remove: qdl (#13232)

Signed-off-by: Owen-sz <owen@fyralabs.com>
(cherry picked from commit 317716ba9d)

.github/ISSUE_TEMPLATE/bug.yml

@@ -29,6 +29,7 @@ body:
       description: Which version of Terra are you using?
       options:
         - frawhide
+        - f44
         - f43
         - f42
         - el10

.github/dependabot.yml

@@ -0,0 +1,8 @@
+version: 2
+updates:
+  # Maintain GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5

.github/scripts/configure-sccache.js

@@ -0,0 +1,180 @@
+// Configure sccache environment variables for GitHub Actions cache integration
+// 
+// This script is still unused until we build terra-sccache with this supported,
+// Turns out that Fedora's sccache build has the GHA feature support disabled.
+// 
+// Note: ACTIONS_CACHE_SERVICE_V2 and SCCACHE_GHA_ENABLED are set at workflow level
+module.exports = async ({ github, context, core, exec }) => {
+  // Find sccache path (try which command)
+  let sccachePath = "/usr/bin/sccache";
+  try {
+    const result = await exec.getExecOutput("which", ["sccache"], {
+      ignoreReturnCode: true,
+      silent: true,
+    });
+    if (result.exitCode === 0 && result.stdout.trim()) {
+      sccachePath = result.stdout.trim();
+      core.info(`Found sccache at: ${sccachePath}`);
+    }
+  } catch (e) {
+    core.debug(`Could not find sccache path: ${e.message}`);
+  }
+
+  // Check sccache version
+  try {
+    const versionResult = await exec.getExecOutput(sccachePath, ["--version"], {
+      ignoreReturnCode: true,
+      silent: true,
+    });
+    core.info(`sccache version: ${versionResult.stdout.trim()}`);
+  } catch (e) {
+    core.warning(`Could not get sccache version: ${e.message}`);
+  }
+
+  // Enable caching
+  core.exportVariable("RUSTC_WRAPPER", sccachePath);
+  core.exportVariable("SCCACHE_GHA_ENABLED", "true");
+
+  // Disable Cargo incremental builds to not interfere with caching
+  core.exportVariable("CARGO_INCREMENTAL", "false");
+  
+  // Debug: Show what environment variables are available
+  core.info("=== Environment Variables Diagnostic ===");
+  core.info(`SCCACHE_GHA_ENABLED: ${process.env.SCCACHE_GHA_ENABLED}`);
+  core.info(
+    `ACTIONS_CACHE_SERVICE_V2: ${process.env.ACTIONS_CACHE_SERVICE_V2}`,
+  );
+  core.info(
+    `ACTIONS_RESULTS_URL: ${process.env.ACTIONS_RESULTS_URL ? "SET (length: " + process.env.ACTIONS_RESULTS_URL.length + ")" : "NOT SET"}`,
+  );
+  core.info(
+    `ACTIONS_RUNTIME_TOKEN: ${process.env.ACTIONS_RUNTIME_TOKEN ? "SET (length: " + process.env.ACTIONS_RUNTIME_TOKEN.length + ")" : "NOT SET"}`,
+  );
+  core.info(`RUSTC_WRAPPER: ${process.env.RUSTC_WRAPPER}`);
+  core.info(`SCCACHE_LOG: ${process.env.SCCACHE_LOG}`);
+  core.info("========================================");
+
+  // Export SCCACHE_PATH so it's available to subsequent steps
+  core.exportVariable("SCCACHE_PATH", sccachePath);
+
+  // Expose the GHA cache related variables to make it easier for users to
+  // integrate with GHA support (from upstream mozilla/sccache-action)
+  if (process.env.ACTIONS_RESULTS_URL) {
+    core.exportVariable("ACTIONS_RESULTS_URL", process.env.ACTIONS_RESULTS_URL);
+    core.info("✓ Exported ACTIONS_RESULTS_URL");
+  } else {
+    core.error(
+      "ACTIONS_RESULTS_URL is not set - GitHub Actions cache WILL NOT work",
+    );
+  }
+
+  if (process.env.ACTIONS_RUNTIME_TOKEN) {
+    core.exportVariable(
+      "ACTIONS_RUNTIME_TOKEN",
+      process.env.ACTIONS_RUNTIME_TOKEN,
+    );
+    core.info("✓ Exported ACTIONS_RUNTIME_TOKEN");
+  } else {
+    core.error(
+      "ACTIONS_RUNTIME_TOKEN is not set - GitHub Actions cache WILL NOT work",
+    );
+  }
+
+  // Set cache version and restore keys for this specific build matrix
+  if (process.env.SCCACHE_GHA_VERSION) {
+    core.exportVariable("SCCACHE_GHA_VERSION", process.env.SCCACHE_GHA_VERSION);
+  }
+  if (process.env.SCCACHE_GHA_CACHE_FROM) {
+    core.exportVariable(
+      "SCCACHE_GHA_CACHE_FROM",
+      process.env.SCCACHE_GHA_CACHE_FROM,
+    );
+  }
+
+  // Check if cache busting is enabled
+  const inputs =
+    (github &&
+      github.context &&
+      github.context.payload &&
+      github.context.payload.inputs) ||
+    {};
+  const rawBustCache =
+    inputs.bust_cache ??
+    inputs.bustCache ??
+    process.env.INPUT_BUST_CACHE ??
+    process.env.BUST_CACHE;
+  let bustCache = false;
+
+  if (typeof rawBustCache === "string") {
+    const v = rawBustCache.toLowerCase().trim();
+    bustCache = v === "true" || v === "1" || v === "yes";
+  } else {
+    bustCache = !!rawBustCache;
+  }
+
+  if (bustCache) {
+    core.exportVariable("SCCACHE_BUST_CACHE", "true");
+    core.exportVariable("SCCACHE_RECACHE", "1");
+    core.info("SCCACHE_RECACHE enabled because bust_cache is true");
+  }
+
+  // Stop any running sccache daemon so it picks up the new environment variables
+  core.info("Stopping any running sccache daemon to pick up configuration...");
+  try {
+    await exec.exec(sccachePath, ["--stop-server"], {
+      ignoreReturnCode: true,
+    });
+    core.info("✓ sccache daemon stopped successfully");
+  } catch (e) {
+    core.debug(
+      `Could not stop sccache daemon (it may not be running): ${e.message}`,
+    );
+  }
+
+  // Verify sccache can see the GHA environment variables by starting server with explicit env
+  core.info("Starting sccache server with GHA environment variables...");
+  const sccacheEnv = {
+    ...process.env,
+    SCCACHE_GHA_ENABLED: process.env.SCCACHE_GHA_ENABLED || "on",
+    ACTIONS_CACHE_SERVICE_V2: process.env.ACTIONS_CACHE_SERVICE_V2 || "on",
+  };
+
+  try {
+    await exec.exec(sccachePath, ["--start-server"], {
+      ignoreReturnCode: true,
+      env: sccacheEnv,
+    });
+    core.info("✓ sccache server started");
+  } catch (e) {
+    core.warning(`Could not start sccache server: ${e.message}`);
+  }
+
+  // Show the current sccache configuration
+  core.info("Verifying sccache configuration:");
+  try {
+    const statsResult = await exec.getExecOutput(
+      sccachePath,
+      ["--show-stats"],
+      {
+        ignoreReturnCode: true,
+        env: sccacheEnv,
+      },
+    );
+
+    // Check if it's using GitHub Actions cache
+    if (statsResult.stdout.includes("GitHub Actions")) {
+      core.info("✓ sccache is configured to use GitHub Actions cache");
+    } else if (statsResult.stdout.includes("Local disk")) {
+      core.error(
+        "✗ sccache is using Local disk cache instead of GitHub Actions cache!",
+      );
+      core.error(
+        "This means SCCACHE_GHA_ENABLED or required env vars are not being recognized.",
+      );
+      core.info("Stats output:");
+      core.info(statsResult.stdout);
+    }
+  } catch (e) {
+    core.debug(`Could not show sccache stats: ${e.message}`);
+  }
+};

.github/scripts/sccache-stats.js

@@ -0,0 +1,121 @@
+module.exports = async ({ github, context, core, exec }) => {
+  if (!exec) {
+    throw new Error("exec parameter is required but was not provided");
+  }
+
+  // Use SCCACHE_PATH if set, otherwise default to 'sccache' (will use PATH)
+  const sccachePath = process.env.SCCACHE_PATH || "sccache";
+  core.debug(`Using sccache path: ${sccachePath}`);
+
+  const percentage = (x, y) => Math.round((x / y) * 100 || 0);
+  const plural = (count, base, pluralForm = base + "s") =>
+    `${count} ${count === 1 ? base : pluralForm}`;
+  const sumStats = (stats) =>
+    Object.values(stats.counts).reduce((acc, val) => acc + val, 0);
+  const formatDuration = (duration) => {
+    const ms = duration.nanos / 1e6;
+    return `${duration.secs}s ${ms}ms`;
+  };
+
+  const formatJsonStats = (stats) => {
+    const cacheErrorCount = sumStats(stats.stats.cache_errors);
+    const cacheHitCount = sumStats(stats.stats.cache_hits);
+    const cacheMissCount = sumStats(stats.stats.cache_misses);
+    const totalHits = cacheHitCount + cacheMissCount + cacheErrorCount;
+    const ratio = percentage(cacheHitCount, totalHits);
+
+    const writeDuration = formatDuration(stats.stats.cache_write_duration);
+    const readDuration = formatDuration(stats.stats.cache_read_hit_duration);
+    const compilerDuration = formatDuration(
+      stats.stats.compiler_write_duration,
+    );
+
+    const noticeHit = plural(cacheHitCount, "hit");
+    const noticeMiss = plural(cacheMissCount, "miss", "misses");
+    const noticeError = plural(cacheErrorCount, "error");
+    const notice = `${ratio}% - ${noticeHit}, ${noticeMiss}, ${noticeError}`;
+
+    const table = [
+      [{ data: "Cache hit %", header: true }, { data: `${ratio}%` }],
+      [
+        { data: "Cache hits", header: true },
+        { data: cacheHitCount.toString() },
+      ],
+      [
+        { data: "Cache misses", header: true },
+        { data: cacheMissCount.toString() },
+      ],
+      [
+        { data: "Cache errors", header: true },
+        { data: cacheErrorCount.toString() },
+      ],
+      [
+        { data: "Compile requests", header: true },
+        { data: stats.stats.compile_requests.toString() },
+      ],
+      [
+        { data: "Requests executed", header: true },
+        { data: stats.stats.requests_executed.toString() },
+      ],
+      [
+        { data: "Cache writes", header: true },
+        { data: stats.stats.cache_writes.toString() },
+      ],
+      [
+        { data: "Cache write errors", header: true },
+        { data: stats.stats.cache_write_errors.toString() },
+      ],
+      [{ data: "Cache write duration", header: true }, { data: writeDuration }],
+      [
+        { data: "Cache read hit duration", header: true },
+        { data: readDuration },
+      ],
+      [
+        { data: "Compiler write duration", header: true },
+        { data: compilerDuration },
+      ],
+    ];
+    return { table, notice };
+  };
+
+  const getOutput = async (command, args = []) => {
+    core.debug(`get_output: ${command} ${args.join(" ")}`);
+    const output = await exec.getExecOutput(command, args, {
+      ignoreReturnCode: false,
+      silent: false,
+    });
+    if (!output.stdout.endsWith("\n")) {
+      process.stdout.write("\n");
+    }
+    return output.stdout.toString();
+  };
+
+  const humanStats = await core.group("Get human-readable stats", async () => {
+    return getOutput(sccachePath, ["--show-stats"]);
+  });
+
+  const jsonStats = await core.group("Get JSON stats", async () => {
+    return getOutput(sccachePath, ["--show-stats", "--stats-format=json"]);
+  });
+
+  const stats = JSON.parse(jsonStats);
+  const formattedStats = formatJsonStats(stats);
+
+  core.notice(formattedStats.notice, {
+    title: `sccache stats - ${context.job}`,
+  });
+  core.info("\nFull human-readable stats:");
+  core.info(humanStats);
+
+  core.summary.addHeading("sccache stats", 2);
+  core.summary.addTable(formattedStats.table);
+  core.summary.addDetails(
+    "Full human-readable stats",
+    "\n\n```\n" + humanStats + "\n```\n\n",
+  );
+  core.summary.addDetails(
+    "Full JSON Stats",
+    "\n\n```json\n" + JSON.stringify(stats, null, 2) + "\n```\n\n",
+  );
+  await core.summary.write();
+};

.github/workflows/autobuild.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Set workspace as safe
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
       - name: Generate build matrix
@@ -51,11 +51,12 @@ jobs:
       image: ghcr.io/terrapkg/appstream-generator:main
     steps:
       - name: Download artifacts
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           merge-multiple: true
           path: ./artifacts
       - name: Generate test catalog
+        id: catalog
         # run appstream-builder, then add step summary
         run: |
           set -x
@@ -71,50 +72,64 @@ jobs:
             --veto-ignore=missing-info 2>&1 | tee asb.log
 
       - name: Run appstreamcli validate
+        if: steps.catalog.outcome == 'success'
         run: |
-          echo "## AppStream MetaInfo Validation" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo '```xml' >> $GITHUB_STEP_SUMMARY
-          for file in output/test.xml.gz; do
-            appstreamcli validate $file >> $GITHUB_STEP_SUMMARY || true
+          if stat output/test.xml.gz &>/dev/null; then
+            echo "## AppStream MetaInfo Validation" >> $GITHUB_STEP_SUMMARY
             echo "" >> $GITHUB_STEP_SUMMARY
-          done
-          echo '```' >> $GITHUB_STEP_SUMMARY
+            echo '```xml' >> $GITHUB_STEP_SUMMARY
+            appstreamcli validate output/test.xml.gz >> $GITHUB_STEP_SUMMARY | true
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo '```' >> $GITHUB_STEP_SUMMARY
+          else
+            echo "Nothing to do."
+          fi
+          
           
       - name: Export logs
         id: export_logs
+        if: steps.catalog.outcome == 'success'
         run: |
-          echo "## AppStream Builder Log" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo '```log' >> $GITHUB_STEP_SUMMARY
-          cat asb.log >> $GITHUB_STEP_SUMMARY
-          echo '```' >> $GITHUB_STEP_SUMMARY
-          echo '---' >> $GITHUB_STEP_SUMMARY
+          if stat output/*.xml.gz &>/dev/null; then
+            echo "## AppStream Builder Log" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo '```log' >> $GITHUB_STEP_SUMMARY
+            cat asb.log >> $GITHUB_STEP_SUMMARY
+            echo '```' >> $GITHUB_STEP_SUMMARY
+            echo '---' >> $GITHUB_STEP_SUMMARY
+          else
+            echo "Nothing to do."
+          fi
 
