t;
+type steamos_manager_conf_t;
+
+# Mark as a domain and entry point
+init_daemon_domain(steamos_manager_t, steamos_manager_exec_t)
+
+# Mark data and config as file types
+files_type(steamos_manager_data_t)
+files_config_file(steamos_manager_conf_t)
+
+# Allow systemd to manage the service (start/stop/status)
+init_dbus_chat(steamos_manager_t)
+
+########################################
+# Process permissions
+########################################
+
+# Standard process operations
+allow steamos_manager_t self:process { signal signull getsched setsched };
+
+# Forking for script execution
+allow steamos_manager_t self:fifo_file { read write getattr };
+
+# Notify socket for Type=notify-reload (sd_notify)
+init_dgram_send(steamos_manager_t)
+
+########################################
+# DBus access
+########################################
+
+dbus_system_bus_client(steamos_manager_t)
+dbus_session_bus_client(steamos_manager_t)
+dbus_connect_system_bus(steamos_manager_t)
+dbus_connect_session_bus(steamos_manager_t)
+
+# Own the service name
+allow steamos_manager_t self:dbus { send_msg acquire_svc };
+
+# Talk to systemd
+optional_policy(`
+	systemd_dbus_chat_logind(steamos_manager_t)
+')
+
+########################################
+# Sysfs access (hardware management)
+########################################
+
+# Read/write sysfs for TDP, GPU, backlight, power_supply, CPU scaling,
+# hwmon, firmware-attributes, platform-profile, hidraw, drm, DMI
+dev_read_sysfs(steamos_manager_t)
+dev_rw_sysfs(steamos_manager_t)
+
+########################################
+# Procfs access
+########################################
+
+# Read /proc/cpuinfo
+kernel_read_system_state(steamos_manager_t)
+
+# Read /proc/{pid}/comm, environ, stat, fd/ for display sleep inhibition
+domain_read_all_domains_state(steamos_manager_t)
+
+########################################
+# Tracefs and debugfs
+########################################
+
+# ftrace access: /sys/kernel/tracing/instances/steamos-manager/
+# debugfs access: /sys/kernel/debug/ath11k/
+kernel_read_debugfs(steamos_manager_t)
+kernel_manage_debugfs(steamos_manager_t)
+
+########################################
+# Device access
+########################################
+
+# /dev/uinput — virtual input devices
+optional_policy(`
+	gen_require(`
+		type uinput_device_t;
+	')
+	allow steamos_manager_t uinput_device_t:chr_file { open read write ioctl getattr };
+')
+
+# /dev/hidraw* — DualSense controller inhibitor
+optional_policy(`
+	gen_require(`
+		type hidraw_device_t;
+	')
+	allow steamos_manager_t hidraw_device_t:chr_file { open read write getattr ioctl };
+')
+
+# /dev/input/event* — inputplumber
+dev_rw_input_dev(steamos_manager_t)
+
+# Udev events via netlink socket
+allow steamos_manager_t self:netlink_kobject_uevent_socket { create bind getattr read setopt };
+
+# Watch /dev/ directory via inotify for device creation
