Skip to content
Seafoam Labs

All versions since v2.1.4

All versions

v2.1.4

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.1.3...v2.1.4

v2.1.5

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.1.4...v2.1.5

v2.2.0 UI Simplification

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.1.5...v2.2.0

v2.2.1

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.2.0...v2.2.1

v2.2.2

Shelly Search is Back

You can enable it in advanced options.

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.2.1...v2.2.2

v2.2.3

What’s Changed

Configuration Information

To achieve looks like this : image

Apply the below configurations to your config file in ~/.config/shelly/config.json . Further configuration information will be on the wiki shortly to explain how to achieve different animation styles and looks.

  "ProgressBarStyle": "Pacman",
  "ProgressBarFps": 7,
  "ProgressBarWidth": 24,
  "OutputMode": "singlepane",
  "SinglePaneMaxStickies": 6

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.2.2...v2.2.3

v2.2.3.1

Summary

  • Corrected support for GTK Theming on Gnome to enable make sure you download and install a GTK4 Theme

    • nwg-look is one of the best ways to do this if you are unsure.

  • Finished cleanup of updated UI

  • Fixed -git tracking bugs for the aur

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.2.3...v2.2.3.1

v2.2.3.2 - Rolling With My Gnomies A Dark Mode Fix

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.2.3.1...v2.2.3.2

Release - v2.2.4.0

Release Notes v2.2.4

Highlights: Smarter fuzzy search across every package list, fingerprint-auth interference detection with guided fixes, and a polished Recommended page that’s now opt-in. A brand-new alpha release of Shelly.Keys companion binary for GPG keyring bootstrapping.

🐚 Features

  • Shelly.Keys — new AOT-compiled CLI for one-shot GPG/pacman keyring initialization. Ships its own PKGBUILD, packaging workflow, and GlobalSettings for global keyserver configuration.
  • Recommended page — a new curated landing experience for package discovery (recomend page, JSON context, refreshed UI).
  • Package group search — search now resolves and lists pacman package groups alongside individual packages.
  • Sortable search columns in ShellySearch — click any column header to sort results.
  • Ctrl+F search shortcut wired into AurInstall, AurRemove, AurUpdate, PackageInstall, PackageManagement, PackageUpdate, and FlatpakInstall dialogs.
  • Fingerprint authentication detector — new FingerprintAuthDetector + FingerprintAuthState services automatically spot sudo/fprintd PAM interference and surface a helper banner and FingerprintFixDialog with guided remediation.
  • Build Date field added to AlpmPackage and shown in package details.
  • ilovecandy-style bottom bar — BottomBarRegion now conditionally renders ANSI markup or an ASCII fallback based on terminal capability.

⚡ Improvements

  • Smarter fuzzy matching across every list view — ListInstalled, ListAvailable, AurListInstalled, AurListUpdates now use a unified scoring filter.
  • ShellySearch refactor — scoring moved into a local MatchObject method, class made sealed, fields converted to locals.
  • InitializeCommand streamlined — leaner GPG config setup, optimized keyring creation, new trust-database update step, and Marshal.StringToCoTaskMemUTF8 / ThrowIfErrorString adoption.
  • CLI path resolution consolidated into a single central class, restricted to .slnx, rewritten with LINQ.
  • Auto-select first list item so users aren’t locked out of package details.
  • About dialog — added proper credit sections.
  • Privileged operation hint clarifies biometric support and suggests temporarily disabling fingerprint auth.
  • FingerprintAuthDetector — configurable PAM directories/service names, better include/substack handling, direct sudo hit checks, fprintd service integration, expanded tests.
  • FingerprintFixDialog — simplified copy, removed security warning and issue-reference button, tightened default height.
  • Recommended page is now opt-in — disabled by default, toggleable from settings.

🐞 Bug Fixes

  • Arch News order reversed — ArchNewsDialog now displays news items newest-first.
  • JsonException: 'P' is an invalid start of a value in GetAurPackageBuild resolved.
  • SearchPackagesAsync filter syntax corrected.
  • Bottom of lockout view no longer visually cut off.
  • AppImage .desktop — removed an invalid TryExec entry.
  • Renamed firmware version → Shelly version and made it required.
  • Added missing colon after Version and a missing space in installed-size output.

Changes since v2.2.3.2

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.2.3.2...v2.2.4.0

v2.2.4.1

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.2.4.0...v2.2.4.1

v2.3.0.0 There and pack again a memory tale

Release Notes v2.3.0.0

Highlights: There and pack again a memory tale. We have updated from json to memorypack for the cli talking to the ui! This brings better performance with less overhead from json! The other major highlight is shelly ui now supports the ability to be translated so watch out for future translation or contribute!

🐚 Features

  • MemoryPack — Added memorypack to the ui and cli to increase performance!
  • Translation Support — Added the ability for the shelly ui to be translated to your locale! Check for future translation and our guide if you wish to contribute!
  • Local Install — Remove locally installed package(s) in manage ui.

⚡ Improvements

  • MemoryPack — Added memorypack to the ui and cli to increase performance!
  • Translation Support — Added the ability for the shelly ui to be translated to your locale! Check for future translation and our guide if you wish to contribute!
  • Rec Page — Cleaned up rec page and removed header.
  • PKGBUILD — Update to our pkgbuilds to add descriptions to the .desktop files.
  • Refactor of package selection — Refactored package selection.

🐞 Bug Fixes

  • ZstdSharp — Added ZstdSharp sharp reference to rd.mxl.
  • Aur — VCS package in AUR is not detected for updates.
  • Revert Json — Revert to JSON output in non UI mode to fix issues with unwanted changes to output.
  • Opt Depdencies — Fixed optional deps being ignored during installation.
  • Flatpak Bug — Fixed bug in flatpak ui from memorypack updates.