       - name: Report Summary
         id: report_summary
+        if: steps.export_logs.outcome == 'success'
         run: |
           echo "## AppStream Builder Report" >> $GITHUB_STEP_SUMMARY
           echo "" >> $GITHUB_STEP_SUMMARY
-          if grep -q "veto" asb.log; then
-            echo "::group::Vetoed packages"
-            echo "### Vetoed packages" >> $GITHUB_STEP_SUMMARY
+          if stat output/*.xml.gz &>/dev/null; then
+            if grep -q "veto" asb.log; then
+              echo "::group::Vetoed packages"
+              echo "### Vetoed packages" >> $GITHUB_STEP_SUMMARY
+              echo "" >> $GITHUB_STEP_SUMMARY
+              echo '```xml' >> $GITHUB_STEP_SUMMARY
+              echo "$(grep -i 'veto' asb.log)" >> $GITHUB_STEP_SUMMARY
+              echo '```' >> $GITHUB_STEP_SUMMARY
+              echo "::warning file=asb.log::Some packages were vetoed during AppStream generation. Please review the 'Vetoed packages' section in the summary for details."
+              echo "::endgroup::"
+            fi
+            echo "## Full Data Summary" >> $GITHUB_STEP_SUMMARY
             echo "" >> $GITHUB_STEP_SUMMARY
-            echo '```xml' >> $GITHUB_STEP_SUMMARY
-            echo "$(grep -i 'veto' asb.log)" >> $GITHUB_STEP_SUMMARY
-            echo '```' >> $GITHUB_STEP_SUMMARY
-            echo "::warning file=asb.log::Some packages were vetoed during AppStream generation. Please review the 'Vetoed packages' section in the summary for details."
-            echo "::endgroup::"
+            echo "### Generated Appstream files:" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            for file in output/*.xml.gz; do
+              echo "#### \`$file\`" >> $GITHUB_STEP_SUMMARY
+              echo "" >> $GITHUB_STEP_SUMMARY
+              echo '```xml' >> $GITHUB_STEP_SUMMARY
+              zcat "$file" >> $GITHUB_STEP_SUMMARY || true
+              echo '```' >> $GITHUB_STEP_SUMMARY
+              echo "" >> $GITHUB_STEP_SUMMARY
+            done
+          else
+            echo "No appstream files found." >> $GITHUB_STEP_SUMMARY
           fi
-          echo "## Full Data Summary" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "### Generated Appstream files:" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          for file in output/*.xml.gz; do
-            echo "#### \`$file\`" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo '```xml' >> $GITHUB_STEP_SUMMARY
-            zcat "$file" >> $GITHUB_STEP_SUMMARY
-            echo '```' >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-          done

.github/workflows/bootstrap.yml

@@ -24,7 +24,7 @@ jobs:
           dnf install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-${{ matrix.version }}.noarch.rpm
           dnf install -y mock wget git-core openssl-devel cargo podman fuse-overlayfs rpm-build mock gzip
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           ref: el${{ matrix.version }}
           fetch-depth: 1

.github/workflows/build.yml

@@ -25,11 +25,11 @@ jobs:
       build_matrix: ${{ steps.parsing.outputs.build_matrix }}
     runs-on: ubuntu-24.04-arm
     container:
-      image: ghcr.io/terrapkg/builder:el${{ matrix.version }}
+      image: ghcr.io/terrapkg/builder:frawhide
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
       - name: Setup Git

.github/workflows/json-build.yml

@@ -37,19 +37,31 @@ jobs:
         pkg: ${{ fromJson(inputs.packages) }}
         version: ["10"]
       fail-fast: false
-    runs-on: ${{ inputs.custom_builder && inputs.custom_builder || (matrix.pkg.arch == 'aarch64' && matrix.pkg.labels['large']) && 'arm64-lg' || matrix.pkg.arch == 'aarch64' && 'ubuntu-22.04-arm' || matrix.pkg.labels['large'] && format('cirun-x86-64-lg--{0}', github.run_id) || 'ubuntu-22.04' }}
+    runs-on: ${{ inputs.custom_builder && inputs.custom_builder || (matrix.pkg.arch == 'aarch64' && matrix.pkg.labels['large']) && format('cirun-arm64-lg--{0}', github.run_id) || matrix.pkg.arch == 'aarch64' && 'ubuntu-22.04-arm' || matrix.pkg.labels['large'] && format('cirun-x86-64-lg--{0}', github.run_id) || 'ubuntu-22.04' }}
     container:
       image: ghcr.io/terrapkg/builder:el${{ matrix.version }}
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
 
       - name: Set up git repository
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
+      - name: Configure sccache
+        id: sccache
+        if: ${{ !contains(matrix.pkg.labels.sccache, '0') }}
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        env:
+          SCCACHE_GHA_VERSION: ${{ matrix.version }}-${{ matrix.pkg.arch }}-${{ matrix.pkg.pkg }}
+          SCCACHE_GHA_CACHE_FROM: ${{ matrix.version }}-${{ matrix.pkg.arch }}-${{ matrix.pkg.pkg }}
+        with:
+          script: |
+            const script = require('./.github/scripts/configure-sccache.js')
+            await script({github, context, core, exec})
+
       - name: CI Setup Script
         if: ${{ !contains(matrix.pkg.labels, 'mock') }}
         run: |
@@ -67,6 +79,14 @@ jobs:
       - name: Build with Andaman
         run: anda build -D "vendor Terra" ${{ matrix.pkg.pkg }} -c terra-el${{ matrix.version }}-${{ matrix.pkg.arch }} ${{ !matrix.pkg.labels.mock == '1' && '-rrpmbuild' || '' }}
 
+      - name: Report Cache Summary
+        if: steps.sccache.outcome == 'success'
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        with:
+          script: |
+            const script = require('./.github/scripts/sccache-stats.js')
+            await script({github, context, core, exec})
+
       - name: Generating artifact name
         id: art
         run: |
@@ -74,7 +94,7 @@ jobs:
           x=${NAME//\//@}
           echo "name=$x" >> $GITHUB_OUTPUT
 
-      - uses: actions/upload-artifact@v7
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: ${{ steps.art.outputs.name }}
           compression-level: 0 # The RPMs are already compressed :p

.github/workflows/scorecard.yml

@@ -0,0 +1,78 @@
+# This workflow uses actions that are not certified by GitHub. They are provided
+# by a third-party and are governed by separate terms of service, privacy
+# policy, and support documentation.
+
+name: Scorecard supply-chain security
+on:
+  # For Branch-Protection check. Only the default branch is supported. See
+  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
+  branch_protection_rule:
+  # To guarantee Maintained check is occasionally updated. See
+  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
+  schedule:
+    - cron: '43 13 * * 2'
+  push:
+    branches: [ "frawhide" ]
+
+# Declare default permissions as read only.
+permissions: read-all
+
+jobs:
+  analysis:
+    name: Scorecard analysis
+    runs-on: ubuntu-latest
+    # `publish_results: true` only works when run from the default branch. conditional can be removed if disabled.
+    if: github.event.repository.default_branch == github.ref_name || github.event_name == 'pull_request'
+    permissions:
+      # Needed to upload the results to code-scanning dashboard.
+      security-events: write
+      # Needed to publish results and get a badge (see publish_results below).
+      id-token: write
+      # Uncomment the permissions below if installing in a private repository.
+      # contents: read
+      # actions: read
+
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
+
+      - name: "Run analysis"
+        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
+        with:
+          results_file: results.sarif
+          results_format: sarif
+          # (Optional) "write" PAT token. Uncomment the `repo_token` line below if:
+          # - you want to enable the Branch-Protection check on a *public* repository, or
+          # - you are installing Scorecard on a *private* repository
+          # To create the PAT, follow the steps in https://github.com/ossf/scorecard-action?tab=readme-ov-file#authentication-with-fine-grained-pat-optional.
+          # repo_token: ${{ secrets.SCORECARD_TOKEN }}
+
+          # Public repositories:
+          #   - Publish results to OpenSSF REST API for easy access by consumers
+          #   - Allows the repository to include the Scorecard badge.
+          #   - See https://github.com/ossf/scorecard-action#publishing-results.
+          # For private repositories:
+          #   - `publish_results` will always be set to `false`, regardless
+          #     of the value entered here.
+          publish_results: true
+
+          # (Optional) Uncomment file_mode if you have a .gitattributes with files marked export-ignore
+          # file_mode: git
+
+      # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
+      # format to the repository Actions tab.
+      - name: "Upload artifact"
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        with:
+          name: SARIF file
+          path: results.sarif
+          retention-days: 5
+
+      # Upload the results to GitHub's code scanning dashboard (optional).
+      # Commenting out will disable upload of results to your repo's Code Scanning dashboard
+      - name: "Upload to code-scanning"
+        uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
+        with:
+          sarif_file: results.sarif

.github/workflows/sync.yml

@@ -1,13 +1,15 @@
 name: Automatic backport/sync action
 permissions:
-  contents: write
-  pull-requests: write
+  contents: read
 on:
   pull_request_target:
     types: ["labeled", "closed"]
 
 jobs:
   backport:
+    permissions:
+      contents: write
+      pull-requests: write
     name: Backport/sync PR
     runs-on: ubuntu-22.04
     if: github.event.pull_request.merged
@@ -25,7 +27,7 @@ jobs:
           git config --global commit.gpgsign true
 
       - name: Backport Action
-        uses: sorenlouv/backport-github-action@9460b7102fea25466026ce806c9ebf873ac48721 # v11.0.0
+        uses: sorenlouv/backport-github-action@85813678d776774a19ec5af56bd3a04305946f8a # v12.0.0
         with:
           github_token: ${{ secrets.RABONEKO_BACKPORT_GITHUB_TOKEN }}
           auto_backport_label_prefix: sync-

.github/workflows/update-branch.yml

@@ -1,6 +1,6 @@
 name: Update per branch
 permissions:
-  contents: write
+  contents: read
 on:
   schedule:
     - cron: "*/30 * * * *"
@@ -8,7 +8,9 @@ on:
 
 jobs:
   autoupdate:
-    runs-on: ubuntu-24.04-arm
+    permissions:
+      contents: write
+    runs-on: ubuntu-22.04
     strategy:
       matrix:
         branch:
@@ -22,7 +24,7 @@ jobs:
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           ref: ${{ matrix.branch }}
           fetch-depth: 0

.github/workflows/update-comps.yml

@@ -20,7 +20,7 @@ jobs:
     container:
       image: ghcr.io/terrapkg/builder:frawhide
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       - name: Push to subatomic
         run: |
           branch=${{ github.ref_name }}

.github/workflows/update-nightly.yml

@@ -1,6 +1,6 @@
 name: Nightly Update
 permissions:
-  contents: write
+  contents: read
 on:
   schedule:
     - cron: "0 0 * * *"
@@ -8,13 +8,15 @@ on:
 
 jobs:
   autoupdate:
-    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    runs-on: ubuntu-24.04-arm
     container:
       image: ghcr.io/terrapkg/builder:frawhide
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
           ssh-key: ${{ secrets.SSH_AUTHENTICATION_KEY }}

.github/workflows/update-weekly.yml

@@ -1,6 +1,6 @@
 name: Weekly Update
 permissions:
-  contents: write
+  contents: read
 on:
   schedule:
     - cron: "0 0 * * 0"
@@ -8,13 +8,15 @@ on:
 
 jobs:
   autoupdate:
-    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    runs-on: ubuntu-22.04
     container:
       image: ghcr.io/terrapkg/builder:frawhide
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
           ssh-key: ${{ secrets.SSH_AUTHENTICATION_KEY }}

.github/workflows/update.yml

@@ -1,6 +1,6 @@
 name: Update
 permissions:
-  contents: write
+  contents: read
 on:
   schedule:
     - cron: "*/10 * * * *"
@@ -8,13 +8,15 @@ on:
 
 jobs:
   autoupdate:
-    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    runs-on: ubuntu-22.04
     container:
       image: ghcr.io/terrapkg/builder:frawhide
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
           ssh-key: ${{ secrets.SSH_AUTHENTICATION_KEY }}

.gitignore

@@ -6,3 +6,4 @@ anda-build/
 **/*.nupkg
 **/*.rpm
 **/*.kate-swp
+**/.DS_Store

README.md

@@ -5,13 +5,13 @@
 Terra is a rolling-release Fedora repository for all the software you need.
 With Terra, you can install the latest packages knowing that quality and security are assured.
 
-See the introduction at [our website](https://terra.fyralabs.com).
+See the introduction at [our website](https://terrapkg.com).
 
 This monorepo contains the package manifests for all packages in Terra.
 
 ## Installation
 
-The latest detailed instructions are available in our Devdocs: https://developer.fyralabs.com/terra/installing
+The latest detailed instructions are available in our docs: https://docs.terrapkg.com/usage/installing
 
 ### Fedora
 
@@ -32,7 +32,7 @@ On Fedora, you can optionally install the Terra subrepos. Extra care and caution
 - Install `terra-release-extras` to enable the Extras subrepo. This repo contains packages which conflict with Fedora packages in some way, such as being a patched version of the same package.
 - Install `terra-release-mesa` to install the Mesa subrepo which contains a patched and codec complete Mesa.
 - Install `terra-release-nvidia` to install the NVIDIA subrepo which contains NVIDIA drivers.
-- Install `terra-release-multimedia` for multimedia packages in Terra. This repository is currently considered a work in progress.
+- Install `terra-release-multimedia` for multimedia packages in Terra. **This repository is currently considered unstable and a work in progress.**
 
 ### Enterprise Linux (EL)
 
@@ -54,13 +54,13 @@ sudo dnf install --nogpgcheck --repofrompath 'terra,https://repos.fyralabs.com/t
 
 First of all, thanks for being interested in contributing to Terra! If you have any questions about contributing, please [join our chats](https://wiki.ultramarine-linux.org/en/community/community/).
 
-- [Contribution Guide](https://developer.fyralabs.com/terra/contributing)
-- [FAQ](https://developer.fyralabs.com/terra/faq)
-- [Guidelines](https://developer.fyralabs.com/terra/guidelines)
+- [Contribution Guide](https://docs.terrapkg.com/contributing/getting-started)
+- [FAQ](https://docs.terrapkg.com/reference/faq)
+- [Guidelines](https://docs.terrapkg.com/contributing/guidelines)
 
 ## Documentation
 
-Our documentation can be found on our [Devdocs](https://developer.fyralabs.com/terra/).
+Our documentation can be found on our [docs site](https://docs.terrapkg.com).
 
 ## Searching Packages
 
@@ -70,6 +70,6 @@ Our documentation can be found on our [Devdocs](https://developer.fyralabs.com/t
 
 Feel free to reach out by [joining our community](https://wiki.ultramarine-linux.org/en/community/community/). We're always happy to help!
 
