Stable and rc mirrors receive certificate-trust updates
Jitheswar reported that the stable mirror still supplied certificate packages trusting compromised eMudhra certificate authorities, leaving affected system tools without the upstream trust-store fix through normal updates. The report requested updated nss, ca-certificates-mozilla and deno packages in omacom/omarchy#16217.
emirb closed the issue and reported that the October 22 mirror sync supplied nss and ca-certificates-mozilla 3.131.1 and deno 2.9.8 on both stable and rc. According to that response, the packages are available through the normal Omarchy update command. omacom/omarchy#16217:issuecomment-6349316484
Network sign-in handles exit nodes and Tailscale scales to larger fleets
dhh proposed and merged captive-portal repairs into the Quattro development branch. The sign-in flow uses an Omarchy-controlled connectivity endpoint, temporarily pauses an active Tailscale exit node, opens a floating sign-in window and restores the node after connectivity returns. In a pre-merge response,
dhh described fixing browser-start failure detection and adding a regression case. omacom/omarchy#16186 omacom/omarchy#16186:issuecomment-6340700383
dhh also merged
iskakaushik's large-tailnet changes into Quattro. The panel creates only visible machine rows, adds search, shares one copy menu and avoids rebuilding unchanged peer lists. Closed-panel polling requests less data.
iskakaushik reported substantially lower CPU use and memory consumption on a roughly 3,900-peer tailnet; these are contributor measurements rather than independent verification. omacom/omarchy#7623
Menus retain usable rows and bound Lua configuration scans
dhh proposed and merged a Quattro fix that preserves existing menu rows when a watched file is read empty or partially written. Opening a menu with no shipped rows also retries that file, covering startup during an update. A deliberately emptied user extension still clears its own rows. omacom/omarchy#16268
dhh also merged
tobi's keybinding-scan proposal, which makes compositor-state stubs tolerate more configuration reads and adds a timeout to prevent runaway Lua processes. A subsequent Quattro commit attributed to Omarchybot, with
omarchybot listed as a participant, bounds indexed walks through stub collections and invalidates cached scans that may have lost later bindings. omacom/omarchy#7564 omacom/omarchy@aba618402b5a
Notifications become instant and Taildrop cards regain their content
dhh proposed and merged notification polish into Quattro: replayed history refreshes its clock, cards show their age only after five minutes, and snooze controls use the card's width. The change also removes phone-number and meeting-link detection and fullscreen modes that routed notifications to another display. omacom/omarchy#16277
Separate Quattro commits attributed to David Heinemeier Hansson make notification arrivals and departures immediate and repair Taildrop cards with empty text, expanded home-directory paths and missing image previews. Critical notification titles retain the normal text color, avoiding an error-like appearance for received files awaiting dismissal. These are development-branch changes. omacom/omarchy@3c7027db2a4f omacom/omarchy@d743f8e8245d
China mirror support lands while the broader region proposal stays open
A Quattro commit attributed to Emir Beganović adds regional package configuration that puts Omarchy's China replicas first while retaining the existing servers as fallbacks. Its final scope adds neither a repository nor a signing key. Existing installations retain their global configuration unless opted in, and unsupported development checkouts are refused before they can discard regional settings. omacom/omarchy@967bbdd7346e
The broader region proposal from xdanger remains open.
emirb said on October 22 that it would be split into smaller parts while preserving the contributor's commits. Its current description also proposes developer-tool registries and regional preinstalls; those broader features should be distinguished from the committed mirror work. omacom/omarchy#13690 omacom/omarchy#13690:issuecomment-6337223381
Open agents-panel expansion refines provider accounting
The agents-panel consolidation remains an open proposal targeting Quattro. Its current description, updated on October 23, proposes expanding from six collectors to 23 and adding nine default-agent launchers, with shared caching, status handling and provider-based usage accounting. This describes the current proposal rather than reconstructing its October 22 wording. omacom/omarchy#14040
In October 22 comments posted by Claude on behalf of dhh,
dhh reported checking the default-agent menu and live panel records, then described a Codex prompt-accounting fix. Prompts are assigned using the answering model and the same ownership check used for tokens, allowing Codex and Local to receive separate counts for a mixed-provider rollout. The reported validation is contributor evidence, and the expansion has not merged. omacom/omarchy#14040:discussion_r4347314245 omacom/omarchy#14040:discussion_r4351759878
Sources
- Wait for the live medium, not every device, in the initramfs
- Start the installer on tty1 without waiting for boot jobs
- Leave the live console to the installer, not systemd-vconsole-setup
- Merge pull request #307 from omacom/install/create-partition-failed-read
