Across the Fedora ecosystem, the primary focus this week was the final preparation for the Fedora 45 release, which saw a NO-GO decision push its target launch to November 3 due to critical blocker bugs involving eMudhra certificates and Stratis encrypted pools. Simultaneously, a major cross-team effort is driving the "Atomic Fusion" Bootable Image Unification initiative, with groups like Atomic, CoreOS, IoT, and Hummingbird actively drafting Architectural Decision Records (ADRs) and migrating workflows to the new Forgejo platform. Security and maintenance also dominated the technical SIGs, particularly within the Rust, EPEL, and CoreOS teams, who rushed to patch vulnerabilities related to the eMudhra CA compromise. Finally, community and leadership groups are already looking ahead to the project's broader future, laying the groundwork for FOSDEM 2027 planning and drafting unified themes for the upcoming Flock 2027 Call for Proposals.
- Announcements
- Council
- FESCo
- Packaging Committee
- Mindshare
- Fedora Join
- Ambassadors
- Workstation / GNOME
- KDE
- Server
- Infrastructure
- Release Engineering
- Quality
- Websites and Apps
- Design
- Docs
- EPEL
- ELN
- Atomic
- CoreOS
- IoT
- ARM
- Hummingbird
- Kernel
- AI
- RISC-V
- Go
- Perl
- Ruby
- Rust
- Other Discussions
- All contribution opportunities
Announcements
Fedora 45's release is slightly delayed, as outstanding blocker bugs resulted in a NO-GO decision during the October 22 Go/No-Go meeting, pushing the target release date to November 3. When it does arrive, Fedora 45 will introduce a major technical shift by modernizing the virtual console with kmscon, moving away from the legacy kernel fbcon driver to a userspace utility for better font and keyboard layout management. Behind the scenes, package maintainers will be pleased to hear that s390x build infrastructure is receiving much-needed performance improvements, thanks to memory and CPU adjustments made in collaboration with IBM. Once the dust settles on the final release, the global community is invited to celebrate at the Fedora Linux 45 Virtual Release Party scheduled for October 30.
The latest Fedora Podcast (Episode 062) dives into the technical details of Fedora Hummingbird Linux—a bootable container image built on an RPM channel—and the engineering team is actively soliciting real-world use cases from listeners. This request for engagement comes on the heels of the highly positive Q3 2026 Fedora Podcast Report, which highlights sustained evergreen growth, over 14,000 YouTube subscribers, and a strong audience preference for technical, contributor-focused content.
Council
The Fedora Council met this week to discuss themes for the Flock 2027 Call for Proposals (CfP) and evaluate a request to extend the Docs initiative. For Flock 2027, the Council is drafting themes structured around the "Four Foundations" to encourage interactive discussions, panels, and collaborative sessions. Regarding the Docs team, while the formal initiative framework has been stood down, the Council acknowledged the critical need to deeply integrate Docs into Fedora's standard processes and pledged to explore alternative ways to provide support and visibility.
On the forums, discussions continued regarding the "Atomic Fusion" Bootable Image Unification efforts. Agendas were published to address Architectural Decision Records (ADRs), Konflux integration, tenant setup, and the migration of base image work to Forgejo. Reminders were also shared for the Fedora 45 Final go/no-go meeting and the upcoming F45 release party.
Decisions
- The Council agreed to draft Flock 2027 Call for Proposals themes based on recent ticket feedback, aiming for an initial draft by the end of October to share with Mindshare and FESCo for input.
- The Council agreed to move the discussion about supporting the Fedora Docs team to the relevant ticket, exploring how to help them integrate with project processes outside of the deprecated initiative framework.
Contribution opportunities
- Contributors are encouraged to review and provide suggestions on the proposed Flock 2027 CfP themes via the relevant ticket (#578).
- The Docs team is seeking community and SIG engagement to deeply embed documentation into Fedora's ecosystem. SIGs are encouraged to participate in the "docs captains" program by designating a person to work with the Docs team to create and maintain relevant guides, as well as ensure release notes are completed during the change process.
Learn more about the Council team.
FESCo
This week, FESCo held a meeting and processed multiple tickets, primarily focusing on system-wide changes, Bugzilla replacements, and infrastructure performance. The committee officially approved system-wide changes for the Crystal programming language and Libical4, and granted a FastTrack update exception for gedit 51.0 in Fedora 45.
Discussions continued around the future of Fedora's issue tracking system and the potential transition away from Red Hat Bugzilla, with planning meetings rescheduled for November. FESCo also reviewed Koji architecture performance metrics for non-x86 builds, discussing potential thresholds to prevent bottlenecking the build system.
Decisions
- Approved the Change: Crystal Language proposal.
- Approved the Change: Libical4 proposal.
- Approved the Incompatible update exception for gedit and libgedit-* 51 for F45 as a FastTrack exception.
- Resolved the Non-responsive maintainer: lkundrak ticket by granting co-maintainerships and orphaning the remaining packages.
- Closed Would the 2FA for provenpackagers change be a good session for F45 release party? as the topic was deemed too invisible to the general audience.
- Rescheduled the FRCL Bugzilla Replacement meeting to November 11th, with a possible follow-up on November 18th.
Contribution opportunities
- Fedora packagers are invited to help with the Stage 1 Package Reviews for the new Crystal Language toolchain and tooling (
crystal-rpm-macros,cr2rpm,vim-crystal,crystal-lang, andshards). The requester is open to doing review swaps.
Learn more about the FESCo team.
Packaging Committee
This week, the Packaging Committee focused on establishing packaging guidelines for the Crystal programming language and updating system CryptoPolicies. Following FESCo's approval of the System-Wide Change for Crystal in Fedora 46, contributors have readied the draft packaging guidelines for final committee review, supported by successful Copr test builds and several submitted Stage 1 package reviews.
Additionally, a pull request was submitted to align the aws-lc CryptoPolicies exception with a recent FESCo decision. The proposed change clarifies the guideline text to ensure that using aws-lc-rs and aws-lc-sys for low-level cryptography and enabling TLS functionality via Rustls is explicitly permitted.