-- [Contribution Guide](https://developer.fyralabs.com/terra/contributing)
-- [FAQ](https://developer.fyralabs.com/terra/faq)
-- [Guidelines](https://developer.fyralabs.com/terra/guidelines)
+- [Contribution Guide](https://docs.terrapkg.com/contributing/getting-started)
+- [FAQ](https://docs.terrapkg.com/reference/faq)
+- [Guidelines](https://docs.terrapkg.com/contributing/guidelines)

anda/apps/1password-cli/1password-cli.spec

@@ -0,0 +1,49 @@
+%global debug_package %{nil}
+
+%ifarch x86_64
+%global op_arch amd64
+%elifarch aarch64
+%global op_arch arm64
+%endif
+
+Name:           1password-cli
+Version:        2.34.1
+Release:        1%{?dist}
+Summary:        1Password command-line tool
+
+Packager:       Cappy Ishihara <cappy@fyralabs.com>
+
+License:        LicenseRef-1Password-Proprietary
+URL:            https://developer.1password.com/docs/cli/
+Source0:        https://cache.agilebits.com/dist/1P/op2/pkg/v%{version}/op_linux_%{op_arch}_v%{version}.zip
+Source1:        1password-cli.sysusers
+ExclusiveArch:  x86_64 aarch64
+
+BuildRequires:  systemd-rpm-macros
+BuildRequires:  unzip
+Recommends:     1password
+Recommends:     polkit
+
+%description
+1Password CLI brings 1Password to your terminal.
+
+%prep
+%autosetup -c
+
+%build
+
+%install
+install -Dm0755 op %{buildroot}%{_bindir}/op
+chmod 2755 %{buildroot}%{_bindir}/op
+install -Dm0644 %{SOURCE1} %{buildroot}%{_sysusersdir}/%{name}.conf
+
+%pre
+%sysusers_create_package %{name} %{SOURCE1}
+
+%files
+%attr(2755,root,onepassword-cli) %{_bindir}/op
+%{_sysusersdir}/%{name}.conf
+
+%changelog
+* Fri Jun 19 2026 Cappy Ishihara <cappy@cappuchino.xyz>
+- Initial Package

anda/apps/1password-cli/1password-cli.sysusers

@@ -0,0 +1 @@
+g onepassword-cli -

anda/apps/1password-cli/anda.hcl

@@ -0,0 +1,6 @@
+project pkg {
+	arches = ["x86_64", "aarch64"]
+	rpm {
+		spec = "1password-cli.spec"
+	}
+}

anda/apps/1password-cli/update.rhai

@@ -0,0 +1,37 @@
+let html = get("https://app-updates.agilebits.com/product_history/CLI2");
+let versions = [];
+
+for matches in find_all(`op_linux_amd64_v([\d]+\.[\d]+\.[\d]+)\.zip`, html) {
+    versions += matches[1];
+}
+
+versions.dedup();
+
+let latest = "";
+let latest_major = 0;
+let latest_minor = 0;
+let latest_patch = 0;
+
+for version in versions {
+    let parts = version.split(".");
+    let major = parts[0].parse_int();
+    let minor = parts[1].parse_int();
+    let patch = parts[2].parse_int();
+
+    if latest == "" ||
+        major > latest_major ||
+        major == latest_major && minor > latest_minor ||
+        major == latest_major && minor == latest_minor && patch > latest_patch {
+        latest = version;
+        latest_major = major;
+        latest_minor = minor;
+        latest_patch = patch;
+    }
+}
+
+if latest == "" {
+    print("E: no 1Password CLI version found");
+    terminate();
+}
+
+rpm.version(latest);

anda/apps/1password/1password.spec

@@ -0,0 +1,105 @@
+%global debug_package %{nil}
+%global policy_owners unix-group:wheel
+%global appdir %{_datadir}/1password
+
+%ifarch x86_64
+%global tararch x64
+%elifarch aarch64
+%global tararch arm64
+%endif
+
+Name:           1password
+Version:        8.12.24
+Release:        1%{?dist}
+Summary:        Password manager and secure wallet
+
+Packager:       Cappy Ishihara <cappy@fyralabs.com>
+
+License:        LicenseRef-1Password-Proprietary
+URL:            https://1password.com
+Source0:        https://downloads.1password.com/linux/tar/stable/%{_arch}/%{name}-%{version}.%{tararch}.tar.gz
+Source1:        https://downloads.1password.com/linux/tar/stable/%{_arch}/%{name}-%{version}.%{tararch}.tar.gz.sig
+Source2:        1password.sysusers
+ExclusiveArch:  x86_64 aarch64
+
+BuildRequires:  desktop-file-utils
+BuildRequires:  systemd-rpm-macros
+Requires:       desktop-file-utils
+Requires:       gtk3
+Requires:       hicolor-icon-theme
+Requires:       nss
+Requires:       polkit
+Requires:       xdg-utils
+
+%description
+%{summary}
+
+%prep
+%autosetup -n %{name}-%{version}.%{tararch}
+
+
+%build
+
+%install
+# Install icons
+install -Dm0644 resources/icons/hicolor/32x32/apps/1password.png -t %{buildroot}%{_datadir}/icons/hicolor/32x32/apps/
+install -Dm0644 resources/icons/hicolor/64x64/apps/1password.png -t %{buildroot}%{_datadir}/icons/hicolor/64x64/apps/
+install -Dm0644 resources/icons/hicolor/256x256/apps/1password.png -t %{buildroot}%{_datadir}/icons/hicolor/256x256/apps/
+install -Dm0644 resources/icons/hicolor/512x512/apps/1password.png -t %{buildroot}%{_datadir}/icons/hicolor/512x512/apps/
+
+sed 's|${POLICY_OWNERS}|%{policy_owners}|g' \
+  com.1password.1Password.policy.tpl > com.1password.1Password.policy
+install -Dm0644 com.1password.1Password.policy -t %{buildroot}%{_datadir}/polkit-1/actions/
+install -Dm0644 resources/custom_allowed_browsers -t %{buildroot}%{_sysconfdir}/1password/
+install -Dm0644 resources/custom_allowed_browsers -t %{buildroot}%{_datadir}/doc/1password/examples/
+sed -i 's|^Exec=/opt/1Password/1password|Exec=%{_bindir}/1password|' resources/1password.desktop
+desktop-file-install --dir=%{buildroot}%{_datadir}/applications resources/1password.desktop
+install -Dm0644 %{SOURCE2} %{buildroot}%{_sysusersdir}/%{name}.conf
+
+# Install application payload under /usr for immutable-system compatibility.
+mkdir -p %{buildroot}%{appdir}
+cp -a . %{buildroot}%{appdir}/
+rm -f %{buildroot}%{appdir}/com.1password.1Password.policy \
+  %{buildroot}%{appdir}/com.1password.1Password.policy.tpl \
+  %{buildroot}%{appdir}/after-install.sh \
+  %{buildroot}%{appdir}/after-remove.sh \
+  %{buildroot}%{appdir}/install.sh \
+  %{buildroot}%{appdir}/install_biometrics_policy.sh
+
+mkdir -p %{buildroot}%{_bindir}
+ln -sr %{buildroot}%{appdir}/%{name} %{buildroot}%{_bindir}/%{name}
+chmod 4755 %{buildroot}%{appdir}/chrome-sandbox
+chmod 2755 %{buildroot}%{appdir}/1Password-BrowserSupport
+if [ -f %{buildroot}%{appdir}/onepassword-mcp ]; then
+  chmod 2755 %{buildroot}%{appdir}/onepassword-mcp
+fi
+find %{buildroot}%{appdir} -type f \
+  ! -name chrome-sandbox \
+  ! -name 1Password-BrowserSupport \
+  ! -name onepassword-mcp \
+  -printf '/%%P\n' | sed "s|^/|%{appdir}/|" > app.files
+
+%pre
+%sysusers_create_package %{name} %{SOURCE2}
+
+%files -f app.files
+%{_bindir}/%{name}
+%dir %{appdir}
+%attr(4755,root,root) %{appdir}/chrome-sandbox
+%attr(2755,root,onepassword) %{appdir}/1Password-BrowserSupport
+%attr(2755,root,onepassword-mcp) %{appdir}/onepassword-mcp
+%{_datadir}/icons/hicolor/32x32/apps/1password.png
+%{_datadir}/icons/hicolor/64x64/apps/1password.png
+%{_datadir}/icons/hicolor/256x256/apps/1password.png
+%{_datadir}/icons/hicolor/512x512/apps/1password.png
+%{_datadir}/applications/%{name}.desktop
+%{_datadir}/polkit-1/actions/com.1password.1Password.policy
+%{_sysusersdir}/%{name}.conf
+%config(noreplace) %{_sysconfdir}/1password/custom_allowed_browsers
+%{_datadir}/doc/1password/
+
+
+
+%changelog
+* Fri Jun 19 2026 Cappy Ishihara <cappy@cappuchino.xyz>
+- Initial Package

anda/apps/1password/1password.sysusers

@@ -0,0 +1,2 @@
+g onepassword -
+g onepassword-mcp -

anda/apps/1password/anda.hcl

@@ -0,0 +1,7 @@
+project pkg {
+	arches = ["x86_64", "aarch64"]
+	rpm {
+		spec = "1password.spec"
+	}
+
+}

anda/apps/1password/update.rhai

@@ -0,0 +1,36 @@
+let xml = get("https://releases.1password.com/linux/stable/index.xml");
+
+let latest = "";
+let latest_major = 0;
+let latest_minor = 0;
+let latest_patch = 0;
+
+for title in find_all(`<title>[^<]*</title>`, xml) {
+    let matches = find_all(`[\d]+\.[\d]+\.[\d]+`, title[0]);
+    if matches.len() == 0 {
+        continue;
+    }
+
+    let version = matches[0][0];
+    let parts = version.split(".");
+    let major = parts[0].parse_int();
+    let minor = parts[1].parse_int();
+    let patch = parts[2].parse_int();
+
+    if latest == "" ||
+        major > latest_major ||
+        major == latest_major && minor > latest_minor ||
+        major == latest_major && minor == latest_minor && patch > latest_patch {
+        latest = version;
+        latest_major = major;
+        latest_minor = minor;
+        latest_patch = patch;
+    }
+}
+
+if latest == "" {
+    print("E: no 1Password version found");
+    terminate();
+}
+
+rpm.version(latest);

anda/apps/Arctis-Sound-Manager/Arctis-Sound-Manager.spec

@@ -0,0 +1,128 @@
+%global pypi_name arctis-sound-manager
+%global _desc Linux GUI for SteelSeries Arctis headsets — Nova Pro Wireless & Wired, Nova Pro Omni, Nova Elite, Nova 7/7P/5/3, Arctis 7/7+/9/Pro Wireless. Device settings, Sonar EQ, 4-channel Game/Chat/Media mixer, PipeWire routing.
+
+%global arctis_sound_manager_services arctis-manager.service arctis-video-router.service arctis-gui.service
+
+Name:			python-%{pypi_name}
+Version:		1.1.81
+Release:		1%{?dist}
+Summary:		GUI for SteelSeries Arctis headsets
+License:		GPL-3.0-or-later
+# GitHub pages URL 404s
+URL:			https://github.com/loteran/Arctis-Sound-Manager
+Source0:		%{url}/archive/refs/tags/v%{version}.tar.gz
+
+BuildRequires:  python3-devel
+BuildRequires:  python3-wheel
+BuildRequires:  python3-setuptools
+BuildRequires:  python3-pip
+BuildRequires:  python3-importlib-metadata
+BuildRequires:  python3-uv-build
+BuildRequires:  systemd-rpm-macros
+BuildRequires:  python3-ruamel-yaml
+BuildRequires:  desktop-file-utils
+
+Packager:	    Owen Zimmerman <owen@fyralabs.com>
+
+BuildArch:      noarch
+
+Provides:       Arctis-Sound-Manager
+
+%description
+%_desc
+
+%package -n     python3-%{pypi_name}
+Summary:        %{summary}
+%{?python_provide:%python_provide python3-%{pypi_name}}
+
+%description -n python3-%{pypi_name}
+%_desc
+
+%prep
+%autosetup -n Arctis-Sound-Manager-%{version}
+
+%build
+%pyproject_wheel
+
+%install
+%pyproject_install
+%pyproject_save_files arctis_sound_manager
+
+install -Dm644 /dev/null %{buildroot}%{_udevrulesdir}/91-steelseries-arctis.rules
+python3 scripts/generate_udev_rules.py src/arctis_sound_manager/devices/ \
+    > %{buildroot}%{_udevrulesdir}/91-steelseries-arctis.rules
+
+# Systemd user services (single source of truth in systemd/, not heredocs)
+install -Dm644 systemd/arctis-manager.service       %{buildroot}%{_userunitdir}/arctis-manager.service
+install -Dm644 systemd/arctis-video-router.service  %{buildroot}%{_userunitdir}/arctis-video-router.service
+install -Dm644 systemd/arctis-gui.service           %{buildroot}%{_userunitdir}/arctis-gui.service
+
+# dinit service templates
+install -Dm644 dinit/arctis-manager %{buildroot}%{_datadir}/%{name}/dinit/arctis-manager
+install -Dm644 dinit/arctis-video-router %{buildroot}%{_datadir}/%{name}/dinit/arctis-video-router
+install -Dm644 dinit/arctis-gui %{buildroot}%{_datadir}/%{name}/dinit/arctis-gui
+install -Dm644 dinit/pipewire-filter-chain %{buildroot}%{_datadir}/%{name}/dinit/pipewire-filter-chain
+install -Dm755 scripts/asm-diag-dinit.py %{buildroot}%{_bindir}/asm-diag-dinit
+
+# Desktop entry
+install -Dm644 src/arctis_sound_manager/desktop/ArctisManager.desktop \
+    %{buildroot}%{_datadir}/applications/ArctisManager.desktop
+
+# Icon
+install -Dm644 src/arctis_sound_manager/gui/images/steelseries_logo.svg \
+    %{buildroot}%{_scalableiconsdir}/arctis-manager.svg
+
+# PipeWire configs
+install -Dm644 scripts/pipewire/10-arctis-virtual-sinks.conf \
+    %{buildroot}%{_datadir}/%{name}/pipewire/10-arctis-virtual-sinks.conf
+install -Dm644 scripts/pipewire/sink-virtual-surround-7.1-hesuvi.conf \
+    %{buildroot}%{_datadir}/%{name}/pipewire/sink-virtual-surround-7.1-hesuvi.conf
+
+# filter-chain.service (bundled for distros that don't ship one)
+install -Dm644 scripts/filter-chain.service \
+    %{buildroot}%{_datadir}/%{name}/filter-chain.service
+
+# First-run autostart (triggers asm-setup on first graphical login)
+install -Dm644 debian/asm-first-run.desktop \
+    %{buildroot}%{_sysconfdir}/xdg/autostart/asm-first-run.desktop
+
+%check
+%desktop_file_validate %{buildroot}%{_appsdir}/ArctisManager.desktop
+
+%post
+%systemd_user_post %{arctis_sound_manager_services}
+
+%preun
+%systemd_user_preun %{arctis_sound_manager_services}
+
+%postun
+%systemd_postun_with_restart %{arctis_sound_manager_services}
+
+%files -n python3-%{pypi_name} -f %{pyproject_files}
+%doc README.md CONTRIBUTING.md CHANGELOG.md
+%license LICENSE
+%{_bindir}/asm-cli
+%{_bindir}/asm-daemon
+%{_bindir}/asm-diag-dinit
+%{_bindir}/asm-gui
+%{_bindir}/asm-router
+%{_bindir}/asm-setup
+%{_udevrulesdir}/91-steelseries-arctis.rules
+%{_userunitdir}/arctis-manager.service
+%{_userunitdir}/arctis-video-router.service
+%{_userunitdir}/arctis-gui.service
+%{_datadir}/%{name}/dinit/arctis-manager
+%{_datadir}/%{name}/dinit/arctis-video-router
+%{_datadir}/%{name}/dinit/pipewire-filter-chain
+%{_bindir}/asm-diag-dinit
+%{_appsdir}/ArctisManager.desktop
+%{_scalableiconsdir}/arctis-manager.svg
+%{_datadir}/%{name}/pipewire/10-arctis-virtual-sinks.conf
+%{_datadir}/%{name}/pipewire/sink-virtual-surround-7.1-hesuvi.conf
+%{_datadir}/%{name}/filter-chain.service
+%{_sysconfdir}/xdg/autostart/asm-first-run.desktop
+%{_datadir}/python-arctis-sound-manager/dinit/arctis-gui
+
+%changelog
+* Mon Jun 15 2026 Owen Zimmerman <owen@fyralabs.com>
+- Initial commit

