Add disable-sandbox-* options to parseargs

Signed-off-by: Allan McRae <allan@archlinux.org>
Update versions in meson.build for release
2025-11-04 01:14:41 +01:00 · 2025-11-02 11:36:19 +10:00 · 2025-11-01 21:05:29 +10:00 · 2025-11-01 21:05:29 +10:00 · 2025-11-01 21:05:29 +10:00 · 2025-11-01 21:03:50 +10:00
366 changed files with 47882 additions and 26270 deletions
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -129,4 +129,4 @@ pages:
      - build/doc
  publish: build/doc
  rules:
-    - if: $CI_COMMIT_BRANCH == "release/6.1.x"
+    - if: $CI_COMMIT_BRANCH == "release/7.1.x"
--- a/.mailmap
+++ b/.mailmap
@@ -12,7 +12,7 @@ Daenyth Blank <Daenyth+arch@gmail.com> <Daenyth+git@gmail.com>
 Dave Reisner <dreisner@archlinux.org> <d@falconindy.com>
 甘露(Gan Lu) <rhythm.gan@gmail.com>
 Giovanni Scafora <giovanni@archlinux.org> <linuxmania@gmail.com>
-Jan Steffens <jan.steffens@gmail.com>
+Jan Alexander Steffens (heftig) <heftig@archlinux.org> <jan.steffens@gmail.com>
 Jaroslaw Swierczynski <swiergot@gmail.com> <swiergot@juvepoland.com>
 Jonathan Conder <j@skurvy.no-ip.org> <jonno.conder@gmail.com>
 Juan Pablo González Tognarelli <lord_jotape@yahoo.com.ar>
--- a/44
+++ b/44
@@ -1,6 +1,40 @@
 VERSION         DESCRIPTION
 -----------------------------------------------------------------------------
-7.0.0         - Add DownloadUser configuation option used to drop-privileges
+7.1.0         - Set default SigLevel for databases and packages to Required
+              - Various improvements to the downloader sandbox
+                - Restrict syscalls
+                - Use NO_NEW_PRIVS flag
+                - Provide fine-grained control of sandboxing with options in
+                  pacman.conf and on the command line.
+                - Fix issues introduced by the sandboxing when running as
+                  non-root or on NFS filesystem
+                - Fix Landlock for older ABIs
+                - Improved error detection and reporting
+              - Improvements for (re)importing keys, particularly expired
+                key handling
+              - Reduce "dependency cycle" message to debug output
+              - Print error for -Sg with unknown group
+              - Resolve directory paths passes to pacman
+              - makepkg:
+                - Add NPROC configuration option to control parallel
+                  operations (in makepkg, not building)
+                - Parallelize stripping of files
+                - Fixes and improvements for generation of debuginfo files
+                - Add "xdata" field to PKGBUILDs for tracking generic data
+                - Implement "options_$arch" fields 
+                - Add support for architecture specific split packages
+                - Move PYTHON_HASHSEED handling to libmakepkg-dropins project
+                - Prevent repeated values in the 'arch' array
+                - Only use /etc/makepkg.d/gitconfig for git configuration
+                  (ignore system configuration)
+                - Handle when makepkg.conf.d directory is empty
+                - Ensure OPTIONS is not altered from within a PKGBUILD
+                - Improve reproducibility for source package tarballs
+                - Ensure "tidy" scripts run in the correct order 
+              - repo-add:
+                - Add --wait-for-lock option
+                - Add --remove option that deletes old package files
+7.0.0         - Add DownloadUser configuration option used to drop-privileges
                when downloading files.
              - Download files to a temporary directory owned by DownloadUser
              - On Linux systems, ensure the download process does not write
@@ -649,7 +683,7 @@ VERSION         DESCRIPTION
                file overwrites from malicious databases
              - makepkg:
                - restrict package name from starting with a dot
-                - fix BZR source revision support (FS#35281)
+                - fix Bazaar source revision support (FS#35281)
                - Use LOGDEST for log pipe
                - fix distcc disabling (FS#35741)
                - correct stat usage on BSD/Darwin (FS#35469)
@@ -665,7 +699,7 @@ VERSION         DESCRIPTION
                FS#34716, FS#35097)
              - makepkg:
                - improve SVN VCS PKGBUILD handling (FS#34675, FS#34636)
-                - allow "lp:" URLs for BZR sources (FS#34650)
+                - allow "lp:" URLs for Bazaar sources (FS#34650)
                - prevent pkgver() capturing stderr (FS#34974)
                - fix attempt to remove package twice on failure (FS#34672)
              - contrib:
@@ -1338,7 +1372,7 @@ VERSION         DESCRIPTION
                - add source package creation option
              - rankmirrors- allow reading from stdin (FS#8043)
              - and many other updates: 198 bugs/FRs closed since 3.0.0 release
-              - switch to GIT for source code management
+              - switch to Git for source code management
 3.0.6         - config files updated to reflect current -> core change
              - fix symlink overwriting issue (FS#7484)
              - fix config parsing with tr_TR locale (FS#7235)
@@ -1490,7 +1524,7 @@ VERSION         DESCRIPTION
                - Cleanup db_loadpkgs(), add list_add_sorted()
              - Fixed a memory leak in db_find_conflicts()
 2.8.3         - Fixed a little makepkg bug with bash 3.0
-              - Fixed resolvedeps to always prefer literals over provisios
+              - Fixed resolvedeps to always prefer literals over providers
              - Added --config option to specify an alternate config file
              - Added "Include" directive to include repositories from
                config files (inspired by Michael Baehr's patch)
--- a/242
+++ b/242
@@ -6,7 +6,7 @@ Package Management) library. This document, while not exhaustive, also
 indicates some limitations (on purpose, or sometimes due to its poor design) of
 the library at the present time.

-There is one special file,"alpm.h", which is the public interface that
+There is one special file, "alpm.h", which is the public interface that
 should be distributed and installed on systems with the library. Only
 structures, data and functions declared within this file are made available to
 the frontend. Lots of structures are of an opaque type and their fields are
@@ -239,7 +239,7 @@ API CHANGES BETWEEN 3.1 AND 3.2
 - alpm_checkdbconflicts()
 - alpm_sync_newversion()
 - alpm_deptest()
- error codes :
+- error codes:
    PM_ERR_DLT_INVALID, PM_ERR_LIBARCHIVE, PM_ERR_LIBDOWNLOAD and
    PM_ERR_EXTERNAL_DOWNLOAD
 - flags:
@@ -352,7 +352,7 @@ API CHANGES BETWEEN 3.4 AND 3.5
     - alpm_db_get_pkg() for normal targets
     - alpm_find_dbs_satisfier() for versioned provisions
     - alpm_find_grp_pkgs() for groups
- alpm_deptest() is replaced by the more flexibile alpm_find_satisfier()
+- alpm_deptest() is replaced by the more flexible alpm_find_satisfier()
 - size_t used for alpm_list_t sizes
  - return type for alpm_list_count()
  - parameter type in alpm_list_msort() and alpm_list_nth()
@@ -362,11 +362,11 @@ API CHANGES BETWEEN 3.4 AND 3.5
 - alpm_find_grp_pkgs()
 - alpm_trans_get_flags()
 - error codes:
-   PM_ERR_DISK_SPACE, PM_ERR_WRITE
- flags
-   PM_TRANS_FLAG_NODEPVERSION, PM_TRANS_EVT_DISKSPACE_START,
-   PM_TRANS_EVT_DISKSPACE_DONE, PM_TRANS_CONV_SELECT_PROVIDER,
-   PM_TRANS_PROGRESS_DISKSPACE_START, PM_TRANS_PROGRESS_INTEGRITY_START
+    PM_ERR_DISK_SPACE, PM_ERR_WRITE
+- flags:
+    PM_TRANS_FLAG_NODEPVERSION, PM_TRANS_EVT_DISKSPACE_START,
+    PM_TRANS_EVT_DISKSPACE_DONE, PM_TRANS_CONV_SELECT_PROVIDER,
+    PM_TRANS_PROGRESS_DISKSPACE_START, PM_TRANS_PROGRESS_INTEGRITY_START


 API CHANGES BETWEEN 3.5 AND 4.0
@@ -419,7 +419,7 @@ API CHANGES BETWEEN 3.5 AND 4.0
  - alpm_release
  - alpm_remove_pkg
  - alpm_sync_sysupgrade
- several structs are no longer opaque
+- several structs are no longer opaque:
  - alpm_conflict_t
  - alpm_delta_t
  - alpm_depend_t
@@ -431,19 +431,33 @@ API CHANGES BETWEEN 3.5 AND 4.0

 [ADDED]
 - option functions:
-    alpm_{get,set}_eventcb(), alpm_option_{get,set}_convcb(),
-	alpm_option_{get,set}_progresscb()
+  - alpm_{get,set}_eventcb()
+  - alpm_option_{get,set}_convcb()
+  - alpm_option_{get,set}_progresscb()
 - package signing functions:
-    alpm_option_get_default_siglevel(), alpm_option_set_default_siglevel(),
-    alpm_option_get_gpgdir(), alpm_option_set_gpgdir(), alpm_db_get_siglevel(),
-    alpm_siglist_cleanup(), alpm_db_check_pgp_signature(), alpm_pkg_check_pgp_signature(),
-    alpm_pkg_get_origin(), alpm_pkg_get_sha256sum(), alpm_pkg_get_base64_sig()
+  - alpm_option_get_default_siglevel()
+  - alpm_option_set_default_siglevel()
+  - alpm_option_get_gpgdir()
+  - alpm_option_set_gpgdir()
+  - alpm_db_get_siglevel()
+  - alpm_siglist_cleanup()
+  - alpm_db_check_pgp_signature()
+  - alpm_pkg_check_pgp_signature()
+  - alpm_pkg_get_origin()
+  - alpm_pkg_get_sha256sum()
+  - alpm_pkg_get_base64_sig()
 - list functions:
-    alpm_list_to_array(), alpm_list_previous()
+  - alpm_list_to_array()
+  - alpm_list_previous()
 - structs:
-    alpm_backup_t, alpm_file_t, alpm_filelist_t
+  - alpm_backup_t
+  - alpm_file_t
+  - alpm_filelist_t
 - enums:
-    alpm_siglevel_t, alpm_sigstatus_t, alpm_sigvalidity_t, alpm_pkgfrom_t
+  - alpm_siglevel_t
+  - alpm_sigstatus_t
+  - alpm_sigvalidity_t
+  - alpm_pkgfrom_t
 - error codes:
    ALPM_ERR_DB_INVALID, ALPM_ERR_DB_INVALID_SIG, ALPM_ERR_GPGME,
    ALPM_ERR_PKG_INVALID_CHECKSUM, ALPM_ERR_PKG_INVALID_SIG, ALPM_ERR_SIG_INVALID,
@@ -470,10 +484,10 @@ API CHANGES BETWEEN 4.0 AND 4.1
  - alpm_db_unregister_all -> alpm_unregister_all_syncdbs
  - alpm_db_readgroup -> alpm_db_get_group
  - alpm_db_set_pkgreason -> alpm_pkg_set_reason (handle parameter removed)
- alpm_time_t typedef used for all times
+- alpm_time_t typedef used for all times:
  - members of alpm_pgpkey_t
  - return types of alpm_pkg_get_builddate and alpm_pkg_get_installdate
- delta options now use required ratio rather than on/off
+- delta options now use required ratio rather than on/off:
  - alpm_option_get_usedelta -> alpm_option_get_deltaratio
  - alpm_option_set_usedelta -> alpm_option_set_deltaratio

@@ -490,21 +504,21 @@ API CHANGES BETWEEN 4.0 AND 4.1
  - alpm_db_usage_t
  - alpm_db_set_usage()
  - alpm_db_get_usage()
- wrapper functions for reading mtree files
+- wrapper functions for reading mtree files:
  - alpm_pkg_mtree_open()
  - alpm_pkg_mtree_next()
  - alpm_pkg_mtree_close()
- utility functions
+- utility functions:
  - alpm_pkg_find()
  - alpm_pkg_compute_optionalfor()
  - alpm_filelist_contains()
- types
+- types:
  - alpm_time_t
  - alpm_errno_t
- flags
-   ALPM_EVENT_OPTDEP_REQUIRED, ALPM_EVENT_DATABASE_MISSING,
-   ALPM_EVENT_KEYRING_START, ALPM_EVENT_KEYRING_DONE, ALPM_EVENT_KEY_DOWNLOAD_START,
-   ALPM_EVENT_KEY_DOWNLOAD_DONE, ALPM_PROGRESS_KEYRING_START
+- flags:
+    ALPM_EVENT_OPTDEP_REQUIRED, ALPM_EVENT_DATABASE_MISSING,
+    ALPM_EVENT_KEYRING_START, ALPM_EVENT_KEYRING_DONE, ALPM_EVENT_KEY_DOWNLOAD_START,
+    ALPM_EVENT_KEY_DOWNLOAD_DONE, ALPM_PROGRESS_KEYRING_START


 API CHANGES BETWEEN 4.1 AND 4.2
@@ -513,49 +527,49 @@ API CHANGES BETWEEN 4.1 AND 4.2
 [CHANGED]
 - alpm_filelist_t - removed member resolved_path
 - alpm_filelist_contains - now returns alpm_file_t
- event callback
-   - alpm_event_t renamed to alpm_event_type_t
-   - alpm_event_t union added
-   - alpm_event_cb now takes only an alpm_event_t parameter
-   - alpm_event_any_t, alpm_package_operation_t, alpm_event_package_operation_t,
-     alpm_event_optdep_removal_t, alpm_event_delta_patch_t, alpm_event_scriptlet_info_t,
-     alpm_event_database_missing_t, alpm_event_pkgdownload_t, alpm_event_pacnew_created_t,
-     alpm_event_pacsave_created_t, alpm_event_pacorig_created_t added
-   - ALPM_EVENT_*_START -> ALPM_EVENT_PACKAGE_OPERATION_START
-   - ALPM_EVENT_*_DONE -> ALPM_EVENT_PACKAGE_OPERATION_DONE
- question callback
-   - alpm_question_t renamed to alpm_question_type_t
-   - alpm_question_t union added
-   - alpm_cb_question now takes only an alpm_question_t parameter
-   - alpm_question_any_t, alpm_question_install_ignorepkg_t, alpm_question_replace_t
-     alpm_question_conflict_t, alpm_question_corrupted_t, alpm_question_remove_pkgs_t,
-     alpm_question_select_provider_t, alpm_question_import_key_t added
+- event callback:
+  - alpm_event_t renamed to alpm_event_type_t
+  - alpm_event_t union added
+  - alpm_event_cb now takes only an alpm_event_t parameter
+  - alpm_event_any_t, alpm_package_operation_t, alpm_event_package_operation_t,
+    alpm_event_optdep_removal_t, alpm_event_delta_patch_t, alpm_event_scriptlet_info_t,
+    alpm_event_database_missing_t, alpm_event_pkgdownload_t, alpm_event_pacnew_created_t,
+    alpm_event_pacsave_created_t, alpm_event_pacorig_created_t added
+  - ALPM_EVENT_*_START -> ALPM_EVENT_PACKAGE_OPERATION_START
+  - ALPM_EVENT_*_DONE -> ALPM_EVENT_PACKAGE_OPERATION_DONE
+- question callback:
+  - alpm_question_t renamed to alpm_question_type_t
+  - alpm_question_t union added
+  - alpm_cb_question now takes only an alpm_question_t parameter
+  - alpm_question_any_t, alpm_question_install_ignorepkg_t, alpm_question_replace_t
+    alpm_question_conflict_t, alpm_question_corrupted_t, alpm_question_remove_pkgs_t,
+    alpm_question_select_provider_t, alpm_question_import_key_t added

 [ADDED]
- memory management
+- memory management:
  - alpm_fileconflict_free()
  - alpm_depmissing_free()
  - alpm_conflict_free()
  - alpm_dep_free()
- database usage
+- database usage:
  - alpm_db_usage_t
  - alpm_db_set_usage()
  - alpm_db_get_usage()
- assume installed
+- assume installed:
  - alpm_option_get_assumeinstalled()
  - alpm_option_add_assumeinstalled()
  - alpm_option_set_assumeinstalled()
  - alpm_option_remove_assumeinstalled()
- using noupgrade/noextract
+- using noupgrade/noextract:
  - alpm_option_match_noupgrade()
  - alpm_option_match_noextract()
- utility functions
+- utility functions:
  - alpm_dep_from_string()
  - alpm_pkg_should_ignore()
  - alpm_decode_signature()
  - alpm_extract_keyid()
- flags
-  - ALPM_EVENT_RETRIEVE_DONE, ALPM_EVENT_RETRIEVE_FAILED, ALPM_EVENT_PKGDOWNLOAD_START,
+- flags:
+    ALPM_EVENT_RETRIEVE_DONE, ALPM_EVENT_RETRIEVE_FAILED, ALPM_EVENT_PKGDOWNLOAD_START,
    ALPM_EVENT_PKGDOWNLOAD_DONE, ALPM_EVENT_PKGDOWNLOAD_FAILED, ALPM_EVENT_OPTDEP_REMOVAL,
    ALPM_EVENT_PACNEW_CREATED, ALPM_EVENT_PACSVAE_CREATED, ALPM_EVENT_PACORIG_CREATED

@@ -565,13 +579,13 @@ API CHANGES BETWEEN 4.2 AND 5.0

 [REMOVED]
 - alpm_siglevel_t - removed members ALPM_SIG_PACKAGE_SET, ALPM_SIG_PACKAGE_TRUST_SET
- removed .pacorig generation
+- removed .pacorig generation:
  - ALPM_EVENT_PACORIG_CREATED
  - alpm_event_pacorig_created_t
  - alpm_event_t.pacorig_created

 [ADDED]
- hook support
+- hook support:
  - alpm_option_get_hookdirs()
  - alpm_option_set_hookdirs()
  - alpm_option_add_hookdir()
@@ -581,14 +595,14 @@ API CHANGES BETWEEN 4.2 AND 5.0
  - ALPM_EVENT_HOOK_START, ALPM_EVENT_HOOK_DONE
  - ALPM_EVENT_HOOK_RUN_START, ALPM_EVENT_HOOK_RUN_DONE
  - ALPM_ERR_TRANS_HOOK_FAILED
- different database extension support
+- different database extension support:
  - alpm_option_get_dbext()
  - alpm_option_set_dbext()
- pkgbase accessor
+- pkgbase accessor:
  - alpm_pkg_get_base()
- transaction events
+- transaction events:
  - ALPM_EVENT_TRANSACTION_START, ALPM_EVENT_TRANSACTION_DONE
- database unlocking
+- database unlocking:
  - alpm_unlock()


@@ -598,7 +612,7 @@ API CHANGES BETWEEN 5.0 AND 5.1
 [CHANGED]
 - alpm_errno_t - added member ALPM_ERR_OK
 - alpm_siglevel_t - value of ALPM_SIG_USE_DEFAULT changed
- functions using bitfields return/pass an int instead of an enum
+- functions using bitfields return/pass an int instead of an enum:
  - alpm_option_get_default_siglevel()
  - alpm_option_set_default_siglevel()
  - alpm_option_get_remote_file_siglevel()
@@ -615,19 +629,19 @@ API CHANGES BETWEEN 5.0 AND 5.1
  - alpm_option_set_local_file_siglevel()

 [ADDED]
- overwrite support
+- overwrite support:
  - alpm_option_get_overwrite_files()
  - alpm_option_set_overwrite_files()
  - alpm_option_add_overwrite_file()
  - alpm_option_remove_overwrite_file()
- download timeout control
+- download timeout control:
  - alpm_option_set_disable_dl_timeout()
- access make/checkdepends info
+- access make/checkdepends info:
  - alpm_pkg_get_checkdepends()
  - alpm_pkg_get_makedepends()
- check pacman capabilities
+- check pacman capabilities:
  - alpm_capabilities()
- duplicate and add to list
+- duplicate and add to list:
  - alpm_list_append_strdup()


@@ -635,7 +649,7 @@ API CHANGES BETWEEN 5.1 AND 5.2
 ===============================

 [REMOVED]
- package delta support
+- package delta support:
  - alpm_delta_t
  - alpm_event_delta_patch_t
  - alpm_event_t union - removed alpm_event_delta_patch_t
@@ -662,10 +676,10 @@ API CHANGES BETWEEN 5.2 AND 6.0
 [REMOVED]
 - ALPM_EVENT_PKGDOWNLOAD_START, ALPM_EVENT_PKGDOWNLOAD_DONE, ALPM_EVENT_PKGDOWNLOAD_FAILED
 - ALPM_ERR_PKG_REPO_NOT_FOUND
- old TotalDownload implementation
- - alpm_cb_totaldl
- - alpm_option_get_totaldlcb()
- - alpm_option_set_totaldlcb()
+- old TotalDownload implementation:
+  - alpm_cb_totaldl
+  - alpm_option_get_totaldlcb()
+  - alpm_option_set_totaldlcb()

 [CHANGED]
 - alpm_db_update() now accepts a list of databases rather than a single database.
@@ -673,29 +687,29 @@ API CHANGES BETWEEN 5.2 AND 6.0
 - alpm_db_search() now has an additional parameter and returns success status
 - ALPM_EVENT_RETRIEVE_* -> ALPM_EVENT_DB_RETRIEVE_* and ALPM_EVENT_PKG_RETRIEVE_*
 - alpm_cb_download pass event and data
- multi architecture support
- - alpm_option_get_arch() -> alpm_option_get_architectures()
- - alpm_option_set_arch() -> alpm_option_set_architectures()
+- multi architecture support:
+  - alpm_option_get_arch() -> alpm_option_get_architectures()
+  - alpm_option_set_arch() -> alpm_option_set_architectures()
 - alpm_db_get_servers() copies parameter data