Decisions
- FESCo formally approved the System-Wide Change Proposal for integrating the Crystal programming language in Fedora 46 (FESCo Ticket #3690).
- FESCo approved an exception allowing the use of
aws-lc-sysandaws-lc-rsfor low-level cryptography and TLS functionality via Rustls, which the committee is currently documenting in the guidelines (FESCo Ticket #3679).
Contribution opportunities
- The committee is requested to perform a final review and merge of the Crystal Packaging Guidelines PR #1568.
- Contributors are invited to review and provide corrections on the proposed text alignment for the aws-lc CryptoPolicies exception.
Learn more about the Packaging Committee team.
Mindshare
Mindshare finalized expense reimbursements and event reports for several recent gatherings, including Software Freedom Day Bukidnon 2026, IndiaFOSS 2026, and LinuxDays 2026 in Prague. Governance restructuring is also a major focus this week, as the committee assesses which community subprojects should fill newly vacant representative seats.
In broader community news, contributors engaged in a detailed forum discussion regarding the ethical, legal, and operational trade-offs of integrating generative AI models into Fedora workflows. The conversation highlighted the tension between hardware-efficient open-weight models (like Nemotron) and strict adherence to Free Software principles (like Olmo), alongside potential EU AI Act liabilities if the project provides centralized inference services.
Decisions
- The CommOps team has officially resigned their charter seat on the Mindshare Committee due to an inability to find a successor. The committee is formally accepting this resignation and looking to reallocate the seat to other active groups (Ticket #154).
- A new US event box was ordered and will be deployed at the upcoming Texas Linux Fest, with the older, heavier box being donated to the event's organizers (Ticket #155).
Contribution opportunities
- Subprojects without dedicated representation—such as the Documentation, AI, or Moderation teams—have an open opportunity to step up and claim the newly vacant representative seats on the Mindshare Committee (Ticket #154).
- European ambassadors who are familiar with the EU event box (typically handled at FOSDEM) are asked to provide information on its current contents and suggest potential uses for the retiring case (Ticket #155).
- Mindshare committee members are urgently requested to review and curate a $150 swag request for the Hack Club Haven Spokane high school game jam before its mid-November deadline (Ticket #157).
Learn more about the Mindshare team.
Fedora Join
This week, the Fedora Join group focused on refining their onboarding processes and finalizing their platform migration. The team successfully merged a rewritten onboarding issue template (issue #348) and updated it to automatically tag team members on new welcome tickets (issue #353). Ongoing efforts include identifying missing components for the Forgejo migration and coordinating the "Beginners Guide" brochure update.
Additionally, the group welcomed a new contributor, Blu3 (Usman), who is studying computer engineering and building a PipeWire-based audio daemon. They are interested in contributing to Workstation Quality Assurance, packaging, and IoT.
Decisions
- A new issue label (
S: User contributes upstream) was created to accurately track newcomers who ultimately decide to contribute directly to upstream projects instead of Fedora, acknowledging this as a positive outcome for the broader open-source community (issue #350). - The Welcome to Fedora issue template was updated to automatically tag
@join/Membersand@join/Ownersto ensure the team is immediately notified of new contributor tickets (issue #353). - The team reviewed and merged a rewrite of the new contributor welcome text to ensure an authentic, human-reviewed onboarding experience, closing out the task (issue #348).
Contribution opportunities
- Matrix Bot Assistance: The team needs help locating the implementation of the old
!welcomeZodbot command to finalize their migration to Forgejo. Anyone familiar with Fedora's matrix-bot playbooks or repositories is encouraged to help on issue #319. - Brochure Redesign: There is an ongoing effort to update "A Beginners Guide to Joining Fedora" (last revised in 2018). Contributors interested in revising the content or assisting with the design can join the discussion in issue #316.
- Welcome a Newcomer: A new community member, Blu3 (Usman), introduced themselves on the mailing list and is looking for pointers to get started with Quality (Workstation testing), packaging, and IoT.
Learn more about the Fedora Join team.
Ambassadors
Planning for FOSDEM 2027 is officially moving forward, with a formal call for participation now open to the community. Applications for a Fedora stand and the Distributions DevRoom have been successfully submitted for the January event in Brussels, co-owned by Justin Wheeler and Daniel Mellado.
Additionally, a shared hotel block for Fedora and CentOS contributors is being organized at the DoubleTree by Hilton Brussels City. Community members interested in attending are encouraged to review the available assistance and stay connected for updates on the FOSDEM 2027 Wiki.
Contribution opportunities
The Ambassadors are looking for contributors to help support Fedora's presence at FOSDEM 2027. You can get involved by replying on the mailing list or the Fedora Discussion topic. Opportunities include:
- Speaking at CentOS Connect, FOSDEM, or a DevRoom.
- Volunteering at the Fedora stand.
- Volunteering in the Distributions DevRoom to help manage speakers, cameras, and room access.
- Applying for travel and hotel assistance, or joining the negotiated contributor hotel block.
Learn more about the Ambassadors team.
Workstation / GNOME
This week, the Workstation/GNOME group focused on preparations for the Fedora 45 release and potential desktop feature improvements. The Working Group published the agenda for their October 20 meeting, highlighting topics such as Fedora 45 blockers, AppStream data automation, DNF 5 updating without wheel privileges, and the inclusion of AI tools like Newelle. Additionally, Fedora QA announced the upcoming Fedora 45 Blocker Review Meeting to evaluate remaining issues before the final release.
In broader desktop news, a community member shared a proposed modern implementation for restoring Google Drive integration in GNOME. Instructions are available for Fedora 43 and 44, and user feedback is highly requested to help get the feature upstreamed.
Contribution opportunities
- Test the new Google Drive integration: A proposed implementation to restore Google Drive integration in GNOME is available for testing via Copr on Fedora 44 or by building from source on Fedora 43. The developer is actively seeking community feedback (even just "it works great") to assist with upstreaming the changes.
- Vote on Fedora 45 Blocker Bugs: Community members are encouraged to review and vote on proposed blocker and freeze exception bugs ahead of the Fedora 45 Blocker Review Meeting using the blockerbugs app.
Learn more about the Workstation / GNOME team.