+dev_list_all_dev_nodes(steamos_manager_t)
+allow steamos_manager_t device_t:dir { watch };
+
+########################################
+# Configuration & Data Files
+########################################
+
+# Data Files
+allow steamos_manager_t steamos_manager_data_t:dir list_dir_perms;
+allow steamos_manager_t steamos_manager_data_t:file read_file_perms;
+
+# Config files
+allow steamos_manager_t steamos_manager_conf_t:dir list_dir_perms;
+allow steamos_manager_t steamos_manager_conf_t:file read_file_perms;
+
+########################################
+# System configuration writes
+########################################
+
+# /etc/sddm.conf.d/, /etc/NetworkManager/conf.d/
+allow steamos_manager_t etc_t:dir { add_name remove_name write search create };
+allow steamos_manager_t etc_t:file { create write unlink open getattr rename };
+
+# /etc/systemd/system/iwd.service.d/
+optional_policy(`
+	systemd_manage_all_unit_files(steamos_manager_t)
+')
+
+########################################
+# User state and runtime files
+########################################
+
+# XDG_STATE_HOME
+userdom_manage_user_home_content_files(steamos_manager_t)
+userdom_manage_user_home_content_dirs(steamos_manager_t)
+
+# XDG_RUNTIME_DIR
+# XDG_CONFIG_HOME
+userdom_manage_user_tmp_dirs(steamos_manager_t)
+userdom_manage_user_tmp_files(steamos_manager_t)
+
+# /usr/share/wayland-sessions/ and /usr/share/xsessions/
+files_read_usr_files(steamos_manager_t)
+
+# /tmp/
+files_manage_generic_tmp_files(steamos_manager_t)
+files_tmp_filetrans(steamos_manager_t, tmp_t, file)
+
+# /var/lib/steamos-log-submitter/data/
+files_search_var_lib(steamos_manager_t)
+files_manage_var_lib_files(steamos_manager_t)
+files_manage_var_lib_dirs(steamos_manager_t)
+
+########################################
+# External command execution
+########################################
+
+# Execute system binaries
+corecmd_exec_bin(steamos_manager_t)
+corecmd_exec_shell(steamos_manager_t)
+
+# Execute libraries/scripts under /usr/lib/ paths
+libs_exec_lib_files(steamos_manager_t)
+
+########################################
+# Network and IPC
+########################################
+
+# Unix domain sockets for DBus
+allow steamos_manager_t self:unix_stream_socket { create connect read write getattr shutdown };
+allow steamos_manager_t self:unix_dgram_socket { create connect read write getattr sendto };
+
+# Speech-dispatcher and dconf-service connections
+corenet_tcp_connect_all_ports(steamos_manager_t)
+
+########################################
+# Logging
+########################################
+
+logging_send_syslog_msg(steamos_manager_t)
+
+########################################
+# Miscellaneous
+########################################
+
+# Read locale and system state
+miscfiles_read_localization(steamos_manager_t)
+kernel_read_kernel_sysctls(steamos_manager_t)

