bump: rust-mise rust-usage-cli

(cherry picked from commit d49706c67c)

Co-authored-by: Gilver <roachy@fyralabs.com>

.github/ISSUE_TEMPLATE/bug.yml

@@ -29,6 +29,7 @@ body:
       description: Which version of Terra are you using?
       options:
         - frawhide
+        - f44
         - f43
         - f42
         - el10

.github/dependabot.yml

@@ -0,0 +1,8 @@
+version: 2
+updates:
+  # Maintain GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5

.github/scripts/configure-sccache.js

@@ -0,0 +1,180 @@
+// Configure sccache environment variables for GitHub Actions cache integration
+// 
+// This script is still unused until we build terra-sccache with this supported,
+// Turns out that Fedora's sccache build has the GHA feature support disabled.
+// 
+// Note: ACTIONS_CACHE_SERVICE_V2 and SCCACHE_GHA_ENABLED are set at workflow level
+module.exports = async ({ github, context, core, exec }) => {
+  // Find sccache path (try which command)
+  let sccachePath = "/usr/bin/sccache";
+  try {
+    const result = await exec.getExecOutput("which", ["sccache"], {
+      ignoreReturnCode: true,
+      silent: true,
+    });
+    if (result.exitCode === 0 && result.stdout.trim()) {
+      sccachePath = result.stdout.trim();
+      core.info(`Found sccache at: ${sccachePath}`);
+    }
+  } catch (e) {
+    core.debug(`Could not find sccache path: ${e.message}`);
+  }
+
+  // Check sccache version
+  try {
+    const versionResult = await exec.getExecOutput(sccachePath, ["--version"], {
+      ignoreReturnCode: true,
+      silent: true,
+    });
+    core.info(`sccache version: ${versionResult.stdout.trim()}`);
+  } catch (e) {
+    core.warning(`Could not get sccache version: ${e.message}`);
+  }
+
+  // Enable caching
+  core.exportVariable("RUSTC_WRAPPER", sccachePath);
+  core.exportVariable("SCCACHE_GHA_ENABLED", "true");
+
+  // Disable Cargo incremental builds to not interfere with caching
+  core.exportVariable("CARGO_INCREMENTAL", "false");
+  
+  // Debug: Show what environment variables are available
+  core.info("=== Environment Variables Diagnostic ===");
+  core.info(`SCCACHE_GHA_ENABLED: ${process.env.SCCACHE_GHA_ENABLED}`);
+  core.info(
+    `ACTIONS_CACHE_SERVICE_V2: ${process.env.ACTIONS_CACHE_SERVICE_V2}`,
+  );
+  core.info(
+    `ACTIONS_RESULTS_URL: ${process.env.ACTIONS_RESULTS_URL ? "SET (length: " + process.env.ACTIONS_RESULTS_URL.length + ")" : "NOT SET"}`,
+  );
+  core.info(
+    `ACTIONS_RUNTIME_TOKEN: ${process.env.ACTIONS_RUNTIME_TOKEN ? "SET (length: " + process.env.ACTIONS_RUNTIME_TOKEN.length + ")" : "NOT SET"}`,
+  );
+  core.info(`RUSTC_WRAPPER: ${process.env.RUSTC_WRAPPER}`);
+  core.info(`SCCACHE_LOG: ${process.env.SCCACHE_LOG}`);
+  core.info("========================================");
+
+  // Export SCCACHE_PATH so it's available to subsequent steps
+  core.exportVariable("SCCACHE_PATH", sccachePath);
+
+  // Expose the GHA cache related variables to make it easier for users to
+  // integrate with GHA support (from upstream mozilla/sccache-action)
+  if (process.env.ACTIONS_RESULTS_URL) {
+    core.exportVariable("ACTIONS_RESULTS_URL", process.env.ACTIONS_RESULTS_URL);
+    core.info("✓ Exported ACTIONS_RESULTS_URL");
+  } else {
+    core.error(
+      "ACTIONS_RESULTS_URL is not set - GitHub Actions cache WILL NOT work",
+    );
+  }
+
+  if (process.env.ACTIONS_RUNTIME_TOKEN) {
+    core.exportVariable(
+      "ACTIONS_RUNTIME_TOKEN",
+      process.env.ACTIONS_RUNTIME_TOKEN,
+    );
+    core.info("✓ Exported ACTIONS_RUNTIME_TOKEN");
+  } else {
+    core.error(
+      "ACTIONS_RUNTIME_TOKEN is not set - GitHub Actions cache WILL NOT work",
+    );
+  }
+
+  // Set cache version and restore keys for this specific build matrix
+  if (process.env.SCCACHE_GHA_VERSION) {
+    core.exportVariable("SCCACHE_GHA_VERSION", process.env.SCCACHE_GHA_VERSION);
+  }
+  if (process.env.SCCACHE_GHA_CACHE_FROM) {
+    core.exportVariable(
+      "SCCACHE_GHA_CACHE_FROM",
+      process.env.SCCACHE_GHA_CACHE_FROM,
+    );
+  }
+
+  // Check if cache busting is enabled
+  const inputs =
+    (github &&
+      github.context &&
+      github.context.payload &&
+      github.context.payload.inputs) ||
+    {};
+  const rawBustCache =
+    inputs.bust_cache ??
+    inputs.bustCache ??
+    process.env.INPUT_BUST_CACHE ??
+    process.env.BUST_CACHE;
+  let bustCache = false;
+
+  if (typeof rawBustCache === "string") {
+    const v = rawBustCache.toLowerCase().trim();
+    bustCache = v === "true" || v === "1" || v === "yes";
+  } else {
+    bustCache = !!rawBustCache;
+  }
+
+  if (bustCache) {
+    core.exportVariable("SCCACHE_BUST_CACHE", "true");
+    core.exportVariable("SCCACHE_RECACHE", "1");
+    core.info("SCCACHE_RECACHE enabled because bust_cache is true");
+  }
+
+  // Stop any running sccache daemon so it picks up the new environment variables
+  core.info("Stopping any running sccache daemon to pick up configuration...");
+  try {
+    await exec.exec(sccachePath, ["--stop-server"], {
+      ignoreReturnCode: true,
+    });
+    core.info("✓ sccache daemon stopped successfully");
+  } catch (e) {
+    core.debug(
+      `Could not stop sccache daemon (it may not be running): ${e.message}`,
+    );
+  }
+
+  // Verify sccache can see the GHA environment variables by starting server with explicit env
+  core.info("Starting sccache server with GHA environment variables...");
+  const sccacheEnv = {
+    ...process.env,
+    SCCACHE_GHA_ENABLED: process.env.SCCACHE_GHA_ENABLED || "on",
+    ACTIONS_CACHE_SERVICE_V2: process.env.ACTIONS_CACHE_SERVICE_V2 || "on",
+  };
+
+  try {
+    await exec.exec(sccachePath, ["--start-server"], {
+      ignoreReturnCode: true,
+      env: sccacheEnv,
+    });
+    core.info("✓ sccache server started");
+  } catch (e) {
+    core.warning(`Could not start sccache server: ${e.message}`);
+  }
+
+  // Show the current sccache configuration
+  core.info("Verifying sccache configuration:");
+  try {
+    const statsResult = await exec.getExecOutput(
+      sccachePath,
+      ["--show-stats"],
+      {
+        ignoreReturnCode: true,
+        env: sccacheEnv,
+      },
+    );
+
+    // Check if it's using GitHub Actions cache
+    if (statsResult.stdout.includes("GitHub Actions")) {
+      core.info("✓ sccache is configured to use GitHub Actions cache");
+    } else if (statsResult.stdout.includes("Local disk")) {
+      core.error(
+        "✗ sccache is using Local disk cache instead of GitHub Actions cache!",
+      );
+      core.error(
+        "This means SCCACHE_GHA_ENABLED or required env vars are not being recognized.",
+      );
+      core.info("Stats output:");
+      core.info(statsResult.stdout);
+    }
+  } catch (e) {
+    core.debug(`Could not show sccache stats: ${e.message}`);
+  }
+};

.github/scripts/sccache-stats.js

@@ -0,0 +1,121 @@
+module.exports = async ({ github, context, core, exec }) => {
+  if (!exec) {
+    throw new Error("exec parameter is required but was not provided");
+  }
+
+  // Use SCCACHE_PATH if set, otherwise default to 'sccache' (will use PATH)
+  const sccachePath = process.env.SCCACHE_PATH || "sccache";
+  core.debug(`Using sccache path: ${sccachePath}`);
+
+  const percentage = (x, y) => Math.round((x / y) * 100 || 0);
+  const plural = (count, base, pluralForm = base + "s") =>
+    `${count} ${count === 1 ? base : pluralForm}`;
+  const sumStats = (stats) =>
+    Object.values(stats.counts).reduce((acc, val) => acc + val, 0);
+  const formatDuration = (duration) => {
+    const ms = duration.nanos / 1e6;
+    return `${duration.secs}s ${ms}ms`;
+  };
+
+  const formatJsonStats = (stats) => {
+    const cacheErrorCount = sumStats(stats.stats.cache_errors);
+    const cacheHitCount = sumStats(stats.stats.cache_hits);
+    const cacheMissCount = sumStats(stats.stats.cache_misses);
+    const totalHits = cacheHitCount + cacheMissCount + cacheErrorCount;
+    const ratio = percentage(cacheHitCount, totalHits);
+
+    const writeDuration = formatDuration(stats.stats.cache_write_duration);
+    const readDuration = formatDuration(stats.stats.cache_read_hit_duration);
+    const compilerDuration = formatDuration(
+      stats.stats.compiler_write_duration,
+    );
+
+    const noticeHit = plural(cacheHitCount, "hit");
+    const noticeMiss = plural(cacheMissCount, "miss", "misses");
+    const noticeError = plural(cacheErrorCount, "error");
+    const notice = `${ratio}% - ${noticeHit}, ${noticeMiss}, ${noticeError}`;
+
+    const table = [
+      [{ data: "Cache hit %", header: true }, { data: `${ratio}%` }],
+      [
+        { data: "Cache hits", header: true },
+        { data: cacheHitCount.toString() },
+      ],
+      [
+        { data: "Cache misses", header: true },
+        { data: cacheMissCount.toString() },
+      ],
+      [
+        { data: "Cache errors", header: true },
+        { data: cacheErrorCount.toString() },
+      ],
+      [
+        { data: "Compile requests", header: true },
+        { data: stats.stats.compile_requests.toString() },
+      ],
+      [
+        { data: "Requests executed", header: true },
+        { data: stats.stats.requests_executed.toString() },
+      ],
+      [
+        { data: "Cache writes", header: true },
+        { data: stats.stats.cache_writes.toString() },
+      ],
+      [
+        { data: "Cache write errors", header: true },
+        { data: stats.stats.cache_write_errors.toString() },
+      ],
+      [{ data: "Cache write duration", header: true }, { data: writeDuration }],
+      [
+        { data: "Cache read hit duration", header: true },
+        { data: readDuration },
+      ],
+      [
+        { data: "Compiler write duration", header: true },
+        { data: compilerDuration },
+      ],
+    ];
+    return { table, notice };
+  };
+
+  const getOutput = async (command, args = []) => {
+    core.debug(`get_output: ${command} ${args.join(" ")}`);
+    const output = await exec.getExecOutput(command, args, {
+      ignoreReturnCode: false,
+      silent: false,
+    });
+    if (!output.stdout.endsWith("\n")) {
+      process.stdout.write("\n");
+    }
+    return output.stdout.toString();
+  };
+
+  const humanStats = await core.group("Get human-readable stats", async () => {
+    return getOutput(sccachePath, ["--show-stats"]);
+  });
+
+  const jsonStats = await core.group("Get JSON stats", async () => {
+    return getOutput(sccachePath, ["--show-stats", "--stats-format=json"]);
+  });
+
+  const stats = JSON.parse(jsonStats);
+  const formattedStats = formatJsonStats(stats);
+
+  core.notice(formattedStats.notice, {
+    title: `sccache stats - ${context.job}`,
+  });
+  core.info("\nFull human-readable stats:");
+  core.info(humanStats);
+
+  core.summary.addHeading("sccache stats", 2);
+  core.summary.addTable(formattedStats.table);
+  core.summary.addDetails(
+    "Full human-readable stats",
+    "\n\n```\n" + humanStats + "\n```\n\n",
+  );
+  core.summary.addDetails(
+    "Full JSON Stats",
+    "\n\n```json\n" + JSON.stringify(stats, null, 2) + "\n```\n\n",
+  );
+  await core.summary.write();
+};

.github/workflows/autobuild.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Set workspace as safe
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
       - name: Generate build matrix
@@ -51,11 +51,12 @@ jobs:
       image: ghcr.io/terrapkg/appstream-generator:main
     steps:
       - name: Download artifacts
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           merge-multiple: true
           path: ./artifacts
       - name: Generate test catalog
+        id: catalog
         # run appstream-builder, then add step summary
         run: |
           set -x
@@ -71,50 +72,64 @@ jobs:
             --veto-ignore=missing-info 2>&1 | tee asb.log
 