Changes since v2.2.3.2

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.2.3.2...v2.2.4.0

v2.3.0.1

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.3.0.0...v2.3.0.1

v2.3.0.2

What’s Changed

New Contributors

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.3.0.1...v2.3.0.2

v2.3.1.0

v2.3.1.0 A Polyglot’s Pact with the Package Manager

Release Notes v2.3.1.0

Highlights: Shelly now speaks more languages. This release adds or updates seven translations — Russian, French, Bulgarian, Polish, German, and Hungarian — so more people can use Shelly in their own tongue. Inside, we moved LocalManager into PackageManager, added a real message-event system, made the config flatter, and shipped a new systemd user unit for Shelly Notifications. The Tray gets a welcome screen, the settings look cleaner, and CLI docs can now build themselves. The new improved docs can be viewed on Shelly ALPM - CLI Reference page. We also fixed AUR updates, made the bottom bar play nice with prompts, and switched to the system libzstd for smaller builds.

🐚 Features

  • Add Russian (ru_RU) translation for UI (#794)
  • Add French (fr_FR) translations to Shelly GTK (#812)
  • Add Bulgarian (bg_BG) translations to Shelly GTK (#787)
  • Add Polish (pl_PL) translation (#808, updated in #832)
  • Add German (de_DE) translation (#785)
  • Add Hungarian (hu_HU) translation (#822, updated in #836)
  • Include a systemd user unit for Shelly Notifications (#802)
  • Generate CLI docs (Gen CLI docs) (#810)
  • Tray welcome screen (#818)
  • Add 'quit' action with <Ctrl>Q accelerator to Gtk application (#847)
  • Add Http.UserAgent and refactor User-Agent handling (#835)
  • Auto generation for CLI which can be viewed here

⚡ Improvements

  • Use system libzstd instead of bundled (#796)
  • Flatten config (#803)
  • Move LocalManager to PackageManager and implement message events (#801)
  • Remove cache on uninstall (#806)
  • Refactor: add PackageBuilderDiffGenerator, enhance Aur*Command classes (#813)
  • Fix settings spacing to be more readable (#817)
  • Update heading level for Package Management help documentation (#821)
  • Update README.md to include JetBrains sponsorship (#828)
  • Comply with JetBrains logo guidelines (#830)
  • Update JetBrains logo for dark mode (#831)
  • Add suspension handling to BottomBarRegion for interactive prompts (#841)
  • Hide unavailable optional dependencies on standard (#843)
  • Refactor settings logic to optimize default page handling and dynamic content (#844)
  • Replace Size with InstalledSize as the sorting and display field (#845)
  • Introduce QuestionResponse with ProviderOption for ALPM question handling (e29a1b2)

🐞 Bug Fixes

  • Remove duplicated msgid in shelly-ui.pot (#819)
  • Fix shelly aur update <package> unable to run (#834, fixes #793)
  • General fixes to German translation tooling (#840)

Changes since v2.3.0.2

This release brings 30 merged pull requests, six new contributors, and broad internationalization coverage across the GTK frontend, alongside meaningful refactors in PackageManager, BottomBarRegion, and AUR command handling.

Full Changelog: v2.3.0.2…v2.3.1.0

Contributors

  • @azdanov
  • @caroberrie
  • @ZoeyErinBauer
  • @Landeli7 (new)
  • @compulsions (new)
  • @juliazero (new)
  • @Henry2o1o (new)
  • @Impostor0729 (new)
  • @therealmate (new)
  • @VinnyQF

New Contributors 🎉

A warm welcome to our six first-time contributors:

  • @Landeli7 — French translation (#812)
  • @compulsions — Bulgarian translation (#787)
  • @juliazero — Polish translation (#808)
  • @Henry2o1o — German translation (#785)
  • @Impostor0729 — Hungarian translation (#822)
  • @therealmate — Hungarian translation updates (#836)

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.3.0.2...v2.3.1.0

v2.3.2.0 The Downgrade, the Downstream, and the Downright Polished

v2.3.2.0 The Downgrade, the Downstream, and the Downright Polished

Release Notes v2.3.2.0

Highlights: Shelly takes a confident step forward by learning how to step backward — with a brand-new downgrade UI, a fully-featured ignore command group for managing IgnorePkg entries, and a long-requested Flatpak repair workflow. The cli gets a proper event-driven rewrite, recommendations gain a remove button, and the package detail views now show Build Date, Install As, and Required By for richer at-a-glance information. On top of all that, Shelly continues its globe-trotting tour, adding Catalan, Portuguese (Portugal), Turkish, and Brazilian Portuguese (tray) translations, plus updates to Polish translation.

🐚 Features

  • Downgrade UI
  • ignore command group
  • Flatpak repair (#704)
  • Remove button on recommendations
  • ca_ES, pt_PT, tr_TR, pt_BR (tray service) translations
  • Build Date , Installed As and Required By added to package detail views
  • Console → Event conversion
  • Tray translations pipeline (po compile + package step)
  • CLI help docs generation in CI
  • Tooltips across the UI (#859)

⚡ Improvements

  • HttpClient in Recommend.cs — now uses compression and HTTP/2 + HTTP/3
  • DowngradePackageCommand correctness
  • AurPackageManager — PKGBUILD no longer shown twice
  • Remove Optional Deps checkbox enabled by default
  • UI frames refactor and simplified downgrade logic
  • Loading indicators polish
  • Search behavior clarified (#860)
  • Checkbox visibility improvements
  • ShellyTeam category description clarified
  • FlatpakManager — tracks updated package names and reports them on success
  • GitHub Actions bumped to latest versions
  • PolishTranslation refresh
  • TurkishTranslation follow-up updates
  • release.yml indent fix
  • AUR PKGBUILD parsing improvements for optional dependencies