anda/games/umu/umu-launcher.spec

@@ -1,6 +1,6 @@
 Name:           umu-launcher
-Version:        1.3.0
+Version:        1.4.0
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        A tool for launching non-steam games with proton
 
 License:        GPL-3.0-only

anda/langs/dart/dart.spec

@@ -1,7 +1,7 @@
 %define debug_package %{nil}
 
 Name: dart
-Version: 3.11.3
+Version: 3.11.4
 Release: 1%{?dist}
 Summary: The Dart Language
 License: BSD-3-Clause

anda/langs/go/chezmoi/anda.hcl

@@ -1,5 +0,0 @@
-project pkg {
-	rpm {
-		spec = "chezmoi.spec"
-	}
-}

anda/langs/go/chezmoi/chezmoi.spec

@@ -1,74 +0,0 @@
-# Generated by go2rpm 1.15.0
-%bcond check 0
-%bcond bootstrap 0
-
-# https://github.com/twpayne/chezmoi
-%global goipath         github.com/twpayne/chezmoi
-Version:                2.70.0
-
-%gometa -f
-
-%global common_description %{expand:
-Manage your dotfiles across multiple diverse machines, securely.}
-
-%global golicenses      LICENSE assets/chezmoi.io/docs/license.md\\\
-                        assets/chezmoi.io/docs/reference/commands/license.md
-%global godocs          .markdownlint-cli2.yaml README.md docs\\\
-                        assets/chezmoi.io/snippets/config-format.md\\\
-                        assets/chezmoi.io/snippets/common-flags/exclude.md\\\
-                        assets/chezmoi.io/snippets/common-flags/format.md\\\
-                        assets/chezmoi.io/snippets/common-flags/include.md\\\
-                        assets/chezmoi.io/snippets/common-flags/init.md\\\
-                        assets/chezmoi.io/snippets/common-flags/nul-path-\\\
-                        separator.md assets/chezmoi.io/snippets/common-\\\
-                        flags/parent-dirs.md\\\
-                        assets/chezmoi.io/snippets/common-flags/path-style.md\\\
-                        assets/chezmoi.io/snippets/common-flags/recursive.md\\\
-                        assets/chezmoi.io/snippets/common-flags/tree.md
-
-Name:           chezmoi
-Release:        1%{?dist}
-Summary:        Manage your dotfiles across multiple diverse machines, securely
-
-License:        MIT
-URL:            %{gourl}
-Source:         %{gosource}
-
-%description %{common_description}
-
-#gopkg
-
-%prep
-%goprep
-
-%build
-%define gomodulesmode GO111MODULE=on
-%define __gobuild_extldflags -X main.version=%version -X main.builtBy=%vendor
-go clean -modcache
-rm go.sum
-go mod tidy
-%gobuild -o %{gobuilddir}/bin/chezmoi .
-
-%install
-#gopkginstall
-install -m 0755 -vd                     %{buildroot}%{_bindir}
-install -m 0755 -vp %{gobuilddir}/bin/* %{buildroot}%{_bindir}/
-install -m 0644 -Dvp completions/chezmoi-completion.bash %{buildroot}%{bash_completions_dir}/chezmoi
-install -m 0644 -Dvp completions/chezmoi.fish -t %{buildroot}%{fish_completions_dir}/
-install -m 0644 -Dvp completions/chezmoi.zsh %{buildroot}%{zsh_completions_dir}/_chezmoi
-
-%if %{without bootstrap}
-%if %{with check}
-%check
-%gocheck
-%endif
-%endif
-
-%files
-%license LICENSE
-%doc README.md
-%{_bindir}/chezmoi
-
-%pkg_completion -Bfz
-
-#gopkgfiles

anda/langs/go/chezmoi/update.rhai

@@ -1 +0,0 @@
-rpm.version(`<p>The latest version of chezmoi is ([\d.]+)`.find(get("https://www.chezmoi.io"), 1));

anda/langs/go/elephant/golang-github-abenz1267-elephant.spec

@@ -14,7 +14,7 @@
 
 # https://github.com/abenz1267/elephant
 %global goipath         github.com/abenz1267/elephant
-Version:                2.20.2
+Version:                2.20.3
 
 %gometa -f
 
@@ -26,7 +26,7 @@ Elephant - cuz it's phat - is a powerful data provider service and backend for b
 %global godocs          README.md
 
 Name:           elephant
-Release:        2%{?dist}
+Release:        1%{?dist}
 Summary:        Data provider service and backend for building custom application launchers & desktop utilities
 
 License:        GPL-3.0-only

anda/langs/go/gh-act/gh-act.spec

@@ -12,7 +12,7 @@
 
 # https://github.com/nektos/act
 %global goipath         github.com/nektos/act
-Version:                0.2.85
+Version:                0.2.86
 
 %gometa -f
 

anda/langs/go/v2ray/nightly/v2ray-nightly.spec

@@ -1,7 +1,7 @@
-%global commit  2e97de9b4f26e7b20bb0c9401b0e53f0bc79c30d
+%global commit  cf7577f650f97226d34a4e7ab6e30b765a15677a
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 %global ver v5.47.0
-%global commit_date 20260318
+%global commit_date 20260327
 
 %global goipath         github.com/v2fly/v2ray-core
 Version:                %{ver}^%{commit_date}git.%{shortcommit}

anda/langs/go/v2ray/stable/v2ray.spec

@@ -1,5 +1,5 @@
 %global goipath         github.com/v2fly/v2ray-core
-Version:                5.47.0
+Version:                5.48.0
 