       - name: Run appstreamcli validate
+        if: steps.catalog.outcome == 'success'
         run: |
-          echo "## AppStream MetaInfo Validation" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo '```xml' >> $GITHUB_STEP_SUMMARY
-          for file in output/test.xml.gz; do
-            appstreamcli validate $file >> $GITHUB_STEP_SUMMARY || true
+          if stat output/test.xml.gz &>/dev/null; then
+            echo "## AppStream MetaInfo Validation" >> $GITHUB_STEP_SUMMARY
             echo "" >> $GITHUB_STEP_SUMMARY
-          done
-          echo '```' >> $GITHUB_STEP_SUMMARY
+            echo '```xml' >> $GITHUB_STEP_SUMMARY
+            appstreamcli validate output/test.xml.gz >> $GITHUB_STEP_SUMMARY | true
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo '```' >> $GITHUB_STEP_SUMMARY
+          else
+            echo "Nothing to do."
+          fi
+          
           
       - name: Export logs
         id: export_logs
+        if: steps.catalog.outcome == 'success'
         run: |
-          echo "## AppStream Builder Log" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo '```log' >> $GITHUB_STEP_SUMMARY
-          cat asb.log >> $GITHUB_STEP_SUMMARY
-          echo '```' >> $GITHUB_STEP_SUMMARY
-          echo '---' >> $GITHUB_STEP_SUMMARY
+          if stat output/*.xml.gz &>/dev/null; then
+            echo "## AppStream Builder Log" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo '```log' >> $GITHUB_STEP_SUMMARY
+            cat asb.log >> $GITHUB_STEP_SUMMARY
+            echo '```' >> $GITHUB_STEP_SUMMARY
+            echo '---' >> $GITHUB_STEP_SUMMARY
+          else
+            echo "Nothing to do."
+          fi
 
       - name: Report Summary
         id: report_summary
+        if: steps.export_logs.outcome == 'success'
         run: |
           echo "## AppStream Builder Report" >> $GITHUB_STEP_SUMMARY
           echo "" >> $GITHUB_STEP_SUMMARY
-          if grep -q "veto" asb.log; then
-            echo "::group::Vetoed packages"
-            echo "### Vetoed packages" >> $GITHUB_STEP_SUMMARY
+          if stat output/*.xml.gz &>/dev/null; then
+            if grep -q "veto" asb.log; then
+              echo "::group::Vetoed packages"
+              echo "### Vetoed packages" >> $GITHUB_STEP_SUMMARY
+              echo "" >> $GITHUB_STEP_SUMMARY
+              echo '```xml' >> $GITHUB_STEP_SUMMARY
+              echo "$(grep -i 'veto' asb.log)" >> $GITHUB_STEP_SUMMARY
+              echo '```' >> $GITHUB_STEP_SUMMARY
+              echo "::warning file=asb.log::Some packages were vetoed during AppStream generation. Please review the 'Vetoed packages' section in the summary for details."
+              echo "::endgroup::"
+            fi
+            echo "## Full Data Summary" >> $GITHUB_STEP_SUMMARY
             echo "" >> $GITHUB_STEP_SUMMARY
-            echo '```xml' >> $GITHUB_STEP_SUMMARY
-            echo "$(grep -i 'veto' asb.log)" >> $GITHUB_STEP_SUMMARY
-            echo '```' >> $GITHUB_STEP_SUMMARY
-            echo "::warning file=asb.log::Some packages were vetoed during AppStream generation. Please review the 'Vetoed packages' section in the summary for details."
-            echo "::endgroup::"
+            echo "### Generated Appstream files:" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            for file in output/*.xml.gz; do
+              echo "#### \`$file\`" >> $GITHUB_STEP_SUMMARY
+              echo "" >> $GITHUB_STEP_SUMMARY
+              echo '```xml' >> $GITHUB_STEP_SUMMARY
+              zcat "$file" >> $GITHUB_STEP_SUMMARY || true
+              echo '```' >> $GITHUB_STEP_SUMMARY
+              echo "" >> $GITHUB_STEP_SUMMARY
+            done
+          else
+            echo "No appstream files found." >> $GITHUB_STEP_SUMMARY
           fi
-          echo "## Full Data Summary" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "### Generated Appstream files:" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          for file in output/*.xml.gz; do
-            echo "#### \`$file\`" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo '```xml' >> $GITHUB_STEP_SUMMARY
-            zcat "$file" >> $GITHUB_STEP_SUMMARY
-            echo '```' >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-          done

.github/workflows/bootstrap.yml

@@ -24,7 +24,7 @@ jobs:
           dnf install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-${{ matrix.version }}.noarch.rpm
           dnf install -y mock wget git-core openssl-devel cargo podman fuse-overlayfs rpm-build mock gzip
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: el${{ matrix.version }}
           fetch-depth: 1

.github/workflows/build.yml

@@ -25,11 +25,11 @@ jobs:
       build_matrix: ${{ steps.parsing.outputs.build_matrix }}
     runs-on: ubuntu-24.04-arm
     container:
-      image: ghcr.io/terrapkg/builder:el${{ matrix.version }}
+      image: ghcr.io/terrapkg/builder:frawhide
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
       - name: Setup Git

.github/workflows/json-build.yml

@@ -37,19 +37,31 @@ jobs:
         pkg: ${{ fromJson(inputs.packages) }}
         version: ["10"]
       fail-fast: false
-    runs-on: ${{ inputs.custom_builder && inputs.custom_builder || (matrix.pkg.arch == 'aarch64' && matrix.pkg.labels['large']) && 'arm64-lg' || matrix.pkg.arch == 'aarch64' && 'ubuntu-22.04-arm' || matrix.pkg.labels['large'] && format('cirun-x86-64-lg--{0}', github.run_id) || 'ubuntu-22.04' }}
+    runs-on: ${{ inputs.custom_builder && inputs.custom_builder || (matrix.pkg.arch == 'aarch64' && matrix.pkg.labels['large']) && format('cirun-arm64-lg--{0}', github.run_id) || matrix.pkg.arch == 'aarch64' && 'ubuntu-22.04-arm' || matrix.pkg.labels['large'] && format('cirun-x86-64-lg--{0}', github.run_id) || 'ubuntu-22.04' }}
     container:
       image: ghcr.io/terrapkg/builder:el${{ matrix.version }}
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 
       - name: Set up git repository
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
+      - name: Configure sccache
+        id: sccache
+        if: ${{ !contains(matrix.pkg.labels.sccache, '0') }}
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        env:
+          SCCACHE_GHA_VERSION: ${{ matrix.version }}-${{ matrix.pkg.arch }}-${{ matrix.pkg.pkg }}
+          SCCACHE_GHA_CACHE_FROM: ${{ matrix.version }}-${{ matrix.pkg.arch }}-${{ matrix.pkg.pkg }}
+        with:
+          script: |
+            const script = require('./.github/scripts/configure-sccache.js')
+            await script({github, context, core, exec})
+
       - name: CI Setup Script
         if: ${{ !contains(matrix.pkg.labels, 'mock') }}
         run: |
@@ -67,6 +79,14 @@ jobs:
       - name: Build with Andaman
         run: anda build -D "vendor Terra" ${{ matrix.pkg.pkg }} -c terra-el${{ matrix.version }}-${{ matrix.pkg.arch }} ${{ !matrix.pkg.labels.mock == '1' && '-rrpmbuild' || '' }}
 
+      - name: Report Cache Summary
+        if: steps.sccache.outcome == 'success'
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        with:
+          script: |
+            const script = require('./.github/scripts/sccache-stats.js')
+            await script({github, context, core, exec})
+
       - name: Generating artifact name
         id: art
         run: |
@@ -74,7 +94,7 @@ jobs:
           x=${NAME//\//@}
           echo "name=$x" >> $GITHUB_OUTPUT
 
-      - uses: actions/upload-artifact@v7
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: ${{ steps.art.outputs.name }}
           compression-level: 0 # The RPMs are already compressed :p

.github/workflows/scorecard.yml

@@ -0,0 +1,78 @@
+# This workflow uses actions that are not certified by GitHub. They are provided
+# by a third-party and are governed by separate terms of service, privacy
+# policy, and support documentation.
+
+name: Scorecard supply-chain security
+on:
+  # For Branch-Protection check. Only the default branch is supported. See
+  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
+  branch_protection_rule:
+  # To guarantee Maintained check is occasionally updated. See
+  # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
+  schedule:
+    - cron: '43 13 * * 2'
+  push:
+    branches: [ "frawhide" ]
+
+# Declare default permissions as read only.
+permissions: read-all
+
+jobs:
+  analysis:
+    name: Scorecard analysis
+    runs-on: ubuntu-latest
+    # `publish_results: true` only works when run from the default branch. conditional can be removed if disabled.
+    if: github.event.repository.default_branch == github.ref_name || github.event_name == 'pull_request'
+    permissions:
+      # Needed to upload the results to code-scanning dashboard.
+      security-events: write
+      # Needed to publish results and get a badge (see publish_results below).
+      id-token: write
+      # Uncomment the permissions below if installing in a private repository.
+      # contents: read
+      # actions: read
+
+    steps:
+      - name: "Checkout code"
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: "Run analysis"
+        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
+        with:
+          results_file: results.sarif
+          results_format: sarif
+          # (Optional) "write" PAT token. Uncomment the `repo_token` line below if:
+          # - you want to enable the Branch-Protection check on a *public* repository, or
+          # - you are installing Scorecard on a *private* repository
+          # To create the PAT, follow the steps in https://github.com/ossf/scorecard-action?tab=readme-ov-file#authentication-with-fine-grained-pat-optional.
+          # repo_token: ${{ secrets.SCORECARD_TOKEN }}
+
+          # Public repositories:
+          #   - Publish results to OpenSSF REST API for easy access by consumers
+          #   - Allows the repository to include the Scorecard badge.
+          #   - See https://github.com/ossf/scorecard-action#publishing-results.
+          # For private repositories:
+          #   - `publish_results` will always be set to `false`, regardless
+          #     of the value entered here.
+          publish_results: true
+
+          # (Optional) Uncomment file_mode if you have a .gitattributes with files marked export-ignore
+          # file_mode: git
+
+      # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
+      # format to the repository Actions tab.
+      - name: "Upload artifact"
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        with:
+          name: SARIF file
+          path: results.sarif
+          retention-days: 5
+
+      # Upload the results to GitHub's code scanning dashboard (optional).
+      # Commenting out will disable upload of results to your repo's Code Scanning dashboard
+      - name: "Upload to code-scanning"
+        uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
+        with:
+          sarif_file: results.sarif

.github/workflows/sync.yml

@@ -1,13 +1,15 @@
 name: Automatic backport/sync action
 permissions:
-  contents: write
-  pull-requests: write
+  contents: read
 on:
   pull_request_target:
     types: ["labeled", "closed"]
 
 jobs:
   backport:
+    permissions:
+      contents: write
+      pull-requests: write
     name: Backport/sync PR
     runs-on: ubuntu-22.04
     if: github.event.pull_request.merged
@@ -25,7 +27,7 @@ jobs:
           git config --global commit.gpgsign true
 
       - name: Backport Action
-        uses: sorenlouv/backport-github-action@9460b7102fea25466026ce806c9ebf873ac48721 # v11.0.0
+        uses: sorenlouv/backport-github-action@85813678d776774a19ec5af56bd3a04305946f8a # v12.0.0
         with:
           github_token: ${{ secrets.RABONEKO_BACKPORT_GITHUB_TOKEN }}
           auto_backport_label_prefix: sync-

.github/workflows/update-branch.yml

@@ -1,6 +1,6 @@
 name: Update per branch
 permissions:
-  contents: write
+  contents: read
 on:
   schedule:
     - cron: "*/30 * * * *"
@@ -8,7 +8,9 @@ on:
 
 jobs:
   autoupdate:
-    runs-on: ubuntu-24.04-arm
+    permissions:
+      contents: write
+    runs-on: ubuntu-22.04
     strategy:
       matrix:
         branch:
@@ -22,7 +24,7 @@ jobs:
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: ${{ matrix.branch }}
           fetch-depth: 0

.github/workflows/update-comps.yml

@@ -20,7 +20,7 @@ jobs:
     container:
       image: ghcr.io/terrapkg/builder:frawhide
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Push to subatomic
         run: |
           branch=${{ github.ref_name }}

.github/workflows/update-nightly.yml

@@ -1,6 +1,6 @@
 name: Nightly Update
 permissions:
-  contents: write
+  contents: read
 on:
   schedule:
     - cron: "0 0 * * *"
@@ -8,13 +8,15 @@ on:
 
 jobs:
   autoupdate:
-    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    runs-on: ubuntu-24.04-arm
     container:
       image: ghcr.io/terrapkg/builder:frawhide
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
           ssh-key: ${{ secrets.SSH_AUTHENTICATION_KEY }}

.github/workflows/update-weekly.yml

@@ -1,6 +1,6 @@
 name: Weekly Update
 permissions:
-  contents: write
+  contents: read
 on:
   schedule:
     - cron: "0 0 * * 0"
@@ -8,13 +8,15 @@ on:
 
 jobs:
   autoupdate:
-    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    runs-on: ubuntu-22.04
     container:
       image: ghcr.io/terrapkg/builder:frawhide
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
           ssh-key: ${{ secrets.SSH_AUTHENTICATION_KEY }}

.github/workflows/update.yml

@@ -1,6 +1,6 @@
 name: Update
 permissions:
-  contents: write
+  contents: read
 on:
   schedule:
     - cron: "*/10 * * * *"
@@ -8,13 +8,15 @@ on:
 
 jobs:
   autoupdate:
-    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    runs-on: ubuntu-22.04
     container:
       image: ghcr.io/terrapkg/builder:frawhide
       options: --cap-add=SYS_ADMIN --privileged
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
           ssh-key: ${{ secrets.SSH_AUTHENTICATION_KEY }}

README.md

@@ -5,7 +5,7 @@
 Terra is a rolling-release Fedora repository for all the software you need.
 With Terra, you can install the latest packages knowing that quality and security are assured.
 