🐞 Bug Fixes

  • Size formatting — valid suffix selection (#886)
  • optdepends — validate and handle malformed entries with proper package naming (#887)
  • Searching behavior is now clear and predictable (#888)
  • Missing tooltips restored across UI (#890)
  • General fixes for German translation by @Henry2o1o (#849, #862)
  • Scaling improvements should be resolved for scaling above 1.5

Changes since v2.3.1.0

This release contains 34 merged pull requests and three new contributors, with the spotlight on the new **downgrade UI **, the ignore command group, Flatpak repair, and a substantial console-to-event refactor. Package detail views get more useful metadata (Build Date, Install As, Required By), recommendations become more actionable, and the AUR + Flatpak pipelines are noticeably steadier. Localization continues to expand with four fresh languages joining the family.

Full Changelog: v2.3.1.0…v2.3.2.0

Contributors

Thanks to everyone who contributed to this release: @azdanov, @caroberrie, @VinnyQF, @ZoeyErinBauer, @celonfix, @Henry2o1o, @NyaPuma, @dtalens, @juliazero.

New Contributors 🎉

A warm welcome to our three first-time contributors:

  • @NyaPuma — Portuguese (Portugal) translation (#856)
  • @dtalens — Catalan translation for shelly-ui (#855)
  • @celonfix — Turkish translation (#889)

**Full Changelog **: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.3.1.0…v2.3.2.0

Pull Requests Merged

  • Fix — @Henry2o1o (#849)
  • Portuguese (Portugal) translation — @NyaPuma (#856)
  • i18n: Add Catalan translation for shelly-ui — @dtalens (#855)
  • Update Polish translation — @juliazero (#852)
  • Fix DowngradePackageCommand and add IgnorePkg support — @azdanov (#863)
  • Add ignore command group for managing IgnorePkg entries — @azdanov (#864)
  • Add remove button functionality to recommendations — @azdanov (#869)
  • Tray translation — @caroberrie (#867)
  • Add compression and h2/h3 to HttpClient in Recommend.cs — @azdanov (#868)
  • Creating pt_BR translations for the tray service — @VinnyQF (#875)
  • Update GitHub Actions for latest versions and add CLI docs generation — @azdanov (#866)
  • Fix — @Henry2o1o (#862)
  • Build steps to compile and package po’s for tray service — @caroberrie (#876)
  • Fix release.yml indent — @azdanov (#881)
  • Add downgrade UI — @azdanov (#885)
  • Loading — @caroberrie (#882)
  • Convert console to event — @ZoeyErinBauer (#879)
  • Fix size formatting logic — @ZoeyErinBauer (#886)
  • Validate and handle malformed optdepends — @ZoeyErinBauer (#887)
  • 860 — searching behavior is unclear — @ZoeyErinBauer (#888)
  • 704 — feature: flatpak repair — @VinnyQF (#877)
  • 859 — bug: no tooltips — @ZoeyErinBauer (#890)
  • Refactor UI frames and simplify package downgrade logic — @azdanov (#891)
  • Add Turkish translation — @celonfix (#889)
  • Enable “Remove Optional Deps” checkbox by default — @azdanov (#892)
  • Track updated package names in FlatpakManager — @ZoeyErinBauer (#893)
  • Add “Build Date” and “Install As” to package views and CLI — @ZoeyErinBauer (#894)
  • Clarify ShellyTeam category description — @azdanov (#897)
  • Add required by — @caroberrie (#900)
  • Update Turkish translations — @celonfix (#899)
  • Fix AurPackageManager PKGBUILD handling to avoid showing twice — @azdanov (#898)
  • Improve UI by hiding checkboxes — @azdanov (#901)
  • Update Polish translation — @juliazero (#895)
  • Moving Development to Release — @ZoeyErinBauer (#902)

v2.3.2.1 Pride

What’s Changed

  • Added a Pride Month Surprise

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.3.2.0...v2.3.2.1

v2.3.2.2

Shelly-ALPM v2.3.2.2

Release date: 2026-06-06

This release introduces drag-and-drop AppImage installation, CachyOS updater parity with downgrade support, a Shelly CLI implementation of pacman-key --populate used by going shelly-keys populate {keyring}, several UI/UX refinements, expanded translations (including new Japanese, German, and Hungarian locales), and important reliability fixes.

✨ New Features

  • Drag-and-drop AppImage installation — Added drag-and-drop functionality for installing AppImages. (#946 by @azdanov)
  • CachyOS updater parity — Brought the CachyOS updater path to feature parity. (#953 by @ZoeyErinBauer)
  • CachyOS archives downgrade command — Added a command to downgrade via CachyOS archives. This now automatically detects the repository of choice. (#954 by @azdanov)
  • shelly-keys populate CLI implementation — Created CLI support for populating gpg keyring. (#948 by @ZoeyErinBauer)
  • Selectable/copyable text in pop-ups — Made text in pop-ups select- and copy-able. (#909 by @VinnyQF)
  • Package size column sorting — Added sorting for package size columns. (#916 by @azdanov)
  • Arch news parsing — Parse Arch news from HTML to Markdown. (#942 by @azdanov)
  • --now flag support — Updated UnprivilegedOperationService to enable the --now flag for system operations. (#952 by @ZoeyErinBauer)
  • noConfirm handling — Handle the noConfirm flag in QuestionHandler to skip user input. (#956 by @ZoeyErinBauer)