 [ADDED]
- parallel download support
- - alpm_option_set_parallel_downloads()
- - alpm_option_get_parallel_downloads()
- file download events
- - alpm_download_event_type_t
- - alpm_download_event_init_t
- - alpm_download_event_progress_t
- - alpm_download_event_completed_t
- download misc
- - ALPM_DOWNLOAD_RETRY
- - alpm_download_event_retry_t
- - alpm_event_pkg_retrieve_t
- multiarchitecture support
- - alpm_option_add_architecture()
- - alpm_option_remove_architecture()
- misc
- - alpm_pkg_get_sig()
+- parallel download support:
+  - alpm_option_set_parallel_downloads()
+  - alpm_option_get_parallel_downloads()
+- file download events:
+  - alpm_download_event_type_t
+  - alpm_download_event_init_t
+  - alpm_download_event_progress_t
+  - alpm_download_event_completed_t
+- download misc:
+  - ALPM_DOWNLOAD_RETRY
+  - alpm_download_event_retry_t
+  - alpm_event_pkg_retrieve_t
+- multiarchitecture support:
+  - alpm_option_add_architecture()
+  - alpm_option_remove_architecture()
+- misc:
+  - alpm_pkg_get_sig()
 - callbacks add front-end provided context


@@ -713,23 +727,45 @@ API CHANGES BETWEEN 6.0 AND 6.1
 - alpm_transflag_t - added ALPM_TRANS_FLAG_NOHOOKS

 [ADDED]
- extensible package data type
- - alpm_pkg_xdata_t
- - alpm_pkg_get_xdata()
- accessor functions
- - alpm_db_get_handle()
- - alpm_pkg_get_handle()
- cache server support
- - alpm_db_get_cache_servers()
- - alpm_db_set_cache_servers()
- - alpm_db_add_cache_server()
+- extensible package data type:
+  - alpm_pkg_xdata_t
+  - alpm_pkg_get_xdata()
+- accessor functions:
+  - alpm_db_get_handle()
+  - alpm_pkg_get_handle()
+- cache server support:
+  - alpm_db_get_cache_servers()
+  - alpm_db_set_cache_servers()
+  - alpm_db_add_cache_server()
+

 API CHANGES BETWEEN 6.1 AND 7.0
 ===============================

 [ADDED]
- sandbox functions
- - alpm_option_get_sandboxuser()
- - alpm_option_set_sandboxuser()
- - alpm_option_set_disable_sandbox()
- - alpm_sandbox_setup_child()
+- sandbox functions:
+  - alpm_option_get_sandboxuser()
+  - alpm_option_set_sandboxuser()
+  - alpm_option_set_disable_sandbox()
+  - alpm_sandbox_setup_child()
+
+
+API CHANGES BETWEEN 7.0 AND 7.1
+===============================
+
+[ADDED]
+Fine-grained sandbox controls:
+  - alpm_option_get_disable_sandbox_filesystem()
+  - alpm_option_set_disable_sandbox_filesystem()
+  - alpm_option_get_disable_sandbox_syscalls()
+  - alpm_option_set_disable_sandbox_syscalls()
+- Add missing accessors:
+  - alpm_option_get_disable_dl_timeout()
+  - alpm_option_get_disable_sandbox()
+- ALPM_ERR_RETRUEVE_PREPARE
+
+[CHANGED]
+- error codes:
+    PM_ERR_TRANS_COMMITING renamed to PM_ERR_TRANS_COMMITTING
+- alpm_pubkey_t - removed pubkey_algo member
+- alpm_sandbox_setup_child() - added parameter to restrict syscalls
--- a/4
+++ b/4
@@ -17,13 +17,13 @@ The following checklist should be used for making a pacman release.
 - Update .gitlab-ci.yml to point the website pages run at release branch

 Transifex updates are handled using the transifex client. The basic process is:
- Pull updates from transifex ("tx pull -f --minimum-perc 75")
+- Pull updates from transifex ("tx-cli pull -a -f --minimum-perc 75")
 - Update po files ("./build-aux/update-po")
 - Fix all translation errors found (e.g. using "mint-check-translations")
 - Add any new locales to the relevant LINGUAS file
 - Optional: Make any manual changes needed (e.g. fixing spacing in a string)
  and update po files again
- Push updated po files to transifex ("tx push -s -t --skip")
+- Push updated po files to transifex ("tx-cli push -s -t --skip")

 Point releases:
 - all bugs fixes slated for the release branch must first land on master
--- a/2
+++ b/2
@@ -3,7 +3,7 @@ currently. Our translations are currently maintained in Transifex; please read
 doc/translation-help.txt for more details.

 Below is a list of past translators before we switched to Transifex; more can
-be found by looking in the GIT history.
+be found by looking in the Git history.

 If your language is not already in the various po/ subdirectories and you wish
 it was, set up a team in Transifex for your language and we will be happy to
--- a/doc/BUILDINFO.5.asciidoc
+++ b/doc/BUILDINFO.5.asciidoc
@@ -11,8 +11,8 @@ Synopsis
 This manual page describes the format of a BUILDINFO file found in the root of
 a package created by makepkg. The file contains a description of the package's
 build environment. The information is formatted in key-value pairs separated by
-a '=', one value per line. Arrays are represented multiple keys with the same
-value.
+a '=', one value per line. Arrays are represented as multiple key-value pairs
+having the same key.


 Description
--- a/doc/PKGBUILD.5.asciidoc
+++ b/doc/PKGBUILD.5.asciidoc
@@ -313,6 +313,18 @@ underscore and the architecture name e.g., 'replaces_x86_64=()'.
 		Enable building packages using link time optimization. Adds '-flto'
 		to both CFLAGS and CXXFLAGS.

+Additional architecture-specific options can be added by appending an
+underscore and the architecture name e.g., 'options_x86_64=()'.
+
+*xdata (array)*::
+	This array allows you to add additional metadata to the package.
+	This data is neither used by pacman nor by makepkg;
+	It has purely informational purpose, or may be interpreted by third-party tools.
+
+All entries in that array must have the form 'key=value', where
+'key' is an arbitrary non-empty string and 'value' must not contain an equal sign.
+Furthermore, the key ``pkgtype'' is reserved for the makepkg program.
+

 Packaging Functions
 -------------------
--- a/doc/asciidoc-override.css
+++ b/doc/asciidoc-override.css
@@ -1,7 +0,0 @@
-table th, table td {
-	padding: 0.2em 1em;
-}
-
-table td p.table {
-	margin: 0;
-}
--- a/doc/asciidoc.conf
+++ b/doc/asciidoc.conf
@@ -1,5 +1,5 @@
 ## linkman: macro
-# Inspired by/borrowed from the GIT source tree at Documentation/asciidoc.conf
+# Inspired by/borrowed from the Git source tree at Documentation/asciidoc.conf
 #
 # Usage: linkman:command[manpage-section]
 #
--- a/doc/index.asciidoc
+++ b/doc/index.asciidoc
@@ -1,10 +1,12 @@
 Pacman Home Page
 ================
+:stylesheet: stylesheets/asciidoc.css
+:toc:

 A simple library-based package manager.

-Introduction
------------
+== Introduction
+
 pacman is a utility which manages software packages in Linux. It uses simple
 compressed files as a package format, and maintains a text-based package
 database (more of a hierarchy), just in case some hand tweaking is necessary.
@@ -14,8 +16,8 @@ packages in the system, and it will allow you to query the package database for
 installed packages, files and owners. It also attempts to handle dependencies
 automatically and can download packages from a remote server.

-History
-~~~~~~~
+== History
+
 Version 2.0 of pacman introduced the ability to sync packages (the '\--sync'
 option) with a master server through the use of package databases. Prior to
 this, packages would have to be installed manually using the '\--add' and
@@ -36,11 +38,14 @@ list operations.

 Version 6.0 added support for parallel downloads.

-Documentation
-------------
+Version 7.0 added support for performing downloads in a separate sandboxed
+process.
+
+== Documentation
+
+
+=== Man Pages

-Man Pages
-~~~~~~~~~
 There are several man pages available for the programs, utilities, and
 configuration files dealing with pacman.

@@ -58,8 +63,8 @@ configuration files dealing with pacman.
 * linkman:repo-add[8]
 * linkman:vercmp[8]

-Changelog
-~~~~~~~~~
+=== Changelog
+
 For a good idea of what is going on in pacman development, take a look at the
 link:https://gitlab.archlinux.org/pacman/pacman[Git summary page] for the
 project.
@@ -70,8 +75,7 @@ file for a not-as-frequently-updated list of changes. However, this should
 contain the biggest changes in a format more concise than the commit log.


-Releases
--------
+== Releases

 [frame="none",grid="none",options="autowidth",cols="3*a"]
 |======
@@ -79,11 +83,11 @@ Releases
 [frame="topbot",grid="none",options="header,autowidth"]
 !======
 !Version !Date
+!7.1.0  !2025-11-01
 !7.0.0  !2024-07-14
 !6.1.0  !2024-03-04
 !6.0.1  !2021-09-04
 !6.0.0  !2021-05-20
-!6.0.0alpha1 !2020-12-04
 !5.2.1  !2019-11-01
 !5.2.0  !2019-10-21
 !5.1.3  !2019-03-01
@@ -98,13 +102,10 @@ Releases
 !4.1.2  !2013-06-18
 !4.1.1  !2013-05-07
 !4.1.0  !2013-04-01
-!4.1.0rc1 !2013-03-09
 !4.0.3 !2012-04-07
 !4.0.2 !2012-02-11
 !4.0.1 !2011-11-20
 !4.0.0 !2011-10-13
-!4.0.0rc2 !2011-09-22
-!4.0.0rc1 !2011-08-11
 !3.5.4 !2011-08-10
 !3.5.3 !2011-06-07
 !3.5.2 !2011-04-18
@@ -113,12 +114,12 @@ Releases
 !3.4.3 !2011-01-22
 !3.4.2 !2010-12-29
 !3.4.1 !2010-09-03
+!3.4.0 !2010-06-16
 !======
 |
 [frame="topbot",grid="none",options="header,autowidth"]
 !======
 !Version !Date
-!3.4.0 !2010-06-16
 !3.3.3 !2009-11-10
 !3.3.2 !2009-10-05
 !3.3.1 !2009-09-22
@@ -140,9 +141,6 @@ Releases
 !3.0.0 !2007-03-25
 !2.9.8 !2006-02-02
 !2.9.7 !2005-09-16
-!2.9.7-TEST3 !2005-09-11
-!2.9.7-TEST2 !2005-09-07
-!2.9.7-TEST !2005-08-19
 !2.9.6 !2005-06-10
 !2.9.5 !2005-01-11
 !2.9.4 !2004-12-20
@@ -152,13 +150,13 @@ Releases
 !2.9 !2004-09-18
 !2.8.4 !2004-08-23
 !2.8.3 !2004-08-04
+!2.8.2 !2004-07-22
+!2.8.1 !2004-07-17
 !======
 |
 [frame="topbot",grid="none",options="header,autowidth"]
 !======
 !Version !Date
-!2.8.2 !2004-07-22
-!2.8.1 !2004-07-17
 !2.8 !2004-07-03
 !2.7.9 !2004-04-30
 !2.7.8 !2004-04-29
@@ -209,17 +207,16 @@ commands:
 You may wish to read the options presented by `meson` in order to
 set appropriate paths and build options that are correct for your system.

-Development
-----------
+== Development
+
+=== Mailing List

-Mailing List
-~~~~~~~~~~~~
 There is a mailing list devoted to pacman development, hosted by Arch Linux.
 link:https://lists.archlinux.org/listinfo/pacman-dev/[Subscribe] or
 link:https://lists.archlinux.org/pipermail/pacman-dev/[view the archives].

-Source Code
-~~~~~~~~~~~
+=== Source Code
+
 Development of pacman is currently done in Git. The central repository is
 hosted by Arch Linux, although some of the developers have their own trees (ask
 on the above mailing lists if you are interested in finding the locations of
@@ -243,16 +240,16 @@ you speak a foreign language, you can help by either creating or updating a
 translation file for your native language. Instructions can be found in
 link:translation-help.html[translation-help].

-Bugs
----
+== Bugs
+
 If you find bugs (which is quite likely), please report them to the issue
 tracker at link:https://gitlab.archlinux.org/pacman/pacman/-/issues[] with
 specific information such as your command-line, the nature of the bug, and even
 the package database if it helps.

-Copyright
---------
-pacman is Copyright (C) 2006-2024 Pacman Development Team
+== Copyright
+
+pacman is Copyright (C) 2006-2025 Pacman Development Team
 <pacman-dev@lists.archlinux.org> and Copyright (C) 2002-2006 Judd Vinet
 <jvinet@zeroflux.org> and is licensed through the GNU General Public License,
 version 2 or later.
--- a/doc/makepkg.8.asciidoc
+++ b/doc/makepkg.8.asciidoc
@@ -247,6 +247,11 @@ Environment Variables
 	Use an alternate config file instead of the +{sysconfdir}/makepkg.conf+
 	default.

+**MAKEPKG_GIT_CONFIG=**"/path/to/file"::
+	Use an alternate config file for Git instead of the
+	+{sysconfdir}/makepkg.d/gitconfig+ default. makepkg always prevents Git
+	from loading any other config files.
+
 **PKGDEST=**"/path/to/directory"::
 	Directory where the resulting packages will be stored. Overrides the
 	corresponding value defined in linkman:makepkg.conf[5].
@@ -297,7 +302,7 @@ Environment Variables
 **BUILDTOOLVER=**"<version>"::
 	The version of the '$BUILDTOOL' used.

-**MAKEPKG_LINT_PKGBUILD=**0
+**MAKEPKG_LINT_PKGBUILD=**0::
 	Setting to 0 disables PKGBUILD linting within makepkg. Useful on systems
 	with slow bash subshell operations, or on PKGBUILDs with extreme amounts of
 	package splitting.
--- a/doc/makepkg.conf.5.asciidoc
+++ b/doc/makepkg.conf.5.asciidoc
@@ -62,6 +62,11 @@ Options
 	A string such as ``i686-pc-linux-gnu''; do not touch this unless you know what
 	you are doing. This can be commented out by most users if desired.

+**NPROC=**""::
+	Sets the number of processors to use for parallel jobs in makepkg.
+	Note: this does not affect parallelization of tasks during ``build()`` and
+	related functions.
+
 **CPPFLAGS=**"cppflags"::
 	Flags used for the C preprocessor; see CFLAGS for more information.

@@ -215,7 +220,7 @@ Options
 	Options to be used when stripping static libraries. See linkman:strip[1]
 	for details.

-**MAN_DIRS=(**{usr{,/local}{,/share},opt/*}/{man,info} ...**)**::
+**MAN_DIRS=(**usr{,/local}{,/share}/{man,info} ...**)**::
 	If `zipman` is specified in the `OPTIONS` array, this variable will
 	instruct makepkg where to look to compress manual (man and info)
 	pages. If you build packages that are located in opt/, you may need
--- a/doc/meson.build
+++ b/doc/meson.build
@@ -82,11 +82,9 @@ foreach page: manpages + sitepages
    command : [
      ASCIIDOC,
    ] + asciidoc_opts + [
-      '-a', 'linkcss',
      '-a', 'toc',
      '-a', 'icons',
      '-a', 'max-width=960px',
-      '-a', 'stylesheet=asciidoc-override.css',
      '-o', '@OUTPUT@',
      '@INPUT@',
    ],
@@ -94,7 +92,6 @@ foreach page: manpages + sitepages
    output : [htmlpage],
    depend_files : [
      asciidoc_conf,
-      'asciidoc-override.css',
    ] + page.get('extra_depends', []),
    build_by_default : false,
    install : false,
@@ -107,26 +104,6 @@ run_target('html',
           command : ['/bin/true'],
           depends : html_targets)

-custom_target(
-  'website.tar.gz',
-  command : [
-    'bsdtar', 'czf', '@OUTPUT@',
-    '-C', meson.current_build_dir(),
-  ] + html_files + [
-    '-C', meson.current_source_dir(),
-    'asciidoc-override.css',
-    '-C', '/etc/asciidoc/stylesheets/',
-    'asciidoc.css',
-    '-C', '/etc/asciidoc/javascripts/',
-    'asciidoc.js',
-    '-C', '/etc/asciidoc/',
-    'images',
-  ],
-  output : ['website.tar.gz'],
-  build_by_default : false,
-  depends : html_targets,
-)
-
 meson.add_install_script(MESON_MAKE_SYMLINK,
                         'repo-add.8',
                         join_paths(MANDIR, 'man8/repo-remove.8'))
--- a/doc/pacman.8.asciidoc
+++ b/doc/pacman.8.asciidoc
@@ -151,7 +151,8 @@ Options
 	+{localstatedir}/cache/pacman/pkg+). Multiple cache directories can be
 	specified, and they are tried in the order they are passed to pacman.
 	*NOTE*: This is an absolute path, and the root path is not automatically
-	prepended.
+	prepended. If DownloadUser is set in linkman:pacman.conf[5], then the
+	specified user must have permission to access the cache directory.

 *\--color* <when>::
 	Specify when to enable coloring. Valid options are 'always', 'never', or
@@ -201,9 +202,21 @@ Options
 	modified.  This allows mounted guest systems to be properly operated on.

 *\--disable-sandbox*::
-	Disable the default sandbox applied to the process downloading files on Linux
-	systems. Useful if experiencing landlock related failures while downloading
-	files when running a Linux kernel that does not support this feature.
+	Completely disables the sandbox applied to the process of downloading files
+	on Linux systems.  Equivalent to jointly specifying
+	`--disable-sandbox-filesystem` and `--disable-sandbox-syscalls`.
+
+*\--disable-sandbox-filesystem*::
+	Disable the filesystem restrictions part of the sandbox applied to the process
+	downloading files on Linux systems. Useful if experiencing Landlock related
+	failures while downloading files when running a Linux kernel that does not
+	support this feature.
+
+*\--disable-sandbox-syscalls*::
+	Disable the syscall filtering part of the sandbox applied to the process
+	downloading files on Linux systems. Useful if experiencing seccomp related
+	failures while downloading files when running a Linux kernel that does not
+	support this feature.

 Transaction Options (apply to '-S', '-R' and '-U')
 --------------------------------------------------
--- a/doc/pacman.conf.5.asciidoc
+++ b/doc/pacman.conf.5.asciidoc
@@ -212,9 +212,21 @@ Options
 	option is not set then the downloads are done as the user running pacman.

 *DisableSandbox*::
-	Disable the default sandbox applied to the process downloading files on Linux
-	systems. Useful if experiencing landlock related failures while downloading
-	files when running a Linux kernel that does not support this feature.
+	Completely disables the sandbox applied to the process of downloading files
+	on Linux systems.  Equivalent to jointly specifying `DisableSandboxFilesystem`
+	and `DisableSandboxSyscalls`.
+
+*DisableSandboxFilesystem*::
+	Disable the filesystem restrictions part of the sandbox applied to the process
+	downloading files on Linux systems. Useful if experiencing Landlock related
+	failures while downloading files when running a Linux kernel that does not
+	support this feature.
+
+*DisableSandboxSyscalls*::
+	Disable the syscall filtering part of the sandbox applied to the process
+	downloading files on Linux systems. Useful if experiencing seccomp related
+	failures while downloading files when running a Linux kernel that does not
+	support this feature.

 Repository Sections
 -------------------
@@ -235,7 +247,7 @@ contain a file that lists the servers for that repository.
 # use this server first
 Server = ftp://ftp.archlinux.org/$repo/os/$arch
 # next use servers as defined in the mirrorlist below
-Include = {sysconfdir}/pacman.d/mirrorlist
+Include = /etc/pacman.d/mirrorlist
 --------

 The order of repositories in the configuration files matters; repositories
@@ -318,12 +330,12 @@ When to Check::
 	*Never*;;
 		All signature checking is suppressed, even if signatures are present.

-	*Optional* (default);;
+	*Optional*;;
 		Signatures are checked if present; absence of a signature is not an
 		error. An invalid signature is a fatal error, as is a signature from a
 		key not in the keyring.

-	*Required*;;
+	*Required* (default);;
 		Signatures are required; absence of a signature or an invalid signature
 		is a fatal error, as is a signature from a key not in the keyring.

@@ -349,7 +361,7 @@ level signatures for packages.
 The built-in default is the following:

 --------
-SigLevel = Optional TrustedOnly
+SigLevel = Required TrustedOnly
 --------


--- a/doc/repo-add.8.asciidoc
+++ b/doc/repo-add.8.asciidoc
@@ -29,9 +29,10 @@ specified on the command line. Multiple packages to remove can be specified
 on the command line.

 A package database is a tar file, optionally compressed. Valid extensions are
-``.db'' followed by an archive extension of ``.tar'', ``.tar.gz'', ``.tar.bz2'',
-``.tar.xz'', or ``.tar.Z''. The file does not need to exist, but all parent
-directories must exist.
+``.db'' followed by an archive extension of ``.tar'', ``.tar.bz2'',
+``.tar.gz'', ``.tar.lrz'', ``.tar.lz'', ``.tar.lz4'', ``.tar.lzo'',
+``.tar.xz'', ``.tar.zst'' or ``.tar.Z''. The file does not need to exist, but
+all parent directories must exist.


 Common Options
@@ -59,6 +60,14 @@ Common Options
 *\--nocolor*::
 	Remove color from 'repo-add' and 'repo-remove' output.