KDE
This week, the KDE group focused heavily on preparing for Fedora 45 and the upcoming Plasma 6.8 release. Significant packaging work is underway, including rebuilding several packages due to a libplasma soname bump, addressing FTBFS (fails to build from source) issues, and drafting the Fedora 45 release magazine article. Additionally, a major milestone was reached as the group announced the complete retirement of Plasma X11, removing associated packages for Plasma 6.8.
Meanwhile, users were warned about a severe compatibility bug with KeepassXC on Wayland, and QA preparations for the Fedora 45 final release are actively calling for community participation in blocker bug reviews.
Decisions
- The complete retirement of Plasma X11 has been enacted for Plasma 6.8, resulting in the removal of packages such as
kwin-x11andplasma-workspace-x11(Ticket #733). - KDE Plasma users are strongly advised to avoid using the Wayland auto-type feature in KeepassXC 2.8.0, as it currently breaks keyboard input due to an ongoing KDE bug (Forum Discussion).
- The
kcm_wacomtabletandkgammapackages will no longer receive updates starting in Plasma 6.8 (Ticket #727). - The upcoming Fedora 45 Magazine article for KDE will primarily highlight Plasma 6.7 features, alongside a brief mention of Plasma 6.8 (Ticket #725).
Contribution opportunities
- Contributors are asked to review the current draft of the "What's New in Fedora KDE" magazine article and suggest any Fedora-specific updates that should be included alongside the Plasma feature list (Ticket #725).
- QA testers and community members are encouraged to vote on proposed blocker bugs and freeze exceptions using the blockerbugs app to help streamline the Fedora 45 Blocker Review meeting (Mailing List Thread).
Learn more about the KDE team.
Server
The Server Working Group reviewed Fedora 45 Release Candidate (RC) testing, confirming that the longstanding KVM image issue is resolved in RC 1.2. The group also addressed the growing size of distribution images and continued coordinating the setup of test environments for the Ansible support project.
On the mailing list, the agenda for the October 21 meeting was circulated, and Adam Williamson announced the F45 Blocker Review meeting scheduled for October 26. Members were also reminded of a temporary one-hour meeting time shift due to daylight saving time differences.
Decisions
- The working group accepted bumping the size limit of the aarch64 netinstall image from 1.4G to 1.5G following upstream recommendations.
- Confirmed that the KVM image / initial-setup issue is resolved in Fedora 45 RC 1.2.
Contribution opportunities
- Review and vote on proposed Fedora 45 blockers and freeze exceptions ahead of the F45 Blocker Review Meeting.
- Participate in idempotency testing for the Server Ansible support project. A Fedora 45 VM is currently being set up for test environments. (Meeting log)
Learn more about the Server team.
Infrastructure
This week, the Fedora Infrastructure team managed several intermittent service disruptions, including FAS/IPA login issues where users received "bad credentials" errors but were able to log in after multiple attempts. The team also mitigated DDOS attacks affecting fedorapeople.org and Koji s390x builders, deployed two new NA proxies to handle high connection loads, and quickly addressed spam waves on the mailing lists. Additionally, the staging instance of Fedora Docs was successfully transitioned to build from the new docs/site-builder repository on the staging Forge.
In other news, a community member is developing a link-checking tool for Fedora Docs, which sparked discussions about prioritizing the triage of legacy Wiki content rather than attempting to maintain it. The team is also evaluating solutions for a captive portal detection issue affecting KDE Plasma users, caused by the fedoraproject.org domain being on the HSTS preload list. Finally, a new Digital Still Photography Device SIG requested infrastructure resources.
Decisions
- The
mirrors.wcupa.eduEPEL mirror was temporarily removed from the mirror list until its incomplete TLS chain issue is resolved. (Issue #13632) - The staging instance of Fedora Docs is now configured to build from the new
docs/site-builderrepository on the staging Forge. (Issue #13624) - A new FAS group,
nightdrive, was created to own a Copr group project. (Issue #13630)
Contribution opportunities
- The team is looking for a volunteer to chair the Infrastructure meeting on November 5th. (Meeting log)
- Upstream pull requests are encouraged to improve the verbosity and output format of
ai-code-reviewused for LLM code reviews on Forgejo. (Forum post) - Contributors are needed to create an Ansible playbook to automate the creation of tracking groups. (Issue #13622)
- New contributors interested in joining the Infrastructure team can get started by reading the join guide and apprentice documentation.
Learn more about the Infrastructure team.
Release Engineering
This week, the Release Engineering team focused heavily on preparing for the upcoming release, successfully generating the first Fedora 45 Release Candidates (including RC2) after executing necessary stable pushes. Several blocker review meetings were held to evaluate critical bugs, including those affecting desktop environments and installation processes. In addition to routine maintenance tasks like processing package unretirement requests and resolving stuck Koji builders, the team completed stable pushes for Fedora 43 and 44 to deliver important updates for PHP and ca-certificates.
The community also engaged in forward-looking infrastructure discussions. Notably, there was a proposal to test and potentially integrate a highly optimized, Rust-based alternative to createrepo_c called kiritan. Furthermore, preparations have begun for implementing Post-Quantum Cryptography OpenPGP Signatures for Fedora 48, with tickets opened to coordinate staging and deployment.
Decisions
- Accepted Bug 2480694 (Plasma Discover installing outdated native RPM packages) as a Fedora 45 Final Blocker (Review Meeting).
- Accepted Bug 2544626 (aarch Server DVD image install failing on RPi4 without network) and Bug 2537105 (
initial-setupoccasionally missing on serial console) as Fedora 45 Final Blockers (Review Meeting). - Accepted Fedora 45 Final Freeze Exceptions for multiple packages, including
gnome-shell-extension-dash-to-panelupgrades,flare-imCVE mitigation, andmkvtoolnixbuffer overflow mitigation. - Rejected Bug 2501223 (Workstation Live images occasionally booting to GDM instead of the desktop) as a blocker, but accepted it as a Freeze Exception to improve the user experience.
- Approved the creation of Fedora 45 Final Release Candidates (RC1 and RC2) after untagging prior builds and fulfilling requisite stable pushes (Ticket 13557).