🎨 UI / UX Improvements

  • Added loading state and improved the description box on the Recommend page. (#936 by @azdanov)
  • Improved the visual presentation of installed packages in the question dialog. (#933 by @azdanov)
  • Improved details expander box margins and alignment. (#935 by @azdanov)
  • Switched to Summary in ShellySearch for more compact rows. (#939 by @azdanov)
  • Fixed spacing and made the close button circular in GenericOverlay. (#924 by @azdanov)

🐛 Bug Fixes

  • Fixed failure of “upgrade all” with the upgrade list during partial failures. (#930 by @caroberrie)
  • Resolved downgrade issues. (#955 by @azdanov)
  • Changed db.lock to db.lck. (#922 by @utuhiro78)

🌐 Translations

  • Initial Japanese translation. (#912 by @utuhiro78)
  • Initial German (de_DE.po) translation. (#944, #950 by @Henry2o1o)
  • Added a Hungarian translation and updated a few older lines. (#923 by @Impostor0729)
  • Updated Polish translation. (#917 by @juliazero)
  • Updated Brazilian Portuguese (pt-BR) translations. (#910 by @VinnyQF)
  • Updated Catalan translation. (#932 by @dtalens)

🔧 Internal & Build

  • Refactored Program.cs to update the activation flow. (#914 by @azdanov)
  • Refactored the build job and added a CLI reference generation command. (#913 by @azdanov)
  • Bumped version to 2.3.2.2 across all projects and updated PKGBUILD files. (#957 by @ZoeyErinBauer)
  • Master mergebacks. (#904, #919 by @ZoeyErinBauer)

🎉 New Contributors

  • @utuhiro78 made their first contribution in #912

Full Changelog: v2.3.2.1...v2.3.2.2

More details available at the Shelly-ALPM changelog.

v2.3.2.3

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.3.2.2...v2.3.2.3

v2.3.2.4

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.3.2.3...v2.3.2.4

v2.3.2.5

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.3.2.4...v2.3.2.5

v2.3.3.0 Imagine the AppImage

Release Notes v2.3.3.0

Highlights: Shelly grows more multilingual and more capable. This release adds three brand-new translations — Spanish, Chinese (Simplified), and an expanded Hungarian — alongside refreshed German and general localization updates. Under the hood, package management gets smarter with a new MarkCommand for setting install reasons, a PurifyPackages flag for clearing orphans, an AUR upgrade diff view in the UI, and a repository column in the upgrade summary. We also squashed a Wayland crash, fixed Flatpak addon installs, and refactored AppImage and AppStream handling.

🐚 Features

  • Show diff in the UI during AUR upgrade (#985, closes #907)
  • Add MarkCommand to set install reason for packages (explicit, depends) (#1005)
  • Implement PurifyPackages flag to remove orphaned packages (#1004)
  • Add repository column to UpgradeCommand package summary table (#967)
  • Add TryRenderWireFrame to decode and log structured wireframe events (#968)
  • Add Spanish translation (#999)
  • New Chinese (Simplified) translation (#838)
  • New text segments added to the Hungarian translation (#994)
  • Aur preventions for the post_install attack as well as a framework for handling further PKGBUILD review tool implementation (#996)

⚡ Improvements

  • Remove AppStream as an optional dependency, replaced by Shelly icon stream (#961)
  • Refactor AUR package management logic (#965)
  • Refactor BottomBarRegion for improved readability and add _asciiOn… (#966)
  • AppImage refactor (#984)
  • Improve Tray handling and prevent multiple instances of notifications (#987)
  • Set Homogeneous property to ensure consistent sizing (#974)
  • Flatpak permissions handling (#1006)
  • Update translations (l10n) (#1000)
  • Update de_DE.po German translation (#998)

🐞 Bug Fixes

  • Schedule Recommend UI updates on the GTK main thread to fix Wayland crash (#971)
  • Fix addons installation issue in FlatpakInstallCommand (#991)
  • Fix wrong references in rd.xml (#1007)

🔧 Maintenance

  • Bump version to 2.3.3.0 across all projects and update PKGBUILD files (#1008)
  • Dev merge back (#995)
  • Master merge back (#997)
  • Release 2.3.3.0 (#1009)

Changes since v2.3.2.5

This release brings 24 merged pull requests and three new contributors, with broad internationalization gains (Spanish, Chinese, Hungarian, German) and substantial package-management features in MarkCommand, PurifyPackages, the AUR upgrade diff view, and AppImage/AppStream refactors.

Full Changelog: v2.3.2.5…v2.3.3.0

Contributors

  • @azdanov
  • @caroberrie
  • @ZoeyErinBauer
  • @VinnyQF
  • @Impostor0729
  • @Henry2o1o
  • @juliazero
  • @artemkaVG (new)
  • @tigce2 (new)
  • @llmj-zts (new)

New Contributors 🎉

A warm welcome to our three first-time contributors:

  • @artemkaVG — Wayland crash fix for Recommend UI updates (#971)
  • @tigce2 — Spanish translation (#999)
  • @llmj-zts — Chinese (Simplified) translation (#838)

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.3.2.5…v2.3.3.0

v2.3.3.1

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.3.3.0...v2.3.3.1

v2.3.3.2

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.3.3.1...v2.3.3.2

v2.3.3.3

What’s Changed

  • Flatpak Download bug fix.
  • Appimage progress callback and appimage bug fixes.

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.3.3.2...v2.3.3.3

v2.3.3.4

The following changes have been made:

New Setup screen will give dialogue confirmation for AUR . AppImage cleanup of bad desktop entries on sync from updates. AppImage improved path handling for custom paths and logic flows. Flatpak updating filter patterns. Read and add hook dirs from pacman.conf to libalpm.