anda/apps/Arctis-Sound-Manager/anda.hcl

@@ -1,6 +1,6 @@
 project pkg {
     arches = ["x86_64"]
 	rpm {
-		spec = "supergfxctl.spec"
+		spec = "Arctis-Sound-Manager.spec"
 	}
 }

anda/apps/Arctis-Sound-Manager/update.rhai

@@ -0,0 +1 @@
+rpm.version(pypi("arctis-sound-manager"));

anda/apps/KTailctl/KTailctl.spec

@@ -0,0 +1,74 @@
+Name:       ktailctl
+Version:    0.21.5
+Release:    1%{?dist}
+Summary:    A GUI to monitor and manage Tailscale on your Linux desktop
+License:    GPL-3.0-only
+URL:        https://github.com/f-koehler/KTailctl
+Source0:    %{url}/archive/refs/tags/v%{version}.tar.gz
+
+BuildRequires:  cmake
+BuildRequires:  extra-cmake-modules
+BuildRequires:  gcc-c++
+BuildRequires:  golang
+BuildRequires:  json-devel
+BuildRequires:  golang
+BuildRequires:  kf6-breeze-icons-devel
+BuildRequires:  kf6-kconfig-devel
+BuildRequires:  kf6-kcoreaddons-devel
+BuildRequires:  kf6-kdbusaddons-devel
+BuildRequires:  kf6-kguiaddons-devel
+BuildRequires:  kf6-ki18n-devel
+BuildRequires:  kf6-kirigami-addons-devel
+BuildRequires:  kf6-kirigami-devel
+BuildRequires:  kf6-knotifications-devel
+BuildRequires:  kf6-kwindowsystem-devel
+BuildRequires:  qt6-qtbase-devel
+BuildRequires:  qt6-qtdeclarative-devel
+BuildRequires:  qt6-qtsvg-devel
+
+Requires:       tailscale
+Requires:       kf5-qqc2-desktop-style
+Requires:       hicolor-icon-theme
+
+Provides:       KTailctl
+
+Packager:       Owen Zimmerman <owen@fyralabs.com>
+
+%description
+%{summary}.
+
+%package static
+%pkg_static_files
+
+%prep
+%autosetup -n KTailctl-%{version}
+cd src/wrapper
+go mod vendor
+
+%conf
+%cmake
+
+%build
+%cmake_build
+
+%install
+%cmake_install
+
+%files
+%doc README.md
+%license LICENSE.txt
+%{_bindir}/ktailctl
+%{_libdir}/qt6/qml/org/fkoehler/KTailctl/Components/*.qml
+%{_libdir}/qt6/qml/org/fkoehler/KTailctl/Components/*.version
+%{_libdir}/qt6/qml/org/fkoehler/KTailctl/Components/*.qmltypes
+%{_libdir}/qt6/qml/org/fkoehler/KTailctl/Components/qmldir
+# Exclusive libs that the package needs to run
+%{_libdir}/qt6/qml/org/fkoehler/KTailctl/Components/libktailctl_components.so
+%{_libdir}/libktailctl_wrapper_logging.so
+%{_appsdir}/org.fkoehler.KTailctl.desktop
+%{_scalableiconsdir}/org.fkoehler.KTailctl.svg
+%{_metainfodir}/org.fkoehler.KTailctl.metainfo.xml
+
+%changelog
+* Sat May 23 2026 Owen Zimmerman <owen@fyralabs.com> - 0.21.5-1
+- Initial commit

anda/apps/KTailctl/anda.hcl

@@ -1,5 +1,5 @@
 project pkg {
     rpm {
-        spec = "libdwarf.spec"
+        spec = "KTailctl.spec"
     }
 }

anda/apps/KTailctl/update.rhai

@@ -0,0 +1 @@
+rpm.version(gh("f-koehler/KTailctl"));

anda/apps/anki-bin/anki-bin.spec

@@ -1,10 +1,10 @@
-%global xurl https://files.pythonhosted.org/packages/22/1c/37fe0377fd5fbfe27b17db20679d76aeb1cef7be3ddfb22e24c0bb62cf96/anki-25.9.2-cp39-abi3-manylinux_2_36_x86_64.whl
-%global aurl https://files.pythonhosted.org/packages/c1/49/484a786ea0e1b3659de9478f2546368c5970da60a1cd403cec1fa2f81d65/anki-25.9.2-cp39-abi3-manylinux_2_36_aarch64.whl
-%global qurl https://files.pythonhosted.org/packages/e5/d4/26016857a780290264866e1818b1a408106c379906fbd186a0aa26eb1054/aqt-25.9.2-py3-none-any.whl
+%global xurl https://files.pythonhosted.org/packages/9c/a2/05729090f54c5489c79dee9177fb1d99860850d311247256eebb360ec622/anki-26.5-cp310-abi3-manylinux_2_35_x86_64.whl
+%global aurl https://files.pythonhosted.org/packages/67/ec/354efa779cb7293aa5feb460f552ff475063149523afc1099433bbe8e65f/anki-26.5-cp310-abi3-manylinux_2_35_aarch64.whl
+%global qurl https://files.pythonhosted.org/packages/2b/a1/8978e8200afcc9a9b5440366e5d579f9fb1e959147004943cb0ec97cdf0f/aqt-26.5-py3-none-any.whl
 
 Name:			anki-bin
-Version:		25.9.2
-Release:		1%?dist
+Version:		26.5
+Release:		1%{?dist}
 Summary:		Flashcard program for using space repetition learning (Installed with wheel)
 License:		AGPL-3.0-or-later AND GPL-3.0-or-later AND LGPL-3.0-or-later AND MIT AND BSD-3-Clause AND CC-BY-SA-3.0 AND CC-BY-3.0 AND Apache-2.0 AND CC-BY-2.5
 URL:			https://apps.ankiweb.net/

anda/apps/anki-qt5/anki-qt5.spec

@@ -1,6 +1,6 @@
 Name:           anki-qt5
-Version:        25.09.2
-Release:        1%?dist
+Version:        26.05
+Release:        1%{?dist}
 Summary:        Flashcard program for using space repetition learning
 License:        AGPL-3.0-or-later AND GPL-3.0-or-later AND LGPL-3.0-or-later AND MIT AND BSD-3-Clause AND CC-BY-SA-3.0 AND CC-BY-3.0 AND Apache-2.0 AND CC-BY-2.5
 URL:            https://apps.ankiweb.net/

anda/apps/anki/anki.spec

@@ -1,6 +1,6 @@
 Name:           anki
-Version:        25.09.2
-Release:        1%?dist
+Version:        26.05
+Release:        1%{?dist}
 Summary:        Flashcard program for using space repetition learning
 License:        AGPL-3.0-or-later AND GPL-3.0-or-later AND LGPL-3.0-or-later AND MIT AND BSD-3-Clause AND CC-BY-SA-3.0 AND CC-BY-3.0 AND Apache-2.0 AND CC-BY-2.5
 URL:            https://apps.ankiweb.net/

anda/apps/audacity-freeworld/audacity-freeworld.spec

@@ -1,12 +1,12 @@
 %global __requires_exclude ^lib-.*.so            
 %global __provides_exclude ^lib-.*.so
 
-%global ver Audacity-3.7.7
+%global ver Audacity-3.7.8
 %global sanitized_ver %(echo %{ver} | sed 's/Audacity-//g')
 
 Name:    audacity-freeworld
 Version: %{sanitized_ver}
-Release: 1%?dist
+Release: 1%{?dist}
 Summary: Multitrack audio editor
 License: GPLv2
 URL:     https://www.audacityteam.org/

anda/apps/auto-cpufreq/anda.hcl

@@ -0,0 +1,6 @@
+project pkg {
+        arches = ["x86_64"]
+    rpm {
+        spec = "auto-cpufreq.spec"
+    }
+}

anda/apps/auto-cpufreq/auto-cpufreq.spec

@@ -0,0 +1,87 @@
+%global _desc Automatic CPU speed & power optimizer for Linux.
+
+Name:			python-auto-cpufreq
+Version:		3.0.0
+Release:		3%?dist
+Summary:		Automatic CPU speed & power optimizer for Linux
+License:		LGPL-3.0-or-later
+URL:			https://foolcontrol.org/?p=4603
+Source0:		https://github.com/AdnanHodzic/auto-cpufreq/archive/refs/tags/v%{version}.tar.gz
+Patch0:         prevent-install-and-copy.patch
+
+BuildRequires:  python3-devel
+BuildRequires:  python3-wheel
+BuildRequires:  python3-setuptools
+BuildRequires:  python3-pip
+BuildRequires:  python3-installer
+BuildRequires:  systemd-rpm-macros
+BuildRequires:  python3-poetry-core
+BuildRequires:  python3-poetry-dynamic-versioning
+BuildArch:      noarch
+
+Packager:	    Owen Zimmerman <owen@fyralabs.com>
+
+%description
+%_desc
+
+%package -n     python3-auto-cpufreq
+Summary:        %{summary}
+%{?python_provide:%python_provide python3-auto-cpufreq}
+
+%description -n python3-auto-cpufreq
+%_desc
+
+%prep
+%git_clone https://github.com/AdnanHodzic/auto-cpufreq.git %{version}
+%patch -P0 -p1
+
+%build
+%pyproject_wheel
+
+%install
+%pyproject_install
+%pyproject_save_files auto_cpufreq
+mkdir -p %{buildroot}%{_datadir}/polkit-1/actions/
+install -Dm644 scripts/org.auto-cpufreq.pkexec.policy %{buildroot}%{_datadir}/polkit-1/actions/
+install -Dm644 images/icon.png %{buildroot}%{_hicolordir}/512x512/apps/auto-cpufreq.png
+install -Dm644 images/icon.png %{buildroot}%{_datadir}/%{name}/icon.png
+
+mkdir -p %{buildroot}%{_datadir}/auto-cpufreq/scripts/
+mkdir -p %{buildroot}/opt/auto-cpufreq/
+mkdir -p %{buildroot}%{_appsdir}/
+mkdir -p %{buildroot}%{_unitdir}/
+
+install -Dm755 scripts/auto-cpufreq-install.sh %{buildroot}%{_datadir}/auto-cpufreq/scripts/
+install -Dm755 scripts/auto-cpufreq-remove.sh %{buildroot}%{_datadir}/auto-cpufreq/scripts/
+install -Dm644 scripts/auto-cpufreq.service %{buildroot}%{_unitdir}/auto-cpufreq.service
+install -Dm755 scripts/cpufreqctl.sh %{buildroot}%{_datadir}/auto-cpufreq/scripts/
+install -Dm644 scripts/style.css %{buildroot}%{_datadir}/auto-cpufreq/scripts/
+install -Dm644 scripts/auto-cpufreq-gtk.desktop %{buildroot}%{_appsdir}/
+
+%post
+%systemd_post auto-cpufreq.service
+
+%preun
+%systemd_preun auto-cpufreq.service
+
+%postun
+%systemd_postun_with_restart auto-cpufreq.service
+
+%files -n python3-auto-cpufreq -f %{pyproject_files}
+%doc README.md
+%license LICENSE
+%{_bindir}/auto-cpufreq
+%{_bindir}/auto-cpufreq-gtk
+%{_datadir}/polkit-1/actions/org.auto-cpufreq.pkexec.policy
+%{_hicolordir}/512x512/apps/auto-cpufreq.png
+%{_datadir}/%{name}/icon.png
+%{_unitdir}/auto-cpufreq.service
+%{_datadir}/auto-cpufreq/scripts/
+%{_appsdir}/auto-cpufreq-gtk.desktop
+
+%changelog
+* Tue Apr 07 2026 Owen Zimmerman <owen@fyralabs.com>
+- Add install fix patch
+
+* Sun Apr 05 2026 Owen Zimmerman <owen@fyralabs.com>
+- Initial commit

anda/apps/auto-cpufreq/prevent-install-and-copy.patch

@@ -0,0 +1,101 @@
+diff --git a/auto_cpufreq/core.py b/auto_cpufreq/core.py
+index f03e7de..2dff5fb 100755
+--- a/auto_cpufreq/core.py
++++ b/auto_cpufreq/core.py
+@@ -277,19 +277,12 @@ def get_current_gov():
+     )
+ 
+ def cpufreqctl():
+-    """
+-    deploy cpufreqctl.auto-cpufreq script
+-    """
+-    if not (IS_INSTALLED_WITH_SNAP or os.path.isfile("/usr/local/bin/cpufreqctl.auto-cpufreq")):
+-        copy(SCRIPTS_DIR / "cpufreqctl.sh", "/usr/local/bin/cpufreqctl.auto-cpufreq")
+-        call(["chmod", "a+x", "/usr/local/bin/cpufreqctl.auto-cpufreq"])
++    # scripts are already in the correct place
++    pass
+ 
+ def cpufreqctl_restore():
+-    """
+-    remove cpufreqctl.auto-cpufreq script
+-    """
+-    if not IS_INSTALLED_WITH_SNAP and os.path.isfile("/usr/local/bin/cpufreqctl.auto-cpufreq"):
+-        os.remove("/usr/local/bin/cpufreqctl.auto-cpufreq")
++    #no need to restore
++    pass
+ 
+ def footer(l=79): print("\n" + "-" * l + "\n")
+ 
+@@ -307,31 +300,8 @@ def remove_complete_msg():
+     footer()
+ 
+ def deploy_daemon():
+-    print("\n" + "-" * 21 + " Deploying auto-cpufreq as a daemon " + "-" * 22 + "\n")
+-
+-    cpufreqctl() # deploy cpufreqctl script func call
+-
+-    bluetooth_disable() # turn off bluetooth on boot
+-
+-    auto_cpufreq_stats_path.touch(exist_ok=True)
+-
+-    print("\n* Deploy auto-cpufreq install script")
+-    copy(SCRIPTS_DIR / "auto-cpufreq-install.sh", "/usr/local/bin/auto-cpufreq-install")
+-    call(["chmod", "a+x", "/usr/local/bin/auto-cpufreq-install"])
+-
+-    print("\n* Deploy auto-cpufreq remove script")
+-    copy(SCRIPTS_DIR / "auto-cpufreq-remove.sh", "/usr/local/bin/auto-cpufreq-remove")
+-    call(["chmod", "a+x", "/usr/local/bin/auto-cpufreq-remove"])
+-
+-    # output warning if gnome power profile is running
+-    gnome_power_detect_install()
+-    gnome_power_svc_disable()
+-
+-    tuned_svc_disable()
+-
+-    tlp_service_detect() # output warning if TLP service is detected
+-
+-    call("/usr/local/bin/auto-cpufreq-install", shell=True)
++    # prevent needless copying and system changes
++    pass
+ 
+ def deploy_daemon_performance():
+     print("\n" + "-" * 21 + " Deploying auto-cpufreq as a daemon (performance) " + "-" * 22 + "\n")
+@@ -363,37 +333,7 @@ def deploy_daemon_performance():
+ 
+     call("/usr/local/bin/auto-cpufreq-install", shell=True)
+ 
+-def remove_daemon():
+-    # check if auto-cpufreq is installed
+-    if not os.path.exists("/usr/local/bin/auto-cpufreq-remove"):
+-        print("\nauto-cpufreq daemon is not installed.\n")
+-        sys.exit(1)
+-
+-    print("\n" + "-" * 21 + " Removing auto-cpufreq daemon " + "-" * 22 + "\n")
+-
+-    bluetooth_enable() # turn on bluetooth on boot
+-
+-    # output warning if gnome power profile is stopped
+-    gnome_power_rm_reminder()
+-    gnome_power_svc_enable()
+-
+-    tuned_svc_enable()
+-
+-    # run auto-cpufreq daemon remove script
+-    call("/usr/local/bin/auto-cpufreq-remove", shell=True)
+-
+-    # remove auto-cpufreq-remove
+-    os.remove("/usr/local/bin/auto-cpufreq-remove")
+-
+-    # delete override pickle if it exists
+-    if os.path.exists(governor_override_state):  os.remove(governor_override_state)
+-
+-    # delete stats file
+-    if auto_cpufreq_stats_path.exists():
+-        if auto_cpufreq_stats_file is not None: auto_cpufreq_stats_file.close()
+-        auto_cpufreq_stats_path.unlink()
+-
+-    cpufreqctl_restore() # restore original cpufrectl script
++def remove_daemon(): pass
+ 
+ def gov_check():
+     for gov in AVAILABLE_GOVERNORS:

anda/apps/auto-cpufreq/update.rhai

@@ -0,0 +1 @@
+rpm.version(gh("AdnanHodzic/auto-cpufreq"));

anda/apps/bazzite-portal/bazzite-portal.spec

@@ -1,13 +1,13 @@
 Name:           bazzite-portal
-Version:        0.1.6
-Release:        2%?dist
+Version:        0.2.3
+Release:        1%{?dist}
 Summary:        Bazzite Portal is a tabbed frontend for curated script execution, with a focus on distro specific QOL shortcuts
 URL:            https://github.com/ublue-os/yafti-gtk
 Source0:        https://github.com/ublue-os/yafti-gtk/archive/refs/tags/v%{version}.tar.gz
 License:        GPL-3.0-only
 Requires:       python3-gobject
 Requires:       python3-PyYAML
-Requires:       gtk3
+Requires:       gtk4
 Provides:       Bazzite-Portal
 BuildArch:      noarch
 Packager:       Zacharias Xenakis <xarishark@outlook.com>
@@ -35,5 +35,8 @@ install -Dm 644 io.github.ublue_os.yafti_gtk.metainfo.xml %{buildroot}%{_metainf
 %{_metainfodir}/io.github.ublue_os.yafti_gtk.metainfo.xml
 
 %changelog
+* Sun Apr 19 2026 Xarishark <xarishark@outlook.com>
+- Upgraded to GTK4
+
 * Wed Jan 28 2026 Xarishark <xarishark@outlook.com>
-- Initial commit
+- Initial commit

anda/apps/bazzite-updater/anda.hcl

@@ -0,0 +1,5 @@
+project pkg {
+    rpm {
+        spec = "bazzite-updater.spec"
+    }
+}

anda/apps/bazzite-updater/bazzite-updater.spec

@@ -0,0 +1,77 @@
+%global appid io.github.rfrench3.bazzite-updater
+
+Name:           bazzite-updater
+Version:        0.7.3
+Release:        1%{?dist}
+Summary:        Update your Bazzite system
+
+License:        GPL-2.0-or-later AND BSD-3-Clause AND CC0-1.0
+URL:            https://github.com/rfrench3/bazzite-updater
+Source0:        %{url}/archive/refs/tags/%{version}.tar.gz
+
+Packager:       Robert French <frenchrobertm@outlook.com>
+
+BuildRequires:  desktop-file-utils
+BuildRequires:  libappstream-glib
+BuildRequires:  systemd-rpm-macros
+
+BuildRequires:  cmake
+BuildRequires:  extra-cmake-modules
+BuildRequires:  kf6-rpm-macros
+BuildRequires:  cmake(SDL3)
+BuildRequires:  cmake(Qt6Core)
+BuildRequires:  cmake(Qt6Gui)
+BuildRequires:  cmake(Qt6Qml)
+BuildRequires:  cmake(Qt6QuickControls2)
+BuildRequires:  cmake(Qt6Svg)
+BuildRequires:  cmake(Qt6Widgets)
+
+BuildRequires:  cmake(KF6Kirigami)
+BuildRequires:  cmake(KF6CoreAddons)
+BuildRequires:  cmake(KF6Config)
+BuildRequires:  cmake(KF6I18n)
+BuildRequires:  cmake(KF6IconThemes)
+BuildRequires:  cmake(KF6KirigamiAddons)
+
+Requires:       kf6-kirigami%{?_isa}
+Requires:       kf6-kirigami-addons%{?_isa}
+Requires:       kf6-qqc2-desktop-style%{?_isa}
+Requires:       which%{?_isa}
+Requires:       qt6-controllable%{?_isa}
+Requires:       uupd%{?_isa}
+Requires:       hicolor-icon-theme
+
+Provides:       bazzite-updater = %{evr}
+
+%description
+This is a convenient, easy-to-use interface for updating your Bazzite system.
+- Simple and powerful
+- Full support for all input types (keyboard/mouse, controller, touchscreen)
+
+%prep
+%autosetup
+
+%conf
+%cmake
+
+%build
+%cmake_build
+
+%install
+%cmake_install
+
+%check
+appstream-util validate-relax --nonet %{buildroot}%{_kf6_metainfodir}/%{appid}.*.xml || :
+desktop-file-validate %{buildroot}%{_kf6_datadir}/applications/%{appid}.desktop
+
+%files
+%license LICENSES/{BSD-3-Clause.txt,CC0-1.0.txt,GPL-2.0-or-later.txt}
+%doc README.md
+%{_bindir}/bazzite-updater
+%{_appsdir}/%{appid}.desktop
+%{_metainfodir}/%{appid}.*.xml
+%{_scalableiconsdir}/%{appid}.svg
+
+%changelog
+* Thu Feb 05 2026 Robert French
+- Initial rpm build of Bazzite Updater

anda/apps/bazzite-updater/update.rhai

@@ -0,0 +1 @@
+rpm.version(gh("rfrench3/bazzite-updater"));

anda/apps/bitwarden/cli.bin/bitwarden-cli.bin.spec

@@ -1,6 +1,6 @@
 Name:           bitwarden-cli.bin
-Version:        2026.1.0
-Release:        1%?dist
+Version:        2026.5.0
+Release:        1%{?dist}
 Summary:        Bitwarden command-line client
 License:        GPL-3.0-only
 URL:            https://bitwarden.com

anda/apps/bitwarden/cli/bitwarden-cli.spec

@@ -6,8 +6,8 @@
 %endif
 
 Name:           bitwarden-cli
-Version:        2026.1.0
-Release:        1%?dist
+Version:        2026.5.0
+Release:        1%{?dist}
 Summary:        Bitwarden command-line client
 License:        GPL-3.0-only
 URL:            https://bitwarden.com

anda/apps/blackbox-terminal/anda.hcl

@@ -1,5 +0,0 @@
-project pkg {
-	rpm {
-		spec = "blackbox-terminal.spec"
-	}
-}

anda/apps/blackbox-terminal/blackbox-terminal.spec

@@ -1,58 +0,0 @@
-Name:           blackbox-terminal
-Version:        0.14.0
-Release:        1%{?dist}
-Summary:        A beautiful GTK 4 terminal
-License:        GPL-3.0
-URL:            https://gitlab.gnome.org/raggesilver/blackbox
-BuildRequires:  vala meson gettext 
-BuildRequires:  pkgconfig(gtk4) >= 4.6.2
-BuildRequires:  pkgconfig(gio-2.0) >= 2.50
-BuildRequires:  libadwaita-devel >= 1.1
-BuildRequires:  pkgconfig(pqmarble) >= 2
-BuildRequires:  pkgconfig(vte-2.91-gtk4) >= 0.69.0
-BuildRequires:  pkgconfig(json-glib-1.0) >= 1.4.4
-BuildRequires:  pkgconfig(libxml-2.0) >= 2.9.12
-BuildRequires:  pkgconfig(librsvg-2.0) >= 2.54.0
-BuildRequires:  pkgconfig(libpcre2-8)
-BuildRequires:  pkgconfig(graphene-gobject-1.0)
-BuildRequires:  pkgconfig(gee-0.8)
-BuildRequires:  desktop-file-utils libappstream-glib cmake
-Source0:        %url/-/archive/v%version/blackbox-v%version.tar.gz
-
-%description
-%{summary}.
-
-%prep
-%autosetup -p1 -n blackbox-v%version
-
-%build
-%meson
-%meson_build
-
-%install
-%meson_install
-
-%check
-appstream-util validate-relax --nonet %buildroot/%_datadir/metainfo/com.raggesilver.BlackBox.metainfo.xml
-
-%files
-%doc README.md
-%license COPYING
-%_bindir/blackbox
-%_bindir/terminal-toolbox
-%_datadir/applications/com.raggesilver.BlackBox.desktop
-%_datadir/metainfo/com.raggesilver.BlackBox.metainfo.xml
-%_datadir/blackbox/
-%_datadir/glib-2.0/schemas/com.raggesilver.BlackBox.gschema.xml
-%_datadir/icons/hicolor/scalable/actions/com.raggesilver.BlackBox-fullscreen-symbolic.svg
-%_datadir/icons/hicolor/scalable/actions/com.raggesilver.BlackBox-show-headerbar-symbolic.svg
-%_datadir/icons/hicolor/scalable/actions/external-link-symbolic.svg
-%_datadir/icons/hicolor/scalable/actions/settings-symbolic.svg
-%_datadir/icons/hicolor/scalable/apps/com.raggesilver.BlackBox.svg
-%_datadir/locale/*/LC_MESSAGES/blackbox.mo
-
-
-
-%changelog
-* Sun Oct 23 2022 windowsboy111 <windowsboy111@fyralabs.com>
-- Initial package

anda/apps/blackbox-terminal/update.rhai

@@ -1,4 +0,0 @@
-let txt = get("https://gitlab.gnome.org/api/v4/projects/20397/releases/");
-let ver = txt.json_arr()[0].tag_name;
-ver.crop(1);
-rpm.version(ver);

anda/apps/chdig/chdig.spec

@@ -1,8 +1,8 @@
 %undefine __brp_mangle_shebangs
 
 Name:           chdig
-Version:        26.2.3
-Release:        1%?dist
+Version:        26.6.1
+Release:        1%{?dist}
 Summary:        Dig into ClickHouse with TUI interface
 URL:            https://github.com/azat/chdig
 Source0:        %url/archive/refs/tags/v%{version}.tar.gz

anda/apps/chrultrabook-tools/chrultrabook-tools.spec

@@ -1,7 +1,7 @@
 %undefine __brp_mangle_shebangs
 
 Name:           chrultrabook-tools
-Version:        3.1.4
+Version:        3.1.6
 Release:        1%{?dist}
 Summary:        User-friendly configuration utility for Chromebooks running an alternate OS
 URL:            https://github.com/death7654/Chrultrabook-Tools

anda/apps/coolercontrol/coolercontrol.spec

@@ -8,8 +8,8 @@ for background device management, as well as a GUI to expertly customize your se
 %global __brp_mangle_shebangs %{nil}
 
 Name:           coolercontrol
-Version:        3.1.1
-Release:        3%?dist
+Version:        4.3.1
+Release:        1%{?dist}
 Summary:        Cooling device control for Linux
 ExclusiveArch:  x86_64 aarch64
 License:        GPL-3.0-or-later

anda/apps/discord-canary-openasar/discord-canary-openasar.spec

@@ -6,8 +6,8 @@
 %global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
 
 Name:           discord-canary-openasar
-Version:        0.0.886
-Release:        1%?dist
+Version:        1.0.1317
+Release:        1%{?dist}
 Summary:        A snappier Discord rewrite with features like further customization and theming
 License:        MIT AND https://discord.com/terms
 URL:            https://github.com/GooseMod/OpenAsar

anda/apps/discord-canary/discord-canary.spec

@@ -1,20 +1,17 @@
-%define debug_package %{nil}
-%global _build_id_links none
-
-# Exclude private libraries
-%global __requires_exclude libffmpeg.so
-%global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
-
 Name:           discord-canary
-Version:        0.0.886
-Release:        1%?dist
+Version:        1.0.1317
+Release:        1%{?dist}
 Summary:        Free Voice and Text Chat for Gamers
 URL:            discord.com
-Source0:        https://dl-canary.discordapp.net/apps/linux/%{version}/discord-canary-%{version}.tar.gz
-License:        https://discord.com/terms
-Requires:       glibc GConf2 nspr >= 4.13 nss >= 3.27 libX11 >= 1.6 libXtst >= 1.2
+Source0:        https://dl-canary.discordapp.net/apps/linux/%{version}/%{name}-%{version}.tar.gz
+Source1:        https://discord.com/terms#/terms.html
+License:        Proprietary
+Requires:       zenity
 Group:          Applications/Internet
 ExclusiveArch:  x86_64
+
+%electronmeta -D
+
 %description
 All-in-one voice and text chat for gamers that's free, secure, and works on
 both your desktop and phone.
@@ -25,23 +22,23 @@ both your desktop and phone.
 %build
 
 %install
-rm -rf $RPM_BUILD_ROOT
-mkdir -p %{buildroot}%{_bindir}
-mkdir -p %{buildroot}%{_datadir}/discord-canary
-cp -rv * %{buildroot}%{_datadir}/discord-canary
-mkdir -p %{buildroot}%{_datadir}/applications/
-mkdir -p %{buildroot}%{_datadir}/pixmaps
-ln -s %_datadir/discord-canary/discord-canary.desktop %{buildroot}%{_datadir}/applications/
-ln -s %_datadir/discord-canary/discord.png %{buildroot}%{_datadir}/pixmaps/discord-canary.png
-ln -s %_datadir/discord-canary/DiscordCanary %buildroot%_bindir/discord-canary
+install -Dpm755 updater_bootstrap -t %{buildroot}%{_datadir}/%{name}
+install -Dpm755 %{name} -t %{buildroot}%{_bindir}
+install -Dpm644 discord.png %{buildroot}%{_datadir}/pixmaps/%{name}.png
+%desktop_file_install %{name}.desktop
+cp %{SOURCE1} -t .
 