- Processed and approved package unretirements for Rawhide and Fedora 45, including
python3-blessings,urdfdom,fcl,python-yaspin,retext,python-markups, andbup.
Contribution opportunities
- The author of
subatomicandkiritan(a faster, memory-efficient, Rust-based alternative tocreaterepo_c) is seeking feedback and invites collaboration with Fedora to test and potentially integrate these tools into Fedora's infrastructure (Join the discussion). - Feedback and review are requested for the Fedora 48 Change Proposal: Post-Quantum Cryptography OpenPGP Signatures, particularly regarding its impact on release engineering and testing in the stage environment before the planned key generation in early 2027.
- Community members are invited to participate and vote in the upcoming Fedora 45 Blocker Review Meetings to help evaluate remaining bugs against release criteria.
Learn more about the Release Engineering team.
Quality
The Quality team focused heavily on evaluating Fedora 45 Release Candidate 1.2 for the Final release. During the F45 Final Go/No-Go meeting, the team declared the release a NO-GO due to outstanding blockers, particularly related to eMudhra certificates and Stratis encrypted pools. Consequently, the F45 Final release date has been pushed to target date #2 (November 3, 2026).
In addition to release management and blocker review meetings, QE worked on release validation and expanded openQA testing with Turkish and Arabic webUI install tests. The community also coordinated ongoing and upcoming Test Days, including testing for GRUB EFI for confidential computing, Podman Conmon-v3, and the upcoming Kernel 7.3 release.
Decisions
- Fedora 45 Final was declared NO-GO and delayed to November 3, 2026, pending the resolution of outstanding blockers.
- Bug 2556376 regarding eMudhra certificates was considered not sufficiently addressed in RC2, requiring an RC3 release.
- Bug 2543511 (Stratis encrypted pool fails to boot) was accepted as a Final Blocker.
- Bug 2545809 (no network interface via
ip=on s390x) and Bug 2552449 (Stratis root drops to emergency mode after unanswered prompt) were rejected as blockers. - Bug 2480694 (Plasma Discover installs outdated native packages) was accepted as a Final Blocker during the Blocker Review Meeting.
- Freeze exception Bug 2534994 (gnome-shell-extension-dash-to-panel-74) was accepted to ensure smooth system upgrades.
Contribution opportunities
- Help test the proposed restoration of Google Drive integration in GNOME by enabling the Copr repository and providing feedback on Discourse.
- Participate in the upcoming Kernel 7.3 Test Week scheduled for November 1–7 to test the kernel rebase on existing systems or via USB images.
- Share your thoughts on whether CI scratch-builds should be skipped if there is no NVR bump.
Learn more about the Quality team.
Websites and Apps
This week, the Websites and Apps team resolved a caching issue on the Fedora CoreOS download page. By implementing stricter cache-control headers, the team ensured that new releases are displayed correctly to users without delay, which was discussed in the Fedora Websites Matrix room. The team also discussed a community suggestion to add an announcements section to the main Fedora homepage, prompting conversations about better visibility for the Fedora Start page and potential collaborations with the Design team. Additionally, an inquiry was raised about the Nuxt-based website's potential vulnerability to the Node2Shell exploit (CVE-2026-111497).
On the forums, contributors discussed the current status of the Fedora Wiki, clarifying that while it is no longer used for actively maintained documentation, it remains crucial for change proposals, event organization (such as FOSDEM 2027), and historical reference. In a separate thread, feedback regarding the verbosity of LLM code reviews on Forgejo was addressed by pointing contributors to the upstream ai-code-review tool.
Decisions
- Implemented a strict
Cache-Control: no-cache, no-store, must-revalidateheader to fix caching issues on the Fedora CoreOS download page, ensuring users always see the latest release data (Matrix Chat).
Contribution opportunities
- Website Footer Updates: Help is requested to add a link to the
fedoraproject.org/startpage under the "Connections -> News & Publications" section of the website footer. (Matrix Chat) - Homepage Redesign Collaboration: Community members interested in adding an announcements section to the main Fedora website are encouraged to coordinate with the Design team to pitch and implement the layout changes. (Matrix Chat)
- Improve LLM Code Review Output: Contributors annoyed by the verbosity of Forgejo's AI code reviews can submit pull requests to the upstream ai-code-review tool to modify the default output format or add configuration options. (Forum Thread)
Learn more about the Websites and Apps team.
Design
The Fedora Design team canceled their weekly meeting due to a scheduling conflict with "We Are Red Hat Week." Meanwhile, a developer from the Anaconda project requested co-maintainer access to the design packages repository to help manage branding CSS updates for the new WebUI. They also submitted a pull request adding a Makefile target for tarball creation and plan to tag the main branch for the 46.0.0 release. The team plans to meet to discuss repository maintainership topics moving forward.
Decisions
- The weekly design team meeting was canceled for the week.
- Team members agreed to schedule a meeting to discuss co-maintainership of the design packages repository.
Contribution opportunities
- The Call for Papers for the Libre Graphics Meeting 2027 is open for those interested in submitting a proposal.
Learn more about the Design team.
Docs
The Docs team had an active week focused on consolidating and standardizing their documentation pipeline, discussing site architecture improvements, and preparing for the upcoming Fedora 45 release. Major technical themes included plans to unify preview and production builds into a single container image to streamline local authoring, standardizing on Podman for local builds, and exploring Arm64 architecture support to aid contributors using Apple Silicon or other AArch64 hardware. Discussions also progressed on adopting new CI tooling to identify broken anchor links across the documentation site.
Administratively, the team discussed their representation on the Mindshare Committee and reviewed their ticketing strategy, ultimately deciding that compartmentalizing issues into repository-specific trackers is preferable to a monolithic ticket queue. Several Fedora 45 release notes were merged, including documentation for new LibreOffice dictionaries and Emacs 31, while team members noted that the Fedora 45 release date has slipped to at least October 27, though the Release Party date remains firm.