Thank you for the first contribution @moutazhaq

v2.4.0.0

Shelly-ALPM v2.4.0.0 Release Notes

This release centers on a major CLI refactor, maturing AppImage/Flatpak support, and a new layer of PKGBUILD security analysis.

On the safety side, Shelly now actively inspects install scriptlets for dynamic code execution and post_install risks — the new PostInstallValidator scans resolved scriptlets for risky network/code-fetching tools (npm, npx, bun, pip, curl, wget, etc.) and flags dynamic command construction that can’t be statically reviewed, including command substitution ($(...), backticks), eval, ${!var} indirection, and decode-into-shell pipelines (e.g. base64 -d | sh). It even performs lightweight de-obfuscation (collapsing tricks like b''u''n, cur\l, and n"p"m) so deliberately hidden tool names are caught and escalated to Critical as a sign of malicious intent. Complementing this, the new HomographValidator defends against homograph/IDN spoofing in attacker-controlled fields (package names, dependencies, URLs, and AUR metadata) by detecting zero-width/bidi/control characters, mixed-script tokens (e.g. Latin mixed with Cyrillic/Greek), fullwidth/compatibility forms, and confusable “skeletons” that map look-alike Unicode onto ASCII (e.g. Cyrillic а → a). Findings surface through the same PkgbuildReviewDialog security-status path so users can review them before installing.

Rounding out the CLI work, this release ships a pacman-style shortcode interface: a compact -<Type><Action><modifiers> syntax that translates familiar single-letter operations into Shelly’s full command surface, making the CLI feel native to anyone coming from pacman/yay.

🔑 Shortcode Examples

The first argument may be a shortcode of the form -<Type><Action>[modifiers], where the Type selects a domain (S = system/repo, A = AUR, F = Flatpak, I = AppImage, C = config, K = keyring, U = utility) and the Action/modifiers map to a verb and flags:

Terminal window
shelly -SIu firefox     # install firefox -u   (sync install, with upgrade)
shelly -SQad            # query -a -d          (query available, fetch details of exact match)
shelly -SRcr pkg        # remove pkg -c -r     (cascade + config removal) : The equivalent of `sudo pacman -Rns pkg`
shelly -AS ripgrep      # aur search zen-browser-bin
shelly -AI yay-bin      # aur install zen-browser-bin
shelly -FR org.app.Id   # flatpak uninstall org.app.Id
shelly -KV ABCD1234     # keyring recv ABCD1234
shelly -UC              # cache-clean

Invalid combinations are rejected with helpful errors (e.g. an unknown action lists valid actions for that type, and an unknown modifier lists the allowed modifiers), and in shortcode mode --ui-mode is used in place of -U.

✨ Highlights

  • New CLI Release with a substantial refactor and modernized command surface (#1059, #1103).
  • AppImage support maturing: updates now shown in the UI, eventing improvements, and fixes to desktop-entry handling (#1053, #1058, #1075, #1087, #1092).
  • Security additions: PKGBUILD review now shows security status, flags dynamic/post_install code execution, and detects potential homograph spoofing (#1099, #1100).
  • doas support added as an alternative privilege-elevation backend (#1078).

🚀 Features

  • Add doas support (#1078)
  • Add manual language selection in settings (#1056) — thanks @nyx1d
  • Add docs command, with printed command options and default cascade enabled (#1084, #1097)
  • Add Zsh completions for the Shelly CLI (#1090)
  • Show AppImage updates in the UI (#1058)
  • Add new version column to AUR update view (#1047)
  • Add maintainer and last-updated columns to AUR search output (#1071)
  • Add security status to PkgbuildReviewDialog (#1099)
  • Add HomographValidator to flag homograph spoofing in PKGBUILDs (#1100)

🛠 Improvements & Refactors

  • CLI refactor (#1059) and new CLI release (#1103)
  • Refactor CredentialManager and add ProcessExecutor service (#1066)
  • Convert PerformDownload to async and refactor call sites (#1079)
  • Skip provider selection when only one distinct option is available (#1070)
  • Replace --elevated flag in UpgradeAll with a UserIdentity-based approach (#1093, #1094)
  • Refactor question handling to remove obsolete ALPM-specific protocols (#1091)
  • Update file-size display to Megabytes and refactor progress-bar logic (#1082)
  • Simplify query (#1076) and remove the explore alias from query (#1085)
  • AppImage eventing and CLI output updates from the manager (#1087, #1092)
  • Flatpak output and UI element updates (#1049, #1080)
  • General small UI adjustments (#1046)
  • Remove unused config options and delete unused/unwanted code (#1081, #1086)

🐞 Bug Fixes

  • Fix AppImages creating an additional desktop entry (#1053)
  • Fix Flatpak upgrade bug and remote selection (#1054)
  • Fix Flatpak scrolling issue (#1061)
  • Various AppImage fixes (#1075)

🌐 Localization

  • Update de-DE.po (#1089) — thanks @Henry2o1o

📦 Maintenance / Versioning

  • Merge Dev into master and master back-merge (#1040, #1041)
  • Update UI elements in Flatpak (#1049)
  • Bump version to 2.3.3.5 across all projects and PKGBUILD files (#1101)
  • Bump version to 2.4.0.0 across all projects and PKGBUILD files (#1102)

Contributors to Shelly-ALPM v2.4.0.0

  • @caroberrie — #1040, #1041, #1046, #1049, #1053, #1054, #1058, #1061, #1075, #1080, #1081, #1086, #1087, #1092
  • @ZoeyErinBauer — #1059, #1070, #1071, #1076, #1078, #1079, #1082, #1090, #1091, #1093, #1094, #1100, #1101, #1102, #1103
  • @azdanov — #1066, #1084, #1085, #1097, #1099
  • @Terrabade — #1047
  • @nyx1d — #1056 (first contribution 🎉)
  • @Henry2o1o — #1089