- Show how to verify the ISO signature with GnuPG
Live ISO work reduces boot waits and documents signature verification
Quattro ISO commits attributed to Emir Beganovic, with emirb listed as a participant, make x86_64 media discovery wait for the live medium instead of every device and start the installer without waiting for queued boot jobs. A companion change prevents console setup from racing the installer. The reported timing improvements come from measurements on an MSI Z690; aarch64 retains full device settling. omacom/omarchy-iso@bb5a2b73d237 omacom/omarchy-iso@a42d9fb5b409 omacom/omarchy-iso@7c2593dd9d01
Other committed ISO changes prevent an existing partition from being mistaken for a new one when its table cannot be read, and document detached-signature verification with GnuPG using the signing key's full fingerprint. These are Quattro development-history changes, not evidence of a newly published ISO release. omacom/omarchy-iso@aec6bb1ed1f1 omacom/omarchy-iso@647c9f73ba8d
Aurora package recipe advances Mac display and Wi-Fi fixes
The package repository's master branch received an Aurora integration update attributed to Dj, with DjDeveloperr listed as a participant. The recipe advances to 7.2.10.aurora2-1 while retaining kernel version 7.2.10. It incorporates fixes for very dim internal displays on Macs with 13.x firmware, first-boot watchdog resets on MacBook Neo, and MT7932 Wi-Fi capabilities including WPA3-SAE and OWE station offload. omacom/omarchy-pkgs@1fb97fd1c6fe
The commit states that the graphics interface remains unchanged, keeping mesa-aurora matched. This establishes a committed package-recipe update, without establishing stable package distribution.
Workbench setup checks the local NVIDIA container runtime
Two master-branch package commits attributed to Jim Martin, with jdvmi00 listed as a participant, move NVIDIA Docker runtime registration into optional Workbench's first-launch setup and restrict that setup to GB10 systems. Setup checks the running daemon so an interrupted restart can be recovered on a later attempt. omacom/omarchy-pkgs@172df0f818a7
The follow-up explicitly queries the local Docker socket. A selected remote context can therefore no longer make setup incorrectly conclude that the local daemon already has the runtime. These are committed setup changes rather than a documented stable release. omacom/omarchy-pkgs@d9bd79756145
Media Search publishes a reviewed snapshot after artwork and clipboard changes
mechurisr described moving player-supplied artwork decoding into a resource-limited helper that produces small, stripped images for the shell. A later response described replacing the search input and routing explicit clipboard paste through a separate process limited to two seconds and 4 KiB, while suppressing middle-click paste. These responses explain changes intended to bound work triggered by external artwork and clipboard offers. omacom/omarchy-plugin-marketplace#12087:issuecomment-6340169471 omacom/omarchy-plugin-marketplace#12087:issuecomment-6345162564
The verification request closed after github-actions[bot] reported that Media Search had been updated and verified using maintainer review. Verification applies only to the exact marketplace snapshot and is not a security audit. omacom/omarchy-plugin-marketplace#12087 omacom/omarchy-plugin-marketplace#12087:issuecomment-6345794469
OmaFlow verification advances after a local service impersonation finding
OmaFlow's marketplace verification request remains open. HANCORE-linux identified a reviewed revision where another local account could impersonate the speech service on its loopback port and receive captured audio. The reviewer explicitly described this as static source review with remaining review incomplete. omacom/omarchy-plugin-marketplace#12182:issuecomment-6343339338
Adi2204 responded that version 0.21.6 verifies the account and managed service process before sending audio or credentials over the connection, then advanced the request to 0.21.7 with stale-update and abandoned-job protections.
Adi2204 reported passing tests and synthetic-audio transcription against the managed service. Those reports do not establish marketplace approval, and the contributor says setup still requires completion. omacom/omarchy-plugin-marketplace#12182:issuecomment-6349789943 omacom/omarchy-plugin-marketplace#12182:issuecomment-6350433518
MacBook suspend proposal gains packaged testing and a fan recovery warning
angellindo rebased the open MacBookPro14,3 suspend proposal onto kernel packaging version 7.2.8-10 and reported building and booting a separate 7.2.8-11 package. The reported first suspend-to-idle cycle restored Wi-Fi and keyboard backlight, retained Thunderbolt host routers and showed fans spinning after wake. The proposal covers three kernel flavors, but the runtime report covers linux-omarchy only. omacom/omarchy-pkgs#596 omacom/omarchy-pkgs#596:issuecomment-6349088136
greptile-apps[bot] subsequently warned that a failed fan-state restore could leave automatic cooling disabled after wake and requested recovery handling. The supplied test report does not establish fan speed during sleep, attached Thunderbolt-device behavior or testing with the separate ACPICA fix on 7.2.8. The patches remain proposed, not released. omacom/omarchy-pkgs#596:discussion_r4352484270