Decisions
- The team agreed to transition the repository branch structure by renaming the
prodbranch tomainacross repositories, and confirmed that documentation content will be licensed under CC BY-SA-4.0 (Issue #19). - The production build repository will be renamed to
site-builderto better communicate its scope and purpose to contributors (Issue #20). - To prevent contributor burnout and "ticket hell," the team decided to keep issue tracking distributed across specific repository issue trackers rather than routing all tasks into a single ticket queue (Meeting).
- The "This Week in Fedora" (TWIF) bot will generate summaries for the broader community by monitoring the
docsorganization's issue trackers, rather than tracking the team's Matrix chat channel directly (Issue #63).
Contribution opportunities
- Mindshare Committee Seat: The Mindshare Committee is considering dynamically allocating team seats. The Docs team is asking members to comment with any clarifying questions regarding this potential role (Meeting, Issue #154).
- Update "Contributing to Quick Docs": First-time contributors are invited to help refactor the Quick Docs contribution guide to prioritize local authoring setups. Mentorship is available from @jflory7, @pboy, or @pbokoc (Issue #13).
- Write Release Notes: Writers are needed to draft release notes for upcoming Fedora 45 changes, such as IBus 1.5.35 and Fontconfig 2.18.
- Provide CI Tooling Feedback: The team is requesting feedback on adopting
bruce, a newly developed tool that crawls documentation for broken links and anchors, into the CI pipeline for nightly reports (Issue #69).
Learn more about the Docs team.
EPEL
This week, the EPEL team focused heavily on package maintenance and addressing critical security vulnerabilities. Notably, important updates for uv (0.13.x) and ruff (0.17.x) have been sent to testing for the EPEL10 leading branch to address several Rust security advisories and the eMudhra intermediate CA compromise. Additionally, contributors are evaluating a potential upgrade of ffmpeg to resolve a high-severity Heap-buffer-overflow vulnerability and opened pull requests to patch djvulibre (CVE-2025-53367) across multiple EPEL branches.
The team is also tracking efforts to bring incus 7.0.0 and mailman3 to EPEL10, along with preparing for the EPEL 10.2 retirement process. Furthermore, new documentation regarding EPEL build tagging was officially completed and published.
Decisions
- Updates for
uvandruffwill be pushed to stable in the EPEL10 leading branch after at least one week in testing, bringing security fixes and minor breaking changes. - To address CVE-2025-59734, the team decided to first create a test case for
ffmpegto confirm if version 7.1.5 is genuinely vulnerable before undertaking an incompatible rebase to version 9.0. - The committee unanimously agreed to cancel the November 4th EPEL meeting due to members traveling for a CentOS Board meeting.
Contribution opportunities
- Help is requested to maintain
mailman3packages in EPEL10 to ease the Release Engineering workload as Mailman is migrated to RHEL10 infrastructure. - Contributors can assist in bringing the
incuspackage (version 7.0.0 LTS) into EPEL 10; tracking bugs for dependenciesraftandcowsqlhave already been opened.
Learn more about the EPEL team.
ELN
The ELN SIG held a meeting to discuss the status of RISC-V integration and boot.iso image building. For RISC-V, riscv-koji is now configured for ELN with the RVA23 baseline defined. However, a glibc build failure occurred because valgrind does not support RVA23, which requires addressing %valgrind_arches before proceeding further. Additionally, work is ongoing to resolve technicalities with creating a boot.iso using image-builder.
Due to upcoming contributor absences, the group evaluated their meeting schedule and chose to skip the following week, reconvening in early November.
Decisions
- The October 27th meeting is cancelled; the next meeting is scheduled for November 3rd at 12:00 EST.
Learn more about the ELN team.
Atomic
This week, the Atomic group made significant progress on the Bootable Image Unification initiative, successfully closing out their migration from GitLab to the new Fedora Forgejo under the "Atomic" organization. Discussions heavily focused on setting up new build pipelines, finalizing Architectural Decision Records (ADRs) for tier systems, and establishing a bootable seed image to serve as a foundational testing layer across different architectures.
Additionally, community members raised technical questions regarding rpm-ostree stable commits temporarily bundling packages from updates-testing before they hit stable repositories. A separate packaging request for crun-krun resulted in the recommendation to utilize system extensions (sysexts) to maintain the current policy of keeping virtualization software out of the core system.
Decisions
- The new default seed image will be bootable (including both kernel and bootloader) and will initially feature Fedora default bootloaders across various architectures (x86_64, aarch64, ppc64le, and s390x).
- The group decided to timebox an attempt to build the seed image without rpm-ostree; if unsuccessful, they will document the shortcomings and address them later.
- Alternative seed images for other bootloaders will be created and tested only once community members are ready to use and layer on top of them.
- Virtualization software such as
crun-krunwill be kept out of the core system for now, with system extensions (sysexts) established as the preferred delivery method. - The initiative has officially completed its repository migration to Forgejo.
Contribution opportunities
- Contributors interested in alternative bootloaders (like
abootorsystemd-boot) are needed to help drive the creation and testing of alternative seed images. - Community members are encouraged to review and participate in the ongoing Architectural Decision Records (ADRs) regarding the unified base image architecture.
- Developers interested in adding
crun-krunfor container management isolation are invited to contribute to creating a Fedora system extension (sysext).
Learn more about the Atomic team.
CoreOS
This week, the CoreOS group held a community meeting to review the Fedora 45 Release Schedule, verifying readiness for the final target date. They also prepared agendas for the Bootable Image Unification ("Atomic Fusion") meetings and published the weekly newsletter to highlight recent community contributions.
On the development side, several significant updates were processed on the tracker. The team enabled aarch64 support for kubevirt image builds and addressed an upstream LVFS CDN outage affecting CI. Furthermore, they made progress investigating a kernel file corruption issue on ext4 upgrades, released fixes for a ppc64le NETLINK_AUDIT rootless container bug, and updated Konflux to handle override lockfiles directly.
Decisions
- Cut fast-tracked ad-hoc releases across all streams to update
ca-certificatesin response to the eMudhra intermediate certificate compromise (also discussed in the meeting). - Enable and publish
aarch64kubevirt image builds moving forward, allowing users building or consumingaarch64images to get kubevirt artifacts matching existingx86_64coverage. - Limit automated LLM report data collection to official meeting logs and GitHub repositories due to privacy and accuracy concerns, avoiding raw chat conversations.