👋 New Contributors

  • @nyx1d made their first contribution in #1056

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.3.3.4...v2.4.0.0

v2.4.0.1

Bug Fix

  • –no-confirm now works as intended on upgrade all

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.4.0.0...v2.4.0.1

v2.4.0.2

Bug Fixes

  • Oopsie we forgot to update the tray service

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.4.0.1...v2.4.0.2

v2.4.0.3

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.4.0.2...v2.4.0.3

v2.4.0.4

What’s Changed

  • Correct Version selection pop up
  • Fix install + upgrade UI path

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.4.0.3...v2.4.0.4

v2.4.1.0

Shelly-ALPM v2.4.1.0 Release Notes

This release builds directly on the 2.4.0 line, hardening how Shelly talks to the network and to the system, deepening dependency resolution, and continuing the CLI refactor that began in 2.4.0.0. It also bundles a large batch of community translations and a steady stream of UI polish across the AppImage, Flatpak, and grid views.

🌐 Networking — Happy Eyeballs

Shelly’s HTTP stack now uses a Happy Eyeballs-style connection strategy in OptimizedClient. Instead of waiting on a single resolved address, Shelly resolves every address for a host, prefers IPv4 first so a missing IPv6 route can never block a working connection, and races the candidates with a fast 3-second per-address fallback. Critically, it waits for the first connection to succeed rather than the first to complete, so a quick “network is unreachable” failure on one path no longer aborts a request that a slower path would have served. Address-connection fallback in OptimizedClient was further tuned for reliability on mixed IPv4/IPv6 hosts.

🔒 Security — More risky tools, smarter privileges

The PostInstallValidator scriptlet scanner was expanded well beyond the original list. It now recognizes risky network- and code-fetching tooling across a wide range of ecosystems — JavaScript/Node (npm, npx, yarn, pnpm, bun, deno), Python (pip, pipx, uv, poetry, conda/mamba), Ruby, Rust, Go, PHP, Perl, Haskell, Lua, Nim, OCaml, Elixir/Erlang, C/C++ (conan, vcpkg), JVM build tools, .NET, Swift, Julia, R — alongside downloaders (curl, wget, aria2c, lftp, rsync, scp/sftp), container/orchestration tools (docker, podman, kubectl, helm, snap, flatpak), and version managers (nvm, pyenv, asdf, and friends). These findings continue to surface through the existing PKGBUILD security-review path so you can review them before installing.

On the privilege side, command execution in the privileged and unprivileged services was reworked, with Polkit detection added throughout ProcessExecutor, XdgPaths, and AurPackageManager. Package searches and lookups now run as unprivileged operations wherever possible, and a dedicated Polkit policy was added for privileged Shelly CLI execution (with refined icon and prompt messaging).

📦 Package management — Providers & group queries

Shelly can now resolve virtual dependencies via providers, presenting a provider selection when more than one package satisfies a dependency. The query command gained a --group / -g option for searching package groups (it defaults to searching available packages), making it easier to discover and inspect grouped packages from the CLI.

🐚 CLI refactor continues

Console creation across the CLI now flows through a single ShellyConsoleFactory, and RunShellyCommand and related execution paths in ProcessExecutor were refactored for clarity and consistency. PKGBUILD parsing learned to surface local source files, and Shelly now correctly reports when pacman hooks have run during an operation.

🖥️ UI, AppImage & Flatpak

  • New grid layouts for the update and manage views, with reworked grid-selection logic.
  • An alternate install view and an animated intro page.
  • Continued Flatpak UI improvements and better handling of Flatpak progress callbacks.
  • AppImage fixes, including corrected Forgejo-hosted AppImage updates.
  • Fixed the updates count not appearing in the UI.
  • Desktop cache ownership fix and refined lockout-service behavior.
  • Removed the obsolete fingerprint warning and related UI elements.

🌍 Translations

This release ships a large localization update: refreshed Japanese, French (fr_FR), Turkish (tr_TR), German (de_DE) translations, a new Italian translation, and additional automated localization passes.

What’s Changed

Contributors

A huge thank you to everyone who contributed to this release — 10 unique contributors, 2 of them brand new to the project:

  • @ZoeyErinBauer
  • @caroberrie
  • @azdanov
  • @utuhiro78
  • @Landeli7
  • @Renari 🆕
  • @celonfix
  • @juliazero
  • @Mattyan89 🆕
  • @Henry2o1o

New Contributors

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.4.0.4...v2.4.1.0

v2.4.1.1

Shelly-ALPM 2.4.1.1 Release Notes

New Features

  • Added a --standard option to the search command for querying standard packages. Shortcode: -ASs.
  • Rebuilt the tray service and notification logic, rewritten in Vala reducing memory usage of the tray service.
  • Added JSON output support for update-related CLI commands and the AppImage search command, making Shelly easier to script and integrate with other tools.
  • Added support for preferring prebuilt -bin package variants over building from source when available.
  • Added filtering of installed AUR packages by explicit vs. dependency status.
  • Added a new StatWindow for viewing package statistics.
  • Added support for installing packages directly from the Flathub website’s install button.
  • Added the ability to select and highlight package names and descriptions in search results.
  • Added support for default-click actions on notifications.
  • Added starfish a visual depend viewer to install page. Turned on in advanced.