 %global golicenses      LICENSE
 %global godocs          README.md SECURITY.md 

anda/langs/go/xray/nightly/xray-nightly.spec

@@ -1,7 +1,7 @@
-%global commit  f926ee4aa0aafe905d96a294e747836897d80d6f
+%global commit  d2758a023cd7f4174a5a5fa4ff66e487d4342ba0
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global ver v26.2.6
+%global ver v26.3.27
-%global commit_date 20260323
+%global commit_date 20260328
 
 %global goipath         github.com/XTLS/Xray-core
 Version:                %{ver}^%{commit_date}git.%{shortcommit}

anda/langs/go/xray/stable/xray.spec

@@ -1,7 +1,7 @@
 # Disabled because compiled without debug
 
 %global goipath         github.com/XTLS/Xray-core
-Version:                26.3.23
+Version:                26.3.27
 
 %global golicenses      LICENSE
 %global godocs          README.md SECURITY.md CODE_OF_CONDUCT.md

anda/langs/groovy/groovy-docs/groovy-docs.spec

@@ -1,6 +1,6 @@
 Name:		groovy-docs
-Version:	5.0.4
+Version:	5.0.5
-Release:	1%?dist
+Release:	1%{?dist}
 Summary:	Documentation for the Groovy programming language
 URL:		https://groovy-lang.org/
 License:	Apache-2.0

anda/langs/groovy/groovy.spec

@@ -1,6 +1,6 @@
 Name:			groovy
-Version:		5.0.4
+Version:		5.0.5
-Release:		1%?dist
+Release:		1%{?dist}
 Summary:		A multi-faceted language for the Java platform
 BuildArch:		noarch
 URL:			https://groovy-lang.org/

anda/langs/nim/nim-nightly/nim-nightly.spec

@@ -1,8 +1,8 @@
 %global csrc_commit 561b417c65791cd8356b5f73620914ceff845d10
-%global commit a4a482b5ef6d1a48f28b42e778770c1001f8293a
+%global commit 78282b241f16c66e40782775ee1d4c16b8af8d6f
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 %global ver 2.3.1
-%global commit_date 20260321
+%global commit_date 20260329
 %global debug_package %nil
 
 Name:			nim-nightly

anda/langs/nim/nimble/nimble.spec

@@ -1,5 +1,5 @@
 Name:           nimble
-Version:        0.22.2
+Version:        0.22.3
 Release:        1%{?dist}
 Summary:        Package manager for the Nim programming language
 License:        BSD

anda/langs/python/jxlpy/anda.hcl

@@ -0,0 +1,5 @@
+project pkg {
+  rpm {
+    spec = "jxlpy.spec"
+  }
+}

anda/langs/python/jxlpy/jxlpy.spec

@@ -0,0 +1,49 @@
+%global pypi_name jxlpy
+%global _desc Cython bindings and Pillow plugin for JPEG XL.
+
+Name:			python-%{pypi_name}
+Version:		0.9.5
+Release:		1%?dist
+Summary:		Cython bindings and Pillow plugin for JPEG XL
+License:		MIT
+URL:			https://github.com/olokelo/jxlpy
+Source0:		%{pypi_source}
+
+BuildRequires:  python3-devel
+BuildRequires:  python3-wheel
+BuildRequires:  python3-setuptools
+BuildRequires:  python3-pip
+BuildRequires:  python3-cython
+BuildRequires:  libjxl-devel
+BuildRequires:  gcc-c++
+
+Packager:	    Owen Zimmerman <owen@fyralabs.com>
+
+%description
+%_desc
+
+%package -n     python3-%{pypi_name}
+Summary:        %{summary}
+%{?python_provide:%python_provide python3-%{pypi_name}}
+
+%description -n python3-%{pypi_name}
+%_desc
+
+%prep
+%autosetup -n %{pypi_name}-%{version}
+
+%build
+%pyproject_wheel
+
+%install
+%pyproject_install
+%pyproject_save_files %{pypi_name}
+
+%files -n python3-%{pypi_name} -f %{pyproject_files}
+%doc README.md
+%license LICENSE
+%{python3_sitearch}/_jxlpy.cpython-314-%{_arch}-linux-gnu.so
+
+%changelog
+* Sat Mar 28 2026 Owen Zimmerman <owen@fyralabs.com>
+- Initial commit

anda/langs/python/jxlpy/update.rhai

@@ -0,0 +1 @@
+rpm.version(pypi("jxlpy"));

anda/langs/python/milc/milc.spec

@@ -2,8 +2,8 @@
 %global _desc Batteries-Included Python 3 CLI Framework.
 