-See the introduction at [our website](https://terra.fyralabs.com).
+See the introduction at [our website](https://terrapkg.com).
 
 This monorepo contains the package manifests for all packages in Terra.
 
@@ -32,7 +32,7 @@ On Fedora, you can optionally install the Terra subrepos. Extra care and caution
 - Install `terra-release-extras` to enable the Extras subrepo. This repo contains packages which conflict with Fedora packages in some way, such as being a patched version of the same package.
 - Install `terra-release-mesa` to install the Mesa subrepo which contains a patched and codec complete Mesa.
 - Install `terra-release-nvidia` to install the NVIDIA subrepo which contains NVIDIA drivers.
-- Install `terra-release-multimedia` for multimedia packages in Terra. This repository is currently considered a work in progress.
+- Install `terra-release-multimedia` for multimedia packages in Terra. **This repository is currently considered unstable and a work in progress.**
 
 ### Enterprise Linux (EL)
 

anda/apps/KTailctl/KTailctl.spec

@@ -0,0 +1,74 @@
+Name:       ktailctl
+Version:    0.21.5
+Release:    1%{?dist}
+Summary:    A GUI to monitor and manage Tailscale on your Linux desktop
+License:    GPL-3.0-only
+URL:        https://github.com/f-koehler/KTailctl
+Source0:    %{url}/archive/refs/tags/v%{version}.tar.gz
+
+BuildRequires:  cmake
+BuildRequires:  extra-cmake-modules
+BuildRequires:  gcc-c++
+BuildRequires:  golang
+BuildRequires:  json-devel
+BuildRequires:  golang
+BuildRequires:  kf6-breeze-icons-devel
+BuildRequires:  kf6-kconfig-devel
+BuildRequires:  kf6-kcoreaddons-devel
+BuildRequires:  kf6-kdbusaddons-devel
+BuildRequires:  kf6-kguiaddons-devel
+BuildRequires:  kf6-ki18n-devel
+BuildRequires:  kf6-kirigami-addons-devel
+BuildRequires:  kf6-kirigami-devel
+BuildRequires:  kf6-knotifications-devel
+BuildRequires:  kf6-kwindowsystem-devel
+BuildRequires:  qt6-qtbase-devel
+BuildRequires:  qt6-qtdeclarative-devel
+BuildRequires:  qt6-qtsvg-devel
+
+Requires:       tailscale
+Requires:       kf5-qqc2-desktop-style
+Requires:       hicolor-icon-theme
+
+Provides:       KTailctl
+
+Packager:       Owen Zimmerman <owen@fyralabs.com>
+
+%description
+%{summary}.
+
+%package static
+%pkg_static_files
+
+%prep
+%autosetup -n KTailctl-%{version}
+cd src/wrapper
+go mod vendor
+
+%conf
+%cmake
+
+%build
+%cmake_build
+
+%install
+%cmake_install
+
+%files
+%doc README.md
+%license LICENSE.txt
+%{_bindir}/ktailctl
+%{_libdir}/qt6/qml/org/fkoehler/KTailctl/Components/*.qml
+%{_libdir}/qt6/qml/org/fkoehler/KTailctl/Components/*.version
+%{_libdir}/qt6/qml/org/fkoehler/KTailctl/Components/*.qmltypes
+%{_libdir}/qt6/qml/org/fkoehler/KTailctl/Components/qmldir
+# Exclusive libs that the package needs to run
+%{_libdir}/qt6/qml/org/fkoehler/KTailctl/Components/libktailctl_components.so
+%{_libdir}/libktailctl_wrapper_logging.so
+%{_appsdir}/org.fkoehler.KTailctl.desktop
+%{_scalableiconsdir}/org.fkoehler.KTailctl.svg
+%{_metainfodir}/org.fkoehler.KTailctl.metainfo.xml
+
+%changelog
+* Sat May 23 2026 Owen Zimmerman <owen@fyralabs.com> - 0.21.5-1
+- Initial commit

anda/apps/KTailctl/anda.hcl

@@ -1,5 +1,5 @@
 project pkg {
     rpm {
-        spec = "libdwarf.spec"
+        spec = "KTailctl.spec"
     }
 }

anda/apps/KTailctl/update.rhai

@@ -0,0 +1 @@
+rpm.version(gh("f-koehler/KTailctl"));

anda/apps/anki-bin/anki-bin.spec

@@ -1,10 +1,10 @@
-%global xurl https://files.pythonhosted.org/packages/22/1c/37fe0377fd5fbfe27b17db20679d76aeb1cef7be3ddfb22e24c0bb62cf96/anki-25.9.2-cp39-abi3-manylinux_2_36_x86_64.whl
-%global aurl https://files.pythonhosted.org/packages/c1/49/484a786ea0e1b3659de9478f2546368c5970da60a1cd403cec1fa2f81d65/anki-25.9.2-cp39-abi3-manylinux_2_36_aarch64.whl
-%global qurl https://files.pythonhosted.org/packages/e5/d4/26016857a780290264866e1818b1a408106c379906fbd186a0aa26eb1054/aqt-25.9.2-py3-none-any.whl
+%global xurl https://files.pythonhosted.org/packages/2b/bc/36972ebb0c09effa41a1dc5f1e9c19b9fd85675cc3196f43559eeb3d0ceb/anki-25.9.4-cp39-abi3-manylinux_2_36_x86_64.whl
+%global aurl https://files.pythonhosted.org/packages/cb/8e/42e0a2e8f8e6da78571ff8e79dd65eef1602390d03349839a2f4397fdcb5/anki-25.9.4-cp39-abi3-manylinux_2_36_aarch64.whl
+%global qurl https://files.pythonhosted.org/packages/83/a1/a8e8c5bc7dda44c0decfdeb128ca308d65d7beca1a4131230e9abadef439/aqt-25.9.4-py3-none-any.whl
 
 Name:			anki-bin
-Version:		25.9.2
-Release:		1%?dist
+Version:		25.9.4
+Release:		1%{?dist}
 Summary:		Flashcard program for using space repetition learning (Installed with wheel)
 License:		AGPL-3.0-or-later AND GPL-3.0-or-later AND LGPL-3.0-or-later AND MIT AND BSD-3-Clause AND CC-BY-SA-3.0 AND CC-BY-3.0 AND Apache-2.0 AND CC-BY-2.5
 URL:			https://apps.ankiweb.net/

anda/apps/anki-qt5/anki-qt5.spec

@@ -1,6 +1,6 @@
 Name:           anki-qt5
-Version:        25.09.2
-Release:        1%?dist
+Version:        25.09.4
+Release:        1%{?dist}
 Summary:        Flashcard program for using space repetition learning
 License:        AGPL-3.0-or-later AND GPL-3.0-or-later AND LGPL-3.0-or-later AND MIT AND BSD-3-Clause AND CC-BY-SA-3.0 AND CC-BY-3.0 AND Apache-2.0 AND CC-BY-2.5
 URL:            https://apps.ankiweb.net/

anda/apps/anki/anki.spec

@@ -1,6 +1,6 @@
 Name:           anki
-Version:        25.09.2
-Release:        1%?dist
+Version:        25.09.4
+Release:        1%{?dist}
 Summary:        Flashcard program for using space repetition learning
 License:        AGPL-3.0-or-later AND GPL-3.0-or-later AND LGPL-3.0-or-later AND MIT AND BSD-3-Clause AND CC-BY-SA-3.0 AND CC-BY-3.0 AND Apache-2.0 AND CC-BY-2.5
 URL:            https://apps.ankiweb.net/

anda/apps/auto-cpufreq/anda.hcl

@@ -0,0 +1,6 @@
+project pkg {
+        arches = ["x86_64"]
+    rpm {
+        spec = "auto-cpufreq.spec"
+    }
+}

anda/apps/auto-cpufreq/auto-cpufreq.spec

@@ -0,0 +1,87 @@
+%global _desc Automatic CPU speed & power optimizer for Linux.
+
+Name:			python-auto-cpufreq
+Version:		3.0.0
+Release:		2%?dist
+Summary:		Automatic CPU speed & power optimizer for Linux
+License:		LGPL-3.0-or-later
+URL:			https://foolcontrol.org/?p=4603
+Source0:		https://github.com/AdnanHodzic/auto-cpufreq/archive/refs/tags/v%{version}.tar.gz
+Patch0:         prevent-install-and-copy.patch
+
+BuildRequires:  python3-devel
+BuildRequires:  python3-wheel
+BuildRequires:  python3-setuptools
+BuildRequires:  python3-pip
+BuildRequires:  python3-installer
+BuildRequires:  systemd-rpm-macros
+BuildRequires:  python3-poetry-core
+BuildRequires:  python3-poetry-dynamic-versioning
+BuildArch:      noarch
+
+Packager:	    Owen Zimmerman <owen@fyralabs.com>
+
+%description
+%_desc
+
+%package -n     python3-auto-cpufreq
+Summary:        %{summary}
+%{?python_provide:%python_provide python3-auto-cpufreq}
+
+%description -n python3-auto-cpufreq
+%_desc
+
+%prep
+%git_clone https://github.com/AdnanHodzic/auto-cpufreq.git %{version}
+%patch -P0 -p1
+
+%build
+%pyproject_wheel
+
+%install
+%pyproject_install
+%pyproject_save_files auto_cpufreq
+mkdir -p %{buildroot}%{_datadir}/polkit-1/actions/
+install -Dm644 scripts/org.auto-cpufreq.pkexec.policy %{buildroot}%{_datadir}/polkit-1/actions/
+install -Dm644 images/icon.png %{buildroot}%{_hicolordir}/512x512/apps/auto-cpufreq.png
+install -Dm644 images/icon.png %{buildroot}%{_datadir}/%{name}/icon.png
+
+mkdir -p %{buildroot}%{_datadir}/auto-cpufreq/scripts/
+mkdir -p %{buildroot}/opt/auto-cpufreq/
+mkdir -p %{buildroot}%{_appsdir}/
+mkdir -p %{buildroot}%{_unitdir}/
+
+install -Dm755 scripts/auto-cpufreq-install.sh %{buildroot}%{_datadir}/auto-cpufreq/scripts/
+install -Dm755 scripts/auto-cpufreq-remove.sh %{buildroot}%{_datadir}/auto-cpufreq/scripts/
+install -Dm644 scripts/auto-cpufreq.service %{buildroot}%{_unitdir}/auto-cpufreq.service
+install -Dm755 scripts/cpufreqctl.sh %{buildroot}%{_datadir}/auto-cpufreq/scripts/
+install -Dm644 scripts/style.css %{buildroot}%{_datadir}/auto-cpufreq/scripts/
+install -Dm644 scripts/auto-cpufreq-gtk.desktop %{buildroot}%{_appsdir}/
+
+%post
+%systemd_post auto-cpufreq.service
+
+%preun
+%systemd_preun auto-cpufreq.service
+
+%postun
+%systemd_postun_with_restart auto-cpufreq.service
+
+%files -n python3-auto-cpufreq -f %{pyproject_files}
+%doc README.md
+%license LICENSE
+%{_bindir}/auto-cpufreq
+%{_bindir}/auto-cpufreq-gtk
+%{_datadir}/polkit-1/actions/org.auto-cpufreq.pkexec.policy
+%{_hicolordir}/512x512/apps/auto-cpufreq.png
+%{_datadir}/%{name}/icon.png
+%{_unitdir}/auto-cpufreq.service
+%{_datadir}/auto-cpufreq/scripts/
+%{_appsdir}/auto-cpufreq-gtk.desktop
+
+%changelog
+* Tue Apr 07 2026 Owen Zimmerman <owen@fyralabs.com>
+- Add install fix patch
+
+* Sun Apr 05 2026 Owen Zimmerman <owen@fyralabs.com>
+- Initial commit