Improvements

  • Refactored the Flatpak namespace structure for better modularity and maintainability.
  • Extracted and refactored PackageSearch into Shelly.Utilities for cleaner code organization.
  • Refactored the PKGBUILD review dialog.
  • Parallelized package and recommendation fetches in the Recommend window and Package Install window for faster load times.
  • General package manager cleanup across the codebase.
  • Added support for handling multiple package artifacts in AUR packages.

Bug Fixes

  • Fixed text getting cut off at the end of the AUR PKGBUILD preview.
  • Fixed a crash in the Starfish integration caused by improper disposal of the graph widget.
  • Fixed AppImage installation logic to correctly use the destination path for Exec.
  • Fixed incorrect numbering in the provider selection menu.
  • Removed unnecessary quotation escaping in shell arguments.
  • Fixed the DigitalOcean action reference in the release workflow.
  • Fixed the Persian translation for the check function message.

Translations

  • Added Farsi (Persian) translation.
  • Updated Japanese translation.
  • Updated Portuguese (Brazil) translation.
  • General localization updates across supported languages.

New Contributors

Welcome and thank you to our newest contributors:

  • @behdanisohrab
  • @psonker-ghub
  • @Stirreg
  • @zc0rp10

Contributors

Thanks to everyone who contributed to this release: @ZoeyErinBauer, @azdanov, @caroberrie, @VinnyQF, @behdanisohrab, @psonker-ghub, @NateKing204, @Stirreg, @juliazero, @zc0rp10, @utuhiro78

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.4.1.0...2.4.1.1

v2.4.1.2

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.4.1.1...v2.4.1.2

v2.4.1.3

What’s Changed

New Contributors

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.4.1.2...v2.4.1.3

v2.4.1.4

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.4.1.3...v2.4.1.4

Shelly V3.0.0

Shelly-ALPM v3.0.0 — A New Era for Shelly

imdawdage

Shelly v3 is here, and this is easily our biggest release yet! Rather than adding another layer to the existing application, we went back to the foundation and rebuilt almost every major part of Shelly. The package-management core, command-line interface, keyring tool, and GTK4 desktop app have all moved from the v2 C#/.NET codebase to Zig.

The rewrite gives Shelly a much cleaner base to build on, removes the managed .NET runtime from the main application, and makes the connection between Shelly and native Arch Linux libraries far simpler. The familiar shelly and shelly-ui commands are still there, but nearly everything powering them is new.

⚡ Why Zig matters

This is where the v3 rewrite really shines. Zig is a great fit for a package manager because Shelly already works closely with native Linux libraries such as libalpm, GTK4, libarchive, and GPG. Shelly v3 can call those libraries directly through native bindings instead of moving data through a managed runtime and a large interop layer.

In practical terms, the move to Zig gives Shelly:

  • Fast, ahead-of-time compiled native executables with no managed .NET runtime or garbage collector to start and manage.
  • More predictable memory and resource lifetimes through explicit allocators and ownership.
  • Better compile-time checking at the C library boundary, including generated libalpm bindings.
  • Less runtime machinery between the UI, CLI, and package-management code. That gives Shelly a strong foundation for quicker startup and lower resource use, with proper benchmark work still to come.
  • One native build and test workflow for the CLI, UI, keyring helper, package manager, and optional Flatpak backend.
  • Release-safe builds for the desktop application and size-optimized builds for command-line tools.

The rewrite also let us remove hundreds of old C# source files and retire the previous .NET projects instead of dragging two implementations forward. Making the projects much simpler while providing similar feature sets. It is a huge cleanup and an even bigger step toward making Shelly easier to improve release after release.

🖥️ A completely rebuilt GTK4 experience

The desktop app has been rebuilt in Zig on GTK4, and it feels like a new generation of Shelly. Pages, dialogs, background operations, and communication with the CLI now sit on a cleaner structure, giving the interface plenty of room to grow.

  • Updated the new first-run welcome screen that helps users choose AUR, Flatpak, and AppImage support. Shelly can even install the optional requirements when a feature is enabled.
  • Reworked package browsing with list and grid layouts, sortable columns, better selection behavior, source labels, installed-state filtering, and more complete package details.
  • Improved AUR details, optional dependency selection, PKGBUILD previews, review prompts, and visible makepkg output.
  • Rebuilt update planning and transaction progress so the UI can show the full operation output without locking up during longer tasks.
  • Refined Flatpak management experience with new navigation and new page for installing from bundles and refs.
  • AppImage installation made safer installs are less likely to leave ghost entries behind.
  • Moved maintenance actions into a dedicated Utilities page, including database synchronization, stale lock repair, permission repair, package cache cleanup, and orphan cleanup.
  • Added autosaving settings, configurable sidebar or top-bar navigation, default-page selection, and useful keyboard shortcuts.
  • Improved tray startup and shutdown behavior, single-instance window raising, icons, spacing, theme colors, and a long list of smaller GTK details that make Shelly feel more polished.

🐚 A fully native CLI

The shelly CLI has also been rebuilt from the ground up in Zig. It keeps the readable long-form commands and pacman-like shortcodes, while one native command catalog now powers help, documentation, and shell completions.

  • Running shelly <search terms> can now search standard repositories and the AUR, then send the selected result straight into the normal install flow.
  • Combined update checks and upgrades coordinate standard packages, AUR packages, AppImages, and Flatpaks. An unavailable optional backend no longer has to prevent the independent sources from continuing.
  • Added a package backup export and import using a readable TOML format.
  • Added and expanded commands for package marking, downgrade selection, Arch news, keyring management, configuration, package cache cleanup, pacnew/pacsave handling, stale database lock repair, and permissionrepair.
  • Added Bash completion generation alongside Fish and Zsh, making the new CLI nicer to use right away in more shells.
  • Improved confirmations and transaction previews, including explicit review before system upgrades and before AUR builds.
  • Kept structured JSON output for supported commands and added a framed output mode used by the GTK UI.