+*-R, \--remove*::
+	Remove old package files from the disk when updating or removing their
+	entry in the database.
+
+*-w, \--wait-for-lock*::
+	Wait for the lock file to be acquired. If unset, command will fail with
+	exit code 2 if acquiring the lock fails. If set, it will retry to acquire
+	lock until success.

 repo-add Options
 ----------------
@@ -66,9 +75,8 @@ repo-add Options
 	Only add packages that are not already in the database.  Warnings will be
 	printed upon detection of existing packages, but they will not be re-added.

-*-R, \--remove*::
-	Remove old package files from the disk when updating their entry in the
-	database.
+*-p, \--prevent-downgrade*::
+	Do not add package to database if a newer version is already present

 *\--include-sigs*::
 	Include package PGP signatures in the repository database (if available)
--- a/doc/submitting-patches.asciidoc
+++ b/doc/submitting-patches.asciidoc
@@ -11,9 +11,9 @@ NOTE: Some of this is paraphrased from the kernel documentation's

 Getting the most recent source
 ------------------------------
-Patches need to be submitted in GIT format and are best if they are against the
+Patches need to be submitted in Git format and are best if they are against the
 latest version of the code. There are several helpful tutorials for getting
-started with GIT if you have not worked with it before.
+started with Git if you have not worked with it before.

 * https://www.kernel.org/pub/software/scm/git/docs/gittutorial.html
 * https://wiki.archlinux.org/index.php/Super_Quick_Git_Guide
--- a/doc/translation-help.asciidoc
+++ b/doc/translation-help.asciidoc
@@ -4,10 +4,10 @@ Pacman - Translating
 This document is here to guide you in helping translate pacman messages,
 libalpm messages, and the manual pages for the entire pacman package.

-We are currently using https://www.transifex.com/[Transifex] as the translation
+We are currently using https://app.transifex.com/[Transifex] as the translation
 platform for pacman and libalpm. You will need to sign up for an account there
 and then register with a translation team on the
-https://www.transifex.com/projects/p/archlinux-pacman/[pacman project page].
+https://explore.transifex.com/toofishes/archlinux-pacman/[pacman project page].

 NOTE: This may be old information due to our switch to Transifex, but the
 gettext website is a very useful guide to read before embarking on translation
@@ -31,7 +31,7 @@ either be hand-edited, or modified with a tool such as poedit, gtranslator or
 kbabel. Using a translation tool tends to make the job easier.

 Please read up on Transifex usage using the
-https://docs.transifex.com/[Transifex Help] if you are not familiar.
+https://help.transifex.com/[Transifex Help] if you are not familiar.

 Transifex provides a command-line client to help with translations.  Here is
 an example set of commands if you have a source code checkout and are not
@@ -56,19 +56,19 @@ Pre-release Updates

 A week or two before each release, the codebase will go into a string freeze
 and an email will be sent to the mailto:pacman-dev@lists.archlinux.org[pacman-dev]
-mailing list asking for translations. This email will have a prefix of
-*[translation]* for anyone looking to set up an email filter.
+mailing list asking for translations. An announcement in Transifex is also made,
+which reaches everyone that is member of the translation team.

 At this time, the latest `.po` language files will be made available at the
-Transifex project page.  Each language will have two files available (back-end
-and front-end). Translators interested in helping are encouraged to use the
+Transifex project page.  Each language will have three files available (libalpm,
+pacman and pacman-scripts). Translators interested in helping are encouraged to use the
 features of Transifex to let others know they are currently translating their
 language.

-Once a translator has completed the translation (*OR* realizes they do not have
+Once a translator has completed the translation offline (*OR* realizes they do not have
 time to finish), please upload your progress back to the Transifex site.

-NOTE: Please upload your translations as soon as possible- this will give other
+NOTE: Please upload your translations as soon as possible - this will give other
 speakers of your language time to review your translations and update them as
 necessary.

@@ -80,21 +80,25 @@ repository.

 	git clone https://gitlab.archlinux.org/pacman/pacman.git

-Next, you will need to run `./autogen.sh` and `./configure` in the base
-directory to generate the correct Makefiles. At this point, all necessary
-make targets will be generated and we can begin updating the translation
-files.
+Next, you will need to configure the build environment. From the base directory,
+run:

-We need to first update the main message catalog file. Navigate into either the
-`lib/libalpm/po` or `po` directory depending on which translation you wish to
-work on first, and execute the following command.  If you are working in the
-`po/` tree, replace 'libalpm.pot' with 'pacman.pot':
+	meson setup . build

-	make libalpm.pot-update
+If any required dependencies are missing, please install. After that,
+update the template translation (.pot) files to the latest state of
+the source code by running:
+	
+	meson compile -C build pacman-scripts-pot pacman-pot libalpm-pot
+	
+We need to first update the main message catalog file. Navigate into either
+the `lib/libalpm/po`, `scripts/po` or `src/pacman/po` directory depending
+on which translation you wish to work on first, and execute the following
+command to update your specific language's translation file
+(replace `lang_code` with your language code e.g. 'pt_BR', and `pot_file`
+with `libalpm.pot`, `pacman.pot` or `pacman-scripts.pot`):

-Next, update your specific language's translation file:
-
-	make <po file>-update
+	msgmerge --update --previous <lang_code>.po  <pot_filename>.pot

 At this point, you can do the translation. To submit your changes, either email
 the new `.po` file to the mailing-list with *[translation]* in the subject, or
@@ -103,7 +107,7 @@ submit a Git-formatted patch (please do not include any `.pot` file changes).
 As a shortcut, all translation files (including `.pot` files) can be updated
 with the following command:

-	make update-po
+	./build-aux/update-po

 Adding a New Language
 ~~~~~~~~~~~~~~~~~~~~~
@@ -112,10 +116,10 @@ Making a new language is not too hard, but be sure to follow all the steps.
 You will have to do the following steps in both the `lib/libalpm/po/` and `po/`
 directories, substituting where appropriate. First, edit the `LINGUAS` file and
 add your new language code at the bottom. Next, run the following command,
-substituting 'libalpm.pot' or 'pacman.pot' for potfile depending on which
+substituting `libalpm.pot` or `pacman.pot` for potfile depending on which
 directory you are currently working in:

-	msginit -l <lang code> -o <lang code>.po -i <potfile>
+	msginit -l <lang_code> -o <lang_code>.po -i <potfile>

 You can then also add your language code to the end of the `LINGUAS` file
 located in each po directory.
@@ -137,11 +141,13 @@ following two translations are equivalent:
 	msgstr ""
 	"This is a test translation"

-If you want to test the translation (for example, the front-end one):
+If you want to test the translation (copy the .po file you want to test,
+you may ignore the rest), replacing `<lang_code>` accordingly:

-	rm *.gmo stamp-po
-	make
-	cp <lang code>.gmo /usr/share/locale/<lang code>/LC_MESSAGES/pacman.mo
+	meson compile -C build pacman-scripts-gmo pacman-gmo libalpm-gmo
+	cp ./build/lib/libalpm/po/<lang_code>/LC_MESSAGES/libalpm.mo    /usr/share/locale/<lang_code>/LC_MESSAGES/libalpm.mo
+	cp ./build/scripts/po/<lang_code>/LC_MESSAGES/pacman-scripts.mo /usr/share/locale/<lang_code>/LC_MESSAGES/pacman-scripts.mo
+	cp ./build/src/pacman/po/<lang_code>/LC_MESSAGES/pacman.mo      /usr/share/locale/<lang_code>/LC_MESSAGES/pacman.mo


 Translating Manpages
--- a/etc/makepkg.conf.in
+++ b/etc/makepkg.conf.in
@@ -36,6 +36,8 @@ VCSCLIENTS=('bzr::breezy'
 CARCH="@CARCH@"
 CHOST="@CHOST@"

+#NPROC=2
+
 #-- Compiler and Linker Flags
 #CPPFLAGS=""
 #CFLAGS="-O2 -pipe"
@@ -101,9 +103,9 @@ STRIP_SHARED="@STRIP_SHARED@"
 #-- Options to be used when stripping static libraries. See `man strip' for details.
 STRIP_STATIC="@STRIP_STATIC@"
 #-- Manual (man and info) directories to compress (if zipman is specified)
-MAN_DIRS=({usr{,/local}{,/share},opt/*}/{man,info})
+MAN_DIRS=(usr{,/local}{,/share}/{man,info})
 #-- Doc directories to remove (if !docs is specified)
-DOC_DIRS=(usr/{,local/}{,share/}{doc,gtk-doc} opt/*/{doc,gtk-doc})
+DOC_DIRS=(usr/{,local/}{,share/}{doc,gtk-doc})
 #-- Files to be removed from all packages (if purge is specified)
 PURGE_TARGETS=(usr/{,share}/info/dir .packlist *.pod)
 #-- Directory to store source code in for debug packages
--- a/etc/pacman.conf.in
+++ b/etc/pacman.conf.in
@@ -36,7 +36,8 @@ CheckSpace
 #VerbosePkgLists
 ParallelDownloads = 5
 #DownloadUser = alpm
-#DisableSandbox
+#DisableSandboxFilesystem
+#DisableSandboxSyscalls

 # PGP signature checking
 #SigLevel = Optional
--- a/lib/libalpm/add.c
+++ b/lib/libalpm/add.c
@@ -1,7 +1,7 @@
 /*
 *  add.c
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
--- a/lib/libalpm/add.h
+++ b/lib/libalpm/add.h
@@ -1,7 +1,7 @@
 /*
 *  add.h
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
--- a/lib/libalpm/alpm.c
+++ b/lib/libalpm/alpm.c
@@ -1,7 +1,7 @@
 /*
 *  alpm.c
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *  Copyright (c) 2005 by Aurelien Foret <orelien@chez.com>
 *  Copyright (c) 2005 by Christian Hamar <krics@linuxforum.hu>
@@ -21,6 +21,8 @@
 *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */

+#include <unistd.h>
+
 #ifdef HAVE_LIBCURL
 #include <curl/curl.h>
 #endif
@@ -71,6 +73,9 @@ alpm_handle_t SYMEXPORT *alpm_initialize(const char *root, const char *dbpath,
 		goto cleanup;
 	}

+	/* used for testing whether to enable features requiring root access */
+	myhandle->user = getuid();
+
 #ifdef HAVE_LIBCURL
 	curl_global_init(CURL_GLOBAL_ALL);
 	myhandle->curlm = curl_multi_init();
--- a/lib/libalpm/alpm.h
+++ b/lib/libalpm/alpm.h
@@ -1,7 +1,7 @@
 /*
 * alpm.h
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *  Copyright (c) 2005 by Aurelien Foret <orelien@chez.com>
 *  Copyright (c) 2005 by Christian Hamar <krics@linuxforum.hu>
@@ -308,6 +308,8 @@ typedef enum _alpm_errno_t {
 	/** Files conflict */
 	ALPM_ERR_FILE_CONFLICTS,
 	/* Misc */
+	/** Download setup failed */
+	ALPM_ERR_RETRIEVE_PREPARE,
 	/** Download failed */
 	ALPM_ERR_RETRIEVE,
 	/** Invalid Regex */
@@ -451,14 +453,6 @@ typedef struct _alpm_pgpkey_t {
 	unsigned int length;
 	/** has the key been revoked */
 	unsigned int revoked;
-	/** A character representing the  encryption algorithm used by the public key
-	 *
-	 * ? = unknown
-	 * R = RSA
-	 * D = DSA
-	 * E = EDDSA
-	 */
-	char pubkey_algo;
 } alpm_pgpkey_t;

 /**
@@ -489,7 +483,7 @@ typedef struct _alpm_siglist_t {
 * Check the PGP signature for the given package file.
 * @param pkg the package to check
 * @param siglist a pointer to storage for signature results
- * @return 0 if valid, -1 if an error occurred or signature is invalid
+ * @return 0 on success, -1 if an error occurred or signature is missing
 */
 int alpm_pkg_check_pgp_signature(alpm_pkg_t *pkg, alpm_siglist_t *siglist);

@@ -497,7 +491,7 @@ int alpm_pkg_check_pgp_signature(alpm_pkg_t *pkg, alpm_siglist_t *siglist);
 * Check the PGP signature for the given database.
 * @param db the database to check
 * @param siglist a pointer to storage for signature results
- * @return 0 if valid, -1 if an error occurred or signature is invalid
+ * @return 0 on success, -1 if an error occurred or signature is missing
 */
 int alpm_db_check_pgp_signature(alpm_db_t *db, alpm_siglist_t *siglist);

@@ -2265,6 +2259,12 @@ int alpm_option_set_remote_file_siglevel(alpm_handle_t *handle, int level);
 * @{
 */

+/** Get the download timeout state
+ * @param handle the context handle
+ * @return 0 for enabled, 1 for disabled
+*/
+int alpm_option_get_disable_dl_timeout(alpm_handle_t *handle);
+
 /** Enables/disables the download timeout.
 * @param handle the context handle
 * @param disable_dl_timeout 0 for enabled, 1 for disabled
@@ -2307,12 +2307,32 @@ int alpm_option_set_parallel_downloads(alpm_handle_t *handle, unsigned int num_s
 * @{
 */

-/** Enables/disables the sandbox.
+/** Get the state of the filesystem part of the sandbox
 * @param handle the context handle
- * @param disable_sandbox 0 for enabled, 1 for disabled
+ * @return 0 for enabled, 1 for disabled
+ */
+int alpm_option_get_disable_sandbox_filesystem(alpm_handle_t *handle);
+
+/** Enables/disables the filesystem part of the sandbox.
+ * @param handle the context handle
+ * @param disable_sandbox_filesystem 0 for enabled, 1 for disabled
 * @return 0 on success, -1 on error (pm_errno is set accordingly)
 */
-int alpm_option_set_disable_sandbox(alpm_handle_t *handle, unsigned short disable_sandbox);
+int alpm_option_set_disable_sandbox_filesystem(alpm_handle_t *handle, unsigned short disable_sandbox_filesystem);
+
+/** Get the state of the syscalls part of the sandbox
+ * @param handle the context handle
+ * @return 0 for enabled, 1 for disabled
+ */
+int alpm_option_get_disable_sandbox_syscalls(alpm_handle_t *handle);
+
+/** Enables/disables the syscalls part of the sandbox.
+ * @param handle the context handle
+ * @param disable_sandbox_syscalls 0 for enabled, 1 for disabled
+ * @return 0 on success, -1 on error (pm_errno is set accordingly)
+ */
+int alpm_option_set_disable_sandbox_syscalls(alpm_handle_t *handle, unsigned short disable_sandbox_syscalls);
+
 /* End of disable_sandbox accessors */
 /** @} */

--- a/lib/libalpm/alpm_list.c
+++ b/lib/libalpm/alpm_list.c
@@ -1,7 +1,7 @@
 /*
 *  alpm_list.c
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
--- a/lib/libalpm/alpm_list.h
+++ b/lib/libalpm/alpm_list.h
@@ -1,7 +1,7 @@
 /*
 *  alpm_list.h
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
--- a/lib/libalpm/backup.c
+++ b/lib/libalpm/backup.c
@@ -1,7 +1,7 @@
 /*
 *  backup.c
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2005 by Judd Vinet <jvinet@zeroflux.org>
 *  Copyright (c) 2005 by Aurelien Foret <orelien@chez.com>
 *  Copyright (c) 2005 by Christian Hamar <krics@linuxforum.hu>
--- a/lib/libalpm/backup.h
+++ b/lib/libalpm/backup.h
@@ -1,7 +1,7 @@
 /*
 *  backup.h
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
--- a/lib/libalpm/be_local.c
+++ b/lib/libalpm/be_local.c
@@ -1,7 +1,7 @@
 /*
 *  be_local.c : backend for the local database
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
--- a/lib/libalpm/be_package.c
+++ b/lib/libalpm/be_package.c
@@ -1,7 +1,7 @@
 /*
 *  be_package.c : backend for packages
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
--- a/lib/libalpm/be_sync.c
+++ b/lib/libalpm/be_sync.c
@@ -1,7 +1,7 @@
 /*
 *  be_sync.c : backend for sync databases
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
@@ -153,7 +153,7 @@ int SYMEXPORT alpm_db_update(alpm_handle_t *handle, alpm_list_t *dbs, int force)

 	syncpath = get_sync_dir(handle);
 	ASSERT(syncpath != NULL, return -1);
-	temporary_syncpath = _alpm_temporary_download_dir_setup(syncpath, handle->sandboxuser);
+	temporary_syncpath = _alpm_download_dir_setup(handle, syncpath);
 	ASSERT(temporary_syncpath != NULL, FREE(syncpath); return -1);

 	/* make sure we have a sane umask */
@@ -268,7 +268,6 @@ cleanup:
 		alpm_list_free_inner(payloads, (alpm_list_fn_free)_alpm_dload_payload_reset);
 		FREELIST(payloads);
 	}
-	_alpm_remove_temporary_download_dir(temporary_syncpath);
 	FREE(temporary_syncpath);
 	FREE(syncpath);
 	umask(oldmask);
@@ -309,11 +308,11 @@ static int _sync_get_validation(alpm_pkg_t *pkg)
 static const struct pkg_operations *get_sync_pkg_ops(void)
 {
 	static struct pkg_operations sync_pkg_ops;
-	static int sync_pkg_ops_initalized = 0;
-	if(!sync_pkg_ops_initalized) {
+	static int sync_pkg_ops_initialized = 0;
+	if(!sync_pkg_ops_initialized) {
 		sync_pkg_ops = default_pkg_ops;
 		sync_pkg_ops.get_validation = _sync_get_validation;
-		sync_pkg_ops_initalized = 1;
+		sync_pkg_ops_initialized = 1;
 	}
 	return &sync_pkg_ops;
 }
--- a/lib/libalpm/conflict.c
+++ b/lib/libalpm/conflict.c
@@ -1,7 +1,7 @@
 /*
 *  conflict.c
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *  Copyright (c) 2005 by Aurelien Foret <orelien@chez.com>
 *  Copyright (c) 2006 by David Kimpe <dnaku@frugalware.org>
--- a/lib/libalpm/conflict.h
+++ b/lib/libalpm/conflict.h
@@ -1,7 +1,7 @@
 /*
 *  conflict.h
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
--- a/lib/libalpm/db.c
+++ b/lib/libalpm/db.c
@@ -1,7 +1,7 @@
 /*
 *  db.c
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *  Copyright (c) 2005 by Aurelien Foret <orelien@chez.com>
 *  Copyright (c) 2005 by Christian Hamar <krics@linuxforum.hu>
--- a/lib/libalpm/db.h
+++ b/lib/libalpm/db.h
@@ -1,7 +1,7 @@
 /*
 *  db.h
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *  Copyright (c) 2005 by Aurelien Foret <orelien@chez.com>
 *  Copyright (c) 2006 by Miklos Vajna <vmiklos@frugalware.org>
--- a/lib/libalpm/deps.c
+++ b/lib/libalpm/deps.c
@@ -1,7 +1,7 @@
 /*
 *  deps.c
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *  Copyright (c) 2005 by Aurelien Foret <orelien@chez.com>
 *  Copyright (c) 2005, 2006 by Miklos Vajna <vmiklos@frugalware.org>
@@ -181,13 +181,13 @@ static void _alpm_warn_dep_cycle(alpm_handle_t *handle, alpm_list_t *targets,
 	} else {
 		alpm_pkg_t *ancestorpkg = ancestor->data;
 		alpm_pkg_t *childpkg = vertex->data;
-		_alpm_log(handle, ALPM_LOG_WARNING, _("dependency cycle detected:\n"));
+		_alpm_log(handle, ALPM_LOG_DEBUG, _("dependency cycle detected:\n"));
 		if(reverse) {
-			_alpm_log(handle, ALPM_LOG_WARNING,
+			_alpm_log(handle, ALPM_LOG_DEBUG,
 					_("%s will be removed after its %s dependency\n"),
 					ancestorpkg->name, childpkg->name);
 		} else {
-			_alpm_log(handle, ALPM_LOG_WARNING,
+			_alpm_log(handle, ALPM_LOG_DEBUG,
 					_("%s will be installed before its %s dependency\n"),
 					ancestorpkg->name, childpkg->name);
 		}
--- a/lib/libalpm/deps.h
+++ b/lib/libalpm/deps.h
@@ -1,7 +1,7 @@
 /*
 *  deps.h
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *  Copyright (c) 2005 by Aurelien Foret <orelien@chez.com>
 *  Copyright (c) 2006 by Miklos Vajna <vmiklos@frugalware.org>
--- a/lib/libalpm/diskspace.c
+++ b/lib/libalpm/diskspace.c
@@ -1,7 +1,7 @@
 /*
 *  diskspace.c
 *
- *  Copyright (c) 2010-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2010-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
--- a/lib/libalpm/diskspace.h
+++ b/lib/libalpm/diskspace.h
@@ -1,7 +1,7 @@
 /*
 *  diskspace.h
 *
- *  Copyright (c) 2010-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2010-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
--- a/lib/libalpm/dload.c
+++ b/lib/libalpm/dload.c
@@ -1,7 +1,7 @@
 /*
 *  dload.c
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
@@ -76,13 +76,16 @@ static mode_t _getumask(void)
 static int finalize_download_file(const char *filename)
 {
 	struct stat st;
+	uid_t myuid = getuid();
 	ASSERT(filename != NULL, return -1);
 	ASSERT(stat(filename, &st) == 0, return -1);
 	if(st.st_size == 0) {
 		unlink(filename);
                return 1;
 	}
-	ASSERT(chown(filename, 0, 0) != -1, return -1);
+	if(myuid == 0) {
+		ASSERT(chown(filename, 0, 0) != -1, return -1);
+	}
 	ASSERT(chmod(filename, ~(_getumask()) & 0666) != -1, return -1);
 	return 0;
 }
@@ -695,9 +698,9 @@ cleanup:
 	 * only applies to FTP transfers. */
 	curl_easy_setopt(curl, CURLOPT_NOPROGRESS, 1L);
 	curl_easy_setopt(curl, CURLOPT_ERRORBUFFER, (char *)NULL);
-
 	if(payload->localf != NULL) {
 		fclose(payload->localf);
+		payload->localf = NULL;
 		utimes_long(payload->tempfile_name, remote_time);
 	}

@@ -877,7 +880,6 @@ static int curl_download_internal(alpm_handle_t *handle,
 			p = NULL;
 			err = -1;
 		}
-
 		while(true) {
 			int msgs_left = 0;
 			CURLMsg *msg = curl_multi_info_read(curlm, &msgs_left);
@@ -901,7 +903,6 @@ static int curl_download_internal(alpm_handle_t *handle,
 			}
 		}
 	}
-
 	int ret = err ? -1 : updated ? 0 : 1;
 	_alpm_log(handle, ALPM_LOG_DEBUG, "curl_download_internal return code is %d\n", ret);
 	alpm_list_free(payloads);
@@ -915,16 +916,15 @@ static int curl_download_internal(alpm_handle_t *handle,
 */
 static int curl_download_internal_sandboxed(alpm_handle_t *handle,
 		alpm_list_t *payloads /* struct dload_payload */,
-		const char *localpath)
+		const char *localpath,
+		int *childsig)
 {
 	int pid, err = 0, ret = -1, callbacks_fd[2];
 	sigset_t oldblock;
-	struct sigaction sa_ign, oldint, oldquit;
+	struct sigaction sa_ign = { .sa_handler = SIG_IGN }, oldint, oldquit;
 	_alpm_sandbox_callback_context callbacks_ctx;

 	sigemptyset(&sa_ign.sa_mask);
-	sa_ign.sa_handler = SIG_IGN;
-	sa_ign.sa_flags=0;

 	if(pipe(callbacks_fd) != 0) {
 		return -1;
@@ -1022,8 +1022,12 @@ static int curl_download_internal_sandboxed(alpm_handle_t *handle,
 		int wret;
 		while((wret = waitpid(pid, &ret, 0)) == -1 && errno == EINTR);
 		if(wret > 0) {
+			if(WIFSIGNALED(ret)) {
+				*childsig = WTERMSIG(ret);
+			}
 			if(!WIFEXITED(ret)) {
 				/* the child did not terminate normally */
+				handle->pm_errno = ALPM_ERR_RETRIEVE;
 				ret = -1;
 			}
 			else {
@@ -1102,44 +1106,60 @@ static int finalize_download_locations(alpm_list_t *payloads, const char *localp
 	ASSERT(payloads != NULL, return -1);
 	ASSERT(localpath != NULL, return -1);
 	alpm_list_t *p;
+	struct stat st;
 	int returnvalue = 0;
 	for(p = payloads; p; p = p->next) {
 		struct dload_payload *payload = p->data;
-		if(payload->tempfile_name) {
-			move_file(payload->tempfile_name, localpath);
+		const char *filename = NULL;
+
+		if(payload->destfile_name && stat(payload->destfile_name, &st) == 0) {
+			filename = payload->destfile_name;
+		} else if(stat(payload->tempfile_name, &st) == 0) {
+			filename = payload->tempfile_name;
 		}
-		if(payload->destfile_name) {
-			int ret = move_file(payload->destfile_name, localpath);
+
+		if(filename) {
+			int ret = move_file(filename, localpath);

 			if(ret == -1) {
-				/* ignore error if the file already existed - only signature file was downloaded */
 				if(payload->mtime_existing_file == 0) {
+					_alpm_log(payload->handle, ALPM_LOG_ERROR, _("could not move %s into %s (%s)\n"),
+							filename, localpath, strerror(errno));
 					returnvalue = -1;
 				}
 			}
+		}

-			if (payload->download_signature) {
-				const char sig_suffix[] = ".sig";
-				char *sig_filename = NULL;
-				size_t sig_filename_len = strlen(payload->destfile_name) + sizeof(sig_suffix);
-				MALLOC(sig_filename, sig_filename_len, continue);
-				snprintf(sig_filename, sig_filename_len, "%s%s", payload->destfile_name, sig_suffix);
+		if (payload->download_signature) {
+			char *sig_filename;
+			int ret;
+
+			filename = payload->destfile_name ? payload->destfile_name : payload->tempfile_name;
+			sig_filename = _alpm_get_fullpath("", filename, ".sig");
+			ASSERT(sig_filename, RET_ERR(payload->handle, ALPM_ERR_MEMORY, -1));
+			ret = move_file(sig_filename, localpath);
+			free(sig_filename);
+
+			if(ret == -1) {
+				sig_filename = _alpm_get_fullpath("", filename, ".sig.part");
+				ASSERT(sig_filename, RET_ERR(payload->handle, ALPM_ERR_MEMORY, -1));
 				move_file(sig_filename, localpath);
-				FREE(sig_filename);
+				free(sig_filename);
 			}
 		}
 	}
 	return returnvalue;
 }

-static void prepare_resumable_downloads(alpm_list_t *payloads, const char *localpath,
-		const char *user)
+static void prepare_resumable_downloads(alpm_handle_t *handle, alpm_list_t *payloads,
+		const char *localpath)
 {
 	struct passwd const *pw = NULL;
+	ASSERT(handle != NULL, return);
 	ASSERT(payloads != NULL, return);
 	ASSERT(localpath != NULL, return);
-	if(user != NULL) {
-		ASSERT((pw = getpwnam(user)) != NULL, return);
+	if(_alpm_use_sandbox(handle)) {
+		ASSERT((pw = getpwnam(handle->sandboxuser)) != NULL, return);
 	}
 	alpm_list_t *p;
 	for(p = payloads; p; p = p->next) {
@@ -1153,7 +1173,7 @@ static void prepare_resumable_downloads(alpm_list_t *payloads, const char *local
 			}
 			FREE(dest);
 		}
-		if(!payload->tempfile_name) {
+		if(!payload->tempfile_name || !_alpm_use_sandbox(handle)) {
 			continue;
 		}
 		const char *filename = mbasename(payload->tempfile_name);
@@ -1184,12 +1204,14 @@ int _alpm_download(alpm_handle_t *handle,
 		const char *temporary_localpath)
 {
 	int ret;
-	prepare_resumable_downloads(payloads, localpath, handle->sandboxuser);
+	int finalize_ret = 0;
+	int childsig = 0;
+	prepare_resumable_downloads(handle, payloads, localpath);

 	if(handle->fetchcb == NULL) {
 #ifdef HAVE_LIBCURL
-		if(handle->sandboxuser) {
-			ret = curl_download_internal_sandboxed(handle, payloads, temporary_localpath);
+		if(_alpm_use_sandbox(handle)) {
+			ret = curl_download_internal_sandboxed(handle, payloads, temporary_localpath, &childsig);
 		} else {
 			ret = curl_download_internal(handle, payloads);
 		}
@@ -1264,13 +1286,23 @@ download_signature:
 		ret = updated ? 0 : 1;
 	}

-	if (finalize_download_locations(payloads, localpath) != 0 && ret == 0) {
-		return -1;
+	if(_alpm_use_sandbox(handle)) {
+		finalize_ret = finalize_download_locations(payloads, localpath);
+		_alpm_remove_temporary_download_dir(temporary_localpath);
 	}
+
+	/* propagate after finalizing so .part files get copied over */
+	if(childsig != 0) {
+		kill(getpid(), childsig);
+	}
+	if(finalize_ret != 0 && ret == 0) {
+		RET_ERR(handle, ALPM_ERR_RETRIEVE, -1);
+	}
+
 	return ret;
 }

-static char *filecache_find_url(alpm_handle_t *handle, const char *url)
+static const char *url_basename(const char *url)
 {
 	const char *filebase = strrchr(url, '/');

@@ -1283,31 +1315,49 @@ static char *filecache_find_url(alpm_handle_t *handle, const char *url)
 		return NULL;
 	}

-	return _alpm_filecache_find(handle, filebase);
+	return filebase;
 }

 int SYMEXPORT alpm_fetch_pkgurl(alpm_handle_t *handle, const alpm_list_t *urls,
 	  alpm_list_t **fetched)
 {
+	alpm_siglevel_t siglevel = alpm_option_get_remote_file_siglevel(handle);
 	const char *cachedir;
 	char *temporary_cachedir = NULL;
 	alpm_list_t *payloads = NULL;
 	const alpm_list_t *i;
-	alpm_event_t event = {0};
+	alpm_event_t event;

 	CHECK_HANDLE(handle, return -1);
 	ASSERT(*fetched == NULL, RET_ERR(handle, ALPM_ERR_WRONG_ARGS, -1));

 	/* find a valid cache dir to download to */
 	cachedir = _alpm_filecache_setup(handle);
-	temporary_cachedir = _alpm_temporary_download_dir_setup(cachedir, handle->sandboxuser);
+	temporary_cachedir = _alpm_download_dir_setup(handle, cachedir);
 	ASSERT(temporary_cachedir != NULL, return -1);

 	for(i = urls; i; i = i->next) {
 		char *url = i->data;
+		char *filepath = NULL;
+		const char *urlbase = url_basename(url);
+
+		if(urlbase) {
+			/* attempt to find the file in our pkgcache */
+			filepath = _alpm_filecache_find(handle, urlbase);
+
+			if(filepath && (siglevel & ALPM_SIG_PACKAGE)) {
+				char *sig_filename = _alpm_get_fullpath("", urlbase, ".sig");
+
+				/* if there's no .sig file then forget about the pkg file and go for download */
+				if(!_alpm_filecache_exists(handle, sig_filename)) {
+					free(filepath);
+					filepath = NULL;
+				}
+
+				free(sig_filename);
+			}
+		}

-		/* attempt to find the file in our pkgcache */
-		char *filepath = filecache_find_url(handle, url);
 		if(filepath) {
 			/* the file is locally cached so add it to the output right away */
 			alpm_list_append(fetched, filepath);
@@ -1347,8 +1397,8 @@ int SYMEXPORT alpm_fetch_pkgurl(alpm_handle_t *handle, const alpm_list_t *urls,
 			}

 			payload->handle = handle;
-			payload->download_signature = (handle->siglevel & ALPM_SIG_PACKAGE);
-			payload->signature_optional = (handle->siglevel & ALPM_SIG_PACKAGE_OPTIONAL);
+			payload->download_signature = (siglevel & ALPM_SIG_PACKAGE);
+			payload->signature_optional = (siglevel & ALPM_SIG_PACKAGE_OPTIONAL);
 			payloads = alpm_list_add(payloads, payload);
 		}
 	}
@@ -1356,12 +1406,12 @@ int SYMEXPORT alpm_fetch_pkgurl(alpm_handle_t *handle, const alpm_list_t *urls,
 	if(payloads) {
 		event.type = ALPM_EVENT_PKG_RETRIEVE_START;
 		event.pkg_retrieve.num = alpm_list_count(payloads);
+		event.pkg_retrieve.total_size = 0;
 		EVENT(handle, &event);
 		if(_alpm_download(handle, payloads, cachedir, temporary_cachedir) == -1) {
 			_alpm_log(handle, ALPM_LOG_WARNING, _("failed to retrieve some files\n"));
 			event.type = ALPM_EVENT_PKG_RETRIEVE_FAILED;
 			EVENT(handle, &event);
-
 			GOTO_ERR(handle, ALPM_ERR_RETRIEVE, err);
 		} else {
 			event.type = ALPM_EVENT_PKG_RETRIEVE_DONE;
@@ -1376,7 +1426,8 @@ int SYMEXPORT alpm_fetch_pkgurl(alpm_handle_t *handle, const alpm_list_t *urls,
 				const char *filename = mbasename(payload->destfile_name);
 				filepath = _alpm_filecache_find(handle, filename);
 			} else {
-				STRDUP(filepath, payload->tempfile_name, GOTO_ERR(handle, ALPM_ERR_MEMORY, err));
+				const char *filename = mbasename(payload->tempfile_name);
+				filepath = _alpm_filecache_find(handle, filename);
 			}
 			if(filepath) {
 				alpm_list_append(fetched, filepath);
@@ -1390,13 +1441,11 @@ int SYMEXPORT alpm_fetch_pkgurl(alpm_handle_t *handle, const alpm_list_t *urls,
 		FREELIST(payloads);
 	}

-	_alpm_remove_temporary_download_dir(temporary_cachedir);
 	FREE(temporary_cachedir);
 	return 0;

 err:
 	alpm_list_free_inner(payloads, (alpm_list_fn_free)_alpm_dload_payload_reset);
-	_alpm_remove_temporary_download_dir(temporary_cachedir);
 	FREE(temporary_cachedir);
 	FREELIST(payloads);
 	FREELIST(*fetched);
@@ -1408,6 +1457,11 @@ void _alpm_dload_payload_reset(struct dload_payload *payload)
 {
 	ASSERT(payload, return);

+	if(payload->localf != NULL) {
+		fclose(payload->localf);
+		payload->localf = NULL;
+	}
+
 	FREE(payload->remote_name);
 	FREE(payload->tempfile_name);
 	FREE(payload->destfile_name);
--- a/lib/libalpm/dload.h
+++ b/lib/libalpm/dload.h
@@ -1,7 +1,7 @@
 /*
 *  dload.h
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
--- a/lib/libalpm/error.c
+++ b/lib/libalpm/error.c
@@ -1,7 +1,7 @@
 /*
 *  error.c
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
@@ -137,7 +137,9 @@ const char SYMEXPORT *alpm_strerror(alpm_errno_t err)
 			return _("conflicting dependencies");
 		case ALPM_ERR_FILE_CONFLICTS:
 			return _("conflicting files");
-		/* Miscellaenous */
+		/* Miscellaneous */
+		case ALPM_ERR_RETRIEVE_PREPARE:
+			return _("failed to initialize download");
 		case ALPM_ERR_RETRIEVE:
 			return _("failed to retrieve some files");
 		case ALPM_ERR_INVALID_REGEX:
--- a/lib/libalpm/filelist.c
+++ b/lib/libalpm/filelist.c
@@ -1,7 +1,7 @@
 /*
 *  filelist.c
 *
- *  Copyright (c) 2012-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2012-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
--- a/lib/libalpm/filelist.h
+++ b/lib/libalpm/filelist.h
@@ -1,7 +1,7 @@
 /*
 *  filelist.h
 *
- *  Copyright (c) 2012-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2012-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
--- a/lib/libalpm/graph.c
+++ b/lib/libalpm/graph.c
@@ -1,7 +1,7 @@
 /*
 *  graph.c - helpful graph structure and setup/teardown methods
 *
- *  Copyright (c) 2007-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2007-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
--- a/lib/libalpm/graph.h
+++ b/lib/libalpm/graph.h
@@ -1,7 +1,7 @@
 /*
 *  graph.h - helpful graph structure and setup/teardown methods
 *
- *  Copyright (c) 2007-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2007-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
--- a/lib/libalpm/group.c
+++ b/lib/libalpm/group.c
@@ -1,7 +1,7 @@
 /*
 *  group.c
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
--- a/lib/libalpm/group.h
+++ b/lib/libalpm/group.h
@@ -1,7 +1,7 @@
 /*
 *  group.h
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
--- a/lib/libalpm/handle.c
+++ b/lib/libalpm/handle.c
@@ -1,7 +1,7 @@
 /*
 *  handle.c
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *  Copyright (c) 2005 by Aurelien Foret <orelien@chez.com>
 *  Copyright (c) 2005, 2006 by Miklos Vajna <vmiklos@frugalware.org>
@@ -28,6 +28,7 @@
 #include <syslog.h>
 #include <sys/stat.h>
 #include <fcntl.h>
+#include <pwd.h>

 /* libalpm */
 #include "handle.h"
@@ -604,11 +605,20 @@ int SYMEXPORT alpm_option_set_gpgdir(alpm_handle_t *handle, const char *gpgdir)

 int SYMEXPORT alpm_option_set_sandboxuser(alpm_handle_t *handle, const char *sandboxuser)
 {
+	struct passwd const *pw = NULL;
 	CHECK_HANDLE(handle, return -1);
 	if(handle->sandboxuser) {
 		FREE(handle->sandboxuser);
 	}

+	if(sandboxuser != NULL) {
+		pw = getpwnam(sandboxuser);
+		if(pw == NULL) {
+			_alpm_log(handle, ALPM_LOG_DEBUG, "'sandboxuser' (%s) does not exist", sandboxuser);
+			return 1;
+		}
+	}
+
 	STRDUP(handle->sandboxuser, sandboxuser, RET_ERR(handle, ALPM_ERR_MEMORY, -1));

 	_alpm_log(handle, ALPM_LOG_DEBUG, "option 'sandboxuser' = %s\n", handle->sandboxuser);
@@ -935,6 +945,12 @@ int SYMEXPORT alpm_option_get_remote_file_siglevel(alpm_handle_t *handle)
 	}
 }

+int SYMEXPORT alpm_option_get_disable_dl_timeout(alpm_handle_t *handle)
+{
+	CHECK_HANDLE(handle, return -1);
+	return handle->disable_dl_timeout;
+}
+
 int SYMEXPORT alpm_option_set_disable_dl_timeout(alpm_handle_t *handle,
 		unsigned short disable_dl_timeout)
 {
@@ -952,10 +968,30 @@ int SYMEXPORT alpm_option_set_parallel_downloads(alpm_handle_t *handle,
 	return 0;
 }

-int SYMEXPORT alpm_option_set_disable_sandbox(alpm_handle_t *handle,
-		unsigned short disable_sandbox)
+int SYMEXPORT alpm_option_get_disable_sandbox_filesystem(alpm_handle_t *handle)
 {
 	CHECK_HANDLE(handle, return -1);
-	handle->disable_sandbox = disable_sandbox;
+	return handle->disable_sandbox_filesystem;
+}
+
+int SYMEXPORT alpm_option_set_disable_sandbox_filesystem(alpm_handle_t *handle,
+		unsigned short disable_sandbox_filesystem)
+{
+	CHECK_HANDLE(handle, return -1);
+	handle->disable_sandbox_filesystem = disable_sandbox_filesystem;
+	return 0;
+}
+
+int SYMEXPORT alpm_option_get_disable_sandbox_syscalls(alpm_handle_t *handle)
+{
+	CHECK_HANDLE(handle, return -1);
+	return handle->disable_sandbox_syscalls;
+}
+
+int SYMEXPORT alpm_option_set_disable_sandbox_syscalls(alpm_handle_t *handle,
+		unsigned short disable_sandbox_syscalls)
+{
+	CHECK_HANDLE(handle, return -1);
+	handle->disable_sandbox_syscalls = disable_sandbox_syscalls;
 	return 0;
 }
--- a/lib/libalpm/handle.h
+++ b/lib/libalpm/handle.h
@@ -1,7 +1,7 @@
 /*
 *  handle.h
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
@@ -23,6 +23,7 @@
 #include <stdio.h>
 #include <sys/types.h>
 #include <regex.h>
+#include <unistd.h>

 #include "alpm_list.h"
 #include "alpm.h"
@@ -57,6 +58,7 @@ struct _alpm_handle_t {
 	alpm_list_t *dbs_sync;  /* List of (alpm_db_t *) */
 	FILE *logstream;        /* log file stream pointer */
 	alpm_trans_t *trans;
+	uid_t user;

 #ifdef HAVE_LIBCURL
 	/* libcurl handle */
@@ -65,7 +67,8 @@ struct _alpm_handle_t {
 #endif

 	unsigned short disable_dl_timeout;
-	unsigned short disable_sandbox;
+	unsigned short disable_sandbox_filesystem;
+	unsigned short disable_sandbox_syscalls;
 	unsigned int parallel_downloads; /* number of download streams */

 #ifdef HAVE_LIBGPGME
--- a/lib/libalpm/hook.c
+++ b/lib/libalpm/hook.c
@@ -1,7 +1,7 @@
 /*
 *  hook.c
 *
- *  Copyright (c) 2015-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2015-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
--- a/lib/libalpm/hook.h
+++ b/lib/libalpm/hook.h
@@ -1,7 +1,7 @@
 /*
 *  hook.h
 *
- *  Copyright (c) 2015-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2015-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
--- a/lib/libalpm/libarchive-compat.h
+++ b/lib/libalpm/libarchive-compat.h
@@ -4,7 +4,7 @@
 /*
 * libarchive-compat.h
 *
- *  Copyright (c) 2013-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2013-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
--- a/lib/libalpm/log.c
+++ b/lib/libalpm/log.c
@@ -1,7 +1,7 @@
 /*
 *  log.c
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
--- a/lib/libalpm/log.h
+++ b/lib/libalpm/log.h
@@ -1,7 +1,7 @@
 /*
 *  log.h
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
--- a/lib/libalpm/package.c
+++ b/lib/libalpm/package.c
@@ -1,7 +1,7 @@
 /*
 *  package.c
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *  Copyright (c) 2005 by Aurelien Foret <orelien@chez.com>
 *  Copyright (c) 2005, 2006 by Christian Hamar <krics@linuxforum.hu>
--- a/lib/libalpm/package.h
+++ b/lib/libalpm/package.h
@@ -1,7 +1,7 @@
 /*
 *  package.h
 *
- *  Copyright (c) 2006-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2006-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *  Copyright (c) 2002-2006 by Judd Vinet <jvinet@zeroflux.org>