anda/apps/auto-cpufreq/prevent-install-and-copy.patch

@@ -0,0 +1,101 @@
+diff --git a/auto_cpufreq/core.py b/auto_cpufreq/core.py
+index f03e7de..2dff5fb 100755
+--- a/auto_cpufreq/core.py
++++ b/auto_cpufreq/core.py
+@@ -277,19 +277,12 @@ def get_current_gov():
+     )
+ 
+ def cpufreqctl():
+-    """
+-    deploy cpufreqctl.auto-cpufreq script
+-    """
+-    if not (IS_INSTALLED_WITH_SNAP or os.path.isfile("/usr/local/bin/cpufreqctl.auto-cpufreq")):
+-        copy(SCRIPTS_DIR / "cpufreqctl.sh", "/usr/local/bin/cpufreqctl.auto-cpufreq")
+-        call(["chmod", "a+x", "/usr/local/bin/cpufreqctl.auto-cpufreq"])
++    # scripts are already in the correct place
++    pass
+ 
+ def cpufreqctl_restore():
+-    """
+-    remove cpufreqctl.auto-cpufreq script
+-    """
+-    if not IS_INSTALLED_WITH_SNAP and os.path.isfile("/usr/local/bin/cpufreqctl.auto-cpufreq"):
+-        os.remove("/usr/local/bin/cpufreqctl.auto-cpufreq")
++    #no need to restore
++    pass
+ 
+ def footer(l=79): print("\n" + "-" * l + "\n")
+ 
+@@ -307,31 +300,8 @@ def remove_complete_msg():
+     footer()
+ 
+ def deploy_daemon():
+-    print("\n" + "-" * 21 + " Deploying auto-cpufreq as a daemon " + "-" * 22 + "\n")
+-
+-    cpufreqctl() # deploy cpufreqctl script func call
+-
+-    bluetooth_disable() # turn off bluetooth on boot
+-
+-    auto_cpufreq_stats_path.touch(exist_ok=True)
+-
+-    print("\n* Deploy auto-cpufreq install script")
+-    copy(SCRIPTS_DIR / "auto-cpufreq-install.sh", "/usr/local/bin/auto-cpufreq-install")
+-    call(["chmod", "a+x", "/usr/local/bin/auto-cpufreq-install"])
+-
+-    print("\n* Deploy auto-cpufreq remove script")
+-    copy(SCRIPTS_DIR / "auto-cpufreq-remove.sh", "/usr/local/bin/auto-cpufreq-remove")
+-    call(["chmod", "a+x", "/usr/local/bin/auto-cpufreq-remove"])
+-
+-    # output warning if gnome power profile is running
+-    gnome_power_detect_install()
+-    gnome_power_svc_disable()
+-
+-    tuned_svc_disable()
+-
+-    tlp_service_detect() # output warning if TLP service is detected
+-
+-    call("/usr/local/bin/auto-cpufreq-install", shell=True)
++    # prevent needless copying and system changes
++    pass
+ 
+ def deploy_daemon_performance():
+     print("\n" + "-" * 21 + " Deploying auto-cpufreq as a daemon (performance) " + "-" * 22 + "\n")
+@@ -363,37 +333,7 @@ def deploy_daemon_performance():
+ 
+     call("/usr/local/bin/auto-cpufreq-install", shell=True)
+ 
+-def remove_daemon():
+-    # check if auto-cpufreq is installed
+-    if not os.path.exists("/usr/local/bin/auto-cpufreq-remove"):
+-        print("\nauto-cpufreq daemon is not installed.\n")
+-        sys.exit(1)
+-
+-    print("\n" + "-" * 21 + " Removing auto-cpufreq daemon " + "-" * 22 + "\n")
+-
+-    bluetooth_enable() # turn on bluetooth on boot
+-
+-    # output warning if gnome power profile is stopped
+-    gnome_power_rm_reminder()
+-    gnome_power_svc_enable()
+-
+-    tuned_svc_enable()
+-
+-    # run auto-cpufreq daemon remove script
+-    call("/usr/local/bin/auto-cpufreq-remove", shell=True)
+-
+-    # remove auto-cpufreq-remove
+-    os.remove("/usr/local/bin/auto-cpufreq-remove")
+-
+-    # delete override pickle if it exists
+-    if os.path.exists(governor_override_state):  os.remove(governor_override_state)
+-
+-    # delete stats file
+-    if auto_cpufreq_stats_path.exists():
+-        if auto_cpufreq_stats_file is not None: auto_cpufreq_stats_file.close()
+-        auto_cpufreq_stats_path.unlink()
+-
+-    cpufreqctl_restore() # restore original cpufrectl script
++def remove_daemon(): pass
+ 
+ def gov_check():
+     for gov in AVAILABLE_GOVERNORS:

anda/apps/auto-cpufreq/update.rhai

@@ -0,0 +1 @@
+rpm.version(gh("AdnanHodzic/auto-cpufreq"));

anda/apps/bazzite-portal/bazzite-portal.spec

@@ -1,13 +1,13 @@
 Name:           bazzite-portal
-Version:        0.1.6
-Release:        2%?dist
+Version:        0.2.3
+Release:        1%{?dist}
 Summary:        Bazzite Portal is a tabbed frontend for curated script execution, with a focus on distro specific QOL shortcuts
 URL:            https://github.com/ublue-os/yafti-gtk
 Source0:        https://github.com/ublue-os/yafti-gtk/archive/refs/tags/v%{version}.tar.gz
 License:        GPL-3.0-only
 Requires:       python3-gobject
 Requires:       python3-PyYAML
-Requires:       gtk3
+Requires:       gtk4
 Provides:       Bazzite-Portal
 BuildArch:      noarch
 Packager:       Zacharias Xenakis <xarishark@outlook.com>
@@ -35,5 +35,8 @@ install -Dm 644 io.github.ublue_os.yafti_gtk.metainfo.xml %{buildroot}%{_metainf
 %{_metainfodir}/io.github.ublue_os.yafti_gtk.metainfo.xml
 
 %changelog
+* Sun Apr 19 2026 Xarishark <xarishark@outlook.com>
+- Upgraded to GTK4
+
 * Wed Jan 28 2026 Xarishark <xarishark@outlook.com>
-- Initial commit
+- Initial commit

anda/apps/bitwarden/cli.bin/bitwarden-cli.bin.spec

@@ -1,6 +1,6 @@
 Name:           bitwarden-cli.bin
-Version:        2026.1.0
-Release:        1%?dist
+Version:        2026.4.1
+Release:        1%{?dist}
 Summary:        Bitwarden command-line client
 License:        GPL-3.0-only
 URL:            https://bitwarden.com

anda/apps/bitwarden/cli/bitwarden-cli.spec

@@ -6,8 +6,8 @@
 %endif
 
 Name:           bitwarden-cli
-Version:        2026.1.0
-Release:        1%?dist
+Version:        2026.3.0
+Release:        1%{?dist}
 Summary:        Bitwarden command-line client
 License:        GPL-3.0-only
 URL:            https://bitwarden.com

anda/apps/blackbox-terminal/anda.hcl

@@ -1,5 +0,0 @@
-project pkg {
-	rpm {
-		spec = "blackbox-terminal.spec"
-	}
-}

anda/apps/blackbox-terminal/blackbox-terminal.spec

@@ -1,58 +0,0 @@
-Name:           blackbox-terminal
-Version:        0.14.0
-Release:        1%{?dist}
-Summary:        A beautiful GTK 4 terminal
-License:        GPL-3.0
-URL:            https://gitlab.gnome.org/raggesilver/blackbox
-BuildRequires:  vala meson gettext 
-BuildRequires:  pkgconfig(gtk4) >= 4.6.2
-BuildRequires:  pkgconfig(gio-2.0) >= 2.50
-BuildRequires:  libadwaita-devel >= 1.1
-BuildRequires:  pkgconfig(pqmarble) >= 2
-BuildRequires:  pkgconfig(vte-2.91-gtk4) >= 0.69.0
-BuildRequires:  pkgconfig(json-glib-1.0) >= 1.4.4
-BuildRequires:  pkgconfig(libxml-2.0) >= 2.9.12
-BuildRequires:  pkgconfig(librsvg-2.0) >= 2.54.0
-BuildRequires:  pkgconfig(libpcre2-8)
-BuildRequires:  pkgconfig(graphene-gobject-1.0)
-BuildRequires:  pkgconfig(gee-0.8)
-BuildRequires:  desktop-file-utils libappstream-glib cmake
-Source0:        %url/-/archive/v%version/blackbox-v%version.tar.gz
-
-%description
-%{summary}.
-
-%prep
-%autosetup -p1 -n blackbox-v%version
-
-%build
-%meson
-%meson_build
-
-%install
-%meson_install
-
-%check
-appstream-util validate-relax --nonet %buildroot/%_datadir/metainfo/com.raggesilver.BlackBox.metainfo.xml
-
-%files
-%doc README.md
-%license COPYING
-%_bindir/blackbox
-%_bindir/terminal-toolbox
-%_datadir/applications/com.raggesilver.BlackBox.desktop
-%_datadir/metainfo/com.raggesilver.BlackBox.metainfo.xml
-%_datadir/blackbox/
-%_datadir/glib-2.0/schemas/com.raggesilver.BlackBox.gschema.xml
-%_datadir/icons/hicolor/scalable/actions/com.raggesilver.BlackBox-fullscreen-symbolic.svg
-%_datadir/icons/hicolor/scalable/actions/com.raggesilver.BlackBox-show-headerbar-symbolic.svg
-%_datadir/icons/hicolor/scalable/actions/external-link-symbolic.svg
-%_datadir/icons/hicolor/scalable/actions/settings-symbolic.svg
-%_datadir/icons/hicolor/scalable/apps/com.raggesilver.BlackBox.svg
-%_datadir/locale/*/LC_MESSAGES/blackbox.mo
-
-
-
-%changelog
-* Sun Oct 23 2022 windowsboy111 <windowsboy111@fyralabs.com>
-- Initial package

anda/apps/blackbox-terminal/update.rhai

@@ -1,4 +0,0 @@
-let txt = get("https://gitlab.gnome.org/api/v4/projects/20397/releases/");
-let ver = txt.json_arr()[0].tag_name;
-ver.crop(1);
-rpm.version(ver);

anda/apps/chdig/chdig.spec

@@ -1,8 +1,8 @@
 %undefine __brp_mangle_shebangs
 
 Name:           chdig
-Version:        26.2.3
-Release:        1%?dist
+Version:        26.5.1
+Release:        1%{?dist}
 Summary:        Dig into ClickHouse with TUI interface
 URL:            https://github.com/azat/chdig
 Source0:        %url/archive/refs/tags/v%{version}.tar.gz

anda/apps/chrultrabook-tools/chrultrabook-tools.spec

@@ -1,7 +1,7 @@
 %undefine __brp_mangle_shebangs
 
 Name:           chrultrabook-tools
-Version:        3.1.4
+Version:        3.1.6
 Release:        1%{?dist}
 Summary:        User-friendly configuration utility for Chromebooks running an alternate OS
 URL:            https://github.com/death7654/Chrultrabook-Tools

anda/apps/coolercontrol/coolercontrol.spec

@@ -8,8 +8,8 @@ for background device management, as well as a GUI to expertly customize your se
 %global __brp_mangle_shebangs %{nil}
 
 Name:           coolercontrol
-Version:        3.1.1
-Release:        3%?dist
+Version:        4.3.1
+Release:        1%{?dist}
 Summary:        Cooling device control for Linux
 ExclusiveArch:  x86_64 aarch64
 License:        GPL-3.0-or-later

anda/apps/discord-canary-openasar/discord-canary-openasar.spec

@@ -6,8 +6,8 @@
 %global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
 
 Name:           discord-canary-openasar
-Version:        0.0.886
-Release:        1%?dist
+Version:        1.0.1174
+Release:        1%{?dist}
 Summary:        A snappier Discord rewrite with features like further customization and theming
 License:        MIT AND https://discord.com/terms
 URL:            https://github.com/GooseMod/OpenAsar

anda/apps/discord-canary/discord-canary.spec

@@ -1,20 +1,17 @@
-%define debug_package %{nil}
-%global _build_id_links none
-
-# Exclude private libraries
-%global __requires_exclude libffmpeg.so
-%global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
-
 Name:           discord-canary
-Version:        0.0.886
-Release:        1%?dist
+Version:        1.0.1174
+Release:        1%{?dist}
 Summary:        Free Voice and Text Chat for Gamers
 URL:            discord.com
-Source0:        https://dl-canary.discordapp.net/apps/linux/%{version}/discord-canary-%{version}.tar.gz
-License:        https://discord.com/terms
-Requires:       glibc GConf2 nspr >= 4.13 nss >= 3.27 libX11 >= 1.6 libXtst >= 1.2
+Source0:        https://dl-canary.discordapp.net/apps/linux/%{version}/%{name}-%{version}.tar.gz
+Source1:        https://discord.com/terms#/terms.html
+License:        Proprietary
+Requires:       zenity
 Group:          Applications/Internet
 ExclusiveArch:  x86_64
+
+%electronmeta -D
+
 %description
 All-in-one voice and text chat for gamers that's free, secure, and works on
 both your desktop and phone.
@@ -25,23 +22,23 @@ both your desktop and phone.
 %build
 
 %install
-rm -rf $RPM_BUILD_ROOT
-mkdir -p %{buildroot}%{_bindir}
-mkdir -p %{buildroot}%{_datadir}/discord-canary
-cp -rv * %{buildroot}%{_datadir}/discord-canary
-mkdir -p %{buildroot}%{_datadir}/applications/
-mkdir -p %{buildroot}%{_datadir}/pixmaps
-ln -s %_datadir/discord-canary/discord-canary.desktop %{buildroot}%{_datadir}/applications/
-ln -s %_datadir/discord-canary/discord.png %{buildroot}%{_datadir}/pixmaps/discord-canary.png
-ln -s %_datadir/discord-canary/DiscordCanary %buildroot%_bindir/discord-canary
+install -Dpm755 updater_bootstrap -t %{buildroot}%{_datadir}/%{name}
+install -Dpm755 %{name} -t %{buildroot}%{_bindir}
+install -Dpm644 discord.png %{buildroot}%{_datadir}/pixmaps/%{name}.png
+%desktop_file_install %{name}.desktop
+cp %{SOURCE1} -t .
 