- Switch Konflux-driven streams to a Jenkins poll-based import model to simplify change management and mirror the architecture of the RHCOS pipeline.
Contribution opportunities
- A developer has requested testing for a temporary mount option workaround (
nodioread_nolock) to preventext4kernel file corruption during FCOS upgrades. - The Fedora CoreOS newsletter project has been moved to a new repository under the CoreOS organization, and contributors are invited to submit pull requests to help improve it.
Learn more about the CoreOS team.
IoT
This week, the Fedora IoT group focused heavily on the ongoing Bootable Image Unification ("Atomic Fusion") efforts and final release preparations. Contributors discussed the agendas for the bootable image unification meetings and subsequent follow-ups, prioritizing Architectural Decision Records (ADRs), migrating base image work from GitLab to Forgejo, and configuring Konflux integrations. The group is actively exploring how a tiered image system will function, generally leaning toward utilizing lower-tier images as base layers in subsequent builds.
On the engineering front, the Fedora 45 IoT Final candidate compose was successfully created and published for testing. Additionally, contributors are engaged in a technical evaluation regarding device-specific Fedora ARM images. There is an active debate on the trade-offs of shipping pre-built, device-specific images for popular hardware like the Raspberry Pi or AI SOM devices at the build stage, versus maintaining the current user-side arm-image-installer workflow to avoid the overhead of maintaining hundreds of unique image variants.
Decisions
- The Fedora 45 IoT Final candidate compose (Fedora-IoT-45-20261019.1) has been officially generated and published, pulling in all approved blockers and freeze exceptions for the upcoming release.
Contribution opportunities
- Review and provide feedback on the proposed Architectural Decision Records (ADRs) and tenant configurations for the Bootable Image Unification (Atomic Fusion) initiative.
- Share your hardware use cases and insights in the ongoing evaluation of device-specific Fedora ARM images to help the team balance between user-side deployment scripts and pre-built images for popular edge devices.
Learn more about the IoT team.
ARM
Adam Williamson announced the upcoming Fedora 45 Blocker Review Meeting, scheduled for October 26, 2026, at 16:00 UTC on Matrix. The team will be evaluating one proposed blocker and two proposed freeze exceptions for the Final release to determine if they violate any release criteria.
Contribution opportunities
- Review proposed and accepted blockers for Fedora 45 ahead of time using the blockerbugs app.
- Help reduce meeting times by voting asynchronously on proposed blockers and freeze exceptions on Pagure.
- Attend the Blocker Review meeting on Matrix using your FAS account.
Learn more about the ARM team.
Hummingbird
The Hummingbird group continued discussions regarding the bootable image unification effort (also known as "Atomic Fusion"). During the October 22 meeting, the agenda focused on Architectural Decision Record (ADR) updates, the ongoing migration of base image work from GitLab to Forgejo, seed work proposals, and setting up Konflux integration for service accounts.
Additionally, in a follow-up to the October 8 meeting, participants clarified the proposed image tiering system. While the exact mechanisms are still being formalized in ADRs, it was noted that lower-tier images will likely be used as the base container (FROM) for subsequent builds by next-tier owners.
Contribution opportunities
- Community members are invited to propose additional discussion topics and contribute to Architectural Decision Records (ADRs) for the ongoing Bootable Image Unification meetings.
Learn more about the Hummingbird team.
Kernel
The Kernel group saw activity across two main mailing-list discussions this week. Justin Forbes announced the regular rebase of the kernel-ark os-build branch, a process that aligns with every upstream release to ensure carried patches remain up to date, though it requires outstanding merge requests to be rebased.
Additionally, Michel Lind provided an update on the RFC to split perf out of the kernel packaging. Lind noted that while the split might not drastically affect Rawhide, it would allow stable releases to receive perf updates faster and prevent perf dependencies from polluting the kernel build. Lind plans to follow up with the CentOS/RHEL teams to ensure packaging does not diverge.
Decisions
- The
kernel-arkos-buildbranch has been rebased to align with the latest upstream release, which invalidates outstanding merge requests and requires contributors to rebase them.
Learn more about the Kernel team.
AI
The AI group had a productive week centered on infrastructure expansion, preparing for the Fedora 45 release, and debating the integration of AI models in the distribution. Community CI hardware arrived and is currently being installed. Meanwhile, packaging and integration efforts advanced with the addition of agentic AI tools like openclaw and pi-coding-agent into Fedora, tying into existing ollama or llama-cpp packages. Additionally, ROCm was updated to version 7.2 in preparation for future releases, and a fix for ROCm's __noinline__ problem was backported to F44.
The SIG also engaged in a broader philosophical and technical discussion regarding which LLM models align best with Fedora's Free Software foundations. Members weighed the performance of open-weight models against licensing transparency, environmental impact, and potential regulatory liabilities (like the EU AI Act) when providing centralized inference infrastructure. The group is exploring model-agnostic harnesses to allow shared infrastructure experimentation without locking the community into a specific, potentially non-compliant model. Finally, the AI-ML SIG was successfully added to the Fedora Engineering Teams documentation page.
Decisions
- The AI-ML SIG was added to the Engineering Teams documentation page to improve discoverability for the broader community.
- The SIG will present a session at the Fedora 45 Release Party on October 30th to showcase recent work, including the Fedora Agent Skills Library, new agentic AI tools, and ROCm 7.2 updates.
Contribution opportunities
- Help define the 'Definition of Done' for the new AI Community CI system. Community members who have written tests for CI or who manage the testing farm are encouraged to contribute requirements.
- Test the new F44 and F45 AI/ML builds on the ROCm packagers COPR and provide feedback in the Matrix room. Feedback is especially welcome for use cases involving agentic AI development on AMD GPUs using Rawhide.
Learn more about the AI team.
RISC-V
The RISC-V group successfully generated and is actively testing the Fedora 45 final images, including custom "Omni" kernel builds (v7.3) that support newer hardware like the Milk-V Titan and K3. Concurrently, progress continues on the Fedora ELN bootstrap and Fedora 46 image generation. In community news, the RISC-V devroom has been accepted for FOSDEM 2027 as a half-day track.