 %files
-%_bindir/discord-canary
-%{_datadir}/discord-canary/
-%{_datadir}/applications/discord-canary.desktop
-%{_datadir}/pixmaps/discord-canary.png
+%license terms.html
+%{_bindir}/%{name}
+%{_datadir}/%{name}/
+%{_appsdir}/%{name}.desktop
+%{_datadir}/pixmaps/%{name}.png
 
 %changelog
+* Tue May 5 2026 Gilver E. <roachy@fyralabs.com> - 1.0.1025-2
+- Update build for new bootstrap format
+
 * Thu Dec 01 2022 root - 0.0.144-1
 - new version
 

anda/apps/discord-openasar/discord-openasar.spec

@@ -6,8 +6,8 @@
 %global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
 
 Name:           discord-openasar
-Version:        0.0.125
-Release:        1%?dist
+Version:        1.0.143
+Release:        1%{?dist}
 Summary:        A snappier Discord rewrite with features like further customization and theming
 License:        MIT AND https://discord.com/terms
 URL:            https://github.com/GooseMod/OpenAsar

anda/apps/discord-ptb-openasar/discord-ptb-openasar.spec

@@ -6,8 +6,8 @@
 %global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
 
 Name:           discord-ptb-openasar
-Version:        0.0.179
-Release:        1%?dist
+Version:        1.0.196
+Release:        1%{?dist}
 Summary:        A snappier Discord rewrite with features like further customization and theming
 License:        MIT AND https://discord.com/terms
 URL:            https://github.com/GooseMod/OpenAsar

anda/apps/discord-ptb/discord-ptb.spec

@@ -1,24 +1,17 @@
-%define debug_package %{nil}
-%global _build_id_links none
-
-# Exclude private libraries
-%global __requires_exclude libffmpeg.so
-%global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
-
 Name:           discord-ptb
-Version:        0.0.179
-Release:        1%?dist
+Version:        1.0.196
+Release:        1%{?dist}
 Summary:        Free Voice and Text Chat for Gamers.
 URL:            https://discord.com
-Source0:        https://dl-ptb.discordapp.net/apps/linux/%{version}/discord-ptb-%{version}.tar.gz
-License:        https://discord.com/terms
-Requires:       glibc GConf2
-Requires:       nspr >= 4.13
-Requires:       nss >= 3.27
-Requires:       libX11 >= 1.6
-Requires:       libXtst >= 1.2
+Source0:        https://dl-ptb.discordapp.net/apps/linux/%{version}/%{name}-%{version}.tar.gz
+Source1:        https://discord.com/terms#/terms.html
+License:        Proprietary
+Requires:       zenity
 Group:          Applications/Internet
 ExclusiveArch:  x86_64
+
+%electronmeta -D
+
 %description
 All-in-one voice and text chat for gamers that's free, secure, and works on
 both your desktop and phone.
@@ -29,23 +22,23 @@ both your desktop and phone.
 %build
 
 %install
-rm -rf $RPM_BUILD_ROOT
-mkdir -p %{buildroot}%{_bindir}
-mkdir -p %{buildroot}%{_datadir}/discord-ptb
-cp -rv * %{buildroot}%{_datadir}/discord-ptb
-mkdir -p %{buildroot}%{_datadir}/applications/
-mkdir -p %{buildroot}%{_datadir}/pixmaps
-ln -s %_datadir/discord-ptb/discord-ptb.desktop %{buildroot}%{_datadir}/applications/
-ln -s %_datadir/discord-ptb/discord.png %{buildroot}%{_datadir}/pixmaps/discord-ptb.png
-ln -s %_datadir/discord-ptb/Discord %buildroot%_bindir/discord-ptb
+install -Dpm755 updater_bootstrap -t %{buildroot}%{_datadir}/%{name}
+install -Dpm755 %{name} -t %{buildroot}%{_bindir}
+install -Dpm644 discord.png %{buildroot}%{_datadir}/pixmaps/%{name}.png
+%desktop_file_install %{name}.desktop
+cp %{SOURCE1} -t .
 
 %files
-%_bindir/discord-ptb
-%{_datadir}/discord-ptb/
-%{_datadir}/applications/discord-ptb.desktop
-%{_datadir}/pixmaps/discord-ptb.png
+%license terms.html
+%{_bindir}/%{name}
+%{_datadir}/%{name}/
+%{_appsdir}/%{name}.desktop
+%{_datadir}/pixmaps/%{name}.png
 
 %changelog
+* Tue May 5 2026 Gilver E. <roachy@fyralabs.com> - 1.0.189-2
+- Update build for new bootstrap format
+
 * Thu Nov 17 2022 madonuko <mado@fyralabs.com> - 0.0.35-1
 - new version
 

anda/apps/discord/discord.spec

@@ -1,24 +1,17 @@
-%define debug_package %{nil}
-%global _build_id_links none
+Name:           discord
+Version:        1.0.143
+Release:        1%{?dist}
+Summary:        Free Voice and Text Chat for Gamers
+URL:            https://discord.com
+Source0:        https://dl.discordapp.net/apps/linux/%{version}/%{name}-%{version}.tar.gz
+Source1:        https://discord.com/terms#/terms.html
+License:        Proprietary
+Requires:       zenity
+Group:          Applications/Internet
+ExclusiveArch:  x86_64
 
-# Exclude private libraries
-%global __requires_exclude libffmpeg.so
-%global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
+%electronmeta -D
 
-Name:			discord
-Version:		0.0.125
-Release:		1%?dist
-Summary:		Free Voice and Text Chat for Gamers
-URL:			https://discord.com
-Source0:		https://dl.discordapp.net/apps/linux/%{version}/discord-%{version}.tar.gz
-License:		https://discord.com/terms
-Requires:		glibc GConf2
-Requires:		nspr >= 4.13
-Requires:		nss >= 3.27
-Requires:		libX11 >= 1.6
-Requires:		libXtst >= 1.2
-Group:			Applications/Internet
-ExclusiveArch:	x86_64
 %description
 All-in-one voice and text chat for gamers that's free, secure, and works on
 both your desktop and phone.
@@ -29,22 +22,23 @@ both your desktop and phone.
 %build
 
 %install
-rm -rf $RPM_BUILD_ROOT
-mkdir -p %{buildroot}%{_bindir}
-mkdir -p %{buildroot}%{_datadir}/discord
-cp -rv * %{buildroot}%{_datadir}/discord
-mkdir -p %{buildroot}%{_datadir}/applications/
-mkdir -p %{buildroot}%{_datadir}/pixmaps
-ln -s %_datadir/discord/discord.desktop %{buildroot}%{_datadir}/applications/discord.desktop
-ln -s %_datadir/discord/discord.png %{buildroot}%{_datadir}/pixmaps/discord.png
-ln -s %_datadir/discord/Discord %buildroot%_bindir/discord
+install -Dpm755 updater_bootstrap -t %{buildroot}%{_datadir}/%{name}
+install -Dpm755 %{name} -t %{buildroot}%{_bindir}
+install -Dpm644 %{name}.png -t %{buildroot}%{_datadir}/pixmaps
+%desktop_file_install %{name}.desktop
+cp %{SOURCE1} -t .
 
 %files
-%_bindir/discord
-%{_datadir}/discord/
-%{_datadir}/applications/discord.desktop
-%{_datadir}/pixmaps/discord.png
+%license terms.html
+%{_bindir}/%{name}
+%{_datadir}/%{name}/
+%{_appsdir}/%{name}.desktop
+%{_datadir}/pixmaps/%{name}.png
 
 %changelog
+* Tue May 5 2026 Gilver E. <roachy@fyralabs.com> - 1.0.136-4
+- Remove unused files from package
+* Mon May 4 2026 Gilver E. <roachy@fyralabs.com> - 1.0.136-2
+- Updated /usr/bin symlink
 * Thu Jan 19 2023 madonuko <mado@fyralabs.com> - 0.0.143-1
 - Initial package

anda/apps/envision/envision.spec

@@ -1,10 +1,10 @@
-%global commit b50c32d7c3e74af4faeb92fb0e8f49108d85ff90
-%global commit_date 20251211
+%global commit 373646a12620a82e9684d79c1066f9b48bf3eed1
+%global commit_date 20260613
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 Name:           envision-nightly
 Version:        %commit_date.%shortcommit
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        UI for building, configuring and running Monado, the open source OpenXR runtime
 SourceLicense:  AGPL-3.0-or-later
 License:        ((Apache-2.0 OR MIT) AND BSD-3-Clause) AND ((MIT OR Apache-2.0) AND Unicode-3.0) AND (0BSD OR MIT OR Apache-2.0) AND AGPL-3.0-or-later AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR ISC OR MIT) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND Apache-2.0 AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND ISC AND (MIT OR Apache-2.0) AND (MIT OR Zlib OR Apache-2.0) AND MIT AND Unicode-3.0 AND (Unlicense OR MIT) AND Zlib

anda/apps/falcond-gui/falcond-gui.spec

@@ -1,6 +1,8 @@
+%global appid com.pikaos.falcondgui
+
 Name:           falcond-gui
-Version:        1.0.2
-Release:        1%?dist
+Version:        1.0.3
+Release:        1%{?dist}
 Summary:        A GTK4/LibAdwaita application to control and monitor the Falcond gaming optimization daemon
 SourceLicense:  MIT
 License:        (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND CC0-1.0 AND ISC AND (MIT OR Apache-2.0) AND MIT AND (Unlicense OR MIT)
@@ -30,12 +32,12 @@ falcond-gui provides a user-friendly graphical interface for managing falcond. I
 
 %install
 %cargo_install
-desktop-file-install res/%{name}.desktop
-install -Dm644 res/falcond.png -t %{buildroot}%{_hicolordir}/512x512/apps/
+%desktop_file_install res/%{appid}.desktop
+install -Dm644 res/%{appid}.png -t %{buildroot}%{_hicolordir}/512x512/apps/
 %{cargo_license_online} > LICENSE.dependencies
 
 %check
-desktop-file-validate %{buildroot}%{_datadir}/applications/%{name}.desktop
+%desktop_file_validate %{buildroot}%{_datadir}/applications/%{appid}.desktop
 
 %posttrans
 /usr/bin/gtk-update-icon-cache %{_datadir}/icons/hicolor/ &>/dev/null || :
@@ -44,8 +46,8 @@ desktop-file-validate %{buildroot}%{_datadir}/applications/%{name}.desktop
 %doc ../README.md
 %license ../LICENSE.md
 %{_bindir}/%{name}
-%{_hicolordir}/512x512/apps/falcond.png
-%{_appsdir}/%{name}.desktop
+%{_hicolordir}/512x512/apps/%{appid}.png
+%{_appsdir}/%{appid}.desktop
 
 %changelog
 * Thu Jan 1 2026 Gilver E. <roachy@fyralabs.com> - 1.0.0-1

anda/apps/falcond-gui/update.rhai

@@ -1 +1 @@
-rpm.version(get("https://git.pika-os.com/api/v1/repos/general-packages/falcond-gui/releases").json_arr()[0].tag_name);
+rpm.version(gitea("git.pika-os.com", "general-packages/falcond-gui"));

anda/apps/feishin/feishin.spec

@@ -6,7 +6,7 @@
 %global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
 
 Name:			feishin
-Version:		1.9.0
+Version:		1.13.0
 Release:		1%{?dist}
 Summary:		A modern self-hosted music player
 License:		GPL-3.0

anda/apps/flameshot/flameshot-nightly.spec

@@ -1,9 +1,9 @@
 #? https://github.com/flameshot-org/flameshot/blob/master/packaging/rpm/fedora/flameshot.spec
 
 %global ver 13.3.0
-%global commit 739a809557d8be3ee8f3f7d16dffd0cfd391de09
+%global commit c47870ac95cdce9e63c19198b1f1c0bf57504cf6
 %global shortcommit %{sub %{commit} 1 7}
-%global commit_date 20260208
+%global commit_date 20260615
 %global devel_name QtColorWidgets
 %global _distro_extra_cflags -fuse-ld=mold
 %global _distro_extra_cxxflags -fuse-ld=mold

anda/apps/fontviewer/fontviewer.spec

@@ -1,7 +1,7 @@
 Name:           fontviewer
 Epoch:          1
-Version:        1.2.0
-Release:        1%?dist
+Version:        1.3.0
+Release:        1%{?dist}
 Summary:        View and install fonts
 
 License:        GPL-2.0

anda/apps/framework-tool-tui/anda.hcl

@@ -0,0 +1,6 @@
+project pkg {
+      arches = ["x86_64"]
+    rpm {
+      spec = "framework-tool-tui.spec"
+    }
+}

anda/apps/framework-tool-tui/framework-tool-tui.spec

@@ -0,0 +1,53 @@
+%undefine __brp_mangle_shebangs
+
+Name:           framework-tool-tui
+Version:        0.8.3
+Release:        1%{?dist}
+Summary:        A TUI for controlling and monitoring Framework Computers hardware built in Rust
+URL:            https://github.com/grouzen/framework-tool-tui
+Source0:        %{url}/archive/refs/tags/v%{version}.tar.gz
+License:        MIT AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR BSL-1.0) AND (MIT OR Apache-2.0) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND BSD-3-Clause AND (MIT OR Apache-2.0) AND (MIT OR Zlib OR Apache-2.0) AND MPL-2.0 AND Zlib AND (Unlicense OR MIT)
+BuildRequires:  anda-srpm-macros
+BuildRequires:  cargo-rpm-macros
+BuildRequires:  pkgconfig(libudev)
+BuildArch:      x86_64
+
+Packager:       Owen Zimmerman <owen@fyralabs.com>
+
+%description
+A snappy TUI dashboard for controlling and monitoring your Framework Laptop
+hardware — charging, privacy, lighting, USB PD ports, and more.
+
+%package doc
+Summary:	Documentations for %{name}
+BuildArch:	noarch
+
+%description doc
+Documentations for %{name}.
+
+%prep
+%autosetup
+%cargo_prep_online
+
+%build
+%cargo_build
+
+%install
+install -Dm755 target/rpm/framework-tool-tui %{buildroot}%{_bindir}/framework-tool-tui
+%{cargo_license_online} > LICENSE.dependencies
+
+mkdir -p %{buildroot}%{_docdir}/%{name}/
+cp -r docs/*.md %{buildroot}%{_docdir}/%{name}/
+
+%files
+%{_bindir}/framework-tool-tui
+%license LICENSE
+%license LICENSE.dependencies
+%doc README.md
+
+%files doc
+%{_docdir}/%{name}/
+
+%changelog
+* Thu Apr 23 2026 Owen Zimmerman <owen@fyralabs.com>
+- Initial commit

anda/apps/framework-tool-tui/update.rhai

@@ -0,0 +1 @@
+rpm.version(gh("grouzen/framework-tool-tui"));

anda/apps/goofcord/nightly/goofcord-nightly.spec

@@ -1,14 +1,14 @@
-%global commit 4ea08fb13e496995af3490d7e501aee2f3c20b4d
+%global commit 7cd0395ebd3e0591c0ae4f850f22425b0be30a45
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global commit_date 20260211
-%global ver 2.0.1^
+%global commit_date 20260612
+%global ver 2.2.1^
 %global base_name goofcord
 %global git_name GoofCord
 %global appid io.github.milkshiift.GoofCord
 
 Name:          %{base_name}-nightly
 Version:       %{ver}%{commit_date}.git.%{shortcommit}
-Release:       1%?dist
+Release:       1%{?dist}
 License:       OSL-3.0
 Summary:       A privacy-minded Legcord fork.
 Group:         Applications/Internet

anda/apps/goofcord/stable/goofcord.spec

@@ -2,8 +2,8 @@
 %global appid io.github.milkshiift.GoofCord
 
 Name:          goofcord
-Version:       2.0.1
-Release:       2%{?dist}
+Version:       2.2.1
+Release:       1%{?dist}
 License:       OSL-3.0
 Summary:       A privacy-minded Legcord fork.
 Group:         Applications/Internet
@@ -19,7 +19,7 @@ Packager:      Gilver E. <roachy@fyralabs.com>
 A highly configurable and privacy minded Discord client.
 