 %files
-%_bindir/discord-canary
-%{_datadir}/discord-canary/
-%{_datadir}/applications/discord-canary.desktop
-%{_datadir}/pixmaps/discord-canary.png
+%license terms.html
+%{_bindir}/%{name}
+%{_datadir}/%{name}/
+%{_appsdir}/%{name}.desktop
+%{_datadir}/pixmaps/%{name}.png
 
 %changelog
+* Tue May 5 2026 Gilver E. <roachy@fyralabs.com> - 1.0.1025-2
+- Update build for new bootstrap format
+
 * Thu Dec 01 2022 root - 0.0.144-1
 - new version
 

anda/apps/discord-openasar/discord-openasar.spec

@@ -6,8 +6,8 @@
 %global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
 
 Name:           discord-openasar
-Version:        0.0.125
-Release:        1%?dist
+Version:        1.0.140
+Release:        1%{?dist}
 Summary:        A snappier Discord rewrite with features like further customization and theming
 License:        MIT AND https://discord.com/terms
 URL:            https://github.com/GooseMod/OpenAsar

anda/apps/discord-ptb-openasar/discord-ptb-openasar.spec

@@ -6,8 +6,8 @@
 %global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
 
 Name:           discord-ptb-openasar
-Version:        0.0.179
-Release:        1%?dist
+Version:        1.0.193
+Release:        1%{?dist}
 Summary:        A snappier Discord rewrite with features like further customization and theming
 License:        MIT AND https://discord.com/terms
 URL:            https://github.com/GooseMod/OpenAsar

anda/apps/discord-ptb/discord-ptb.spec

@@ -1,24 +1,17 @@
-%define debug_package %{nil}
-%global _build_id_links none
-
-# Exclude private libraries
-%global __requires_exclude libffmpeg.so
-%global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
-
 Name:           discord-ptb
-Version:        0.0.179
-Release:        1%?dist
+Version:        1.0.193
+Release:        1%{?dist}
 Summary:        Free Voice and Text Chat for Gamers.
 URL:            https://discord.com
-Source0:        https://dl-ptb.discordapp.net/apps/linux/%{version}/discord-ptb-%{version}.tar.gz
-License:        https://discord.com/terms
-Requires:       glibc GConf2
-Requires:       nspr >= 4.13
-Requires:       nss >= 3.27
-Requires:       libX11 >= 1.6
-Requires:       libXtst >= 1.2
+Source0:        https://dl-ptb.discordapp.net/apps/linux/%{version}/%{name}-%{version}.tar.gz
+Source1:        https://discord.com/terms#/terms.html
+License:        Proprietary
+Requires:       zenity
 Group:          Applications/Internet
 ExclusiveArch:  x86_64
+
+%electronmeta -D
+
 %description
 All-in-one voice and text chat for gamers that's free, secure, and works on
 both your desktop and phone.
@@ -29,23 +22,23 @@ both your desktop and phone.
 %build
 
 %install
-rm -rf $RPM_BUILD_ROOT
-mkdir -p %{buildroot}%{_bindir}
-mkdir -p %{buildroot}%{_datadir}/discord-ptb
-cp -rv * %{buildroot}%{_datadir}/discord-ptb
-mkdir -p %{buildroot}%{_datadir}/applications/
-mkdir -p %{buildroot}%{_datadir}/pixmaps
-ln -s %_datadir/discord-ptb/discord-ptb.desktop %{buildroot}%{_datadir}/applications/
-ln -s %_datadir/discord-ptb/discord.png %{buildroot}%{_datadir}/pixmaps/discord-ptb.png
-ln -s %_datadir/discord-ptb/Discord %buildroot%_bindir/discord-ptb
+install -Dpm755 updater_bootstrap -t %{buildroot}%{_datadir}/%{name}
+install -Dpm755 %{name} -t %{buildroot}%{_bindir}
+install -Dpm644 discord.png %{buildroot}%{_datadir}/pixmaps/%{name}.png
+%desktop_file_install %{name}.desktop
+cp %{SOURCE1} -t .
 
 %files
-%_bindir/discord-ptb
-%{_datadir}/discord-ptb/
-%{_datadir}/applications/discord-ptb.desktop
-%{_datadir}/pixmaps/discord-ptb.png
+%license terms.html
+%{_bindir}/%{name}
+%{_datadir}/%{name}/
+%{_appsdir}/%{name}.desktop
+%{_datadir}/pixmaps/%{name}.png
 
 %changelog
+* Tue May 5 2026 Gilver E. <roachy@fyralabs.com> - 1.0.189-2
+- Update build for new bootstrap format
+
 * Thu Nov 17 2022 madonuko <mado@fyralabs.com> - 0.0.35-1
 - new version
 

anda/apps/discord/discord.spec

@@ -1,24 +1,17 @@
-%define debug_package %{nil}
-%global _build_id_links none
+Name:           discord
+Version:        1.0.140
+Release:        1%{?dist}
+Summary:        Free Voice and Text Chat for Gamers
+URL:            https://discord.com
+Source0:        https://dl.discordapp.net/apps/linux/%{version}/%{name}-%{version}.tar.gz
+Source1:        https://discord.com/terms#/terms.html
+License:        Proprietary
+Requires:       zenity
+Group:          Applications/Internet
+ExclusiveArch:  x86_64
 
-# Exclude private libraries
-%global __requires_exclude libffmpeg.so
-%global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
+%electronmeta -D
 
-Name:			discord
-Version:		0.0.125
-Release:		1%?dist
-Summary:		Free Voice and Text Chat for Gamers
-URL:			https://discord.com
-Source0:		https://dl.discordapp.net/apps/linux/%{version}/discord-%{version}.tar.gz
-License:		https://discord.com/terms
-Requires:		glibc GConf2
-Requires:		nspr >= 4.13
-Requires:		nss >= 3.27
-Requires:		libX11 >= 1.6
-Requires:		libXtst >= 1.2
-Group:			Applications/Internet
-ExclusiveArch:	x86_64
 %description
 All-in-one voice and text chat for gamers that's free, secure, and works on
 both your desktop and phone.
@@ -29,22 +22,23 @@ both your desktop and phone.
 %build
 
 %install
-rm -rf $RPM_BUILD_ROOT
-mkdir -p %{buildroot}%{_bindir}
-mkdir -p %{buildroot}%{_datadir}/discord
-cp -rv * %{buildroot}%{_datadir}/discord
-mkdir -p %{buildroot}%{_datadir}/applications/
-mkdir -p %{buildroot}%{_datadir}/pixmaps
-ln -s %_datadir/discord/discord.desktop %{buildroot}%{_datadir}/applications/discord.desktop
-ln -s %_datadir/discord/discord.png %{buildroot}%{_datadir}/pixmaps/discord.png
-ln -s %_datadir/discord/Discord %buildroot%_bindir/discord
+install -Dpm755 updater_bootstrap -t %{buildroot}%{_datadir}/%{name}
+install -Dpm755 %{name} -t %{buildroot}%{_bindir}
+install -Dpm644 %{name}.png -t %{buildroot}%{_datadir}/pixmaps
+%desktop_file_install %{name}.desktop
+cp %{SOURCE1} -t .
 
 %files
-%_bindir/discord
-%{_datadir}/discord/
-%{_datadir}/applications/discord.desktop
-%{_datadir}/pixmaps/discord.png
+%license terms.html
+%{_bindir}/%{name}
+%{_datadir}/%{name}/
+%{_appsdir}/%{name}.desktop
+%{_datadir}/pixmaps/%{name}.png
 
 %changelog
+* Tue May 5 2026 Gilver E. <roachy@fyralabs.com> - 1.0.136-4
+- Remove unused files from package
+* Mon May 4 2026 Gilver E. <roachy@fyralabs.com> - 1.0.136-2
+- Updated /usr/bin symlink
 * Thu Jan 19 2023 madonuko <mado@fyralabs.com> - 0.0.143-1
 - Initial package

anda/apps/envision/envision.spec

@@ -1,10 +1,10 @@
-%global commit b50c32d7c3e74af4faeb92fb0e8f49108d85ff90
-%global commit_date 20251211
+%global commit 5704db300594aef6b7a38399c217eac5c704ccb8
+%global commit_date 20260519
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 Name:           envision-nightly
 Version:        %commit_date.%shortcommit
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        UI for building, configuring and running Monado, the open source OpenXR runtime
 SourceLicense:  AGPL-3.0-or-later
 License:        ((Apache-2.0 OR MIT) AND BSD-3-Clause) AND ((MIT OR Apache-2.0) AND Unicode-3.0) AND (0BSD OR MIT OR Apache-2.0) AND AGPL-3.0-or-later AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR ISC OR MIT) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND Apache-2.0 AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND ISC AND (MIT OR Apache-2.0) AND (MIT OR Zlib OR Apache-2.0) AND MIT AND Unicode-3.0 AND (Unlicense OR MIT) AND Zlib

anda/apps/falcond-gui/falcond-gui.spec

@@ -1,6 +1,8 @@
+%global appid com.pikaos.falcondgui
+
 Name:           falcond-gui
-Version:        1.0.2
-Release:        1%?dist
+Version:        1.0.3
+Release:        1%{?dist}
 Summary:        A GTK4/LibAdwaita application to control and monitor the Falcond gaming optimization daemon
 SourceLicense:  MIT
 License:        (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND CC0-1.0 AND ISC AND (MIT OR Apache-2.0) AND MIT AND (Unlicense OR MIT)
@@ -30,12 +32,12 @@ falcond-gui provides a user-friendly graphical interface for managing falcond. I
 
 %install
 %cargo_install
-desktop-file-install res/%{name}.desktop
-install -Dm644 res/falcond.png -t %{buildroot}%{_hicolordir}/512x512/apps/
+%desktop_file_install res/%{appid}.desktop
+install -Dm644 res/%{appid}.png -t %{buildroot}%{_hicolordir}/512x512/apps/
 %{cargo_license_online} > LICENSE.dependencies
 
 %check
-desktop-file-validate %{buildroot}%{_datadir}/applications/%{name}.desktop
+%desktop_file_validate %{buildroot}%{_datadir}/applications/%{appid}.desktop
 
 %posttrans
 /usr/bin/gtk-update-icon-cache %{_datadir}/icons/hicolor/ &>/dev/null || :
@@ -44,8 +46,8 @@ desktop-file-validate %{buildroot}%{_datadir}/applications/%{name}.desktop
 %doc ../README.md
 %license ../LICENSE.md
 %{_bindir}/%{name}
-%{_hicolordir}/512x512/apps/falcond.png
-%{_appsdir}/%{name}.desktop
+%{_hicolordir}/512x512/apps/%{appid}.png
+%{_appsdir}/%{appid}.desktop
 
 %changelog
 * Thu Jan 1 2026 Gilver E. <roachy@fyralabs.com> - 1.0.0-1

anda/apps/falcond-gui/update.rhai

@@ -1 +1 @@
-rpm.version(get("https://git.pika-os.com/api/v1/repos/general-packages/falcond-gui/releases").json_arr()[0].tag_name);
+rpm.version(gitea("git.pika-os.com", "general-packages/falcond-gui"));

anda/apps/feishin/feishin.spec

@@ -6,7 +6,7 @@
 %global __provides_exclude_from %{_datadir}/%{name}/.*\\.so
 
 Name:			feishin
-Version:		1.9.0
+Version:		1.12.1
 Release:		1%{?dist}
 Summary:		A modern self-hosted music player
 License:		GPL-3.0

anda/apps/flameshot/flameshot-nightly.spec

@@ -1,9 +1,9 @@
 #? https://github.com/flameshot-org/flameshot/blob/master/packaging/rpm/fedora/flameshot.spec
 
 %global ver 13.3.0
-%global commit 739a809557d8be3ee8f3f7d16dffd0cfd391de09
+%global commit f3e81d2608aa2e1269c53765ce61823c8ed2aea7
 %global shortcommit %{sub %{commit} 1 7}
-%global commit_date 20260208
+%global commit_date 20260529
 %global devel_name QtColorWidgets
 %global _distro_extra_cflags -fuse-ld=mold
 %global _distro_extra_cxxflags -fuse-ld=mold

anda/apps/framework-tool-tui/anda.hcl

@@ -0,0 +1,6 @@
+project pkg {
+      arches = ["x86_64"]
+    rpm {
+      spec = "framework-tool-tui.spec"
+    }
+}

anda/apps/framework-tool-tui/framework-tool-tui.spec

@@ -0,0 +1,53 @@
+%undefine __brp_mangle_shebangs
+
+Name:           framework-tool-tui
+Version:        0.8.3
+Release:        1%{?dist}
+Summary:        A TUI for controlling and monitoring Framework Computers hardware built in Rust
+URL:            https://github.com/grouzen/framework-tool-tui
+Source0:        %{url}/archive/refs/tags/v%{version}.tar.gz
+License:        MIT AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR BSL-1.0) AND (MIT OR Apache-2.0) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND BSD-3-Clause AND (MIT OR Apache-2.0) AND (MIT OR Zlib OR Apache-2.0) AND MPL-2.0 AND Zlib AND (Unlicense OR MIT)
+BuildRequires:  anda-srpm-macros
+BuildRequires:  cargo-rpm-macros
+BuildRequires:  pkgconfig(libudev)
+BuildArch:      x86_64
+
+Packager:       Owen Zimmerman <owen@fyralabs.com>
+
+%description
+A snappy TUI dashboard for controlling and monitoring your Framework Laptop
+hardware — charging, privacy, lighting, USB PD ports, and more.
+
+%package doc
+Summary:	Documentations for %{name}
+BuildArch:	noarch
+
+%description doc
+Documentations for %{name}.
+
+%prep
+%autosetup
+%cargo_prep_online
+
+%build
+%cargo_build
+
+%install
+install -Dm755 target/rpm/framework-tool-tui %{buildroot}%{_bindir}/framework-tool-tui
+%{cargo_license_online} > LICENSE.dependencies
+
+mkdir -p %{buildroot}%{_docdir}/%{name}/
+cp -r docs/*.md %{buildroot}%{_docdir}/%{name}/
+
+%files
+%{_bindir}/framework-tool-tui
+%license LICENSE
+%license LICENSE.dependencies
+%doc README.md
+
+%files doc
+%{_docdir}/%{name}/
+
+%changelog
+* Thu Apr 23 2026 Owen Zimmerman <owen@fyralabs.com>
+- Initial commit

anda/apps/framework-tool-tui/update.rhai

@@ -0,0 +1 @@
+rpm.version(gh("grouzen/framework-tool-tui"));

anda/apps/goofcord/nightly/goofcord-nightly.spec

@@ -1,14 +1,14 @@
-%global commit 4ea08fb13e496995af3490d7e501aee2f3c20b4d
+%global commit eebb15d3d940823883afa67bf62692874df7f2d1
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global commit_date 20260211
-%global ver 2.0.1^
+%global commit_date 20260426
+%global ver 2.2.1^
 %global base_name goofcord
 %global git_name GoofCord
 %global appid io.github.milkshiift.GoofCord
 
 Name:          %{base_name}-nightly
 Version:       %{ver}%{commit_date}.git.%{shortcommit}
-Release:       1%?dist
+Release:       1%{?dist}
 License:       OSL-3.0
 Summary:       A privacy-minded Legcord fork.
 Group:         Applications/Internet

anda/apps/goofcord/stable/goofcord.spec

@@ -2,8 +2,8 @@
 %global appid io.github.milkshiift.GoofCord
 
 Name:          goofcord
-Version:       2.0.1
-Release:       2%{?dist}
+Version:       2.2.1
+Release:       1%{?dist}
 License:       OSL-3.0
 Summary:       A privacy-minded Legcord fork.
 Group:         Applications/Internet
@@ -19,7 +19,7 @@ Packager:      Gilver E. <roachy@fyralabs.com>
 A highly configurable and privacy minded Discord client.
 