 *  Copyright (c) 2005 by Aurelien Foret <orelien@chez.com>
 *  Copyright (c) 2006 by David Kimpe <dnaku@frugalware.org>
--- a/lib/libalpm/pkghash.c
+++ b/lib/libalpm/pkghash.c
@@ -1,7 +1,7 @@
 /*
 *  pkghash.c
 *
- *  Copyright (c) 2011-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2011-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
--- a/lib/libalpm/pkghash.h
+++ b/lib/libalpm/pkghash.h
@@ -1,7 +1,7 @@
 /*
 *  pkghash.h
 *
- *  Copyright (c) 2011-2024 Pacman Development Team <pacman-dev@lists.archlinux.org>
+ *  Copyright (c) 2011-2025 Pacman Development Team <pacman-dev@lists.archlinux.org>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
--- a/lib/libalpm/po/POTFILES.in
+++ b/lib/libalpm/po/POTFILES.in
@@ -21,12 +21,14 @@ lib/libalpm/graph.c
 lib/libalpm/group.c
 lib/libalpm/handle.c
 lib/libalpm/hook.c
-#lib/libalpm/ini.c
 lib/libalpm/log.c
 lib/libalpm/package.c
 lib/libalpm/pkghash.c
 #lib/libalpm/rawstr.c
 lib/libalpm/remove.c
+lib/libalpm/sandbox.c
+lib/libalpm/sandbox_fs.c
+lib/libalpm/sandbox_syscalls.c
 lib/libalpm/signing.c
 lib/libalpm/sync.c
 lib/libalpm/trans.c
--- a/lib/libalpm/po/ar.po
+++ b/lib/libalpm/po/ar.po
@@ -17,7 +17,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2021-05-20 02:25+0000\n"
 "Last-Translator: Allan McRae <allan@archlinux.org>\n"
 "Language-Team: Arabic (http://www.transifex.com/toofishes/archlinux-pacman/"
@@ -49,17 +49,17 @@ msgstr "سأُنزِل الحزمة %s (من %s إلى %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr ""

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "تحذير عند الاستخراج %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "تعذّر استخراج %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "تعذر إعادة تسمية %s إلى %s (%s)\n"
@@ -102,18 +102,18 @@ msgstr "الاستخراج: عدم الكتابة فوق المجلد بالمل
 msgid "unable to extract %s.pacnew: path too long"
 msgstr ""

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "غير  قادر على جلب مجلد العمل الحالي\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "غير قادر على تحويل المجلد إلى %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "تعذر استعادة مجلد العمل (%s)\n"
@@ -153,7 +153,7 @@ msgstr "تجري إزالة قاعدة البيانات الغير صالحة: %
 msgid "could not create directory %s: %s\n"
 msgstr "غير قادر على إنشاء الدليل %s : %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "مدخل قاعدة بيانات غير صالح '%s'\n"
@@ -175,18 +175,18 @@ msgstr "نوع التّحقق غير مألوف في الحزمة %s: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "غير قادر على فتح اللمف %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s قاعدة البيانات غير متناسقة : اسم الحزمة غير مطابق %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "%s قاعدة البيانات غير متناسقة : إصدار الحزمة غير مطابق %s\n"
@@ -247,7 +247,7 @@ msgstr "معلومات الحزمة مفقودة في %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "فشل في قراءة ملف التّوقيع: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "مفتاح ضروري غير موجود في حلقة المفاتيح\n"
@@ -257,32 +257,32 @@ msgstr "مفتاح ضروري غير موجود في حلقة المفاتيح\n
 msgid "removing invalid file: %s\n"
 msgstr "يجري حذف ملف غير صالح: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "تعذّر تحليل ملف وصف الحزمة '%s' من قاعدة البيانات '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr ""

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "%s قاعدة البيانات غير متناسقة : اسم ملف الحزمة غير قانوني %s\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "%s قاعدة البيانات غير متناسقة : اسم ملف الحزمة طويل جدًا %s\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "ملف قاعدة البيانات مجهول : %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -367,58 +367,58 @@ msgstr "غير قادر على تحديد نقطة وصل الجذر %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "القسم %s موصول بصفة القراءة فقط\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
-msgstr "غير قادر على إنشاء ملف مؤقت للتحميل\n"
+msgstr ""

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "القرص"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "فشل في استقبال الملف '%s' من %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr "فشل في استقبال الملف '%s' من %s : تم تجاوز حجم التحميل\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s يبدو غير موثوقًا: %jd/%jd بايت\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "العنوان '%s' غير صالح\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -433,12 +433,17 @@ msgstr "تعذّر التعديل على مجلد الجذر (%s)\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, fuzzy, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "تعذر إعادة تسمية %s إلى %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "تعذّر استقبال بعض الملفات\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -674,51 +679,56 @@ msgid "conflicting files"
 msgstr "ملفات متضاربة"

 #: lib/libalpm/error.c:142
+#, fuzzy, c-format
+msgid "failed to initialize download"
+msgstr "غير قادر على إنشاء ملف مؤقت للتحميل\n"
+
+#: lib/libalpm/error.c:144
 #, c-format
 msgid "failed to retrieve some files"
 msgstr "فشل في استقبال بعض الملفات"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "تعبير غير نظامي"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "خطا في مكتبة الارشيف"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "خطأ في مكتبة التحميل"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "خطأ gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "خطأ في استحضار المحمّل الخارجي"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "خطأ غير متوقع"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "الملف المغلق مفقود  %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "تعذّر إزالة ملف القفل %s\n"
@@ -800,7 +810,7 @@ msgstr "تعذّر فتح المجلد: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr ""

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "تعذّر إحصاء الملف %s: %s\n"
@@ -884,94 +894,177 @@ msgstr "تعذّر إزالة مدخل قاعدة البيانات %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "تعذر إزالة المدخل '%s' من المخبئيات\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr ""

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr ""

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr ""

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "التوقيع المطلوب مفقود :%s\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr ""

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr ""

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr ""

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr ""
@@ -1021,27 +1114,27 @@ msgstr "حدثت تعارضات حزميّة تعذّر تحليلها\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr ""

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "لا توجد مساحة خالية كافية على القرص\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "تعذّر بدء مُبادلة الإزالة\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "فشل في بدء المُبادلة\n"
@@ -1068,12 +1161,12 @@ msgstr ""
 msgid "could not remove tmpdir %s\n"
 msgstr "تعذّر إزالة المجلد المؤقّت %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "تعذّرت الكتابة إلى الأنبوب (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "تعذّرت القراءة من الأنبوب (%s)\n"
@@ -1127,3 +1220,23 @@ msgstr "لا يوجد %s مخبئي، يجري الإنشاء...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "تعذّر إيجاد أو إنشاء مخبئية للحزم ، استخدم %s بدلًا عنها\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/ast.po
+++ b/lib/libalpm/po/ast.po
@@ -12,7 +12,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Ḷḷumex03, 2014\n"
 "Language-Team: Asturian (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -43,17 +43,17 @@ msgstr "baxando de versión el paquete %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "nun pue allugase l'oxetu del archivu del discu"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "alvertencia dada al estrayer el paquete %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "nun pudo estrayese %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "nun pudo renomase %s a %s (%s)\n"
@@ -98,18 +98,18 @@ msgstr "estración: nun pue sobrescribise'l direutoriu col ficheru %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "nun pue estrayese %s.pacnew: camín perllargu"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "nun pudo consiguise'l direutoriu de trabayu actual\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "nun pudo cambiase'l direutoriu a %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "nun pudo restaurase'l direutoriu de trabayu (%s)\n"
@@ -149,7 +149,7 @@ msgstr "desaniciando base de datos non válida: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "nun pudo crease'l direutoriu %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "nome non válidu pa la base de datos '%s'\n"
@@ -171,19 +171,19 @@ msgstr "triba de validación desconocida pal paquete %s: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "nun pudo abrise'l ficheru %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr ""
 "la base de datos %s ye inconsistente: el nome nun concasa nel paquete %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -245,7 +245,7 @@ msgstr "datos meta de paquete faltantes en %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "fallu al lleer el ficheru de robla: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "clave riquida del aniellu claves faltante\n"
@@ -255,36 +255,36 @@ msgstr "clave riquida del aniellu claves faltante\n"
 msgid "removing invalid file: %s\n"
 msgstr "desaniciando ficheru non válidu: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "nun pudo analizase'l ficheru de descripción del paquete '%s' de la base de "
 "datos '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr ""

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "la base de datos %s ye inconsistente: el nome del paquete %s ye illegal\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "la base de datos %s ye inconsistente: el nome del paquete %s ye perllargu\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "ficheru de base de datos desconocíu: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -369,58 +369,58 @@ msgstr "nun pudo determinase'l puntu de montaxe root %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "La partición %s ta montada como namái llectura\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
-msgstr "fallu al crear el ficheru temporal pa la descarga\n"
+msgstr ""

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "discu"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "fallu recibiendo'l ficheru '%s' de %s: %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr "fallu recibiendo'l ficheru '%s' de %s: tamañu de descarga superáu\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr ""

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "l'enllaz '%s' ye inválidu\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -435,12 +435,17 @@ msgstr "nun pudo cambiase'l direutoriu root (%s)\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, fuzzy, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "nun pudo renomase %s a %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "fallu al recuperar dellos ficheros\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -676,51 +681,56 @@ msgid "conflicting files"
 msgstr "ficheros en conflictu"

 #: lib/libalpm/error.c:142
+#, fuzzy, c-format
+msgid "failed to initialize download"
+msgstr "fallu al crear el ficheru temporal pa la descarga\n"
+
+#: lib/libalpm/error.c:144
 #, c-format
 msgid "failed to retrieve some files"
 msgstr "fallu al recibir dello ficheros"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "espresión regular non válida"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "fallu de libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "fallu de llibrería de descarga"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "fallu de gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "fallu invocando'l descargador esternu"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "fallu inesperáu"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "falta'l ficheru de bloquéu %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "nun pudo desaniciase'l ficheru de bloquéu %s\n"
@@ -802,7 +812,7 @@ msgstr "nun pudo abrise'l direutoriu: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "nun pudo abrise'l ficheru: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr ""
@@ -884,94 +894,177 @@ msgstr "nun pudo desaniciase la entrada de la base de datos %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "nun pudo desaniciase la entrada '%s' de la caché\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr ""

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr ""

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr ""

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: falta la robla riquida\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr ""

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr ""

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr ""

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr ""
@@ -1021,27 +1114,27 @@ msgstr "deteutaos conflictos de paquete que nun puen iguase\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr ""

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "nun hai espaciu llibre abondu\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "nun pudo unviase la transaición de desaniciu\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "nun pudo unviase la transaición\n"
@@ -1066,12 +1159,12 @@ msgstr "nun pudo desaniciase %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "nun pudo desaniciase'l direutoriu temporal %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr ""

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr ""
@@ -1126,3 +1219,23 @@ msgstr "nun esiste'l caché %s, creando...\n"
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "nun pudo alcontrase o crease'l paquete caché, usando nel so llugar %s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/az_AZ.po
+++ b/lib/libalpm/po/az_AZ.po
@@ -3,16 +3,16 @@
 # This file is distributed under the same license as the libalpm package.
 #
 # Translators:
-# Xəyyam Qocayev <xxmn77@gmail.com>, 2021-2024
-# Xəyyam Qocayev <xxmn77@gmail.com>, 2021,2024
-# Xəyyam Qocayev <xxmn77@gmail.com>, 2021
+# xxmn77 <xxmn77@gmail.com>, 2021-2024
+# xxmn77 <xxmn77@gmail.com>, 2021,2024
+# xxmn77 <xxmn77@gmail.com>, 2021
 msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
-"Last-Translator: Xəyyam Qocayev <xxmn77@gmail.com>, 2021-2024\n"
+"Last-Translator: xxmn77 <xxmn77@gmail.com>, 2021-2024\n"
 "Language-Team: Azerbaijani (Azerbaijan) (http://app.transifex.com/toofishes/"
 "archlinux-pacman/language/az_AZ/)\n"
 "Language: az_AZ\n"
@@ -41,17 +41,17 @@ msgstr "%s paketi əvvəlki versiyaya endirilir (%s =>%s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "Disk arxiv obyekti təsis edilə bilmir"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "Çıxarılarkən verilən xəbərdarlıq %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "Çıxarıla bilmədi %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "%s adı, %s kimi dəyişdirilə bilmədi (%s)\n"
@@ -95,18 +95,18 @@ msgstr "çıxarmaq: %s faylı qovluğun üzərinə yazılmır\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "%s.pacnew çıxarıla bilmədi: yol çox uzundur"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "cari iş qovluğu alına bilmədi\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "kataloq, %s kimi dəyişdirilə bilmədi (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "iş kataloqu (%s) bərpa edilə bilmədi\n"
@@ -146,7 +146,7 @@ msgstr "səhv verilənlər bazası silinir: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "%s qovluğu yaradıla bilmədi: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "'%s ' verilənlər bazası qeydi üçün səhv ad\n"
@@ -168,19 +168,19 @@ msgstr "%s paketi üçün naməlum quraşdırma səbəbi: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "%s faylı açıla bilmədi: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr ""
 "%s verilənlər bazası ziddiyətlidir: %s paketindəki ad ilə uyğun deyil\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -242,7 +242,7 @@ msgstr "%s daxilində paket meta məlumatları çatışmır\n"
 msgid "failed to read signature file: %s\n"
 msgstr "imza faylı oxuna bilmədi: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "lazımi açar, açarlar bağında yoxdur\n"
@@ -252,34 +252,34 @@ msgstr "lazımi açar, açarlar bağında yoxdur\n"
 msgid "removing invalid file: %s\n"
 msgstr "səhv fayl silinir: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "'%s' açıqlama faylı '%s' veri. bazasından təhlil edilə bilmədi\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "'%s' veri. bazası oxuna bilmədi (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "%s verilənlər bazası ziddiyətlidir: %s paketinin fayl_adı yararsızdır\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "%s verilənlər bazası ziddiyətlidir: %s paketinin fayl_adı çox uzundur\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "bilinməyən verilənlər bazası faylı: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr "%s: eyniləşdirmə üçün verilənlər bazasında \"%s\"  açarı naməlumdur\n"
@@ -364,59 +364,59 @@ msgstr "%s qoşulma nöqtəsi kök qovluğu aşkarlana bilmədi\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "%s bölməsi yalnız oxumaq üçün qoşuldu\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "endirmək üçün müvəqqəti fayl yaradıla bilmədi\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr "%s-dən/dan çoxlu xətalar,  bu əməliyyatın qalanları ötürülür\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr "%s ilə ciddi xəta baş verdi, bu əməliyyatın qalan hissəsi ötürülür\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disk"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "'%s' faylının '%s'dən/dan alınması uğursuz oldu: %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "'%s' faylının '%s'dən/dan alınması uğursuz oldu: gözlənilən ölçünü aşdı\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s əksik görünür: %jd/%jd bayt\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "url '%s' səhvdir\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "%s üçün endirmə yükü ayarlandı\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl əməliyyatdan %d xətası ilə cavab verdi\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "curl əməliyyat xətası: %d\n"
@@ -431,12 +431,17 @@ msgstr "%s endirmə kataloquna keçilə bilmədi\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr "\"%s\"  təcrid mühiti istifadəçisinə keçid uğursuz oldu!\n"

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "bəzi fayllar alına bilmədi\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "endirmə uğurla tamamlandı, lakin keşdə fayl yoxdur\n"
@@ -673,50 +678,55 @@ msgstr "ziddiyyətli fayllar"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "bəzi fayllar alına bilmədi"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "səhv müntəzəm ifadə"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "kitabxana arxivi xətası"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "ktabxananın endirilməsi xətası"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme xətası"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "xarici yükləyicinin çağırılmasında xəta"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "imza dəstəklənmədən tərtib edilib"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "gözlənilməz xəta"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "kilid faylı çatışmır %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "%s kilid faylı silinə bilmədi\n"
@@ -798,7 +808,7 @@ msgstr "kataloq açıla bilmədi: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "fayl açıla bilmədi: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "%s faylı başladıla bilmədi: %s\n"
@@ -888,94 +898,177 @@ msgstr "%s-%s verilənlər baası qeydi silinə bilmədi\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "'%s' qeydi keşdən silinə bilmədi\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Açıq açarlar bağı tapılmadı; '%s' başlatdınızmı?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "GPGME xətası: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "WKD istifadə edərək %s açarının axtarıılması\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "gpg xətası: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "açar bağı yazıla bilən deyil\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "açar serverində \"%s\" açarı\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "açar \"%s\" idxal edilə bilmədi\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "açar \"%s\" uzaqdan axtarıla bilmədi\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: tələb olunana imza çatışmır\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: \"%s\"-dən alınan imza olduqca etibrlıdır\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: \"%s\"-dən alınan imzanın etibarlılığı naməlumdur\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: \"%s\"-dən alınnan imza heç vaxt etibarlı ola bilməz\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: \"%s\" açarı bilinməyəndir\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: \"%s\" açarı söndürülüb\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: \"%s\"-dən alınana imzanın vaxtı bitib\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: \"%s\" açarı bilinməyəndir\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: \"%s\" açarı söndürülüb\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: \"%s\"-dən alınan imza səhvdir\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: imza formatı xətası\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: dəstəklənməyən imza formatı\n"
@@ -1027,27 +1120,27 @@ msgstr ""
 "\"%s-%s\" hədəf siyahısından silinir, çünki o, \"%s-%s\" ilə ziddiyyət "
 "təşkil edir\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr "%s: keşdə paketi tapmaq mümkün olmadı\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "%s faylı oxuna bilmədi: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "kifayət qədər boş diks sahəsi yoxdur\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "silinmə əməliyyatı tamamlana bilmədi\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "əməliyyat tamamlana bilmədi\n"
@@ -1072,12 +1165,12 @@ msgstr "%s silinə bilmədi\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "%s müvəqqəti qovluğu silinə bilmədi\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "kanala yazıla bilmədi (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "kanaldan oxuna bilmədi (%s)\n"
@@ -1131,3 +1224,23 @@ msgstr "keş %s mövcud deyil, yaradılır...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "paket keşi tapılmadı və yaradıla bilmədi, əvəzinə %s istifadə olunur\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/bg.po
+++ b/lib/libalpm/po/bg.po
@@ -9,7 +9,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Galin Iskrenov <loot270@abv.bg>, 2017-2019,2022,2024\n"
 "Language-Team: Bulgarian (http://app.transifex.com/toofishes/archlinux-"
@@ -40,17 +40,17 @@ msgstr "понижаване на пакет %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "не се открие указания архив на диск"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "има предупреждение при извличане %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "не може да се извлече %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "не може да се преименува %s на %s (%s)\n"
@@ -95,18 +95,18 @@ msgstr "извличане: не се презаписва папка с фай
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "неспешно извличането на %s.pacnew: пътят е твърде дълъг"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "не може да се разбере текущата директория\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "не може да се смени директория на %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "не може да се възстанови работната директория (%s)\n"
@@ -146,7 +146,7 @@ msgstr "премахване на невалидна база: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "не се създава директория %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "невалидно име за запис в базата '%s'\n"
@@ -168,18 +168,18 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "не се отваря файл %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s несъответствие в базата: името не съответства на пакета %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "%s несъответствие в базата: версията не съответства на пакета %s\n"
@@ -240,7 +240,7 @@ msgstr "липсват метаданни за пакета %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "не се чете подписващият файл: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "нужния ключ липсва от keyring\n"
@@ -250,32 +250,32 @@ msgstr "нужния ключ липсва от keyring\n"
 msgid "removing invalid file: %s\n"
 msgstr "премахване невалиден файл: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "не може да се анализира описателния файл '%s' от db '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "не да се прочете db '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "%s базата е непълна: името на пакета %s е  недопустимо\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "%s базата е непълна: името на пакета %s е твърде дълго\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "непознат датабаза файл: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -362,60 +362,60 @@ msgstr "не може да се определи root mount point %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Дялът %s е монтиран само за четене\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "не може да се създаде временен файл за сваляне\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr "твърде много грешки от %s, прескачане на останалото от транзакцията\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr "фатална грешка от %s, прескачам остатъка от тази транзакция\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "диск"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "неуспех при извличане на файл '%s' от %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "неуспех при получаването на файл '%s' от %s : очакваният размер за сваляне е "
 "надвишен\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s изглежда частичен: %jd/%jd bytes\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "url '%s' е невалиден\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "Неуспешно настройване на нужното за изтегляне %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl върна грешка %d при трансфера\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "curl трансферна грешка: %d\n"
@@ -430,12 +430,17 @@ msgstr "неуспех на chdir до директория за сваляне
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "неуспех при извличане на файлове\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "изтеглянето завърши успешно, но няма файл в кеша\n"
@@ -672,50 +677,55 @@ msgstr "файлове в конфликт"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "не могат да се извлекат файлове"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "невалиден регулярен израз"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "грешка в libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "грешка в библиотеката за сваляне"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "грешка в gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "грешка при извикването на външен downloader"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "компилиран без поддръжка на подпис"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "неочаквана грешка"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "липсва заключващ файл %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "не се премахва заключен файл %s\n"
@@ -797,7 +807,7 @@ msgstr "не се отваря папка: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "не може да се отвори файл: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "не се коригира %s: %s\n"
@@ -879,94 +889,177 @@ msgstr "не може да се премахне запис в базата %s-%
 msgid "could not remove entry '%s' from cache\n"
 msgstr "не може да се премахне '%s' от кеша\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Публичният ключодържател не е открит; Ще пуснете ли '%s'?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "GPGME грешка: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "търсене на ключ %s използвайки WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "gpg грешка: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "ключодържателя не се записва\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "ключ \"%s\" на ключов съвър\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "ключ \"%s\" не може да се внесе\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "ключ \"%s\" не може да се прегледа отдалечено\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: липсва изискващ се подпис\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: подписът от \"%s\" е изрично доверен\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: подписът от \"%s\" е с непознато доверие\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: подписът от \"%s\" никога да не се му вярва\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: ключ \"%s\" е непознат\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: ключа е \"%s\" е негоден\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: подписът от \"%s\" е изтекъл\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: ключ \"%s\" е непознат\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: ключа е \"%s\" е негоден\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: подписът от \"%s\" е невалиден\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: грешен формат на подписа\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: неподдържан формат на подписа\n"
@@ -1017,27 +1110,27 @@ msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""
 "Премахване на '%s-%s' от целевия списък, защото противоречи на '%s-%s'\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr "%s: не можах да намеря пакет в кеша\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "не успя да се прочете файла %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "няма достатъчно свободно място на диска\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "не се потвърждава транзакцията по премахване\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "не се потвърждава транзакцията\n"
@@ -1062,12 +1155,12 @@ msgstr "не се премахва %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "не се премахва tmpdir %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "неъспешно записването в тръбата (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "неуспешно четенето от тръбата (%s)\n"