 %prep
-%autosetup -n %{git_name}-%{version}
+%autosetup -p1 -n %{git_name}-%{version}
 %ifarch %{arm64} armv7hl armv7l
 sed -i '/\"x64\",/d' electron-builder.ts
 %endif

anda/apps/gurk/gurk.spec

@@ -1,8 +1,8 @@
 %undefine __brp_mangle_shebangs
 
 Name:           gurk
-Version:        0.9.0
-Release:        1%?dist
+Version:        0.9.3
+Release:        1%{?dist}
 Summary:        Signal Messenger client for terminal
 License:        AGPL-3.0-or-later AND (MIT OR Apache-2.0) AND Unicode-3.0 AND (0BSD OR MIT OR Apache-2.0) AND Apache-2.0 AND ISC AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR ISC OR MIT) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND BSD-3-Clause AND (BSD-3-Clause OR Apache-2.0) AND (BSD-3-Clause OR MIT OR Apache-2.0) AND BSL-1.0 AND CDLA-Permissive-2.0 AND MIT AND (MIT OR Apache-2.0) AND (MIT OR Apache-2.0 OR BSD-1-Clause) AND (MIT OR Apache-2.0 OR LGPL-2.1-or-later) AND (MIT OR Apache-2.0 OR Zlib) AND (MIT OR Zlib OR Apache-2.0) AND MPL-2.0 AND (Unlicense OR MIT) AND Zlib AND (Zlib OR Apache-2.0 OR MIT)
 URL:            https://github.com/boxdot/gurk-rs

anda/apps/halloy/halloy.spec

@@ -4,8 +4,8 @@
 %global crate halloy
 
 Name:           halloy
-Version:        2026.4
-Release:        1%?dist
+Version:        2026.7.2
+Release:        1%{?dist}
 Summary:        An open-source IRC client written in Rust, with the Iced GUI library
 Packager:      Yoong jin <solomoncyj@gmail.com>
 SourceLicense:  GPL-3.0-or-later

anda/apps/helium-browser-bin/helium-browser-bin.spec

@@ -11,7 +11,7 @@
 %endif
 
 Name:           helium-browser-bin
-Version:        0.10.4.1
+Version:        0.13.4.1
 Release:        1%{?dist}
 Summary:        Private, fast, and honest web browser based on Chromium
 
@@ -21,7 +21,7 @@ License:        GPL-3.0-only AND BSD-3-Clause
 Source0:        https://github.com/imputnet/helium-linux/releases/download/%{version}/helium-%{version}-%{arch}_linux.tar.xz
 Source1:        https://github.com/imputnet/helium-linux/archive/refs/tags/%{version}.tar.gz
 Source2:        net.imput.helium.metainfo.xml
-Source3:        net.imput.helium.desktop
+Source3:        helium.desktop
 
 ExclusiveArch:  x86_64 aarch64
 
@@ -47,7 +47,7 @@ tar --strip-components=1 -zxvf %{SOURCE1}
 install -dm755 %{buildroot}%{_libdir}/%{name}
 cp -a * %{buildroot}%{_libdir}/%{name}/
 
-install -Dm644 %{SOURCE3} %{buildroot}%{_appsdir}/%{appid}.desktop
+%desktop_file_install %{S:3}
 
 install -Dm644 product_logo_256.png %{buildroot}%{_hicolordir}/256x256/apps/%{appid}.png
 
@@ -111,7 +111,7 @@ chmod 755 %{buildroot}%{_bindir}/%{name}
 %{_libdir}/%{name}/
 # shebang reasons
 %attr(0755,root,root) %{_bindir}/%{name}
-%{_appsdir}/%{appid}.desktop
+%{_appsdir}/helium.desktop
 %{_hicolordir}/256x256/apps/%{appid}.png
 %{_metainfodir}/%{appid}.metainfo.xml
 

anda/apps/juce/juce.spec

@@ -1,7 +1,7 @@
 Name:           juce
-Version:        8.0.12
-Release:        3%{?dist}
-License:        AGPL-3.0
+Version:        8.0.13
+Release:        1%{?dist}
+License:        AGPL-3.0-or-later
 Summary:        framework for audio application and plug-in development
 URL:            https://juce.com
 Source:         https://github.com/juce-framework/JUCE/archive/refs/tags/%{version}.tar.gz
@@ -46,10 +46,12 @@ Documentation files for %{name}
 %prep
 %autosetup -p1 -n JUCE-%{version}
 
-%build
+%conf
 %cmake -DJUCER_ENABLE_GPL_MODE=1    \
        -DJUCE_BUILD_EXTRAS=ON       \
        -DJUCE_TOOL_INSTALL_DIR=bin
+
+%build
 %cmake_build
 
 pushd docs/doxygen

anda/apps/komikku/komikku.spec

@@ -3,19 +3,18 @@
 %global gtk4_version        4.14.4
 %global libadwaita_version  1.5.1
 %global pure_protobuf_version 2.0.0
-%global raw_ver v1.101.0
 
 Name:           komikku
-Version:        1.101.0
+Version:        50.7.0
 %forgemeta
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        A manga reader for GNOME
 
 BuildArch:      noarch
 
 License:        GPL-3.0-or-later
 URL:            https://apps.gnome.org/Komikku/
-Source0:        https://codeberg.org/valos/%{appname}/archive/%{raw_ver}.tar.gz#/%{name}-%{version}.tar.gz
+Source0:        https://codeberg.org/valos/%{appname}/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
 
 BuildRequires:  desktop-file-utils
 BuildRequires:  intltool

anda/apps/komikku/update.rhai

@@ -1,4 +1 @@
-let latest_tag = get("https://codeberg.org/api/v1/repos/valos/Komikku/tags").json_arr()[0].name;
-let new_version = find("([\\.\\d]+)", latest_tag, 1);
-rpm.global("raw_ver", latest_tag);
-rpm.version(new_version);
+rpm.version(codeberg("valos/Komikku"));

anda/apps/kontainer/anda.hcl

@@ -0,0 +1,5 @@
+project pkg {
+        rpm {
+            spec = "kontainer.spec"
+        }
+}

anda/apps/kontainer/kontainer.spec

@@ -0,0 +1,59 @@
+%global appid   io.github.DenysMb.Kontainer
+
+Name:           kontainer
+Version:        1.4.1
+Release:        1%?dist
+Summary:        A Kirigami Distrobox GUI
+URL:            https://github.com/DenysMb/Kontainer
+Source0:        %{url}/archive/refs/tags/%{version}.tar.gz
+
+License:        GPL-3.0-or-later AND MIT AND CC0-1.0
+BuildRequires:  cmake >= 3.20
+BuildRequires:  gcc-c++
+BuildRequires:  extra-cmake-modules
+BuildRequires:  pkgconfig(Qt6Quick)
+BuildRequires:  kf6-kirigami-devel
+BuildRequires:  kf6-ki18n-devel
+BuildRequires:  kf6-kcoreaddons-devel
+BuildRequires:  kf6-kiconthemes-devel
+BuildRequires:  kf6-qqc2-desktop-style
+BuildRequires:  kf6-kio-devel
+BuildRequires:  kf6-kirigami-addons-devel
+BuildRequires:  kf6-kirigami-addons
+
+Requires: kf6-kirigami-addons
+Requires: kf6-qqc2-desktop-style
+Requires: distrobox
+
+Packager:       Cayden Granger <caydengranger@safri.cloud>
+
+%description
+Graphical user interface for Distrobox container management.
+
+A native KDE application for managing Distrobox containers with ease.
+
+%prep
+%autosetup -n Kontainer-%{version}
+
+%conf
+%cmake
+
+%build
+%cmake_build
+
+%install
+%cmake_install
+
+%find_lang kontainer
+
+%files -f kontainer.lang
+%license LICENSES/
+%doc README.md
+%{_bindir}/kontainer
+%{_appsdir}/%{appid}.desktop
+%{_scalableiconsdir}/%{appid}.svg
+%{_metainfodir}/%{appid}.metainfo.xml
+
+%changelog
+* Fri Jun 19 2026 Cayden Granger <caydengranger@safri.cloud>
+- Initial package

anda/apps/kontainer/update.rhai

@@ -0,0 +1 @@
+rpm.version(gh_tag("DenysMb/Kontainer"))

anda/apps/kopia/kopia.spec

@@ -3,7 +3,7 @@
 
 Name:           kopia
 %electronmeta -D
-Version:        0.22.3
+Version:        0.23.1
 Release:        1%{?dist}
 Summary:        A backup/restore tool that allows you to create encrypted snapshots
 
@@ -43,6 +43,7 @@ A graphical user interface for %{name}.
 %build
 %global gomodulesmode GO111MODULE=on
 %gobuild -o %{name} .
+echo "Electron Builder" > %{rpmbuilddir}/webapp-tool.txt
 
 pushd app
 %npm_build -B

anda/apps/legcord/nightly/anda.hcl

@@ -4,6 +4,5 @@ project pkg {
 	}
 	labels {
 		nightly = 1
-                mock = 1
 	}
 }

anda/apps/legcord/nightly/legcord-nightly.spec

@@ -1,19 +1,16 @@
-%global commit 08329c25f3344819047b1bddf311df82e953d900
-%global commit_date 20260208
+%global commit 158f537e7d4ce13ff7df49b6cb09c0cd27b8a517
+%global commit_date 20260616
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 %global debug_package %nil
-%global __strip /bin/true
-%global __provides_exclude ^((libffmpeg[.]so.*)|(lib.*\\.so.*))$
-%ifnarch aarch64 
-%global __requires_exclude ^((libffmpeg[.]so.*)|(lib.*\\.so.*)|(.*\\aarch64*\\.so.*))$
-%elifarch aarch64
-%global __requires_exclude ^((libffmpeg[.]so.*)|(lib.*\\.so.*)|(.*\\x86_64*\\.so.*)|(.*\\x86-64*\\.so.*))$
-%endif
+# terrible evil no good very bad hack
+# fix one day
+%global __requires_exclude_from (.*)lib(.*)so(.*)
 
 Name:           legcord-nightly
+%electronmeta -D
 Version:        %commit_date.%shortcommit
-Release:        1%?dist
-License:        OSL-3.0
+Release:        1%{?dist}
+License:        OSL-3.0 AND %{electron_license}
 Summary:        Custom lightweight Discord client designed to enhance your experience
 URL:            https://github.com/Legcord/Legcord
 Group:          Applications/Internet
@@ -31,38 +28,21 @@ while keeping everything lightweight.
 %git_clone %{url}.git %{commit}
 
 %build
-pnpm install
-pnpm run build
-pnpm run package --linux AppImage tar.gz
+echo "Electron Builder" > %{rpmbuilddir}/webapp-tool.txt
+%pnpm_build -r build
 
 %install
-mkdir -p %{buildroot}%{_datadir}/legcord
-%ifarch aarch64
-mv dist/linux-arm64-unpacked/* %{buildroot}%{_datadir}/legcord
-%else
-mv dist/linux-unpacked/* -t %{buildroot}%{_datadir}/legcord
-%endif
-
-mkdir -p %{buildroot}%{_bindir}
-ln -sf %{_datadir}/legcord/legcord %{buildroot}%{_bindir}/legcord
-install -Dm644 dist/.icon-set/icon_16.png %{buildroot}%{_iconsdir}/hicolor/16x16/apps/legcord.png
-install -Dm644 dist/.icon-set/icon_32.png %{buildroot}%{_iconsdir}/hicolor/32x32/apps/legcord.png
-install -Dm644 dist/.icon-set/icon_48x48.png %{buildroot}%{_iconsdir}/hicolor/48x48/apps/legcord.png
-install -Dm644 dist/.icon-set/icon_64.png %{buildroot}%{_iconsdir}/hicolor/64x64/apps/legcord.png
-install -Dm644 dist/.icon-set/icon_128.png %{buildroot}%{_iconsdir}/hicolor/128x128/apps/legcord.png
-install -Dm644 dist/.icon-set/icon_256.png %{buildroot}%{_iconsdir}/hicolor/256x256/apps/legcord.png
-install -Dm644 dist/.icon-set/icon_512.png %{buildroot}%{_iconsdir}/hicolor/512x512/apps/legcord.png
-install -Dm644 dist/.icon-set/icon_1024.png %{buildroot}%{_iconsdir}/hicolor/1024x1024/apps/legcord.png
+%electron_install -i legcord -l -I dist/.icon-set/icon_16.png -I dist/.icon-set/icon_32.png -I dist/.icon-set/icon_48x48.png -I dist/.icon-set/icon_64.png -I dist/.icon-set/icon_128.png -I dist/.icon-set/icon_256.png -I dist/.icon-set/icon_512.png -I dist/.icon-set/icon_1024.png
 
 dist/Legcord-*.AppImage --appimage-extract '*.desktop'
-desktop-file-install --set-key=Exec --set-value="%{_datadir}/legcord/legcord %U" squashfs-root/legcord.desktop
+%desktop_file_install -k Exec,Icon -v "%{_libdir}/legcord-nightly/Legcord",legcord -u %U -f squashfs-root/Legcord.desktop
 
 %files
 %doc README.md
 %license license.txt
-%{_bindir}/legcord
-%{_datadir}/applications/legcord.desktop
-%{_datadir}/legcord/
+%{_bindir}/legcord-nightly
+%{_datadir}/applications/Legcord.desktop
+%{_libdir}/legcord-nightly/
 %{_iconsdir}/hicolor/16x16/apps/legcord.png
 %{_iconsdir}/hicolor/32x32/apps/legcord.png
 %{_iconsdir}/hicolor/48x48/apps/legcord.png
@@ -73,6 +53,9 @@ desktop-file-install --set-key=Exec --set-value="%{_datadir}/legcord/legcord %U"
 %{_iconsdir}/hicolor/1024x1024/apps/legcord.png
 
 %changelog
+* Mon May 18 2026 june-fish <june@fyralabs.com> - 1.2.4-1
+- Use electron macros
+
 * Fri Nov 22 2024 owen <owen@fyralabs.com> - 1.0.2-2
 - Add nightly package.
 

