Seafoam Labs releases Shelly 3.0.2 with security prompts and Zig‑based system tray

Seafoam Labs announced the Shelly 3.0.2 update for its GTK4‑based Arch Linux package manager. The maintenance release adds a forced user‑confirmation step for AUR packages that trigger PKGBUILD security warnings, even when the "no‑confirm" option is set. It also introduces a native system‑tray daemon written in Zig, reducing memory overhead and separating notification handling from the UI. Additional fixes include a parsing bug for package names containing periods and proper error dialogs when the pacman lock file is active.

Earlier, on July 29, Seafoam Labs released Shelly 3.0.0, followed by a quick 3.0.1 patch the next day. Those versions rewrote the core, CLI, and GTK4 desktop components from C#/.NET to Zig, removing .NET runtime dependencies and enabling direct native bindings to libalpm, GTK4, libarchive and GPG. New features added cross‑repository search, integrated updates for standard repos, AUR, AppImage and Flatpak, TOML import/export of package lists, graphical makepkg output, parallel repository sync, enhanced signature verification, and shell completions for Bash, Fish and Zsh.