@@ -1121,3 +1214,23 @@ msgstr "не %s съществуваш кеш, създаване...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "не се открива или създава пакетен кеш, използва се %s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/br.po
+++ b/lib/libalpm/po/br.po
@@ -9,7 +9,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Gwenn M <tornoz@laposte.net>, 2015,2018-2019\n"
 "Language-Team: Breton (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -44,17 +44,17 @@ msgstr "o pellgargañ ar pakad %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "n'haller ket derannañ an ergorenn kantenn diell"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "ur galv diwall a zo bet roet en ur eztennañ %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "n'haller ket eztennañ %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "n'haller ket adenvel %s e %s (%s)\n"
@@ -99,18 +99,18 @@ msgstr "eztannadur : flastradur kavlec'h gant restr %s ebet \n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "n'haller ket eztennañ %s.pacnew : re hir eo an treug"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "n'haller ket kaout ar c'havlec'h labour bremanel\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "n'haller ket kemmañ ar c'havlec'h da %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "n'haller ket assav ar c'havlec'h labour (%s)\n"
@@ -150,7 +150,7 @@ msgstr "o dilemel ar stlennvon direizh : %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "n'haller ker krouiñ ar c'havlec'h %s : %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "anv direizh evit an enankad stlennvon '%s'\n"
@@ -172,18 +172,18 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "n'haller ket digeriñ ar restr %s : %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "digantalc'hek eo ar stlennvon %s : digenglotus eo anvioù ar pakad %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -245,7 +245,7 @@ msgstr "mankout a ra metaroadennoù ar pakad e %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "fazi en ul lenn ar restr sinadur : %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "mankout a ra an alc'hwez goulennet en droñsell\n"
@@ -255,34 +255,34 @@ msgstr "mankout a ra an alc'hwez goulennet en droñsell\n"
 msgid "removing invalid file: %s\n"
 msgstr "o dilemel ar restr direizh : %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "n'haller ket dezrannañ ar restr deskrivadur pakadoù '%s' adalek ar sv '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "n'haller ket lenn ar stlennvon '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "digantalc'hek eo ar stlennvon %s : didalvoudek eo anv restr ar pakad %s\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "digantalc'hek eo ar stlennvon %s : re hir eo anv restr ar pakad %s\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "restr stlennvon dianav : %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -368,60 +368,60 @@ msgstr "n'haller ket despizañ poent kenstrollañ ar gwrizienn %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "E mod lenn nemetken eo kenstrollet ar parzhad %s\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "fazi en ur c'hrouiñ ar restr padennek evit ar pellgargañ\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "pladenn"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "fazi en ur adkavout ar restr '%s' adalek %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "fazi en ur adkavout ar restr '%s' adalek %s : re vras eo ment ar "
 "pellgargadur\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "krennet e seblant bezañ %s : %jd/%jd eizhbit\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "direizh eo an url '%s'\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -436,12 +436,17 @@ msgstr "n'heller ket erounit chdir evit pellgargañ ar c'havlec'h %s\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "c'hwitadenn war atoradur restroù 'zo\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -679,50 +684,55 @@ msgstr "tabut er restroù"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "c'hwitadenn war atoradur restroù 'zo"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "direizh eo ar bomm reol"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "fazi libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "pellgargañ fazi al levraoueg"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "fazi gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "fazi en ur gervel ar pellgarger diavaez"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "fazi dic'hortoz"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "mankout a ra ar restr marilhañ %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "n'haller ket dilemel ar restr marilhañ %s\n"
@@ -804,7 +814,7 @@ msgstr "n'haller ket digeriñ ar c'havlec'h : %s : %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "n'haller ket digeriñ ar restr: %s %s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "n'heller ket kaout stad ar restr %s : %s\n"
@@ -886,94 +896,177 @@ msgstr "n'haller ket dilemel an enankad stlennvon %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "n'haller ket dilemel an enankad '%s' eus ar c'hrubuilh\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Ne gaver ket an droñsell foran; lañset ho peus '%s'?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "Fazi GPGME: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "n'haller ket skrivañ en droñsell\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr ""

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr ""

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s : mankout a ra ar sinadur dleet\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: mentrezh ar sinadur \"%s\" n'eo ket fizius-tre\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: dianav zo an alc'hwez \"%s\"\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr ""

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: dianav zo an alc'hwez \"%s\"\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr ""

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr ""

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: mentrezh sinadur anskor\n"
@@ -1023,27 +1116,27 @@ msgstr "tabutoù n'haller ket diskoulmañ a zo bet dinoet\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr ""

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "n'eus ket plas dieub a-walc'h war ar bladenn\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "n'haller ket erounit an treuzkas dilemel\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "n'haller ket erounit an treuzkas\n"
@@ -1068,12 +1161,12 @@ msgstr "n'haller ket dilemel %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "n'haller ket dilemel ar c'havlec'h padennek e %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "n'haller ket skrivañ er gorzenn (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "n'haller ket lenn ar gorzenn (%s)\n"
@@ -1129,3 +1222,23 @@ msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "n'haller ket kavout pe implijout ar c'hrubuilh pakad, oc'h implijout %s e "
 "plas\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/ca.po
+++ b/lib/libalpm/po/ca.po
@@ -10,15 +10,15 @@
 # Josep <jpreales@gmail.com>, 2011,2013
 # Josep <jpreales@gmail.com>, 2011,2013
 # Josep <jpreales@gmail.com>, 2011
-# Davidmp <medipas@gmail.com>, 2015-2019,2021,2023-2024
+# Davidmp <medipas@gmail.com>, 2015-2019,2021,2023-2025
 # Ramon Buldó <rbuldo@gmail.com>, 2014
 msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
-"Last-Translator: Davidmp <medipas@gmail.com>, 2015-2019,2021,2023-2024\n"
+"Last-Translator: Davidmp <medipas@gmail.com>, 2015-2019,2021,2023-2025\n"
 "Language-Team: Catalan (http://app.transifex.com/toofishes/archlinux-pacman/"
 "language/ca/)\n"
 "Language: ca\n"
@@ -47,17 +47,17 @@ msgstr "Es degrada el paquet %s (%s => %s).\n"
 msgid "cannot allocate disk archive object"
 msgstr "no es pot assignar l'objecte d'arxiu del disc."

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "avís en extreure %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "no s'ha pogut extreure %s (%s).\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "no s'ha pogut canviar el nom %s a %s (%s).\n"
@@ -102,18 +102,18 @@ msgstr "extracció: no se sobreescriurà el directori amb el fitxer %s.\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "no es pot extreure %s.pacnew: camí massa llarg."

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "no s'ha pogut obtenir el directori de treball actual.\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "no s'ha pogut canviar el directori a %s (%s).\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "no s'ha pogut restaurar el directori de treball (%s).\n"
@@ -153,7 +153,7 @@ msgstr "Se suprimeix la base de dades no vàlida: %s.\n"
 msgid "could not create directory %s: %s\n"
 msgstr "no s'ha pogut crear el directori %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "nom no vàlid per a l'entrada de la base de dades \"%s\".\n"
@@ -175,19 +175,19 @@ msgstr "raó d'instal·lació desconeguda per al paquet %s:%s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "no s'ha pogut obrir el fitxer %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr ""
 "la base de dades %s és inconsistent: no coincidència de nom al paquet %s.\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -250,7 +250,7 @@ msgstr "manquen les metadades del paquet a %s.\n"
 msgid "failed to read signature file: %s\n"
 msgstr "ha fallat llegir el fitxer de signatures: %s.\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "la clau requerida manca al clauer.\n"
@@ -260,35 +260,35 @@ msgstr "la clau requerida manca al clauer.\n"
 msgid "removing invalid file: %s\n"
 msgstr "Se suprimeix el fitxer no vàlid %s.\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "no s'ha pogut analitzar el fitxer de descripció de paquet \"%s\" de la base "
 "de dades \"%s\".\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "no s'ha pogut llegir la base de dades \"%s\" (%s).\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "La base de dades %s és inconsistent: nom erroni al paquet %s.\\n\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "La base de dades %s és inconsistent: el nom del paquet %s és massa llarg\\n\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "fitxer de base de dades desconegut: %s.\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr "%s: clau desconeguda %s a la base de dades sincronitzada\n"
@@ -377,61 +377,61 @@ msgstr ""
 msgid "Partition %s is mounted read only\n"
 msgstr "La partició %s està muntada només en mode de lectura.\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "ha fallat crear un fitxer temporal per a la baixada.\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""
 "hi ha massa errors de %s, s'ometen per a la resta d'aquesta transacció\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr "error fatal de %s, s'omet la resta d'aquesta transacció.\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disc"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "ha fallat la recuperació del fitxer \"%s\" des de %s: %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "ha fallat recuperar el fitxer \"%s\" des de %s: mida de la baixada superior "
 "a l'esperada.\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s sembla que està truncat: %jd/%jd bytes.\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "l'url \"%s\" no és vàlid.\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "ha fallat configurar una càrrega de baixada per a %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl ha retornat l'error %d de la transferència\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "error de transferència de curl: %d\n"
@@ -444,14 +444,19 @@ msgstr "no s'ha pogut canviar al directori de baixades %s.\n"
 #: lib/libalpm/dload.c:968
 #, c-format
 msgid "switching to sandbox user '%s' failed!\n"
-msgstr "ha fallat canviar a l'usuari d'entorn de proves %s!\n"
+msgstr "ha fallat canviar a l'usuari d'entorn controlat %s!\n"

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "no s'ha pogut moure %s dins %s (%s).\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "ha fallat la recuperació d'alguns fitxers.\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -505,7 +510,7 @@ msgstr "la biblioteca ja s'ha iniciat."
 #: lib/libalpm/error.c:59
 #, c-format
 msgid "unable to lock database"
-msgstr "no s'ha pogut bloquejar la base de dades."
+msgstr "no s'ha pogut blocar la base de dades."

 #: lib/libalpm/error.c:62
 #, c-format
@@ -605,8 +610,7 @@ msgstr "l'operació no és compatible amb el tipus de transacció."
 #: lib/libalpm/error.c:104
 #, c-format
 msgid "transaction commit attempt when database is not locked"
-msgstr ""
-"intent de publicació de la transacció amb la base de dades no bloquejada."
+msgstr "intent de publicació de la transacció amb la base de dades no blocada."

 #: lib/libalpm/error.c:106
 #, c-format
@@ -690,53 +694,58 @@ msgstr "fitxers conflictius."

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr "ha fallat iniciar la baixada."
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "ha fallat la recuperació d'alguns fitxers."

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "expressió regular no vàlida."

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "error de libarchive."

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "error de la biblioteca de baixades."

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "error de gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "error en invocar el baixador extern."

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "compilat sense suport de signatura."

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "error inesperat."

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
-msgstr "manca el fitxer de bloqueig %s.\n"
+msgstr "manca el fitxer de blocatge %s.\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
-msgstr "no s'ha pogut suprimir el fitxer de bloqueig %s.\n"
+msgstr "no s'ha pogut suprimir el fitxer de blocatge %s.\n"

 #: lib/libalpm/hook.c:95
 #, c-format
@@ -815,7 +824,7 @@ msgstr "no s'ha pogut obrir el directori: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "no s'ha pogut obrir el fitxer: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "no s'ha pogut determinar l'estat del fitxer %s: %s\n"
@@ -908,94 +917,196 @@ msgstr "no s'ha pogut suprimir l'entrada de la base de dades %s-%s.\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "no s'ha pogut suprimir l'entrada \"%s\" de la memòria cau.\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+"la restricció de l'accés al sistema de fitxers ha fallat perquè el nucli no "
+"admet Landlock!\n"
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER no és compatible.\n"
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE no és compatible.\n"
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+"la restricció de l'accés al sistema de fitxers ha fallat perquè no s'ha "
+"pogut crear el conjunt de regles de Landlock: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+"l'obertura del sistema de fitxers d'arrel per fer-lo de només lectura "
+"mitjançant Landlock ha fallat: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+"la restricció de l'accés al sistema de fitxers ha fallat perquè no s'ha "
+"pogut afegir la regla de Landlock per a /: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+"ha fallat obrir el directori de baixades per fer-lo escrivible mitjançant "
+"Landlock:\n"
+"%s\n"
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+"la restricció de l'accés al sistema de fitxers ha fallat perquè no s'ha "
+"pogut aplicar el conjunt de regles de Landlock: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+"la restricció de l'accés al sistema de fitxers ha fallat perquè no s'ha "
+"pogut afegir la regla de Landlock per al directori de baixades temporal:\n"
+"%s\n"
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+"l'accés al sistema de fitxers s'ha restringit a %s, Landlock ABI és %d\n"
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+"error en iniciar seccomp per filtrar les crides del sistema a l'entorn "
+"controlat de baixada\n"
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr "error en restringir la crida al sistema %s mitjançant seccomp!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr "error en restringir les crides al sistema mitjançant seccomp: %d!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr "%d crides al sistema restringides correctament mitjançant seccomp\n"
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "No s'ha trobat el clauer públic. Heu executat \"%s\"?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "error de GPGME: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "se cerca la clau %s amb WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "error de gpg: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "el clauer no és escrivible.\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "clau \"%s\" al servidor de claus\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "la clau \"%s\" no s'ha pogut importar.\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "la clau \"%s\" no s'ha pogut cercar remotament.\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: manca la signatura requerida.\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: la signatura de \"%s\" és de confiança marginal.\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s:  la signatura de \"%s\" és de confiança desconeguda.\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: en la signatura de \"%s\" no s'hi hauria de confiar mai.\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: la clau \"%s\" és desconeguda.\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: la clau \"%s\" està inhabilitada.\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: la signatura de \"%s\" està caducada.\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: la clau \"%s\" és desconeguda.\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: la clau \"%s\" està inhabilitada.\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: la signatura de \"%s\" no és vàlida.\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: error de format de la signatura.\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: format de la signatura no admès.\n"
@@ -1046,27 +1157,27 @@ msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""
 "Se suprimeix %s-%s de la llista d'objectius perquè té conflicte amb %s-%s.\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr "%s: no s'ha pogut trobar el paquet a la memòria cau.\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "ha fallat llegir el fitxer %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "no hi ha prou espai de disc lliure.\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "no s'ha pogut fer la transacció de supressió.\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "no s'ha pogut fer la transacció.\n"
@@ -1091,12 +1202,12 @@ msgstr "no s'ha pogut suprimir %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "no s'ha pogut suprimir el directori temporal %s.\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "no es pot escriure al conducte (%s).\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "no es pot llegir des del conducte (%s).\n"
@@ -1152,3 +1263,25 @@ msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "No s'ha pogut trobar o crear el paquet de memòria cau; en lloc d'això, "
 "s'usa%s.\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr "l'usuari de baixada %s no existeix.\n"
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr "ha fallat obtenir l'usuari de baixada %s: %s\n"
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr "ha fallat crear el directori de baixades temporal %s: %s\n"
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
+"ha fallat canviar de propietari el directori de baixades temporal\n"
+"%s: %s\n"
--- a/lib/libalpm/po/cs.po
+++ b/lib/libalpm/po/cs.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Vojtěch Gondžala <vojtech.gondzala@gmail.com>, 2011,2013\n"
 "Language-Team: Czech (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -52,17 +52,17 @@ msgstr "snížení verze balíčku %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "nemohu alokovat objekt archivu na disku"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "varování při rozbalování %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "nelze rozbalit %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "nelze přejmenovat %s na %s (%s)\n"
@@ -106,18 +106,18 @@ msgstr "rozbalení: adresář nebyl přepsán souborem %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "nelze rozbalit %s.pacnew: příliš dlouhá cesta"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "nelze určit aktuální pracovní adresář\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "nelze změnit adresář na %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "nelze obnovit pracovní adresář (%s)\n"
@@ -157,7 +157,7 @@ msgstr "odstraňuje se chybná databáze: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "nelze změnit adresář %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "chybný název záznamu v databázi '%s'\n"
@@ -179,18 +179,18 @@ msgstr "neznámý důvod instalace balíčku %s: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "nelze otevřít soubor %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "databáze %s je nekonzistentní: nesouhlasí jméno balíčku %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "databáze %s je nekonzistentní: nesouhlasí verze balíčku %s\n"
@@ -251,7 +251,7 @@ msgstr "chybí metadata balíčku v %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "nelze načíst soubor s podpisy: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "požadovaný klíč není v klíčence\n"
@@ -261,32 +261,32 @@ msgstr "požadovaný klíč není v klíčence\n"
 msgid "removing invalid file: %s\n"
 msgstr "odstraněn neplatný soubor: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "nelze načíst soubor s popisem balíčku '%s' z databáze '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "nelze přečíst databázi '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "databáze %s je nekonzistentní: jméno balíčku %s je nepřípustné\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "databáze %s je nekonzistentní: jméno balíčku %s je příliš dlouhé\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "neznámý soubor databáze: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr "%s: neznámý klíč '%s' v sync databázi\n"
@@ -371,60 +371,60 @@ msgstr "nepodařilo se určit kořen přípojného bodu %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Diskový oddíl %s je připojen jen pro čtení\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "nepodařilo se vytvořit dočasný soubor pro stahování\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr "příliš mnoho chyb v %s, vynechání pokračování této transakce\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr "fatální chyba v %s, vynechání pokračování této transakce\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disk"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "selhalo získání souboru '%s' z %s: %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "selhalo získání souboru '%s' z %s : překročení očekávané velikosti "
 "stahování\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s se zdá být zkrácen:  %jd/%jd bytů\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "URL '%s' je chybná\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "nepodařilo se nastavit datovou část stahování pro %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "chyba %d v curl při přenosu\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "chyba přenosu curl : %d\n"
@@ -432,19 +432,24 @@ msgstr "chyba přenosu curl : %d\n"
 #: lib/libalpm/dload.c:963
 #, c-format
 msgid "could not chdir to download directory %s\n"
-msgstr ""
+msgstr "nemohu přejít do složky stahování %s\n"

 #: lib/libalpm/dload.c:968
 #, c-format
 msgid "switching to sandbox user '%s' failed!\n"
-msgstr ""
+msgstr "přepnutí do sandboxu uživatele '%s' selhalo!\n"

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "nelze přesunout %s do %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "selhalo získání některých souborů\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "stahování úspěšně dokončeno, ale soubor nenalezen v mezipaměti\n"
@@ -681,50 +686,55 @@ msgstr "konfliktní soubory"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr "selhání inicializace stahování"
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "selhalo získání některých souborů"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "nesprávný regulární výraz"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "chyba knihovny libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "chyba knihovny pro stahování souborů"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "chyba v gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "chyba volání externího programu pro stahování souborů"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "zkompilováno bez podpory podepisování"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "neočekávaná chyba"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "chybí soubor zámku %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "nelze odstranit zamykací soubor %s\n"
@@ -806,7 +816,7 @@ msgstr "nelze otevřít složku: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "nelze otevřít soubor: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "nelze najít soubor %s: %s\n"
@@ -893,94 +903,190 @@ msgstr "nelze odstranit záznam databáze %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "nelze odstranit položku '%s' z mezipaměti\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+"omezení přístupu k systému souborů selhalo protože Landlock není podporován "
+"kernelem\n"
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER není podporován\n"
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE není podporován\n"
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+"omezení přístupu k systému souborů selhalo protože nelze vytvořit soubor "
+"pravidel pro Landlock: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+"otevření kořene systému souborů pouze pro čtení pomocí Landlocku selhalo: "
+"%s\n"
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+"omezení přístupu k systému souborů selhalo protože pravidlo Landlock pro / "
+"nelze přidat: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr "otevření složky stahování pro zápis přes Landlock selhalo: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+"omezení přístupu k systému souborů selhalo protože soubor pravidel Landlock "
+"nelze aplikovat: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+"omezení přístupu k systému souborů selhalo protože pravidlo Landlock pro "
+"dočasnou složku stahování nemohlo být přidáno: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr "přístup k systému souborů byl omezen na %s, Landlock ABI je %d\n"
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+"chyba inicializace seccomp filtru systémových volání pro sandbox stahování!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr "chyba omezení systémového volání %s přes seccomp!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr "chyba omezení systémových volání přes seccomp: %d!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr "úspěšně omezena systémová volání %d přes seccomp\n"
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Nebyla nalezena veřejná klíčenka; spustili jste '%s'?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "Chyba GPGME: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "vyhledávání klíče %s pomocí WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "chyba gpg: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "do klíčenky nelze zapisovat\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "klíč \"%s\" na serveru\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "klíč \"%s\" se nepodařilo importovat\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "klíč \"%s\" nebylo možné vzdáleně vyhledat\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: chybí vyžadovaný podpis\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: podpis od \"%s\" má částečnou důvěru\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: u podpisu od \"%s\" není známá úroveň důvěry\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: podpis od \"%s\" je nedůvěryhodný\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: klíč \"%s\" je neznámý\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: klíč \"%s\" je zakázán\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: podpisu od \"%s\" vypršela platnost\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: klíč \"%s\" je neznámý\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: klíč \"%s\" je zakázán\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: podpis od \"%s\" je neplatný\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: chyba formátu podpisu\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: nepodporovaný formát podpisu\n"
@@ -1031,27 +1137,27 @@ msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""
 "odstraňuji '%s-%s' z cílového seznamu, protože je v konfliktu s '%s-%s'\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr "%s: balíček nenalezen v mezipaměti\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "načtení souboru %s se nezdařilo: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "není dostatek volného místa na disku\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "nelze provést transakci pro odstranění\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "nelze provést transakci\n"
@@ -1076,12 +1182,12 @@ msgstr "nelze odstranit %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "nelze odstranit dočasný adresář %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "nelze zapisovat do roury (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "nelze číst z roury (%s)\n"
@@ -1137,3 +1243,23 @@ msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "nepodařilo se najít nebo vytvořit mezipaměť pro balíčky, používám místo toho "
 "%s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr "uživatel pro stahování '%s' neexistuje\n"
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr "selhání zjišťování uživatele pro stahování '%s': %s\n"