🛡️ Smarter package management and stronger reliability

  • Brought ALPM repository configuration, database synchronization, package queries, dependency resolution, installs, removals, upgrades, and downgrades into the new native package-management library.
  • Added parallel repository database synchronization, mirror retry handling, package database signature verification, and clearer signature failures.
  • Preserved the Happy Eyeballs-style network behavior from late v2 and tightened it with response-body validation, redirect handling, mirror fallback, and more reliable timeout behavior.
  • Improved handling for ignored packages and groups, repository usage flags, custom and single-server repositories, installed package reasons, optional dependencies, split packages, and packages already available in system repositories.
  • Ported PKGBUILD parsing and the post-install and homograph checks used during AUR review.
  • AUR upgrades can now review all changed PKGBUILDs before the transaction begins, rather than interrupting the upgrade one package at a time.
  • Fixed cases where optional dependencies could be removed even though another installed package still needed them.
  • Fixed AUR build hangs, incorrect AUR versions, missing built packages, AppImage ghost entries, stale update plans, and several UI state and selection issues.

📦 Flatpak is now truly optional

One of the most exciting structural improvements in v3 is the new optional Flatpak backend. Flatpak support is now shipped as the separate shelly-flatpak-backend package. The base Shelly CLI package does not link to libflatpak, GLib/GIO, or OSTree for Flatpak operations, and it does not load the backend while running non-Flatpak commands.

The backend communicates through a versioned native ABI with a strict message schema and explicit ownership rules. Shelly checks the ABI before use, rejects an incompatible backend cleanly, and keeps ALPM, AUR, AppImage, help, version, and completion commands available when Flatpak support is not installed.

This split keeps the base install lean for people who do not use Flatpak, while letting anyone add full Flatpak support later without rebuilding or reinstalling Shelly. It is a cleaner design for both kinds of users.

🔄 Upgrade notes

  • Existing configuration files are overlaid on the new native defaults, so normal settings should carry forward. Unknown old fields are ignored.
  • Flatpak users should install both flatpak and shelly-flatpak-backend. Shelly will explain what is missing if a Flatpak command is used without them.
  • The standalone keyring executable is now shelly-key instead of shelly-keys. The supported shelly keyring ... commands should be preferred in scripts.
  • The CLI was substantially rebuilt. Existing automation should be checked against shelly --help, especially if it depended on exact human-readable output. Use --json where a command supports it.
  • Clean-chroot AUR builds are still available from the CLI, but the chroot toggle has temporarily been removed from the graphical AUR page while that workflow is being hardened.

🌍 Translations

The rebuilt UI is arriving with refreshed translation catalogs for Bulgarian, Catalan, Chinese (Simplified), French, German, Greek, Hungarian, Italian, Japanese, Persian, Polish, Portuguese (Brazil and Portugal), Russian, Spanish, and Turkish. Notification translations received updates too, helping more people enjoy v3 in their preferred language from day one.

❤️ Thank you, contributors!

Shelly v3 would not have happened without the extreme dedication, hard work, and occasional wrestling of this enormous rewrite into shape.

Core Contributors:

  • @ZoeyErinBauer
  • @caroberrie
  • @azdanov

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v2.4.1.4...v3.0.0

v3.0.1

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v3.0.0+9...v3.0.1

v3.0.1+1

What’s Changed

New Contributors

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v3.0.1...v3.0.1+1

v3.0.2

What’s Changed

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v3.0.1+1...v3.0.2

v3.0.3

What’s Changed

New Contributors

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v3.0.2...v3.0.3

v3.0.4 Latest

What’s New in Shelly 3.0.4

Features & Improvements

  • New Shelly search experience (#1681)
  • Start of TUI (#1645)
  • Add AUR link to the AUR detail view (#1626)
  • Improve AppImage integration (#1661)
  • Update Polkit warning (#1657)
  • Update tray indexing (#1638)
  • Update UI D-Bus call (#1627)
  • Inject pkgname from array for split packages (#1634)
  • Report missing PKGBUILD source files consistently (#1673)
  • Remove the legacy Vala tray implementation (#1670)
  • Add man page generation and installation for the Shelly CLI (#1677)

Flatpak

  • Add end-of-life detection and rebase support (#1650)
  • Resolve branch from remote metadata (#1648)
  • Show verified status for Flatpak apps (#1651)
  • New remove dialog (#1680)

Bug Fixes

  • Fix status label (#1631)
  • Fix problem installing sabnzbd from the AUR (#1668)
  • Fix welcome screen layout (#1672)
  • Fix tray icon and reaping of spawned processes (#1676)

Shell Completions

  • Fix Zsh autocompletion for install and remove (#1647)
  • Improve Bash and Fish argument completions (#1678)
  • Add command shortcodes for Bash and Fish completions (#1679)

Testing

  • Add test for the install script (#1635)

Translations

  • Updated Spanish (#1629), Japanese (#1643), Russian (#1658), Polish (#1665), German (#1667), and Basque translations (#1623)
  • Refreshed translation files (#1660)

Contributors

@caroberrie @azdanov @ZoeyErinBauer @adem4ik @utuhiro78 @juliazero @bingenm @Henry2o1o

New Contributors

  • @Marks20125 made their first contribution (#1629)
  • @mariuskreutzer made their first contribution (#1647)

Full Changelog: https://github.com/Seafoam-Labs/Shelly-ALPM/compare/v3.0.3...v3.0.4

© 2026 Seafoam LabsShelly Chel