Package Details: windsurf 1.5.9-1

Git Clone URL: https://aur.archlinux.org/windsurf.git (read-only, click to copy)
Package Base: windsurf
Description: Tomorrow's Editor, Today. Built to keep you in flow state with instant, invaluable AI developer assistance.
Upstream URL: https://codeium.com/
Licenses: MIT
Conflicts: windsurf
Provides: windsurf
Submitter: watzon
Maintainer: watzon
Last Packager: watzon
Votes: 13
Popularity: 5.35
First Submitted: 2024-11-14 03:46 (UTC)
Last Updated: 2025-03-25 20:58 (UTC)

Pinned Comments

watzon commented on 2024-11-14 06:44 (UTC) (edited on 2025-01-17 23:10 (UTC) by watzon)

File issues and PRs in https://github.com/watzon/aur-packages

Also PLEASE WAIT 24 HOURS BEFORE FLAGGING AS OUT OF DATE!

The package updates are automated and the automation runs every 6 hours. Be patient.

Latest Comments

watzon commented on 2025-03-29 06:28 (UTC)

@tyrheimdal I don't actually use Windsurf anymore, so I am maintaining this by taking PRs when important updates need to be made. The code is all open source on github @ https://github.com/watzon/aur-packages, so you're free to go make a new PR to fix those issues. Thanks for keeping an eye out.

tyrheimdal commented on 2025-03-29 02:37 (UTC)

Wow, these recent changes you've made to the PKGBUILD file is extremely sketchy.

  1. Using variables to set external GitHub repository makes the source less apparent
  2. You control the windsurf-bin.sh file as it is not included in the AUR repository
  3. You also control a binary file (windsurf.png) since that too is not in the AUR repository - which is perfect to hide a malicious payload
  4. A small change to the order of the sources would let you update one of them to freely SKIP checksum, while making it look like you updated the package checksum
  5. It makes no sense to not have a checksum on the main .deb file (the whole point of having checksums!)
  6. You suddenly set chrome-sandbox SUID, which is a convenient for privilege escalation without even putting in any references as to why this was done

There is no good reason to not include these two files in the main repository, other than setting up to backdoor the package. And the fact you reference the external resources as fallbacks makes it look even more suspicious.

timbotronic commented on 2025-03-07 09:04 (UTC)

windsurf-bin.sh fails sha check

watzon commented on 2025-03-01 06:25 (UTC)

@sewer56 thanks for that. The update seems to have worked. Let me know if there are any issues.

sewer56 commented on 2025-03-01 01:12 (UTC) (edited on 2025-03-01 01:33 (UTC) by sewer56)

This package will break with 1.3.10 which was released a few hours ago. They changed inner archive format from xz to zst.

data.tar.xz -> data.tar.zst

With the change from above, should work.

yildirimsertbas commented on 2025-02-06 09:43 (UTC)

Hi, the upstream version has been updated to 1.2.6, while the AUR package is still at 1.2.5-1. Could you please update the package? Thank you!

sewer56 commented on 2025-01-30 22:08 (UTC)

Would it be possible to add the flags feature seen in many other electron based packages? I'd love to natively run on wayland with --enable-features=UseOzonePlatform,WaylandWindowDecorations --ozone-platform=wayland.

I could try PR-ing it, it's mostly down to whether you'd accept it.

watzon commented on 2024-11-14 06:44 (UTC) (edited on 2025-01-17 23:10 (UTC) by watzon)

File issues and PRs in https://github.com/watzon/aur-packages

Also PLEASE WAIT 24 HOURS BEFORE FLAGGING AS OUT OF DATE!

The package updates are automated and the automation runs every 6 hours. Be patient.