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr "selhání vytvoření dočasné složky pro stahování %s: %s\n"
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr "selhání nastavení vlastníka dočasné složky pro stahování %s: %s\n"
--- a/lib/libalpm/po/da.po
+++ b/lib/libalpm/po/da.po
@@ -14,7 +14,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: scootergrisen, 2017\n"
 "Language-Team: Danish (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -45,17 +45,17 @@ msgstr "nedgraderer pakke %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "kan ikke allokere diskarkiv-objekt"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "advarsel givet under udpakning %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "kunne ikke udpakke %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "kunne ikke omdøbe %s til %s (%s)\n"
@@ -99,18 +99,18 @@ msgstr "udtræk: overskriver ikke mappe med fil %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "kan ikke pakke %s.pacnew ud: sti for lang"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "kunne ikke hente nuværende arbejdsmappe\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "kunne ikke ændre mappe til %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "kunne ikke genskabe arbejdsmappe (%s)\n"
@@ -150,7 +150,7 @@ msgstr "fjerner ugyldig database: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "kunne ikke oprette mappe %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "ugyldigt navn for databasepunkt '%s'\n"
@@ -172,18 +172,18 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "kunne ikke åbne fil %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s-database er inkonsistent: forskellige navne på pakke %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "%s-database er inkonsistent: forskellige versioner på pakke %s\n"
@@ -244,7 +244,7 @@ msgstr "manglende pakkemetadata i %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "kunne ikke læse underskriftfil: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "krævede nøgle mangler fra nøglering\n"
@@ -254,32 +254,32 @@ msgstr "krævede nøgle mangler fra nøglering\n"
 msgid "removing invalid file: %s\n"
 msgstr "fjerner ugyldig fil: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "kunne ikke fortolke pakkebeskrivelsesfil '%s' fra db '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "kunne ikke læse db '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "%s-database er inkonsistent: filnavnet på pakken %s er ugyldigt\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "%s-database er inkonsistent: filnavnet på pakken %s er for langt\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "ukendt databaseful: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -364,60 +364,60 @@ msgstr "kunne ikke bestemme rodmonteringspunkt %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Partition %s er monteret som læs-kun\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "kunne ikke oprette midlertidig fil til hentning\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disk"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "fejlede i indhentning af fil '%s' fra %s: %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "kunne ikke indhente fil '%s' fra %s: forventet downloadstørrelse "
 "overskredet\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s ser ud til at være afkortet: %jd/%jd byte\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "adressen '%s' er ugyldig\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -432,12 +432,17 @@ msgstr "kunne ikke ændre mappe (chdir) til overførelsesmappe %s\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "kunne ikke indhente nogle filer\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -674,50 +679,55 @@ msgstr "konfliktende filer"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "kunne ikke indhente nogle filer"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "ugyldigt regulært udtryk"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "biblioteksarkivfejl"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "hent biblioteksfejl"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme fejl"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "fejl under opstart af ekstern hentningsprogram"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "kompileret uden understøttelse af signatur"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "uventet fejl"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "låsefil mangler %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "kunne ikke fjerne låsningsfil %s\n"
@@ -799,7 +809,7 @@ msgstr "kunne ikke åbne mappe: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "kunne ikke åbne fil: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "kunne ikke køre (stat) fil %s: %s\n"
@@ -881,94 +891,177 @@ msgstr "kunne ikke fjerne databasepunkt %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "kunne ikke fjerne punkt '%s' fra cache\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Offentlig nøglering ikke fundet. Har du kørt '%s'?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "Fejl ved GPGME: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "slår nøglen %s op med WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "fejl ved gpg: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "der kan ikke skrives til nøglering\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "nøglen\"%s\" på nøgleserver\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "nøglen \"%s\" kunne ikke importeres\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "nøglen \"%s\" kunne ikke opslås eksternt\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: mangler krævet signatur\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: signatur fra \"%s\" er marginelt betroet\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: signatur fra \"%s\" er ukendt betroet\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: signatur fra \"%s\" skal aldrig betroes\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: nøgelen \"%s\" er ukendt\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: nøglen \"%s\" er deaktiveret\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: signatur fra \"%s\" er udløbet\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: nøgelen \"%s\" er ukendt\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: nøglen \"%s\" er deaktiveret\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: signatur fra \"%s\" er ugyldig\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: fejl i signaturformat\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: signaturformat understøttes ikke\n"
@@ -1018,27 +1111,27 @@ msgstr "pakkekonflikter, der ikke kan løses, er detekteret\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "kunne ikke læse filen %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "ikke nok ledig diskplads\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "kunne ikke indsende (commit) fjernelsestransaktion\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "kunne ikke indsende (commit) transaktion\n"
@@ -1063,12 +1156,12 @@ msgstr "kunne ikke slette %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "kunne ikke fjerne tmpdir %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "kan ikke skrive til pipe (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "kan ikke læse fra pipe (%s)\n"
@@ -1122,3 +1215,23 @@ msgstr "ingen %s-cache findes, opretter...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "kunne ikke finde eller oprette pakke-cache, bruger i stedet %s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/de.po
+++ b/lib/libalpm/po/de.po
@@ -23,7 +23,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Wieland Hoffmann <themineo+transifex@googlemail.com>, 2013\n"
 "Language-Team: German (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -54,17 +54,17 @@ msgstr "Downgrade des Paketes %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "Archivobjekt konnte nicht reserviert werden"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "Es erscheint eine Warnung, wenn %s extrahiert wird (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "Konnte %s nicht entpacken (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "Konnte %s nicht in %s umbenennen (%s)\n"
@@ -109,18 +109,18 @@ msgstr "Entpacken: Überschreibe Verzeichnis nicht mit Datei %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "konnte %s.pacnew nicht entpacken: Pfad zu lang"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "Konnte aktuelles Arbeitsverzeichnis nicht ermitteln\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "Konnte nicht zu Verzeichnis %s wechseln (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "Konnte das Arbeitsverzeichnis (%s) nicht wiederherstellen\n"
@@ -160,7 +160,7 @@ msgstr "Entferne die ungültige Datenbank: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "Konnte Verzeichnis %s nicht erstellen: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "Ungültiger Name für Datenbank-Eintrag '%s'\n"
@@ -182,20 +182,20 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "Konnte Datei %s nicht öffnen: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr ""
 "Die Datenbank von %s ist inkonsistent: Die Paketnamen für %s stimmen nicht "
 "überein\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -258,7 +258,7 @@ msgstr "Fehlende Paket-Metadaten in %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "Konnte die Signatur-Datei nicht lesen: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "Erforderlicher Schlüssel fehlt im Schlüsselbund\n"
@@ -268,37 +268,37 @@ msgstr "Erforderlicher Schlüssel fehlt im Schlüsselbund\n"
 msgid "removing invalid file: %s\n"
 msgstr "Entferne ungültige Datei: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "Konnte Paket-Beschreibungsdatei '%s' der Datenbank '%s' nicht analysieren\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "konnte Datenbank '%s' (%s) nicht lesen\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "Datenbank %s ist inkonsistent: Der Dateiname des Paketes %s ist nicht "
 "erlaubt\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "Die Datenbank von %s ist inkonsistent: Der Dateiname des Paketes %s ist zu "
 "lang\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "Unbekannte Datenbankdatei: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -385,60 +385,60 @@ msgstr "Konnte den Root-Einhängepunkt %s nicht ermitteln\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Die Partition %s ist so eingehängt, dass sie nur gelesen werden kann\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "Konnte temporäre Datei für den Download nicht anlegen\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr "zu viele Fehlermeldungen von %s, überspringe den Rest des Vorgangs\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "Platte"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "Konnte Datei '%s' nicht von %s übertragen : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "Konnte Datei '%s' nicht von %s empfangen: Erwartete Downloadgröße "
 "überschritten\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s scheint abgeschnitten zu sein: %jd/%jd Bytes\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "URL '%s' ist ungültig\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "gescheiterte Einstellung der Downloadmenge für %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl(=Programm) meldet Fehler %d von der Übertragung\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "curl(=Programm) Übertragungsfehler %d\n"
@@ -453,12 +453,17 @@ msgstr "Wechsel in Download-Verzeichnis %s ist fehlgeschlagen\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "Konnte einige Dateien nicht übertragen\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "Download vollständig und keine Datei im Zwischenspeicher\n"
@@ -696,50 +701,55 @@ msgstr "In Konflikt stehende Dateien"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "Konnte manche Dateien nicht übertragen"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "Ungültiger Regulärer Ausdruck"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "libarchive-Fehler"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "Fehler in der Bibliothek für Downloads"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme-Fehler"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "Fehler beim Aufruf eines externen Downloaders"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "Kompiliert ohne Signatur-Unterstützung"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "Unerwarteter Fehler"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "%s fehlt in Sperrdatei\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "Konnte Sperrdatei %s nicht entfernen\n"
@@ -821,7 +831,7 @@ msgstr "Konnte das Verzeichnis nicht öffnen: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "Konnte die Datei nicht öffnen: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "Konnte Status-Information für die Datei %s nicht ermitteln: %s\n"
@@ -903,94 +913,177 @@ msgstr "Konnte Datenbank-Eintrag %s-%s nicht entfernen\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "Konnte Eintrag '%s' nicht aus dem Puffer entfernen\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "GPGME-Fehler: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "gpg-Fehler: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "Schlüssebund ist nicht schreibbar\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "Schlüssel \"%s\" auf Schlüsselserver\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "Schlüssel \"%s\" konnte nicht importiert werden\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "Schlüssel \"%s\" konnte nicht entfernt abgerufen werden\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: Erforderliche Signatur fehlt\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: Schlüssel \"%s\" ist unbekannt\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: Schlüssel \"%s\" ist deaktiviert\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: Signatur von \"%s\" ist abgelaufen\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: Schlüssel \"%s\" ist unbekannt\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: Schlüssel \"%s\" ist deaktiviert\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: Signatur von \"%s\" ist ungültig\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: Signaturformatfehler\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: nicht unterstütztes Signaturformat\n"
@@ -1040,27 +1133,27 @@ msgstr "Nicht auflösbare Paketkonflikte gefunden\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "konnte die Datei nicht lesen %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "Nicht genug freier Festplattenspeicher\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "Konnte Löschvorgang nicht durchführen\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "Konnte den Vorgang nicht durchführen\n"
@@ -1085,12 +1178,12 @@ msgstr "Konnte %s nicht entfernen\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "Konnte temporäres Verzeichnis %s nicht entfernen\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "konnte nicht in Weiterleitung schreiben (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "konnte nicht von Weiterleitung lesen (%s)\n"
@@ -1145,3 +1238,23 @@ msgstr "Es existiert kein %s-Puffer, erstelle...\n"
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "Konnte den Paket-Puffer nicht finden oder erstellen, benutze stattdessen %s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/el.po
+++ b/lib/libalpm/po/el.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: th_ts <tsesmelistheodore@gmail.com>, 2014\n"
 "Language-Team: Greek (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -51,17 +51,17 @@ msgstr "υποβάθμιση πακέτου %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "αδυναμία κατανομής αντικειμένου αρχείου δίσκου"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "προειδοποίηση κατά την εξαγωγή του %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "αδυναμία εξαγωγής %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "αδυναμία μετονομασίας %s σε %s (%s)\n"
@@ -106,18 +106,18 @@ msgstr "εξαγωγή: μη αντικατάσταση καταλόγου με
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "αδυναμία εξαγωγής %s.pacnew: πολύ μεγάλο μήκος διαδρομής"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "αδυναμία χρήσης τρέχοντος καταλόγου\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "αδυναμία μετάβασης στον κατάλογο %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "αδυναμία επαναφοράς καταλόγου εργασίας (%s)\n"
@@ -157,7 +157,7 @@ msgstr "διαγραφή άκυρης βάσης: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "αδυναμία δημιουργίας καταλόγου %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "άκυρο όνομα εγγραφής βάσης '%s'\n"
@@ -179,18 +179,18 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "αδυναμία ανάγνωσης αρχείου %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "ανακολουθία στην βάση %s: αναντιστοιχία ονόματος πακέτου %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "ανακολουθία στην βάση %s: ασυμφωνία έκδοσης πακέτου %s\n"
@@ -251,7 +251,7 @@ msgstr "απόντα μετα-δεδομένα πακέτου στο %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "αδυναμία ανάγνωσης αρχείου υπογραφής: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr ""
@@ -263,33 +263,33 @@ msgstr ""
 msgid "removing invalid file: %s\n"
 msgstr "διαγραφή άκυρου αρχείου: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "αδυναμία ανάλυσης αρχείου περιγραφής πακέτου '%s' στη βάση δεδομένων '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "αδυναμία ανάγνωσης βάσης '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "ασυνέπεια βάσης %s: μη έγκυρο όνομα πακέτου %s\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "ασυνέπεια βάσης %s: πολύ μεγάλο όνομα πακέτου %s\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "άγνωστο αρχείο βάσης: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -376,60 +376,60 @@ msgstr "αδυναμία καθορισμού ριζικού σημείου πρ
 msgid "Partition %s is mounted read only\n"
 msgstr "Η κατάτμηση %s είναι προσαρτημένη μόνο για ανάγνωση\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "αποτυχία δημιουργίας προσωρινού αρχείου λήψης\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""
 "πάρα πολλά σφάλματα από %s, παράλειψη για το υπόλοιπο αυτής της συναλλαγής\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr "μοιραίο σφάλμα από %s, παράλειψη για το υπόλοιπο της συναλλαγής\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "δίσκο"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "αποτυχία λήψης αρχείου '%s' από %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "αποτυχία λήψης αρχείου '%s' από %s : υπέρβαση αναμενομένου μεγέθους λήψης\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "το %s δείχνει ημιτελές: %jd/%jd bytes\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "άκυρη διεύθυνση '%s'\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "αδυναμία ρύθμισης αντικειμένου λήψης του %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "σφάλμα curl %d από λήψη\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "σφάλμα λήψης curl: %d\n"
@@ -442,14 +442,19 @@ msgstr ""
 #: lib/libalpm/dload.c:968
 #, c-format
 msgid "switching to sandbox user '%s' failed!\n"
+msgstr "η εναλλαγή στο χρήστη sandbox '%s' απέτυχε!\n"
+
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "σφάλμα λήψης μερικών αρχείων\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "επιτυχής ολοκλήρωση λήψης αλλά δίχως αρχείο στην κρύπτη\n"
@@ -686,50 +691,55 @@ msgstr "διένεξη αρχείων"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "αποτυχία λήψης κάποιων αρχείων"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "άκυρη κανονική έκφραση"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "σφάλμα libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "σφάλμα βιβλιοθήκης λήψης"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "σφάλμα gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "σφάλμα κλήσης προγράμματος λήψης"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "μεταγλώττιση χωρίς υποστήριξη υπογραφής"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "απρόσμενο σφάλμα"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "απόν αρχείο κλειδώματος %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "αδυναμία διαγραφής αρχείου κλειδώματος %s\n"
@@ -811,7 +821,7 @@ msgstr "αδυναμία ανοίγματος καταλόγου %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "αδυναμία ανοίγματος αρχείου: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "αδυναμία εντοπισμού αρχείου %s: %s\n"
@@ -893,94 +903,177 @@ msgstr "αδυναμία κατάργησης εγγραφής βάσης %s-%s\
 msgid "could not remove entry '%s' from cache\n"
 msgstr "αδυναμία κατάργησης εγγραφής '%s' από κρύπτη\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Δεν ευρέθη δημόσιος κλειδούχος· εκτελέστηκε '%s';\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "σφάλμα GPGME: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "αναζήτησή κλειδιού %s με χρήση WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "σφάλμα gpg: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "μη εγγράψιμος κλειδούχος\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "κλειδί \"%s\" στον διακομιστή κλειδιών\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "αδυναμία εισαγωγής κλειδιού \"%s\"\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "αδυναμία απομεμακρυσμένης αναζήτησης κλειδιού \"%s\"\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: απούσα απαιτούμενη υπογραφή\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: υπογραφή από \"%s\" οριακής εμπιστοσύνης\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: υπογραφή από \"%s\" αγνώστου εμπιστοσύνης\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: υπογραφή από \"%s\" ουδεμίας εμπιστοσύνης\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: κλειδί \"%s\" άγνωστο\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: κλειδί \"%s\" απενεργοποιημένο\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: υπογραφή από \"%s\" ληγμένη\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: κλειδί \"%s\" άγνωστο\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: κλειδί \"%s\" απενεργοποιημένο\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: υπογραφή από \"%s\" άκυρη\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: σφάλμα μορφής υπογραφής\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: μη υποστηριζόμενη μορφή υπογραφής\n"
@@ -1030,27 +1123,27 @@ msgstr "εντοπισμός ανεπίλυτων διενέξεων πακέτ
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr "αφαίρεση '%s-%s' από λίστα στόχων λόγω διένεξης με '%s-%s'\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr "%s: δεν βρέθηκε πακέτο στην κρύπτη\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "αποτυχία ανάγνωσης αρχείου %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "μη αρκετός ελεύθερος χώρος στο δίσκο\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "αδυναμία διεκπεραίωσης διαγραφής\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "αδυναμία διεκπεραίωσης\n"
@@ -1075,12 +1168,12 @@ msgstr "αδυναμία κατάργησης %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "αδυναμία διαγραφής προσωρινού καταλόγου %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "αποτυχία εγγραφής σε αγωγό (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "αποτυχία ανάγνωσης από αγωγό (%s)\n"
@@ -1134,3 +1227,23 @@ msgstr "μη υπάρχουσα κρύπτη %s, δημιουργία...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "αδυναμία εύρεσης ή δημιουργίας κρύπτης πακέτων, χρήση %s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/en_GB.po
+++ b/lib/libalpm/po/en_GB.po
@@ -4,16 +4,16 @@
 #
 # Translators:
 # Allan McRae <allan@archlinux.org>, 2013
-# Allan McRae <allan@archlinux.org>, 2013-2015,2017-2019,2021,2024
+# Allan McRae <allan@archlinux.org>, 2013-2015,2017-2019,2021,2024-2025
 # Dan McGee <dpmcgee@gmail.com>, 2011
 msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Allan McRae <allan@archlinux.org>, "
-"2013-2015,2017-2019,2021,2024\n"
+"2013-2015,2017-2019,2021,2024-2025\n"
 "Language-Team: English (United Kingdom) (http://app.transifex.com/toofishes/"
 "archlinux-pacman/language/en_GB/)\n"
 "Language: en_GB\n"
@@ -42,17 +42,17 @@ msgstr "downgrading package %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "cannot allocate disk archive object"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "warning given when extracting %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "could not extract %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "could not rename %s to %s (%s)\n"
@@ -96,18 +96,18 @@ msgstr "extract: not overwriting dir with file %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "unable to extract %s.pacnew: path too long"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "could not get current working directory\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "could not change directory to %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "could not restore working directory (%s)\n"
@@ -147,7 +147,7 @@ msgstr "removing invalid database: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "could not create directory %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "invalid name for database entry '%s'\n"
@@ -169,18 +169,18 @@ msgstr "unknown install reason for package %s: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "could not open file %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s database is inconsistent: name mismatch on package %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "%s database is inconsistent: version mismatch on package %s\n"
@@ -241,7 +241,7 @@ msgstr "missing package metadata in %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "failed to read signature file: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "required key missing from keyring\n"
@@ -251,32 +251,32 @@ msgstr "required key missing from keyring\n"
 msgid "removing invalid file: %s\n"
 msgstr "removing invalid file: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "could not parse package description file '%s' from db '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "could not read db '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "%s database is inconsistent: filename of package %s is illegal\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "%s database is inconsistent: filename of package %s is too long\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "unknown database file: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr "%s: unknown key '%s' in sync database\n"
@@ -361,60 +361,60 @@ msgstr "could not determine root mount point %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Partition %s is mounted read only\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "failed to create temporary file for download\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""
 "too many errors from %s, skipping for the remainder of this transaction\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr "fatal error from %s, skipping for the remainder of this transaction\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disk"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "failed retrieving file '%s' from %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "failed retrieving file '%s' from %s : expected download size exceeded\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s appears to be truncated: %jd/%jd bytes\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "URL '%s' is invalid\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "failed to setup a download payload for %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl returned error %d from transfer\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "curl transfer error: %d\n"
@@ -429,12 +429,17 @@ msgstr "could not chdir to download directory %s\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr "switching to sandbox user '%s' failed!\n"

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "could not move %s into %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "failed to retrieve some files\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "download completed successfully but no file in the cache\n"
@@ -671,50 +676,55 @@ msgstr "conflicting files"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr "failed to initialise download"
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "failed to retrieve some files"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "invalid regular expression"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "libarchive error"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "download library error"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme error"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "error invoking external downloader"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "compiled without signature support"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "unexpected error"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "lock file missing %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "could not remove lock file %s\n"
@@ -796,7 +806,7 @@ msgstr "could not open directory: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "could not open file: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "could not stat file %s: %s\n"
@@ -885,94 +895,190 @@ msgstr "could not remove database entry %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "could not remove entry '%s' from cache\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr "error restricting syscall %s via seccomp!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr "error restricting syscalls via seccomp: %d!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr "successfully restricted %d syscalls via seccomp\n"