 %prep
-%autosetup -n %{git_name}-%{version}
+%autosetup -p1 -n %{git_name}-%{version}
 %ifarch %{arm64} armv7hl armv7l
 sed -i '/\"x64\",/d' electron-builder.ts
 %endif

anda/apps/gurk/gurk.spec

@@ -1,8 +1,8 @@
 %undefine __brp_mangle_shebangs
 
 Name:           gurk
-Version:        0.9.0
-Release:        1%?dist
+Version:        0.9.3
+Release:        1%{?dist}
 Summary:        Signal Messenger client for terminal
 License:        AGPL-3.0-or-later AND (MIT OR Apache-2.0) AND Unicode-3.0 AND (0BSD OR MIT OR Apache-2.0) AND Apache-2.0 AND ISC AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR ISC OR MIT) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND BSD-3-Clause AND (BSD-3-Clause OR Apache-2.0) AND (BSD-3-Clause OR MIT OR Apache-2.0) AND BSL-1.0 AND CDLA-Permissive-2.0 AND MIT AND (MIT OR Apache-2.0) AND (MIT OR Apache-2.0 OR BSD-1-Clause) AND (MIT OR Apache-2.0 OR LGPL-2.1-or-later) AND (MIT OR Apache-2.0 OR Zlib) AND (MIT OR Zlib OR Apache-2.0) AND MPL-2.0 AND (Unlicense OR MIT) AND Zlib AND (Zlib OR Apache-2.0 OR MIT)
 URL:            https://github.com/boxdot/gurk-rs

anda/apps/halloy/halloy.spec

@@ -4,8 +4,8 @@
 %global crate halloy
 
 Name:           halloy
-Version:        2026.4
-Release:        1%?dist
+Version:        2026.7
+Release:        1%{?dist}
 Summary:        An open-source IRC client written in Rust, with the Iced GUI library
 Packager:      Yoong jin <solomoncyj@gmail.com>
 SourceLicense:  GPL-3.0-or-later

anda/apps/helium-browser-bin/helium-browser-bin.spec

@@ -11,7 +11,7 @@
 %endif
 
 Name:           helium-browser-bin
-Version:        0.10.4.1
+Version:        0.12.5.1
 Release:        1%{?dist}
 Summary:        Private, fast, and honest web browser based on Chromium
 
@@ -21,7 +21,7 @@ License:        GPL-3.0-only AND BSD-3-Clause
 Source0:        https://github.com/imputnet/helium-linux/releases/download/%{version}/helium-%{version}-%{arch}_linux.tar.xz
 Source1:        https://github.com/imputnet/helium-linux/archive/refs/tags/%{version}.tar.gz
 Source2:        net.imput.helium.metainfo.xml
-Source3:        net.imput.helium.desktop
+Source3:        helium.desktop
 
 ExclusiveArch:  x86_64 aarch64
 
@@ -47,7 +47,7 @@ tar --strip-components=1 -zxvf %{SOURCE1}
 install -dm755 %{buildroot}%{_libdir}/%{name}
 cp -a * %{buildroot}%{_libdir}/%{name}/
 
-install -Dm644 %{SOURCE3} %{buildroot}%{_appsdir}/%{appid}.desktop
+%desktop_file_install %{S:3}
 
 install -Dm644 product_logo_256.png %{buildroot}%{_hicolordir}/256x256/apps/%{appid}.png
 
@@ -111,7 +111,7 @@ chmod 755 %{buildroot}%{_bindir}/%{name}
 %{_libdir}/%{name}/
 # shebang reasons
 %attr(0755,root,root) %{_bindir}/%{name}
-%{_appsdir}/%{appid}.desktop
+%{_appsdir}/helium.desktop
 %{_hicolordir}/256x256/apps/%{appid}.png
 %{_metainfodir}/%{appid}.metainfo.xml
 

anda/apps/juce/juce.spec

@@ -1,7 +1,7 @@
 Name:           juce
-Version:        8.0.12
-Release:        3%{?dist}
-License:        AGPL-3.0
+Version:        8.0.13
+Release:        1%{?dist}
+License:        AGPL-3.0-or-later
 Summary:        framework for audio application and plug-in development
 URL:            https://juce.com
 Source:         https://github.com/juce-framework/JUCE/archive/refs/tags/%{version}.tar.gz
@@ -46,10 +46,12 @@ Documentation files for %{name}
 %prep
 %autosetup -p1 -n JUCE-%{version}
 
-%build
+%conf
 %cmake -DJUCER_ENABLE_GPL_MODE=1    \
        -DJUCE_BUILD_EXTRAS=ON       \
        -DJUCE_TOOL_INSTALL_DIR=bin
+
+%build
 %cmake_build
 
 pushd docs/doxygen

anda/apps/komikku/komikku.spec

@@ -3,19 +3,18 @@
 %global gtk4_version        4.14.4
 %global libadwaita_version  1.5.1
 %global pure_protobuf_version 2.0.0
-%global raw_ver v1.101.0
 
 Name:           komikku
-Version:        1.101.0
+Version:        50.4.0
 %forgemeta
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        A manga reader for GNOME
 
 BuildArch:      noarch
 
 License:        GPL-3.0-or-later
 URL:            https://apps.gnome.org/Komikku/
-Source0:        https://codeberg.org/valos/%{appname}/archive/%{raw_ver}.tar.gz#/%{name}-%{version}.tar.gz
+Source0:        https://codeberg.org/valos/%{appname}/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
 
 BuildRequires:  desktop-file-utils
 BuildRequires:  intltool

anda/apps/komikku/update.rhai

@@ -1,4 +1 @@
-let latest_tag = get("https://codeberg.org/api/v1/repos/valos/Komikku/tags").json_arr()[0].name;
-let new_version = find("([\\.\\d]+)", latest_tag, 1);
-rpm.global("raw_ver", latest_tag);
-rpm.version(new_version);
+rpm.version(codeberg("valos/Komikku"));

anda/apps/kopia/kopia.spec

@@ -3,7 +3,7 @@
 
 Name:           kopia
 %electronmeta -D
-Version:        0.22.3
+Version:        0.23.0
 Release:        1%{?dist}
 Summary:        A backup/restore tool that allows you to create encrypted snapshots
 
@@ -43,6 +43,7 @@ A graphical user interface for %{name}.
 %build
 %global gomodulesmode GO111MODULE=on
 %gobuild -o %{name} .
+echo "Electron Builder" > %{rpmbuilddir}/webapp-tool.txt
 
 pushd app
 %npm_build -B

anda/apps/legcord/nightly/legcord-nightly.spec

@@ -1,5 +1,5 @@
-%global commit 08329c25f3344819047b1bddf311df82e953d900
-%global commit_date 20260208
+%global commit 9ac2f6b627bb4cbed62e3aeb76009ffff77bae70
+%global commit_date 20260529
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 %global debug_package %nil
 %global __strip /bin/true
@@ -12,7 +12,7 @@
 
 Name:           legcord-nightly
 Version:        %commit_date.%shortcommit
-Release:        1%?dist
+Release:        1%{?dist}
 License:        OSL-3.0
 Summary:        Custom lightweight Discord client designed to enhance your experience
 URL:            https://github.com/Legcord/Legcord

anda/apps/legcord/stable/legcord.spec

@@ -9,8 +9,8 @@
 %endif
 
 Name:           legcord
-Version:        1.2.2
-Release:        1%?dist
+Version:        1.2.4
+Release:        1%{?dist}
 License:        OSL-3.0
 Summary:        Custom lightweight Discord client designed to enhance your experience
 URL:            https://github.com/Legcord/Legcord

anda/apps/mount-manager/anda.hcl

@@ -0,0 +1,6 @@
+project pkg {
+    arches = ["x86_64"]
+    rpm {
+        spec = "mount-manager.spec"
+    }
+}

anda/apps/mount-manager/mount-manager.spec

@@ -0,0 +1,42 @@
+Name:           mount-manager
+Version:        0.1.5
+Release:        1%{?dist}
+Summary:        SMB Mount Manager helps users mount SMB shares through a simple GTK interface. It checks the share, asks for credentials, tests the mount, and creates a startup mount managed by systemd.
+URL:            https://github.com/Xarishark/mount-manager
+Source0:        https://github.com/Xarishark/mount-manager/archive/refs/tags/v%{version}.tar.gz
+License:        GPL-3.0-only
+Requires:       cifs-utils
+Requires:       gtk4
+Requires:       polkit
+Requires:       python3-gobject
+Provides:       SMB-Mount-Manager
+BuildArch:      noarch
+Packager:       Zacharias Xenakis <xarishark@outlook.com>
+
+%description
+%{summary}.
+
+%prep
+%autosetup -n mount-manager-%{version}
+
+%build
+
+%install
+install -Dm 755 mount_manager.py %{buildroot}%{_bindir}/mount-manager
+install -Dm 644 data/applications/io.github.xarishark.mount-manager.desktop %{buildroot}%{_appsdir}/io.github.xarishark.mount-manager.desktop
+install -Dm 644 data/icons/hicolor/scalable/apps/io.github.xarishark.mount-manager.svg %{buildroot}%{_scalableiconsdir}/io.github.xarishark.mount-manager.svg
+install -Dm 644 data/metainfo/io.github.xarishark.mount-manager.metainfo.xml %{buildroot}%{_metainfodir}/io.github.xarishark.mount-manager.metainfo.xml
+
+%files
+%doc README.md
+%license LICENSE
+%{_bindir}/mount-manager
+%{_appsdir}/io.github.xarishark.mount-manager.desktop
+%{_scalableiconsdir}/io.github.xarishark.mount-manager.svg
+%{_metainfodir}/io.github.xarishark.mount-manager.metainfo.xml
+
+%changelog
+* Fri May 15 2026 Zacharias Xenakis <xarishark@outlook.com>
+- Initial package
+* Fri May 15 2026 Zacharias Xenakis <xarishark@outlook.com>
+- migrated to new source GIT

anda/apps/mount-manager/update.rhai

@@ -0,0 +1 @@
+rpm.version(gh("Xarishark/mount-manager"));

anda/apps/mpv/mpv-nightly.spec

@@ -1,14 +1,14 @@
 # Disable X11 for RHEL 10+
 %bcond x11 %[%{undefined rhel} || 0%{?rhel} < 10]
 
-%global commit 102e693f49ce40fa10361d166392068c24fe5f15
+%global commit 74271a7d80f6c59185699d0d6d2d0b64bcbe90ae
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global commit_date 20260214
+%global commit_date 20260531
 %global ver 0.41.0
 
 Name:           mpv-nightly
 Version:        %ver^%commit_date.%shortcommit
-Release:        1%?dist
+Release:        1%{?dist}
 
 License:        GPL-2.0-or-later AND LGPL-2.1-or-later
 Summary:        Movie player playing most video formats and DVDs
@@ -21,6 +21,7 @@ BuildRequires:  gcc
 BuildRequires:  libappstream-glib
 BuildRequires:  libatomic
 BuildRequires:  meson
+BuildRequires:  cmake
 BuildRequires:  python3-docutils
 
 BuildRequires:  perl(Encode)

anda/apps/opensnitch/opensnitch.spec

@@ -4,7 +4,7 @@
 
 # https://github.com/evilsocket/opensnitch
 %global goipath         github.com/evilsocket/opensnitch
-Version:                1.7.0.0
+Version:                1.8.0
 
 %gometa -f
 
@@ -20,7 +20,7 @@ Snitch.}
                         utils/packaging/ui/deb/debian/changelog
 
 Name:           opensnitch
-Release:        %autorelease
+Release:        1%{?dist}
 Summary:        OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch
 
 License:        GPL-3.0-only AND LGPL-2.1-or-later

anda/apps/opentrack/opentrack.spec

@@ -6,7 +6,7 @@
 
 Name:           opentrack
 Version:        %{sanitized_ver}
-Release:        2%{?dist}
+Release:        1%{?dist}
 Summary:        Head tracking software for MS Windows, Linux, and Apple OSX
 
 License:        ISC AND BSD-3-Clause AND BSD-2-Clause AND LGPL-2.1-only AND GPL-3.0-only AND LGPL-2.1-or-later AND MIT AND LGPL-3.0-or-later

anda/apps/peazip/peazip.spec

@@ -2,8 +2,8 @@
 %define debug_package %nil
 
 Name:           peazip
-Version:        10.9.0
-Release:        1%?dist
+Version:        11.1.0
+Release:        1%{?dist}
 Summary:        Free Zip / Unzip software and Rar file extractor. Cross-platform file and archive manager
 License:        LGPL-3.0-only
 URL:            https://peazip.github.io

anda/apps/proton-vpn/proton-vpn.spec

@@ -1,11 +1,14 @@
+%global metainfo_commit 6599eae1839ec24e04a4f8805a3517f432190df6
+
 Name:			proton-vpn-gtk-app
-Version:		4.14.1
-Release:		2%?dist
+Version:		4.16.4
+Release:		1%{?dist}
 Summary:		Official ProtonVPN Linux app
 License:		GPL-3.0-only
 URL:			https://protonvpn.com/download-linux
 Source0:		https://github.com/ProtonVPN/proton-vpn-gtk-app/archive/refs/tags/v%version.tar.gz
-Source1:        https://github.com/flathub/com.protonvpn.www/blob/master/com.protonvpn.www.metainfo.xml
+# So cursed but makes our lives easier
+Source1:        https://github.com/flathub/com.protonvpn.www/archive/%{metainfo_commit}/com.protonvpn.www-%{metainfo_commit}.tar.gz
 BuildArch:      noarch
 
 BuildRequires:  python3-devel
@@ -42,6 +45,7 @@ with the user signup process handled on the website.
 
