Issue #8

This Week in Guix: 24 July 2026

This issue covers Guix development, package updates, and community discussion from 2026-07-17 through 2026-07-24.

Top Stories

Guix Security Advisory Urged Users To Update

A Guix security advisory urged users to update promptly to address substitute and pull vulnerabilities detailed on the Guix blog, alongside security updates to other packages such as Xorg and ffmpeg (Mastodon). Security-fix package updates landed for go-1.26 1.26.5, go-1.25 1.25.12, and unbound 1.25.2.

Inria Hiring For Guix And HPC Work

Ludovic Courtès shared an Inria job opening for Guix work in high-performance computing and free software, posted on the Inria jobs site.

Development

GCD 008 Generative-AI Policy Discussion Continued

A guix-devel thread on GCD 008 policy on generative AI took up legal concerns and GNU compatibility, with replies from Gabriel Wicki and Richard Stallman.

"misc-world-rebuild" Branch Merge Requested

A merge request for the "misc-world-rebuild" branch (bug#80782) drew 12 messages on guix-patches.

Hartmut Goebel Stepped Back As A Committer

Hartmut Goebel announced stepping back as a Guix committer in a guix-devel thread with replies from Ludovic Courtès and Rodion Goritskov.

Community

Codeberg's LLM-Project Ban Discussed

A Mastodon post discussed Codeberg's decision to ban LLM projects and connected the stance to free-software ethics in Guix.

Thinkpad Install Writeup Shared

dwarmstrong shared a writeup of installing Guix on a Thinkpad, describing the graphical TUI installer, a LUKS-encrypted root partition, and linux-libre supporting the Intel ethernet without binary blobs.

NonGuix Codeberg Migration Drafted

A draft proposal on the NonGuix GitLab outlines migrating the organization and repositories to Codeberg, citing Guix's own migration to Codeberg.

Packages

Package Updates And Additions

Guix added sfxr-qt, tree-sitter-just with emacs-just-mode and emacs-just-ts-mode, python-pysequoia, qpropgen, and hurrycurry; updates included diffoscope 325, disorderfs 0.7.0, gajim 2.5.0, cgal 6.2, mlt 7.40.0, and warzone2100 4.7.0 alongside a series of commits unbundling warzone2100's vendored libraries, while a window-management update moved scenefx to 0.5 and wlroots to 0.20. Version bumps tracked in the tree included curl 8.6.0 to 8.20.0, gnucash 5.14 to 5.16, 0ad 0.27.1 to 0.28.0, flint 3.4.0 to 3.6.0, and elogind 255.17 to 255.22.