[arch-dev-public] Arch Linux in March 2022

[Levente Polyak]

## Staff

We would like to welcome sudoforge among the Trusted Users [0].


## RFC

We have ratified a RFC to store upstream signing keys alongside the 
packaging sources [1]. This will allow easier successive builds without 
the need to continuously rely on remote keyservers to retrieve the 
upstream signing keys.


## security-tracker

After a lot of work and with the amazing help of multiple people we have 
finally finished the SSO integration of our security tracker [2][3]. 
This is one step closer to a uniform authentication and role management 
across our services.

Furthermore several incompatibility changes have been resolved which 
finally allowed us to upgrade to SQLAlchemy 1.4.


[0] https://lists.archlinux.org/pipermail/aur-general/2022-March/036842.html
[1] https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/11
[2] https://github.com/archlinux/arch-security-tracker/pull/181
[3] 
https://gitlab.archlinux.org/archlinux/infrastructure/-/merge_requests/545
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/arch-dev-public/attachments/20220405/de33eba4/attachment.sig>