 %prep
 %autosetup -n %{name}-%{version}
+tar -xvf %{SOURCE1}
 
 %build
 %pyproject_wheel
@@ -50,18 +54,25 @@ with the user signup process handled on the website.
 %pyproject_install
 %pyproject_save_files proton
 install -Dm644 rpmbuild/SOURCES/proton-vpn-logo.svg %{buildroot}%{_scalableiconsdir}/proton-vpn-logo.svg
-install -Dm644 %{SOURCE1} %{buildroot}%{_metainfodir}/com.protonvpn.www.metainfo.xml
-# Match metainfo
-install -Dm644 rpmbuild/SOURCES/proton.vpn.app.gtk.desktop %{buildroot}%{_appsdir}/com.protonvpn.www.desktop
+install -Dm644 com.protonvpn.www-%{metainfo_commit}/com.protonvpn.www.metainfo.xml %{buildroot}%{_metainfodir}/com.protonvpn.www.metainfo.xml
+install -Dm644 rpmbuild/SOURCES/proton.vpn.app.gtk.desktop %{buildroot}%{_appsdir}/proton.vpn.app.gtk.desktop
+
+# We pull in a metainfo file that often changes upstream, that calls the .desktop file what we are symlinking it to.
+# If we install the .desktop file with the new name, the icon does not show properly on KDE Plasma.
+%{__ln_s} -f %{_appsdir}/proton.vpn.app.gtk.desktop %{buildroot}%{_appsdir}/com.protonvpn.www.desktop
 
 %files -f %{pyproject_files}
 %doc README.md CONTRIBUTING.md CODEOWNERS
 %license LICENSE COPYING.md
 %{_bindir}/protonvpn-app
+%{_appsdir}/proton.vpn.app.gtk.desktop
 %{_appsdir}/com.protonvpn.www.desktop
 %{_scalableiconsdir}/proton-vpn-logo.svg
 %{_metainfodir}/com.protonvpn.www.metainfo.xml
 
 %changelog
+* Wed Mar 25 2026 Owen Zimmerman <owen@fyralabs.com>
+- Fix metainfo and .desktop file
+
 * Sat Jan 17 2026 Owen Zimmerman <owen@fyralabs.com>
 - Initial commit

anda/apps/proton-vpn/update.rhai

@@ -1 +1,3 @@
 rpm.version(gh_tag("ProtonVPN/proton-vpn-gtk-app"));
+
+rpm.global("metainfo_commit", gh_commit("flathub/com.protonvpn.www"));

anda/apps/protontricks/protontricks.spec

@@ -2,8 +2,8 @@
 %global pypi_name protontricks
 
 Name:       terra-%{pypi_name}
-Version:    1.14.0
-Release:    1%?dist
+Version:    1.14.1
+Release:    1%{?dist}
 Summary:    Simple wrapper that does winetricks things for Proton enabled games
 BuildArch:  noarch
 

anda/apps/rasputin/rasputin.spec

@@ -1,15 +1,10 @@
-<<<<<<< HEAD
-%global commit b3f3f1da2fa59a2cbdea73c75b7d67bc312ce2bc
-%global commit_date 20251115
-=======
-%global commit 605d9dd8c825b650deeaa614e1b83e8dbb41e87d
-%global commit_date 20260128
->>>>>>> 93ea6f333 (chore: Bump out of sync packages (#9513))
+%global commit d4283e2e9bae6a95673227e41d2c345d7780990a
+%global commit_date 20260519
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 Name:           rasputin
 Version:        0~%commit_date.git~%shortcommit
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        Mouse and keyboard settings for Raspberry Pi Desktop
 License:        BSD-3-Clause
 URL:            https://github.com/raspberrypi-ui/rasputin

anda/apps/resources/anda.hcl

@@ -0,0 +1,5 @@
+project pkg {
+  rpm {
+    spec = "resources.spec"
+  }
+}

anda/apps/resources/resources.spec

@@ -0,0 +1,70 @@
+Name:           resources
+Version:        1.10.2
+Release:        1%{?dist}
+Summary:        Keep an eye on system resources
+License:        GPL-3.0-or-later
+URL:            https://gitlab.gnome.org/GNOME/Incubator/resources
+Source0:        %{url}/-/archive/v%{version}/resources-v%{version}.tar.gz
+Packager:       Owen Zimmerman <owen@fyralabs.com>
+
+BuildRequires:  meson
+BuildRequires:  gcc
+BuildRequires:  cargo
+BuildRequires:  ninja-build
+BuildRequires:  desktop-file-utils
+BuildRequires:  pkgconfig(gtk4)
+BuildRequires:  pkgconfig(libadwaita-1)
+
+Requires:         cairo
+Requires:         graphene
+Requires:         gtk4
+Requires:         hicolor-icon-theme
+Requires:         libadwaita
+Requires:         libgcc
+Requires:         polkit
+
+
+%description
+Resources is a simple yet powerful monitor for your system resources
+and processes, written in Rust and using GTK 4 and libadwaita for its GUI.
+It’s capable of displaying usage and details of your CPU, memory, GPUs, NPUs,
+network interfaces and block devices. It’s also capable of listing and
+terminating running graphical applications as well as processes.
+
+Resources is not a program that will try to display every single possible
+piece of information about each tiny part of your device. Instead, it aims
+to strike a balance between information richness, user-friendliness and a
+balanced user interface — showing you most of the information most
+of you need most of the time.
+
+%prep
+%autosetup -n %{name}-v%{version}
+
+%conf
+%meson
+
+%build
+%meson_build
+
+%install
+%meson_install
+%find_lang resources
+
+%files -f resources.lang
+%doc README.md
+%license LICENSE
+%{_bindir}/resources
+%{_libexecdir}/resources/resources-adjust
+%{_libexecdir}/resources/resources-kill
+%{_libexecdir}/resources/resources-processes
+%{_appsdir}/net.nokyan.Resources.Devel.desktop
+%{_datadir}/glib-2.0/schemas/net.nokyan.Resources.Devel.gschema.xml
+%{_datadir}/polkit-1/actions/net.nokyan.Resources.Devel.policy
+%{_datadir}/resources/resources.gresource
+%{_scalableiconsdir}/net.nokyan.Resources.Devel.svg
+%{_hicolordir}/symbolic/apps/net.nokyan.Resources.Devel-symbolic.svg
+%{_metainfodir}/net.nokyan.Resources.Devel.metainfo.xml
+
+%changelog
+* Sat May 16 2026 Owen Zimmerman <owen@fyralabs.com>
+- Initial commit

anda/apps/resources/update.rhai

@@ -0,0 +1 @@
+rpm.version(gitlab_tag("https://gitlab.gnome.org", "39041"));

anda/apps/rp-appset/rp-appset.spec

@@ -1,15 +1,10 @@
-<<<<<<< HEAD
-%global commit b3f3f1da2fa59a2cbdea73c75b7d67bc312ce2bc
-%global commit_date 20251115
-=======
-%global commit 605d9dd8c825b650deeaa614e1b83e8dbb41e87d
-%global commit_date 20260128
->>>>>>> 93ea6f333 (chore: Bump out of sync packages (#9513))
+%global commit d4283e2e9bae6a95673227e41d2c345d7780990a
+%global commit_date 20260519
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 Name:           appset
 Version:        0~%commit_date.git~%shortcommit
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        Application for customisation of appearance of Raspberry Pi Desktop
 License:        BSD-3-Clause
 URL:            https://github.com/raspberrypi-ui/appset

anda/apps/rp-bookshelf/rp-bookshelf.spec

@@ -1,10 +1,10 @@
-%global commit d09cc3fdb2071552f18b4564e1c77cb288b580db
-%global commit_date 20251104
+%global commit 8d837571ef02a4c1c4d74e419ebc59d66b47b685
+%global commit_date 20260521
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 Name:           rp-bookshelf
 Version:        0~%commit_date.git~%shortcommit
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        Browser for Raspberry Pi Press publications in PDF format
 License:        BSD-3-Clause
 URL:            https://github.com/raspberrypi-ui/bookshelf

anda/apps/rpcc/rpcc.spec

@@ -1,10 +1,10 @@
-%global commit 353e04bf0bc1866cba1f599cd76050890d33ba23
-%global commit_date 20260123
+%global commit 0e6cd08585bccd8f56c69bf8785777c2e3e67c4a
+%global commit_date 20260520
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 Name:           rpcc
 Version:        0~%commit_date.git~%shortcommit
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        Raspberry Pi Control Centre - an extensible settings application for the Raspberry Pi Desktop
 License:        BSD-3-Clause
 URL:            https://github.com/raspberrypi-ui/rpcc
@@ -36,8 +36,10 @@ A number of packages contain plugins which are installed as standard on Raspberr
 %prep
 %autosetup -n rpcc-%commit
 
-%build
+%conf
 %meson
+
+%build
 %meson_build
 
 %install

anda/apps/rpinters/rpinters.spec

@@ -1,10 +1,10 @@
-%global commit 1815ad67432803843058a3cf7eefbf376e9c02c9
-%global commit_date 20251029
+%global commit 697168fa320f7d0cabeb5edcf9778fff48e32be2
+%global commit_date 20260519
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 Name:           rpinters
 Version:        0~%commit_date.git~%shortcommit
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        Raspberry Pi printing utility module
 License:        GPL-2+ AND BSD-3-Clause
 URL:            https://github.com/raspberrypi-ui/rpinters

anda/apps/ruffle/ruffle-nightly.spec

@@ -1,4 +1,4 @@
-%global ver 2026-03-02
+%global ver 2026-05-31
 %global goodver %(echo %ver | sed 's/-//g')
 %global __brp_mangle_shebangs %{nil}
 %bcond_without mold
@@ -9,7 +9,7 @@ language. Ruffle targets both the desktop and the web using WebAssembly.}
 
 Name:           ruffle-nightly
 Version:        %goodver
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        A Flash Player emulator written in Rust
 License:        Apache-2.0 OR MIT
 URL:            https://ruffle.rs/

anda/apps/rustnet/rustnet.spec

@@ -1,6 +1,6 @@
 Name:           rustnet
-Version:        1.0.0
-Release:        1%?dist
+Version:        1.3.0
+Release:        1%{?dist}
 Summary:        A cross-platform network monitoring terminal UI tool built with Rust
 License:        Apache-2.0 AND (MIT OR Apache-2.0) AND Unicode-3.0 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 AND ISC) AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND Apache-2.0 AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND BSD-2-Clause AND (BSD-3-Clause OR Apache-2.0) AND BSL-1.0 AND ISC AND (LGPL-2.1-only OR BSD-2-Clause) AND (MIT OR Apache-2.0 OR LGPL-2.1-or-later) AND (MIT OR Apache-2.0 OR Zlib) AND (MIT OR Zlib OR Apache-2.0) AND MIT AND (Unlicense OR MIT) AND (Zlib OR Apache-2.0 OR MIT) AND Zlib
 URL:            https://github.com/domcyrus/rustnet

anda/apps/scrcpy/scrcpy.spec

@@ -19,8 +19,8 @@
 %endif
 
 Name:			scrcpy
-Version:		3.3.4
-Release:		1%?dist
+Version:		4.0
+Release:		1%{?dist}
 Summary:		Display and control your Android device
 License:		Apache-2.0 AND Proprietary
 URL:			https://github.com/Genymobile/scrcpy
@@ -46,7 +46,7 @@ BuildRequires:  python3-sdkmanager
 Requires:       %{name}-server
 # Gradle here really wants Java 21-23 to work properly
 # Java 25 breaks the build
-BuildRequires:  java-21-openjdk-devel
+BuildRequires:  java-latest-openjdk-devel
 BuildConflicts:	dkms-nvidia akmod-nvidia
 Requires:       android-tools
 

anda/apps/signal-desktop/fix-runtime.patch

@@ -0,0 +1,11 @@
+--- a/package.json	2026-03-23 09:45:41.545576312 +0100
++++ b/package.json	2026-03-23 09:46:51.714180613 +0100
+@@ -424,7 +424,7 @@
+     ]
+   },
+   "engines": {
+-    "node": "24.15.0"
++    "node": ">= 22"
+   },
+   "build": {
+     "appId": "org.whispersystems.signal-desktop",

anda/apps/signal-desktop/signal-desktop.spec

@@ -2,13 +2,14 @@
 
 Name:			signal-desktop
 %electronmeta -aD
-Version:		8.2.0
+Version:		8.12.0
 Release:		1%{?dist}
 Summary:		A private messenger for Windows, macOS, and Linux
 URL:			https://signal.org
 Source0:		https://github.com/signalapp/Signal-Desktop/archive/refs/tags/v%{version}.tar.gz
 Source1:		signal.desktop
 Source2:        org.signal.Signal.metainfo.xml
+Patch0:      fix-runtime.patch
 License:		AGPL-3.0-only AND %{electron_license}
 