Additionally, the team is heavily focused on debugging hardware-specific build issues that impact broader Linux ecosystems. This includes cross-distribution collaboration with Debian developers to troubleshoot a GCC build failure on K3 caused by vector register state corruption, as well as investigating glibc crashes on Titan that reliably trigger on certain packages.
Decisions
- Drop the StarFive VisionFive 2 (VF2) PCIe patch from the kernel due to unresolved NVMe I/O timeouts under heavy load.
- Disable Valgrind for Fedora ELN builds, as the current implementation does not yet support the RVA23 instruction set profile.
- Ship the Fedora 45 final images using the 7.3 kernel, including 'Omni' variants containing necessary workarounds for newer RISC-V boards.
Contribution opportunities
- Test the newly generated Fedora 45 final images (Server, Cloud, and Container variants) on physical RISC-V hardware and report boot or usability issues.
- Assist in debugging glibc
pthread_mutex_cond_lockcrashes on Titan hardware, which are consistently causing build failures for packages likeopamandpython-astropy. - Help test upstream kernel patches (such as vector register state RMW fixes) or configuration workarounds to resolve the GCC build failures on K3.
- Investigate and patch older FTBFS (Fails To Build From Source) packages that are currently blocking the Fedora 46 repoclosure.
Learn more about the RISC-V team.
Go
The Go SIG met this week to troubleshoot a build failure on ppc64le architectures caused by a PIE issue involving the golang-x-sys package. The issue has caused cascading failures in downstream projects, including rootlesskit, chezmoi, and any package relying on fatih/color. A repository query revealed that approximately 231 packages bundling golang-x-sys on ppc64le could be impacted.
During the meeting, participants discussed a failed pull request and a COPR build SIGSEGV error. The group concluded that fixing the root cause directly within the golang-x-sys package should safely resolve the downstream breaks.
Decisions
- It was decided that @alexsaezm will fix the
x/syspackage forppc64leto address the downstream breaks and notify the SIG once resolved (see meeting logs).
Learn more about the Go team.
Perl
This week, the Perl group focused entirely on routine maintenance and package updates, generating 17 mailing-list posts. Contributors Jitka Plesnikova and Michal Josef Špaček submitted and successfully merged a series of pull requests to keep the ecosystem secure and up to date.
Notable activities included creating an EPEL10 version for cpanspec and updating several core Perl packages. The bumps included version updates for perl-DBI, perl-URI, perl-DBD-MySQL, perl-Mozilla-CA, perl-Dist-Zilla, and perl-XML-Twig.
Decisions
- Created and merged the EPEL10 version of the
cpanspecpackage. - Merged the 20261020 version bump for
perl-Mozilla-CA, ensuring root certificates are up to date. - Merged version 1.656 for
perl-DBI, resolving bug rhbz#2554771. - Merged version 5.40 updates for
perl-URI. - Merged version 5.014 updates for
perl-DBD-MySQL. - Merged version 6.040 updates for
perl-Dist-Zilla. - Merged version 3.55 updates for
perl-XML-Twig.
Learn more about the Perl team.
Ruby
The Ruby group is actively testing the newly started Ruby 4.1 development. Initial ecosystem rebuilds against the C API have uncovered a few issues, including a test failure in rubygem-ffi linked to an upstream Ruby bug, and build failures in older packages due to the Data_Wrap_Struct macro deprecation.
Additionally, standard libraries net/pop and net/ftp have been removed from Ruby 4.1's bundled gems. This change breaks dependencies for several major packages, including Ruby on Rails (via rubygem-mail), notmuch, and Vagrant-related packages, necessitating the creation of new standalone packages for these gems to restore ecosystem functionality (discussion).
Contribution opportunities
- A maintainer is needed to package
rubygem-net-popas a standalone gem, which is required to fix failing dependencies for Ruby on Rails andnotmuch(discussion). - Assistance is needed to package
net/ftpto resolve dependency issues for Vagrant-related packages. - Contributors can help migrate older packages that depend on the Ruby C API away from the deprecated
Data_Wrap_Structmacro to the newerTypedData_Wrap_Struct(as was recently done forrubygem-eventmachine).
Learn more about the Ruby team.
Rust
A major focus this week was addressing numerous security advisories across various Rust crates, particularly concerning outdated TLS and cryptographic libraries. Contributors have been actively rebuilding and patching packages to mitigate vulnerabilities in rustls (updating to v0.23.46), webpki-roots (addressing the eMudhra CA compromise), ruzstd, zip, and faster-hex.
In conjunction with these security updates, a mailing list proposal was introduced to completely drop older, vulnerable versions of reqwest (\<0.12) and rustls (\<0.23) from the repository. This cleanup aims to remove CA bundles that are known to be broken and TLS libraries that are no longer receiving patches, which will require porting or dropping several dependent applications.
Decisions
- Updates to the
zipcrate to address high and critical security flaws will be deferred until therustlsandwebpkipackage updates have stabilized to avoid conflict and capacity issues (Issue #47). - Affected packages were rebuilt with
webpki-roots1.0.11 to mitigate the eMudhra Intermediate CA Compromise (Issue #46). - Multiple packages, including
rust-onefetch,helix, andstgit, were rebuilt withfaster-hexv0.10.1 to address a security advisory (Issue #45).
Contribution opportunities
- Help is needed to port or drop applications currently depending on outdated versions of
reqwest(\<0.12) andrustls(\<0.23) to eliminate unresolved security issues (Mailing list thread). - Contributors can assist in porting applications dependent on
rustlsv0.22 or v0.21 to newer, secure versions (Issue #43). - Packages depending on
basic-tomlandtomlv0.5 need to be updated or cleaned up, asbasic-tomlis now officially marked unmaintained (Issue #19). - The
mdshpackage has been offered up to be orphaned or retired due to its obsoletestructoptdependencies, providing an opportunity for a new maintainer to step up or for the package to be formally retired (Issue #22). - Rebuilds will be required for applications bundled or built against outdated versions of the
zipcrate to address multiple security advisories once earlier updates stabilize (Issue #47).
Learn more about the Rust team.