 Name:			python-%{pypi_name}
-Version:		1.9.1
+Version:		1.10.0
-Release:		1%?dist
+Release:		1%{?dist}
 Summary:		Batteries-Included Python 3 CLI Framework
 License:		MIT
 URL:			https://github.com/clueboard/milc

anda/langs/python/opencc/anda.hcl

@@ -0,0 +1,5 @@
+project pkg {
+  rpm {
+	spec = "opencc.spec"
+  }
+}

anda/langs/python/opencc/opencc.spec

@@ -0,0 +1,47 @@
+%global pypi_name opencc
+%global _desc Open Chinese Convert.
+
+Name:			python-%{pypi_name}
+Version:		1.2.0
+Release:		1%?dist
+Summary:		Open Chinese Convert
+License:		Apache-2.0
+URL:			https://github.com/BYVoid/OpenCC
+Source0:		%{pypi_source}
+
+BuildRequires:  python3-devel
+BuildRequires:  python3-wheel
+BuildRequires:  python3-setuptools
+BuildRequires:  python3-pip
+BuildRequires:  gcc-c++
+BuildRequires:  cmake
+
+Packager:	    Owen Zimmerman <owen@fyralabs.com>
+
+%description
+%_desc
+
+%package -n     python3-%{pypi_name}
+Summary:        %{summary}
+%{?python_provide:%python_provide python3-%{pypi_name}}
+
+%description -n python3-%{pypi_name}
+%_desc
+
+%prep
+%autosetup -n %{pypi_name}-%{version}
+
+%build
+%pyproject_wheel
+
+%install
+%pyproject_install
+%pyproject_save_files %{pypi_name}
+
+%files -n python3-%{pypi_name} -f %{pyproject_files}
+%doc README.md AUTHORS
+%license LICENSE
+
+%changelog
+* Sun Mar 29 2026 Owen Zimmerman <owen@fyralabs.com>
+- Initial commit

anda/langs/python/opencc/update.rhai

@@ -0,0 +1 @@
+rpm.version(pypi("opencc"));

anda/langs/python/proton-vpn-local-agent/proton-vpn-local-agent.spec

@@ -1,5 +1,4 @@
 %define debug_package %{nil}
-%define __python /usr/bin/python3
 
 %global pypi_name proton-vpn-local-agent
 %global _desc Proton VPN local agent written in Rust.
@@ -44,12 +43,12 @@ popd
 
 %install
 pushd %{name}
-install -Dm0644 target/release/libpython_proton_vpn_local_agent.so %{buildroot}%{python_sitearch}/proton/vpn/local_agent.so
+install -Dm0644 target/release/libpython_proton_vpn_local_agent.so %{buildroot}%{python3_sitearch}/proton/vpn/local_agent.so
 popd
 
 %files -n python3-%{pypi_name}
 %doc README.md CODEOWNERS
-%{python_sitearch}/proton/vpn/local_agent.so
+%{python3_sitearch}/proton/vpn/local_agent.so
 
