In yay-v12, I did mention it might have been the biggest update in the last five years. It was the biggest update to yay’s core, architecture and code. But this v13 release might be the biggest change in your experience with yay. - Jo Guerreiro (yay developer)
Reading through the change log there are definitely some nice additional features:
This release is very motivated by attempting to make it easier to review packages, and to automate some of the checks that can be done without human intervention.
If there is something I’ve seen this past few days is that we have a community that wants to script. I’ve lost track of the bash scripts I’ve reviewed following the AURpocalypse. Turns out for these types of automations we already have a great language and framework of thinking around it. Lua and neovim. What yay v13 brings are small extensible hooks in a language that is very pleasant (and I miss awesomewm, which was configurable in lua).
It is not installed twice. The yay package is found in two repos: AUR and endeavouros.
If you do yay -Ss yay you will see:
aur/yay 13.0.0-1 (+2601 45.47) (Installed: 12.6.0-1) Yet another yogurt. Pacman wrapper and AUR helper written in go. endeavouros/yay 12.6.0-1 (4.1 MiB 10.3 MiB) (Installed) Yet another yogurt. Pacman wrapper and AUR helper written in go.
The endeavouros version is ranked higher but it is a little behind. If you do not want to wait you can force the update from aur: yay -S aur/yay
yay spot malicious packages. Nice
Search results, the yogurt prompt, and the upgrade menu all carry a new timestamp now, showing how long it’s been since a package’s PKGBUILDlast changed.