Other Discussions
- Kevin Degeling suggested a change proposal to split TLS Certificate Authorities into jurisdiction-specific packages, allowing system administrators to more easily exclude untrusted CAs.
- Matt Blank shared a custom application that enables connecting to a web-authenticated Windows device from Linux via RDP.
- Gordon Messmer proposed adding upstream-release branches in Fedora dist-git to allow developers to build applications and dependencies decoupled from the distribution release, triggering a discussion about parallel-installable packages and building isolated environments.
- Panu Matilainen shared a proposed Fedora 46 change to switch the default output format of RPM from the legacy v4 to the native v6 format, detailing compatibility requirements and reassuring maintainers that most tooling will be unaffected.
- Abdallah Shehawey followed up on a packaging proposal for
whatsapp-desktop, an independent desktop client, and is still seeking a package reviewer and sponsor for the source-only application. - Bojan Smojver reported repeated compose failures caused by "too many files" limits, which were temporarily resolved after Kevin Fenzi restarted the process.
- Miroslav Suchý announced a new feature in the Packager Dashboard that alerts maintainers if their package is missing from release-monitoring.org (Anitya), prompting a quick bug fix by Sheikh Limon to handle rate limit errors during project creation.
- Christoph Junghans sought advice on unbundling test-only dependencies for
stdexec(required forhpx-2.0), with Cristian Le suggesting that patching CMake to usefind_packageand packagingrapids-cmakewould be the best approach. - Jakub Jelen warned maintainers about upcoming automated pull requests that replace the
%gpgverifymacro with%openpgpverifyfor the Fedora 45 Sequoia transition, advising maintainers to update expired upstream keys and refresh keyrings. - Richard W.M. Jones announced a new
shim-unsigned-riscv64package for Fedora RISC-V, seeking package review and offering to sponsor its creator. - Other discussions included a request for a review swap of Crystal Language Stage 1 packages, feedback on splitting
perfout of kernel packaging, packaging advice for a module structure change in PyMuPDF 2.0, a license change inperl-Test-Simple-1.302226, audit logging plans for an Unprivileged eBPF RBAC Daemon change proposal, an upcoming F45 Blocker Review Meeting, outcomes from the Fedora Council Bi-Weekly Agenda, and updates across the Fedora Docs Matrix chat.
Orphaning packages
- Miro Hrončok initiated a discussion on the 3dprinting mailing list about retiring
slic3rsince it is upstream dead, proposing to package SuperSlicer or OrcaSlicer instead. - Benson Muite announced they have orphaned
libfyamlbecause they no longer use it.
Package updates
- Marius Schwarz urgently requested a manual push for PHP 8.4.27-1 to fix a critical vulnerability, prompting a debate with Adam Williamson and others about prioritizing security updates versus following the standard Bodhi karma process.
- Zbigniew Jędrzejewski-Szmek warned that
grpcis severely outdated, causing package conflicts and blocking F45 upgrades, which led to a broader discussion about unresponsive maintainers and failing rebuild attempts in COPR. - Ben Beasley announced updates for
uv(0.13.x) andruff(0.17.x) across F43-F45 and EPEL10, noting that these versions fix a recent CA compromise issue and have updates policy exceptions. - Steve Cossette informed the community that KDE Plasma 6.8 will obsolete and remove unsupported X11 components entirely, advising users to run
dnf offline-upgradeto prevent system breakages. - Jan Drögehoff gave a heads-up on the
ddcutilupdate to 3.0.2, noting a backward-compatible soname bump that did not break dependent packages likefastfetchandpowerdevil. - Antonio Trande announced the release of
python-reportlab 5.1.0for F44+ and EPEL10, asking maintainers to verify compatibility with dependent packages.
New contributor introductions
- Dawid Wrobel introduced themselves as a KMyMoney developer looking to adopt outdated GNOME extensions and package Betterbird.
All contribution opportunities
Community members are highly encouraged to help test upcoming software and architectural changes, a crucial skill that requires no prior group membership. Testers are needed to validate the proposed restoration of Google Drive integration in GNOME and to participate in the Kernel 7.3 Test Week. You can also provide critical feedback on system-level components by evaluating alternative bootloaders for Atomic images, testing Fedora 45 final images on RISC-V hardware, and verifying ROCm AI/ML builds on AMD GPUs. Furthermore, anyone can evaluate release criteria by testing and voting on proposed Fedora 45 blocker bugs and freeze exceptions across editions like Workstation, KDE, Server, and ARM.
Developers and software packagers can jump into several active initiatives across various ecosystems. Reviewers are actively sought for the Stage 1 package reviews of the new Crystal Language toolchain—with review swaps offered—and the whatsapp-desktop application. The Rust SIG needs assistance updating dependencies like reqwest and rustls or adopting orphaned packages like mdsh, while the Ruby community is seeking maintainers for rubygem-net-pop. If you prefer coding for infrastructure and automation, pull requests are welcome to improve the output formatting of the AI code review tool on Forgejo, help is needed to fix a Matrix bot playbook migration, and volunteers are sought to write an Ansible playbook for tracking groups.
Contributors with technical writing and design skills have multiple avenues to leave their mark. The Documentation team invites first-time contributors to refactor the Quick Docs contribution guide to prioritize local authoring setups, and needs writers for upcoming Fedora 45 release notes. You can also review the current draft of the "What's New in Fedora KDE" magazine article, submit pull requests to the new CoreOS newsletter repository, or collaborate on updating the beginner's joining brochure. On the web side, the Websites and Apps team is coordinating a homepage redesign to add an announcements section and needs help updating the global site footer.
Finally, you can help shape Fedora's strategic direction and global presence through community organizing and providing architectural feedback. The Council is looking for comments on the Flock 2027 Call for Papers themes, and community members are invited to evaluate Bootable Image Unification architectural records. If you are passionate about community representation, there are open seats on the Mindshare Committee for underrepresented subprojects like AI or Moderation. Event enthusiasts can volunteer to support Fedora at FOSDEM 2027 by speaking, running the distributions devroom, or staffing the Fedora booth.