 %changelog
 * Sun Jan 18 2026 Owen Zimmerman <owen@fyralabs.com>

anda/langs/python/types-colorama/types-colorama.spec

@@ -1,5 +1,5 @@
-%global commit 81a6d245c205f06232febe2f02e9510b1a35c7b4
+%global commit 2ded3a24a15ed58fa6ccc61fd770c8ffc3ba0aca
-%global commit_date 20260323
+%global commit_date 20260329
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %global pypi_name types-colorama

anda/langs/rust/fresh/fresh.spec

@@ -1,7 +1,7 @@
 %undefine __brp_mangle_shebangs
 
 Name:           fresh
-Version:        0.2.18
+Version:        0.2.20
 Release:        1%{?dist}
 Summary:        Text editor for your terminal: easy, powerful and fast
 URL:            https://getfresh.dev

anda/langs/rust/rnote/rnote.spec

@@ -1,8 +1,8 @@
 %global rustflags_debuginfo 1
 
 Name:           rnote
-Version:        0.13.1
+Version:        0.14.0
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        Sketch and take handwritten notes
 License:        GPL-3.0
 URL:            https://github.com/flxzt/rnote

anda/langs/rust/zoi/rust-zoi-rs.spec

@@ -1,7 +1,7 @@
 %define __brp_mangle_shebangs_exclude_from ^/usr/src/.*$
 
 %global crate zoi-rs
-%global crate_version 1.9.3
+%global crate_version 1.9.4
 
 Name:           rust-zoi-rs
 Version:        %(echo %crate_version | sed 's/-/~/g')

anda/langs/vala/vala-nightly/vala-nightly.spec

@@ -3,11 +3,11 @@
 %global priority 90
 
 %global real_name vala
-%global commit fe6a6d90ce66c075517c1f227ac5567fcbf0f516
+%global commit 2c9e91b4a0387b8e6e2fbd11a9b335cdc63896cd
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 %global repo https://gitlab.gnome.org/GNOME/%{real_name}.git
 
-%global commit_date 20260323
+%global commit_date 20260327
 %global snapshot_info %{commit_date}.%{shortcommit}
 
 Name:           vala-nightly

anda/langs/zig/bootstrap/setup.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/bash
 
-version=0.16.0-dev.2973+06b85a4fd
+version=0.16.0-dev.3028+a85495ca2
 
 mirrors=()
 

anda/langs/zig/bootstrap/zig-master-bootstrap.spec

@@ -7,7 +7,7 @@
 %define         llvm_compat 20
 %endif
 %global         llvm_version 20.0.0
-%global         ver 0.16.0-dev.2973+06b85a4fd
+%global         ver 0.16.0-dev.3028+a85495ca2
 %bcond bootstrap 1
 %bcond docs      %{without bootstrap}
 %bcond test      1

anda/lib/dwarfs/dwarfs.spec

@@ -6,11 +6,11 @@ A fast high compression read-only file system for Linux and Windows.}
 
 Name:          dwarfs
 Version:       0.15.1
-Release:       1%{?dist}
+Release:       2%{?dist}
 Summary:       A fast high compression read-only file system for Linux, Windows and macOS
 License:       GPL-3.0-or-later
 URL:           https://github.com/mhx/%{name}
-Source0:       https://github.com/mhx/%{name}/releases/download/v%{version}/%{name}-%{version}.tar.xz
+Source0:       %{url}/archive/refs/tags/v%{version}.tar.gz
 BuildRequires: binutils-devel
 BuildRequires: boost-devel
 %if 0%{?fedora} >= 44
@@ -23,7 +23,6 @@ BuildRequires: bubblewrap
 BuildRequires: ccache
 BuildRequires: clang
 BuildRequires: cmake
-BuildRequires: double-conversion-devel
 BuildRequires: flac-devel
 BuildRequires: fmt-devel
 BuildRequires: fuse
@@ -33,21 +32,16 @@ BuildRequires: fuse-devel
 BuildRequires: g++
 BuildRequires: gcc
 BuildRequires: git
-BuildRequires: glog-devel
 BuildRequires: google-benchmark
 BuildRequires: jemalloc-devel
 BuildRequires: json-devel
 BuildRequires: libarchive-devel
-BuildRequires: libdwarf-devel
-BuildRequires: libevent-devel
-BuildRequires: libunwind-devel
 BuildRequires: libzstd-devel
 BuildRequires: lz4-devel
 BuildRequires: make
 BuildRequires: man
 BuildRequires: ninja-build
 BuildRequires: openssl-devel
-BuildRequires: pip
 BuildRequires: pkg-config
 BuildRequires: range-v3-devel
 BuildRequires: rubygem-ronn-ng
@@ -55,8 +49,6 @@ BuildRequires: utf8cpp-devel
 BuildRequires: xxhash-devel
 BuildRequires: xz-devel
 BuildRequires: zstd
-Requires:      bzip2-libs
-Requires:      gflags
 Requires:      libattr
 Requires:      libxml2
 Requires:      libzstd