 BuildRequires:	pulseaudio-libs-devel
@@ -18,7 +19,7 @@ BuildRequires:  anda-srpm-macros
 BuildRequires:	pnpm
 BuildRequires:  python3
 BuildRequires:  terra-appstream-helper
-BuildRequires:  nodejs-full-i18n
+BuildRequires:  libxcrypt-compat
 
 Requires:		libwayland-cursor
 Requires:		libwayland-client
@@ -56,16 +57,21 @@ Signal Desktop links with Signal on Android or iOS and lets you message from you
 
 %prep
 %autosetup -n Signal-Desktop-%{version}
+sed -i 's/--config.directories.output=release//g' package.json
 
 %build
 export SIGNAL_ENV=production
+export SOURCE_DATE_EPOCH="$(date +"%s")"
 %{__pnpm} install --frozen-lockfile
 %{__pnpm} run clean-transpile
 pushd sticker-creator
 %{__pnpm} install --frozen-lockfile
 %{__pnpm} run build
 popd
-%pnpm_build -r generate,prepare-beta-build
+%dnl %pnpm_build -r generate,build:policy-files,generate,build:esbuild:prod
+%{__pnpm} run generate
+%{__pnpm} run build-linux --%{_electron_cpu} --linux AppImage
+echo "Electron Builder" > %{rpmbuilddir}/webapp-tool.txt
 
 %install
 %electron_install -i signal -l -I build/icons/png

anda/apps/signal-desktop/signal.desktop

@@ -1,6 +1,6 @@
 [Desktop Entry]
 Name=Signal
-Exec=signal-desktop %U
+Exec=signal-desktop --use-tray-icon %U
 Terminal=false
 Type=Application
 Icon=signal
@@ -8,6 +8,3 @@ StartupWMClass=Signal
 Comment=Private messaging from your desktop
 MimeType=x-scheme-handler/sgnl;x-scheme-handler/signalcaptcha;
 Categories=Network;InstantMessaging;Chat;
-X-Desktop-File-Install-Version=0.27
-X-Purism-FormFactor=Workstation;Mobile;
-X-Flatpak-RenamedFrom=signal-desktop.desktop;

anda/apps/snow/snow.spec

@@ -1,6 +1,6 @@
 Name:           snow
-Version:        1.3.1
-Release:        1%?dist
+Version:        1.4.1
+Release:        1%{?dist}
 Summary:        Classic Macintosh emulator
 URL:            https://github.com/twvd/snow
 Source0:        %url/archive/refs/tags/v%version.tar.gz

anda/apps/spotify-launcher/spotify-launcher.spec

@@ -1,6 +1,6 @@
 Name:           spotify-launcher
 Version:        0.6.5
-Release:        2%?dist
+Release:        3%?dist
 Summary:        Client for spotify's apt repository in Rust
 License:        Apache-2.0 AND MIT AND ((Apache-2.0 OR MIT) AND BSD-3-Clause) AND ((MIT OR Apache-2.0) AND Unicode-3.0) AND (Apache-2.0 OR ISC OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND BSD-3-Clause AND CDLA-Permissive-2.0 AND ISC AND (ISC AND (Apache-2.0 OR ISC)) AND (ISC AND (Apache-2.0 OR ISC) AND OpenSSL) AND (MIT OR Apache-2.0) AND (MIT OR Apache-2.0 OR LGPL-2.1-or-later) AND MPL-2.0 AND Unicode-3.0 AND (Unlicense OR MIT) AND Zlib
 Packager:       veuxit <erroor234@gmail.com>
@@ -10,7 +10,7 @@ URL:            https://github.com/kpcyrd/spotify-launcher
 Source0:        https://github.com/kpcyrd/spotify-launcher/archive/refs/tags/v%{version}.tar.gz
 
 BuildRequires:  cargo cargo-rpm-macros anda-srpm-macros pkgconfig(liblzma) desktop-file-utils
-Requires:       sequoia-sqv zenity alsa-lib gtk3 desktop-file-utils openssl nss at-spi2-atk libcurl libSM 
+Requires:       sequoia-sqv zenity alsa-lib gtk3 desktop-file-utils openssl nss at-spi2-atk libcurl libSM libayatana-appindicator-gtk3
 
 
 %description

anda/apps/tauon/anda.hcl

@@ -1,5 +1,5 @@
 project pkg {
 	rpm {
-		spec = "chezmoi.spec"
+		spec = "tauon.spec"
 	}
 }

anda/apps/tauon/remove-reqed-version.patch

@@ -0,0 +1,13 @@
+diff --git a/requirements.txt b/requirements.txt
+index a0471ddb..e8ca00a9 100644
+--- a/requirements.txt
++++ b/requirements.txt
+@@ -18,7 +18,7 @@ keyboard;                    sys_platform == 'win32'
+ lynxtray;                    sys_platform == 'win32'
+ opencc;                      sys_platform != 'win32' # optional
+ opencc-python-reimplemented; sys_platform == 'win32' # optional
+-pypresence>=4.5.0 # optional
++pypresence # optional
+ tekore # optional
+ natsort # optional
+ #picard # optional

anda/apps/tauon/tauon.spec

@@ -0,0 +1,69 @@
+%global _desc A music player for the desktop. Designed to be powerful and streamlined, putting the user in control of their music collection.
+
+%undefine __brp_mangle_shebangs
+
+Name:			python-tauon
+Version:		10.0.1
+Release:		1%{?dist}
+Summary:		A music player for the desktop. Designed to be powerful and streamlined
+License:		GPL-3.0-or-later
+URL:			https://tauonmusicbox.rocks/
+Source0:		https://github.com/Taiko2k/Tauon/archive/refs/tags/v%{version}.tar.gz
+Patch0:		    remove-reqed-version.patch
+
+BuildRequires:  python3-devel
+BuildRequires:  python3-wheel
+BuildRequires:  python3-setuptools
+BuildRequires:  python3-pip
+BuildRequires:  gcc
+BuildRequires:  make
+BuildRequires:  flac-devel
+BuildRequires:  mpg123-devel
+BuildRequires:  libvorbis-devel
+BuildRequires:  opusfile-devel
+BuildRequires:  libsamplerate-devel
+BuildRequires:  libopenmpt-devel
+BuildRequires:  wavpack-devel
+BuildRequires:  game-music-emu-devel
+
+Packager:	    Owen Zimmerman <owen@fyralabs.com>
+
+%description
+%_desc
+
+%package -n     python3-tauon
+Summary:        %{summary}
+%{?python_provide:%python_provide python3-tauon}
+
+%description -n python3-tauon
+%_desc
+
+%prep
+%git_clone https://github.com/Taiko2k/Tauon v%{version}
+%patch -P0 -p1
+
+%build
+%pyproject_wheel
+
+%install
+%pyproject_install
+%pyproject_save_files tauon
+%find_lang tauon
+install -Dm644 extra/tauonmb.desktop %{buildroot}%{_appsdir}/tauonmb.desktop
+install -Dm644 extra/tauonmb-symbolic.svg %{buildroot}%{_scalableiconsdir}/tauonmb-symbolic.svg
+install -Dm644 extra/tauonmb.svg %{buildroot}%{_scalableiconsdir}/tauonmb.svg
+install -Dm755 extra/tauonmb.sh %{buildroot}/opt/tauon/tauonmb.sh
+
+%files -n python3-tauon -f %{pyproject_files} -f tauon.lang
+%doc README.md CHANGELOG.md CONTRIBUTING.md
+%license LICENSE
+%{_bindir}/tauonmb
+%{python3_sitearch}/phazor.cpython-314-*-linux-gnu.so
+%{_appsdir}/tauonmb.desktop
+%{_scalableiconsdir}/tauonmb-symbolic.svg
+%{_scalableiconsdir}/tauonmb.svg
+/opt/tauon/tauonmb.sh
+
+%changelog
+* Sat Mar 28 2026 Owen Zimmerman <owen@fyralabs.com>
+- Initial commit

anda/apps/tauon/update.rhai

@@ -0,0 +1 @@
+rpm.version(gh("Taiko2k/Tauon"));

anda/apps/throne/Sagernet.SingBox.Version.txt

@@ -1 +1 @@
-v1.12.23
+v1.13.12

anda/apps/throne/throne.spec

@@ -1,8 +1,8 @@
 #? https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=throne-git
 
 Name: throne
-Version: 1.0.13
-Release: 1%?dist
+Version: 1.1.4
+Release: 1%{?dist}
 Summary: Qt based cross-platform GUI proxy configuration manager (backend: sing-box)
 URL: https://github.com/throneproj/Throne
 License: GPLv3

anda/apps/ttop/ttop.spec

@@ -1,6 +1,6 @@
 Name:           ttop
-Version:        1.5.7
-Release:        1%?dist
+Version:        1.6.1
+Release:        1%{?dist}
 Summary:        System monitoring tool with historical data service, triggers and top-like TUI
 License:        MIT
 URL:            https://github.com/inv2004/ttop

anda/apps/valent/valent.spec

@@ -1,6 +1,6 @@
-%global commit 1b540bb7562206d33a3646b698fba899e50ba29d
+%global commit df82168bc37ad1ec700c66b0f0f5dfd7a07be485
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
-%global commit_date 20260315
+%global commit_date 20260316
 
 Name:               valent
 Version:            0~%{commit_date}git.%{shortcommit}

anda/apps/voicevox/voicevox.spec

@@ -13,8 +13,8 @@
 %global __requires_exclude ^((libffmpeg[.]so.*)|(lib.*\\.so.*))$
 
 Name:			voicevox
-Version:		0.25.1
-Release:		1%?dist
+Version:		0.25.2
+Release:		1%{?dist}
 Summary:		Free Japanese text-to-speech editor
 License:		LGPL-3.0
 URL:			https://voicevox.hiroshiba.jp

anda/apps/wavemon/anda.hcl

@@ -0,0 +1,5 @@
+project pkg {
+  rpm {
+    spec = "wavemon.spec"
+  }
+}

anda/apps/wavemon/update.rhai

@@ -0,0 +1 @@
+rpm.version(gh("uoaerg/wavemon"));

anda/apps/wavemon/wavemon.spec

@@ -0,0 +1,48 @@
+Name:           wavemon
+Version:        0.9.7
+Release:        1%{?dist}
+Summary:        ncurses-based monitoring application for wireless network devices on Linux
+License:        GPL-3.0-or-later
+URL:            https://github.com/uoaerg/wavemon
+Source0:        %{url}/archive/refs/tags/v%{version}.tar.gz
+Packager:       Owen Zimmerman <owen@fyralabs.com>
+
+BuildRequires:  gcc
+BuildRequires:  ncurses-devel
+BuildRequires:  pkgconfig(libnl-3.0)
+BuildRequires:  autoconf
+BuildRequires:  automake
+
+%description
+%{summary}.
+
+%prep
+%autosetup
+sed -e '/^CFLAGS=/d' -i configure.ac
+sed -r 's|\?=|=|g' -i Makefile.in
+autoreconf -fiv
+
+%conf
+CFLAGS="$RPM_OPT_FLAGS -fPIC -pie -Wl,-z,relro -Wl,-z,now"
+CXXFLAGS="$RPM_OPT_FLAGS -fPIC -pie -Wl,-z,relro -Wl,-z,now"
+export CFLAGS
+export CXXFLAGS
+%configure
+
+%build
+%make_build
+
+%install
+%make_install
+# Delete wrong placed readme and license
+rm -rf %{buildroot}%{_datadir}/%{name}/*
+
+%files
+%doc README.md
+%license LICENSE
+%{_mandir}/man*/%{name}*.*
+%{_bindir}/%{name}
+
+%changelog
+* Tue May 19 2026 Owen Zimmerman <owen@fyralabs.com>
+- Initial commit

anda/apps/winetricks/git/winetricks-git.spec

@@ -1,13 +1,13 @@
 # Fedora sometimes sources the snapshots under stable versions and just bumps release
 # For user clarity I have separated these into different packages
-%global commit  c9ec7e27eb01e8f0e46a2d4803c405c38a27cc75
+%global commit  08304e81f9ac9a83c552a6bd78689040d174bf95
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 %global ver 20260125
-%global commit_date 20260130
+%global commit_date 20260531
 
 Name:           winetricks-git
 Version:        %{ver}^%{commit_date}git.%{shortcommit}
-Release:        1%?dist
+Release:        1%{?dist}
 Summary:        Work around common problems in Wine; Winetricks Git builds
 License:        LGPL-2.1-or-later
 URL:            https://github.com/Winetricks/winetricks