Shelly drops v3.0.1+1 hotfix just two days after major Zig rewrite stabilization
The Arch Linux package manager continues its aggressive patching cycle as early adopters uncover real-world bugs.
Shelly v3.0.1+1 shipped at 03:28 UTC on August 1, 2026. Maintainer ZoeyErinBauer pushed the patch to clean up regressions that surfaced right after the v3.0.1 stabilization release landed on July 30. You can pull the update through your package manager of choice, though it is already rolling out to CachyOS systems via the official repos.
The real story behind the patch
Shelly started life as a C# and .NET wrapper around pacman's backend. That works fine until it does not. The v3 line completely strips away the managed runtime and rebuilds everything in Zig. The move gives developers explicit memory control and direct libalpm bindings without an interop layer slowing things down. The project describes itself as a "more user-friendly alternative" to the stock Arch tool, and the architectural pivot does exactly that.
This patch alone touches 77 files across 58 commits from seven contributors. The commit history paints a clear picture of what happens when you hand a new systems language to a team shipping a full desktop application. AppImage handling got three separate fixes for symlink following, install path defaults, and Forgejo-hosted update checks. The CLI gained a centralized color palette and cleaner detail output. There is also a hardening patch for the Flatpak backend that finally closes a use-after-free bug in remote information retrieval.
I have spent years watching package managers try to abstract away the very system they are supposed to serve. Shelly's choice to talk directly to libalpm keeps the promise intact. You get native speeds and accurate dependency resolution without a wrapper layer guessing at exit codes. At this point, the Arch ecosystem has seen its share of replacement tools. Shelly is the first to commit this aggressively to a systems language that compiles directly to the metal without requiring a garbage collector.
The reality of early adoption
The bug report queue tells the story of a beta that never really called itself beta. Five open pull requests are waiting on review. Today's tickets include a tray icon that refuses to close properly, an AppImage repository URL that vanishes after restart, and a language selection setting that does not actually stick. These are exactly the kind of friction points you expect when stabilizing a major rewrite. The two-day turnaround between releases shows the team is listening.
The PKGBUILD review improvements in this build are worth a closer look. The new checks flag binary sources and privilege elevation attempts before you ever hit that install button. If you pull packages from the AUR regularly, that is a meaningful upgrade to your local security posture. Keep in mind that the v3.0.x line is still in rapid stabilization mode.
You can grab the updated binaries from the GitHub releases page. CachyOS users should run sudo pacman -S shelly to pull in the latest build. The AUR has yay -S shelly and paru -S shelly variants if you prefer a different helper. The project runs on GPL-3.0 and benefits from JetBrains support under their open-source program. Head here to report a new regression if you run into something. The team is already squashing the next round of hotfixes.