anda/lib/glaze/glaze.spec

@@ -2,7 +2,7 @@
 %global debug_package %{nil}
 
 Name:           glaze-devel
-Version:        7.2.1
+Version:        7.2.2
 Release:        1%{?dist}
 License:        MIT
 URL:            https://stephenberry.github.io/glaze

anda/lib/wails/v2/wails.spec

@@ -1,10 +1,10 @@
 %global goipath github.com/wailsapp/wails/v2
-Version:        2.11.0
+Version:        2.12.0
 
 %gometa -f
 
 Name:           wails
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        Create beautiful applications using Go
 
 License:        MIT

anda/misc/gradle-completions/gradle-completions.spec

@@ -1,6 +1,6 @@
 Name:           gradle-completions
-Version:        9.3.1
+Version:        9.4.1
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        Gradle tab completion for bash and zsh
 License:        MIT
 URL:            https://github.com/gradle/gradle-completion

anda/misc/openbangla-keyboard/openbangla-keyboard-nightly.spec

@@ -1,6 +1,6 @@
 %global ver 2.0.0
-%global commit 653937a4f46abfa571182f71b67ddd73a3769f52
+%global commit 0db9d248e61600053eb6ec96d639da54a0bd06f8
-%global commit_date 20260310
+%global commit_date 20260324
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 Name:           openbangla-keyboard-nightly

anda/misc/uwufetch/uwufetch.spec

@@ -1,13 +1,13 @@
-%global commit fe9c53ffc6570454a3b2bf8431fd713e9953597e
+%global commit 7fb542d732253d36cb5ae0a02972d3949c34d721
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global fulldate 2026-01-14
+%global fulldate 2026-03-28
 %global commit_date %(echo %{fulldate} | sed 's/-//g')
 %global ver 2.1
 %global debug_package %{nil}
 
 Name:          uwufetch
 Version:       %{ver}^%{commit_date}git.%{shortcommit}
-Release:       1%?dist
+Release:       1%{?dist}
 Summary:       A meme system info tool for Linux, based on nyan/uwu trend on r/linuxmasterrace.
 License:       GPL-3.0
 URL:           https://github.com/ad-oliviero/uwufetch

anda/misc/v2ray-domain-list-community/v2ray-domain-list-community.spec

@@ -1,7 +1,7 @@
-%global commit  aa76e186cbe3b386ac8823ec6496e8b4f14c7b3d
+%global commit  af7fd77ebcd4dcc740fcb26cb6a2407236f6e24c
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global ver 20260322074401
+%global ver 20260326050832
-%global commit_date 20260323
+%global commit_date 20260327
 
 Name:           v2ray-domain-list-community
 Version:        %{ver}^%{commit_date}git.%{shortcommit}

anda/multimedia/vgmstream/vgmstream.spec

@@ -1,6 +1,6 @@
-%global commit      926a56f486c51835654391a535b7c3ccb3470a6e
+%global commit      dddc0d426837eeb277cd880759e9826c2b309e90
 %global shortcommit %{sub %{commit} 1 7}
-%global commit_date 20260322
+%global commit_date 20260329
 
 Name:			vgmstream
 Version:		0~%{commit_date}git.%shortcommit

anda/system/cloud-hypervisor/anda.hcl

@@ -0,0 +1,5 @@
+project pkg {
+	rpm {
+		spec = "cloud-hypervisor.spec"
+	}
+}