anda/apps/legcord/stable/anda.hcl

@@ -2,7 +2,4 @@ project pkg {
 	rpm {
 		spec = "legcord.spec"
 	}
-        labels {
-                mock =1
-        } 
 } 

anda/apps/legcord/stable/legcord.spec

@@ -1,17 +1,14 @@
-%define debug_package %nil
+%global debug_package %nil
 
-# Exclude private libraries
-%global __provides_exclude ^((libffmpeg[.]so.*)|(lib.*\\.so.*))$
-%ifnarch aarch64 
-%global __requires_exclude ^((libffmpeg[.]so.*)|(lib.*\\.so.*)|(.*\\aarch64*\\.so.*))$
-%elifarch aarch64
-%global __requires_exclude ^((libffmpeg[.]so.*)|(lib.*\\.so.*)|(.*\\x86_64*\\.so.*)|(.*\\x86-64*\\.so.*))$
-%endif
+# terrible evil no good very bad hack
+# fix one day
+%global __requires_exclude_from (.*)lib(.*)so(.*)
 
 Name:           legcord
-Version:        1.2.2
-Release:        1%?dist
-License:        OSL-3.0
+%electronmeta -D
+Version:        1.2.4
+Release:        1%{?dist}
+License:        OSL-3.0 AND %{electron_license}
 Summary:        Custom lightweight Discord client designed to enhance your experience
 URL:            https://github.com/Legcord/Legcord
 Group:          Applications/Internet
@@ -30,38 +27,21 @@ while keeping everything lightweight.
 %git_clone %url v%version
 
 %build
-pnpm install
-pnpm run build
-pnpm run package --linux AppImage tar.gz
+echo "Electron Builder" > %{rpmbuilddir}/webapp-tool.txt
+%pnpm_build -r build
 
 %install
-mkdir -p %{buildroot}%{_datadir}/legcord
-%ifarch aarch64
-mv dist/linux-arm64-unpacked/* %{buildroot}%{_datadir}/legcord
-%else
-mv dist/linux-unpacked/* -t %{buildroot}%{_datadir}/legcord
-%endif
-
-mkdir -p %{buildroot}%{_bindir}
-ln -sf %{_datadir}/legcord/legcord %{buildroot}%{_bindir}/legcord
-install -Dm644 dist/.icon-set/icon_16.png %{buildroot}%{_iconsdir}/hicolor/16x16/apps/legcord.png
-install -Dm644 dist/.icon-set/icon_32.png %{buildroot}%{_iconsdir}/hicolor/32x32/apps/legcord.png
-install -Dm644 dist/.icon-set/icon_48x48.png %{buildroot}%{_iconsdir}/hicolor/48x48/apps/legcord.png
-install -Dm644 dist/.icon-set/icon_64.png %{buildroot}%{_iconsdir}/hicolor/64x64/apps/legcord.png
-install -Dm644 dist/.icon-set/icon_128.png %{buildroot}%{_iconsdir}/hicolor/128x128/apps/legcord.png
-install -Dm644 dist/.icon-set/icon_256.png %{buildroot}%{_iconsdir}/hicolor/256x256/apps/legcord.png
-install -Dm644 dist/.icon-set/icon_512.png %{buildroot}%{_iconsdir}/hicolor/512x512/apps/legcord.png
-install -Dm644 dist/.icon-set/icon_1024.png %{buildroot}%{_iconsdir}/hicolor/1024x1024/apps/legcord.png
+%electron_install -i legcord -l -I dist/.icon-set/icon_16.png -I dist/.icon-set/icon_32.png -I dist/.icon-set/icon_48x48.png -I dist/.icon-set/icon_64.png -I dist/.icon-set/icon_128.png -I dist/.icon-set/icon_256.png -I dist/.icon-set/icon_512.png -I dist/.icon-set/icon_1024.png
 
 dist/Legcord-*.AppImage --appimage-extract '*.desktop'
-desktop-file-install --set-key=Exec --set-value="%{_datadir}/legcord/legcord %U" squashfs-root/legcord.desktop
+%desktop_file_install -k Exec,Icon -v "%{_libdir}/legcord/Legcord",legcord -u %U -f squashfs-root/Legcord.desktop
 
 %files
 %doc README.md
 %license license.txt
 %{_bindir}/legcord
-%{_datadir}/applications/legcord.desktop
-%{_datadir}/legcord/
+%{_datadir}/applications/Legcord.desktop
+%{_libdir}/legcord/
 %{_iconsdir}/hicolor/16x16/apps/legcord.png
 %{_iconsdir}/hicolor/32x32/apps/legcord.png
 %{_iconsdir}/hicolor/48x48/apps/legcord.png
@@ -72,6 +52,9 @@ desktop-file-install --set-key=Exec --set-value="%{_datadir}/legcord/legcord %U"
 %{_iconsdir}/hicolor/1024x1024/apps/legcord.png
 
 %changelog
+* Mon May 18 2026 june-fish <june@fyralabs.com> - 1.2.4-1
+- Use electron macros
+
 * Mon Oct 21 2024 madonuko <mado@fyralabs.com> - 1.0.2-2
 - Rename to LegCord.
 

anda/apps/mount-manager/anda.hcl

@@ -0,0 +1,6 @@
+project pkg {
+    arches = ["x86_64"]
+    rpm {
+        spec = "mount-manager.spec"
+    }
+}

anda/apps/mount-manager/mount-manager.spec

@@ -0,0 +1,42 @@
+Name:           mount-manager
+Version:        0.1.5
+Release:        1%{?dist}
+Summary:        SMB Mount Manager helps users mount SMB shares through a simple GTK interface. It checks the share, asks for credentials, tests the mount, and creates a startup mount managed by systemd.
+URL:            https://github.com/Xarishark/mount-manager
+Source0:        https://github.com/Xarishark/mount-manager/archive/refs/tags/v%{version}.tar.gz
+License:        GPL-3.0-only
+Requires:       cifs-utils
+Requires:       gtk4
+Requires:       polkit
+Requires:       python3-gobject
+Provides:       SMB-Mount-Manager
+BuildArch:      noarch
+Packager:       Zacharias Xenakis <xarishark@outlook.com>
+
+%description
+%{summary}.
+
+%prep
+%autosetup -n mount-manager-%{version}
+
+%build
+
+%install
+install -Dm 755 mount_manager.py %{buildroot}%{_bindir}/mount-manager
+install -Dm 644 data/applications/io.github.xarishark.mount-manager.desktop %{buildroot}%{_appsdir}/io.github.xarishark.mount-manager.desktop
+install -Dm 644 data/icons/hicolor/scalable/apps/io.github.xarishark.mount-manager.svg %{buildroot}%{_scalableiconsdir}/io.github.xarishark.mount-manager.svg
+install -Dm 644 data/metainfo/io.github.xarishark.mount-manager.metainfo.xml %{buildroot}%{_metainfodir}/io.github.xarishark.mount-manager.metainfo.xml
+
+%files
+%doc README.md
+%license LICENSE
+%{_bindir}/mount-manager
+%{_appsdir}/io.github.xarishark.mount-manager.desktop
+%{_scalableiconsdir}/io.github.xarishark.mount-manager.svg
+%{_metainfodir}/io.github.xarishark.mount-manager.metainfo.xml
+
+%changelog
+* Fri May 15 2026 Zacharias Xenakis <xarishark@outlook.com>
+- Initial package
+* Fri May 15 2026 Zacharias Xenakis <xarishark@outlook.com>
+- migrated to new source GIT

anda/apps/mount-manager/update.rhai

@@ -0,0 +1 @@
+rpm.version(gh("Xarishark/mount-manager"));

anda/apps/mpv/mpv-nightly.spec

@@ -1,14 +1,14 @@
 # Disable X11 for RHEL 10+
 %bcond x11 %[%{undefined rhel} || 0%{?rhel} < 10]
 
-%global commit 102e693f49ce40fa10361d166392068c24fe5f15
+%global commit 53796ca2ea82bd960b0907c89231e773dc381502
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global commit_date 20260214
+%global commit_date 20260617
 %global ver 0.41.0
 
 Name:           mpv-nightly
 Version:        %ver^%commit_date.%shortcommit
-Release:        1%?dist
+Release:        1%{?dist}
 
 License:        GPL-2.0-or-later AND LGPL-2.1-or-later
 Summary:        Movie player playing most video formats and DVDs
@@ -21,6 +21,7 @@ BuildRequires:  gcc
 BuildRequires:  libappstream-glib
 BuildRequires:  libatomic
 BuildRequires:  meson
+BuildRequires:  cmake
 BuildRequires:  python3-docutils
 
 BuildRequires:  perl(Encode)

anda/apps/neohtop/neohtop-cli/anda.hcl

@@ -0,0 +1,5 @@
+project pkg {
+    rpm {
+        spec = "neohtop-cli.spec"
+    }
+}

anda/apps/neohtop/neohtop-cli/neohtop-cli.spec

@@ -0,0 +1,44 @@
+%define debug_package %{nil}
+
+%global goipath github.com/abdenasser/neohtop-cli
+Version:        0.1.13
+
+%gometa -f
+
+Name:           neohtop-cli
+Release:        1%{?dist}
+Summary:        A cross-platform terminal process monitor with btop-style visualizations
+License:        MIT
+URL:            https://github.com/Abdenasser/neohtop-cli
+Source0:        %{url}/archive/refs/tags/v%{version}.tar.gz
+Packager:       Owen Zimmerman <owen@fyralabs.com>
+BuildRequires:  go-rpm-macros
+
+%description
+%summary.
+
+%gopkg
+
+%prep
+%autosetup
+
+%build
+%define gomodulesmode GO111MODULE=on
+pushd cli
+%gobuild -o %{gobuilddir}/../neohtop-cli %{goipath}/
+popd
+
+%install
+install -Dm 0755 cli/neohtop-cli %{buildroot}%{_bindir}/neohtop-cli
+
+%files
+%doc README.md CONTRIBUTING.md
+%license LICENSE
+%{_bindir}/neohtop-cli
+
+%changelog
+* Sun Jun 14 2026 Owen Zimmerman <owen@fyralabs.com>
+- Use go packaging
+
+* Sun Mar 29 2026 Owen Zimmerman <owen@fyralabs.com>
+- Initial commit

anda/apps/neohtop/neohtop-cli/update.rhai

@@ -0,0 +1 @@
+rpm.version(gh("Abdenasser/neohtop-cli"));

anda/apps/opensnitch/opensnitch.spec

@@ -4,7 +4,7 @@
 
 # https://github.com/evilsocket/opensnitch
 %global goipath         github.com/evilsocket/opensnitch
-Version:                1.7.0.0
+Version:                1.8.0
 
 %gometa -f
 
@@ -20,7 +20,7 @@ Snitch.}
                         utils/packaging/ui/deb/debian/changelog
 
 Name:           opensnitch
-Release:        %autorelease
+Release:        1%{?dist}
 Summary:        OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch
 
 License:        GPL-3.0-only AND LGPL-2.1-or-later

anda/apps/opentrack/opentrack.spec

@@ -6,7 +6,7 @@
 
 Name:           opentrack
 Version:        %{sanitized_ver}
-Release:        2%{?dist}
+Release:        1%{?dist}
 Summary:        Head tracking software for MS Windows, Linux, and Apple OSX
 
 License:        ISC AND BSD-3-Clause AND BSD-2-Clause AND LGPL-2.1-only AND GPL-3.0-only AND LGPL-2.1-or-later AND MIT AND LGPL-3.0-or-later

anda/apps/peazip/peazip.spec

@@ -2,8 +2,8 @@
 %define debug_package %nil
 
 Name:           peazip
-Version:        10.9.0
-Release:        1%?dist
+Version:        11.1.0
+Release:        1%{?dist}
 Summary:        Free Zip / Unzip software and Rar file extractor. Cross-platform file and archive manager
 License:        LGPL-3.0-only
 URL:            https://peazip.github.io

anda/apps/proton-vpn/proton-vpn.spec

@@ -1,11 +1,14 @@
+%global metainfo_commit 47f57d55cc9897a31ac8d0a6411def15cddfe1c4
+
 Name:			proton-vpn-gtk-app
-Version:		4.14.1
-Release:		2%?dist
+Version:		4.16.5
+Release:		2%{?dist}
 Summary:		Official ProtonVPN Linux app
 License:		GPL-3.0-only
 URL:			https://protonvpn.com/download-linux
 Source0:		https://github.com/ProtonVPN/proton-vpn-gtk-app/archive/refs/tags/v%version.tar.gz
-Source1:        https://github.com/flathub/com.protonvpn.www/blob/master/com.protonvpn.www.metainfo.xml
+# So cursed but makes our lives easier
+Source1:        https://github.com/flathub/com.protonvpn.www/archive/%{metainfo_commit}/com.protonvpn.www-%{metainfo_commit}.tar.gz
 BuildArch:      noarch
 
 BuildRequires:  python3-devel
@@ -42,6 +45,7 @@ with the user signup process handled on the website.
 
 %prep
 %autosetup -n %{name}-%{version}
+tar -xvf %{SOURCE1}
 
 %build
 %pyproject_wheel
@@ -50,18 +54,25 @@ with the user signup process handled on the website.
 %pyproject_install
 %pyproject_save_files proton
 install -Dm644 rpmbuild/SOURCES/proton-vpn-logo.svg %{buildroot}%{_scalableiconsdir}/proton-vpn-logo.svg
-install -Dm644 %{SOURCE1} %{buildroot}%{_metainfodir}/com.protonvpn.www.metainfo.xml
-# Match metainfo
-install -Dm644 rpmbuild/SOURCES/proton.vpn.app.gtk.desktop %{buildroot}%{_appsdir}/com.protonvpn.www.desktop
+install -Dm644 com.protonvpn.www-%{metainfo_commit}/com.protonvpn.www.metainfo.xml %{buildroot}%{_metainfodir}/com.protonvpn.www.metainfo.xml
+install -Dm644 rpmbuild/SOURCES/proton.vpn.app.gtk.desktop %{buildroot}%{_appsdir}/proton.vpn.app.gtk.desktop
+
+# We pull in a metainfo file that often changes upstream, that calls the .desktop file what we are symlinking it to.
+# If we install the .desktop file with the new name, the icon does not show properly on KDE Plasma.
+%{__ln_s} -f %{_appsdir}/proton.vpn.app.gtk.desktop %{buildroot}%{_appsdir}/com.protonvpn.www.desktop
 
 %files -f %{pyproject_files}
 %doc README.md CONTRIBUTING.md CODEOWNERS
 %license LICENSE COPYING.md
 %{_bindir}/protonvpn-app
+%{_appsdir}/proton.vpn.app.gtk.desktop
 %{_appsdir}/com.protonvpn.www.desktop
 %{_scalableiconsdir}/proton-vpn-logo.svg
 %{_metainfodir}/com.protonvpn.www.metainfo.xml
 
 %changelog
+* Wed Mar 25 2026 Owen Zimmerman <owen@fyralabs.com>
+- Fix metainfo and .desktop file
+
 * Sat Jan 17 2026 Owen Zimmerman <owen@fyralabs.com>
 - Initial commit

anda/apps/proton-vpn/update.rhai

@@ -1 +1,3 @@
 rpm.version(gh_tag("ProtonVPN/proton-vpn-gtk-app"));
+
+rpm.global("metainfo_commit", gh_commit("flathub/com.protonvpn.www"));