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Public keyring not found; have you run '%s'?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "GPGME error: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "looking up key %s using WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "gpg error: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "keyring is not writable\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "key \"%s\" on keyserver\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "key \"%s\" could not be imported\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "key \"%s\" could not be looked up remotely\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: missing required signature\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: signature from \"%s\" is marginal trust\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: signature from \"%s\" is unknown trust\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: signature from \"%s\" should never be trusted\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: key \"%s\" is unknown\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: key \"%s\" is disabled\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: signature from \"%s\" is expired\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: key \"%s\" is unknown\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: key \"%s\" is disabled\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: signature from \"%s\" is invalid\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: signature format error\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: unsupported signature format\n"
@@ -1022,27 +1128,27 @@ msgstr "unresolvable package conflicts detected\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr "%s: could not find package in cache\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "failed to read file %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "not enough free disk space\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "could not commit removal transaction\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "could not commit transaction\n"
@@ -1067,12 +1173,12 @@ msgstr "could not remove %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "could not remove tmpdir %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "unable to write to pipe (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "unable to read from pipe (%s)\n"
@@ -1126,3 +1232,23 @@ msgstr "no %s cache exists, creating...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "couldn't find or create package cache, using %s instead\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr "download user '%s' does not exist\n"
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr "failed to get download user '%s': %s\n"
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr "failed to create temporary download directory %s: %s\n"
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr "failed to chown temporary download directory %s: %s\n"
--- a/lib/libalpm/po/eo.po
+++ b/lib/libalpm/po/eo.po
@@ -12,7 +12,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Sebastien Zurfluh <sebastien.zurfluh@gmail.com>, 2017\n"
 "Language-Team: Esperanto (http://app.transifex.com/toofishes/archlinux-"
@@ -43,17 +43,17 @@ msgstr "malpromociado de pakaĵo %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "ne eblas asigni diskarkivan objekton"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "averto donita dum eltiri %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "ne eblis eltiri %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "ne eblis renomi %s al %s (%s)\n"
@@ -98,18 +98,18 @@ msgstr "eltiri: ne superskribas dosierujon per dosiero %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "ne eblas eltiri %s.pacnew: la dosierindiko tro longa"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "ne eblis akiri kurantan dosierujon\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "ne eblis ŝanĝi dosierujon al %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "ne eblis restaŭri kurantan dosierujon (%s)\n"
@@ -149,7 +149,7 @@ msgstr "forigado de nevalida datumbazo: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "ne eblis krei dosierujon %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "nevalida nomo por datumbaz-enigo '%s'\n"
@@ -171,18 +171,18 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "ne eblis malfermi dosieron %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "datumbazo %s estas nekohera: noma miskongruo de pakaĵo %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "datumbazo %s estas nekohera: versia miskongruo de pakaĵo %s\n"
@@ -243,7 +243,7 @@ msgstr "mankantaj pakaĵaj metadatumoj en %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "malsukcesis legi subskriban dosieron: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "bezonata ŝlosilo mankas de ŝlosilingo\n"
@@ -253,33 +253,33 @@ msgstr "bezonata ŝlosilo mankas de ŝlosilingo\n"
 msgid "removing invalid file: %s\n"
 msgstr "forigado de nevalida dosiero: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "ne eblis analizi pakaĵpriskriban dosieron '%s' el datumbazo '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "ne povis legi datumbazon '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "datumbazo %s estas nekohera: dosiernomo de pakaĵo %s estas malpermesita\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "datumbazo %s estas nekohera: dosiernomo de pakaĵo %s estas tro longa\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "nekonata datumbaza dosiero: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -364,60 +364,60 @@ msgstr "ne eblis determini radikan surmetingon %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Subdisko %s estas surmetita nurlege\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "malsukcesis krei provizoran dosieron por elŝuto\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disko"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "malsukcesis ekstrakti dosieron '%s' de %s: %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "malsukcesis ekstrakti dosieron '%s' de %s : atendita elŝuta grando "
 "transpaŝita\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s aspektas trunkite: %jd/%jd bitokoj\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "url '%s' estas nevalida\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -432,12 +432,17 @@ msgstr "ne eblis chdir al elŝuteja dosierujo %s\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "malsukcesis ricevi kelkajn dosierojn\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -674,50 +679,55 @@ msgstr "konfliktantaj dosieroj"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "malsukcesis ricevi kelkajn dosierojn"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "nevalida regula esprimo"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "eraro en libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "eraro de biblioteka elŝuto"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "eraro de gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "eraro pri alvoko de ekstera elŝutilo"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "programtradukita sen subskriba subteno"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "neatendita eraro"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "mankas al ŝlosa dosiero %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "ne eblis forigi la ŝlosdosieron %s\n"
@@ -799,7 +809,7 @@ msgstr "ne eblis malfermi dosierujon: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "ne povis malfermi dosieron: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "ne eblis statikigi dosieron %s: %s\n"
@@ -881,94 +891,177 @@ msgstr "ne povis forigi la datumbaz-enigon %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "ne povis forigi la enigon '%s' el la kaŝmemoro\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Publika ŝlosilingo ne trovita; ĉu vi rulis '%s'?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "GPGME-eraro: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "elserĉado de la ŝlosilo %s per WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "gpg-eraro: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "ŝlosilingo ne estas skribebla\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "la ŝlosilo \"%s\" sur ŝlosilservilo\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "la ŝlosilon \"%s\" ne povis importi\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "la ŝlosilon \"%s\" ne povis elserĉi fore\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: mankanta bezonata subskribo\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: subskribo de \"%s\" estas iometa fido\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: subskribo de \"%s\" estas nekonata fido\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: subskribon de \"%s\" neniam devas fidi\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: la ŝlosilo \"%s\" estas nekonata\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: la ŝlosilon \"%s\" estas malvalidigita\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: subskribo de \"%s\" estas eksvalidiĝita\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: la ŝlosilo \"%s\" estas nekonata\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: la ŝlosilon \"%s\" estas malvalidigita\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: subskribo de \"%s\" estas nevalida\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: subskribforma eraro\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: nesubtenata subskribformo\n"
@@ -1018,29 +1111,29 @@ msgstr "nesolveblaj pakaĵaj konfliktoj detektitaj\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "malsukcesis legi la dosieron %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "ne estas sufiĉe granda malokupata diskspaco\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr ""
 "malsukcesis enmeti forigan transakcion\n"
 "\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "ne eblis enmeti transakcion\n"
@@ -1065,12 +1158,12 @@ msgstr "ne eblis forigi %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "ne povis forigi la provizoran dosierujon %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "ne eblas skribi al dukto (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "ne eblas legi el dukto (%s)\n"
@@ -1124,3 +1217,23 @@ msgstr "nenia kaŝmemoro de %s ekzistas, kreado...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "ne eblis trovi aŭ krei pakaĵan kaŝmemoron, uzante %s anstataŭ\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/es.po
+++ b/lib/libalpm/po/es.po
@@ -11,22 +11,23 @@
 # Leonel <leonelmalon@gmail.com>, 2013
 # Leonel <leonelmalon@gmail.com>, 2013
 # neiko <neikokz+tsfx@gmail.com>, 2011
-# Pablo Lezaeta Reyes <prflr88@gmail.com>, 2017
-# Pablo Lezaeta Reyes <prflr88@gmail.com>, 2017
-# Pablo Lezaeta Reyes <prflr88@gmail.com>, 2013-2016
-# Pablo Lezaeta Reyes <prflr88@gmail.com>, 2017
+# Pablo Lezaeta (Jota) <prflr88@gmail.com>, 2017
+# Pablo Lezaeta (Jota) <prflr88@gmail.com>, 2017
+# Pablo Lezaeta (Jota) <prflr88@gmail.com>, 2013-2016
+# Pablo Lezaeta (Jota) <prflr88@gmail.com>, 2017
 # Pedro Román <roizheim@gmail.com>, 2013-2014,2016-2019
 # picodotdev <pico.dev@gmail.com>, 2016,2019,2021-2023
-# Pablo Lezaeta Reyes <prflr88@gmail.com>, 2017
-# Swyter <Swyterzone@gmail.com>, 2015,2017-2018,2021,2024
+# Pablo Lezaeta (Jota) <prflr88@gmail.com>, 2017
+# Swyter <Swyterzone@gmail.com>, 2015,2017-2018,2021,2024-2025
 # Swyter <Swyterzone@gmail.com>, 2021
 msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
-"Last-Translator: Swyter <Swyterzone@gmail.com>, 2015,2017-2018,2021,2024\n"
+"Last-Translator: Swyter <Swyterzone@gmail.com>, "
+"2015,2017-2018,2021,2024-2025\n"
 "Language-Team: Spanish (http://app.transifex.com/toofishes/archlinux-pacman/"
 "language/es/)\n"
 "Language: es\n"
@@ -57,17 +58,17 @@ msgid "cannot allocate disk archive object"
 msgstr ""
 "memoria insuficiente en el sistema para lograr los objetivos del archivo"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "se han advertido errores mientras se extraía %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "no se pudo extraer %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "no se pudo renombrar %s a %s (%s)\n"
@@ -114,18 +115,18 @@ msgstr ""
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "no se pudo extraer %s.pacnew: ruta demasiado larga"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "no se pudo determinar el directorio de trabajo actual\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "no se pudo cambiar el directorio a %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "no se pudo restaurar el directorio de trabajo (%s)\n"
@@ -165,7 +166,7 @@ msgstr "quitando la base de datos no válida: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "no se pudo crear el directorio %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "nombre no válido para la entrada «%s» de la base de datos\n"
@@ -187,20 +188,20 @@ msgstr "se desconoce el motivo de la instalación del paquete %s: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "no se pudo abrir el archivo %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr ""
 "la base de datos %s es inconsistente: nombre mal emparejado en el paquete "
 "%s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -263,7 +264,7 @@ msgstr "faltan los metadatos del paquete en %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "no se pudo leer correctamente el archivo de firmas: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "la clave necesaria no está presente en el depósito\n"
@@ -273,38 +274,38 @@ msgstr "la clave necesaria no está presente en el depósito\n"
 msgid "removing invalid file: %s\n"
 msgstr "quitando archivo no válido: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "no se pudo analizar el archivo de descripción del paquete «%s» de la base de "
 "datos «%s»\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "no se pudo leer la base de datos '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "la base de datos %s es inconsistente: el nombre del archivo del paquete %s "
 "no entra dentro de lo permisible\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "la base de datos %s es inconsistente: el nombre del archivo del paquete %s "
 "es demasiado largo\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "archivo de base de datos desconocido: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -394,12 +395,12 @@ msgstr "no se pudo determinar el punto de montaje de la raíz %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "La partición %s está montada solamente en modo lectura\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "no se pudo crear el archivo temporal para la descarga\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
@@ -407,49 +408,49 @@ msgstr ""
 "demasiados errores al descargar de %s, pasando al siguiente servidor de la "
 "lista\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr "error fatal desde %s, omitiendo para el resto de esta transacción\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disco"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "no se pudo obtener el archivo «%s» desde %s: %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "no se pudo obtener el archivo «%s» desde %s : el tamaño de la descarga "
 "supera lo esperado\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s parece estar incompleto: %jd/%jd bytes\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "la dirección «%s» no es válida\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "no se pudo configurar un objeto de descarga para %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl ha generado un error de transferencia %d\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "error de transferencia de curl: %d\n"
@@ -464,12 +465,17 @@ msgstr "no se pudo acceder al directorio de descargas %s\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr "no se pudo cambiar al usuario restringido «%s»\n"

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "no se pudo mover %s a %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "no se pudieron recibir algunos archivos\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "se ha completado la descarga, pero el archivo no está en la caché\n"
@@ -707,50 +713,55 @@ msgstr "archivos en conflicto"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr "no se pudo comenzar la descarga"
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "no se pudieron descargar algunos archivos"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "expresión regular no válida"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "error de la biblioteca libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "error de la biblioteca de descarga"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "error de gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "error al invocar al gestor de descargas externo"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "compilado sin soporte de firma"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "error inesperado"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "falta el archivo de bloqueo %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "no se pudo quitar el archivo de bloqueo %s\n"
@@ -832,7 +843,7 @@ msgstr "no se pudo abrir el directorio: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "no se pudo abrir el archivo: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "no se pudo recuperar la información del archivo %s: %s\n"
@@ -926,6 +937,111 @@ msgstr "no se pudo quitar la entrada %s-%s de la base de datos\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "no se pudo quitar la entrada «%s» de la caché\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+"no se pudo restringir el acceso al sistema de archivos porque el kernel no "
+"tiene Landlock activado\n"
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+"La interfaz binaria de llamadas (ABI) de Landlock es < 2, y no se admite "
+"LANDLOCK_ACCESS_FS_REFER\n"
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+"La interfaz binaria de llamadas (ABI) de Landlock es < 3, y no se admite "
+"LANDLOCK_ACCESS_FS_TRUNCATE\n"
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+"no se pudo restringir el acceso al sistema de archivos al no poder crear un "
+"conjunto de reglas para Landlock: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+"no se pudo abrir el sistema de archivos para marcarlo como de solo lectura "
+"en Landlock: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+"no se pudo restringir el acceso al sistema de archivos al no poder añadir la "
+"regla de Landlock para «/»: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+"no se pudo abrir la carpeta de descargas para hacer la escritura posible a "
+"través de Landlock: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+"no se pudo restringir el acceso al sistema de archivos al no poder aplicar "
+"el conjunto de reglas de Landlock: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+"no se pudo restringir el acceso al sistema de archivos al no poder añadir "
+"las reglas para Landlock en la carpeta temporal de descargas: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+"se ha restringido el acceso al sistema de archivos en %s, la ABI de Landlock "
+"es %d\n"
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+"no se pudo iniciar seccomp para filtrar las llamadas del sistema en el "
+"entorno restringido de descargas\n"
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr "no se pudo restringir la llamada del sistema %s con seccomp\n"
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr "no se pudieron restringir las %d llamadas del sistema con seccomp\n"
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr "se han restringido %d llamadas del sistema con seccomp\n"
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
@@ -933,91 +1049,91 @@ msgstr ""
 "No se ha encontrado el depósito público de claves; ¿ya se ha ejecutado "
 "«%s»?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "Error de GPGME: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "buscando clave %s usando WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "error gpg: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "no se puede escribir en el depósito de claves\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "clave «%s» en servidor de claves\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "no se pudo importar la clave «%s»\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "no se pudo buscar la clave «%s» de forma remota\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: falta la firma exigida\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: la firma de «%s» es de confianza mínima\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: se desconoce el nivel de confianza de la firma de «%s»\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""
 "%s: la firma de «%s» no es de confianza y no se debería confiar en ella bajo "
 "ningún concepto\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: clave «%s» desconocida\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: la clave «%s» está desactivada\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: la firma de «%s» ha expirado\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: clave «%s» desconocida\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: la clave «%s» está desactivada\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: la firma de «%s» no es válida\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: hubo un error con el formato de la firma\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: formato de firma desconocido\n"
@@ -1068,27 +1184,27 @@ msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""
 "eliminado «%s-%s» de la lista objetivo porque está en conflicto con «%s-%s»\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr "%s: no se pudo encontrar paquete en la caché\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "no se pudo leer el archivo %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "no hay suficiente espacio libre en el disco\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "no se pudo realizar la operación de eliminación\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "no se pudo realizar la operación\n"
@@ -1113,12 +1229,12 @@ msgstr "no se pudo quitar %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "no se pudo quitar el directorio temporal %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "no se pudo escribir en la tubería (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "no se pudo leer de la tubería (%s)\n"
@@ -1174,3 +1290,23 @@ msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "no se pudo encontrar o crear la caché del paquete, en su lugar se utilizará "
 "%s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr "el usuario de descargas «%s» no existe\n"
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr "no se pudo obtener el usuario de descargas «%s»: %s\n"
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr "no se pudo crear una carpeta de descarga temporal %s: %s\n"
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr "no se pudo hacer «chown» a la carpeta de descarga temporal %s: %s\n"
--- a/lib/libalpm/po/es_419.po
+++ b/lib/libalpm/po/es_419.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Pablo Lezaeta Reyes <prflr88@gmail.com>, 2015,2017\n"
 "Language-Team: Spanish (Latin America) (http://app.transifex.com/toofishes/"
@@ -52,17 +52,17 @@ msgstr "regresando a una versión anterior del paquete %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "No se puede asignar objeto de archivo de disco"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "alerta producida mientras se extraía %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "no se pudo extraer %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "no se pudo renombrar %s a %s (%s)\n"
@@ -107,18 +107,18 @@ msgstr "extracto: no se puede sobrescribir el directorio con el archivo %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "no se pudo extraer %s.pacnew: ruta demasiado larga"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "no se pudo determinar el directorio de trabajo actual\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "no se pudo cambiar el directorio a %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "no se pudo restaurar el directorio de trabajo (%s)\n"
@@ -158,7 +158,7 @@ msgstr "quitando la base de datos no válida: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "no se pudo crear el directorio %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "nombre no válido para la entrada «%s» de la base de datos\n"
@@ -180,20 +180,20 @@ msgstr "tipo de validación desconocida para el paquete %s: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "no se pudo abrir el archivo %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr ""
 "la base de datos %s es inconsistente: nombre mal emparejado en el paquete "
 "%s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -256,7 +256,7 @@ msgstr "faltan los metadatos del paquete en %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "no se pudo leer correctamente el archivo de firma: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "la clave requerida no está presente en el llavero\n"
@@ -266,38 +266,38 @@ msgstr "la clave requerida no está presente en el llavero\n"
 msgid "removing invalid file: %s\n"
 msgstr "eliminando archivo no válido: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "no se pudo analizar el archivo de descripción del paquete «%s» de la base de "
 "datos «%s»\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr ""

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "la base de datos %s es inconsistente: el nombre del archivo del paquete %s "
 "es ilegal\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "la base de datos %s es inconsistente: el nombre del archivo del paquete %s "
 "es demasiado largo\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "archivo de base de datos desconocido: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -388,60 +388,60 @@ msgstr "no se pudo determinar el punto de montaje de la raíz %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "La partición %s está montada como solamente lectura\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
-msgstr "no se pudo crear el archivo temporal para la descarga\n"
+msgstr ""

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disco"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "no se pudo obtener el archivo «%s» desde %s: %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "no se pudo obtener el archivo «%s» desde %s : tamaño de la descarga superior "
 "del esperado\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s parece estar incompleto: %jd/%jd bytes\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "la dirección «%s» no es válida\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -456,12 +456,17 @@ msgstr "no se pudo cambiar el directorio raíz (%s)\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, fuzzy, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "no se pudo renombrar %s a %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "no se pudieron recibir algunos archivos\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -698,51 +703,56 @@ msgid "conflicting files"
 msgstr "archivos en conflicto"

 #: lib/libalpm/error.c:142
+#, fuzzy, c-format
+msgid "failed to initialize download"
+msgstr "no se pudo crear el archivo temporal para la descarga\n"
+
+#: lib/libalpm/error.c:144
 #, c-format
 msgid "failed to retrieve some files"
 msgstr "no se pudieron descargar algunos archivos"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "expresión regular no válida"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "error de la biblioteca libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "error de la biblioteca de descarga"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "error de gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "error al invocar al gestor de descargas externo"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "error inesperado"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "falta el archivo de bloqueo %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "no se pudo eliminar el archivo de bloqueo %s\n"
@@ -824,7 +834,7 @@ msgstr "no se pudo abrir el directorio: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr ""

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "no se pudo recuperar la información del archivo %s: %s\n"
@@ -907,94 +917,177 @@ msgstr "no se pudo quitar la entrada %s-%s de la base de datos\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "no se pudo quitar la entrada «%s» de la caché\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr ""

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr ""

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr ""

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: falta la firma exigida\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr ""

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr ""

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr ""

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr ""
@@ -1044,27 +1137,27 @@ msgstr "se han detectado paquetes con conflictos irresolubles\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr ""

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "no hay suficiente espacio libre en el disco\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "no se pudo realizar la operación de eliminación\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "no se pudo realizar la operación\n"
@@ -1089,12 +1182,12 @@ msgstr "no se pudo eliminar %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "no se pudo eliminar el directorio temporal %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "no se pudo escribir en la tubería (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "no se pudo leer de la tubería (%s)\n"
@@ -1150,3 +1243,23 @@ msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "no se pudo encontrar o crear la caché del paquete, en su lugar se utilizará "
 "%s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/eu.po
+++ b/lib/libalpm/po/eu.po
@@ -9,7 +9,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Osoitz <oelkoro@gmail.com>, 2013\n"
 "Language-Team: Basque (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -40,17 +40,17 @@ msgstr "bertsio zahartzen %s paketea (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "ezin da artxibo-objektua esleitu"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "oharra eman da %s erauztean (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "ezin izan da %s erauzi (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "ezin izan da %s berrizendatu %s gisa (%s)\n"
@@ -96,18 +96,18 @@ msgstr "erauzi: ez da direktorioa %s fitxategiarekin gainidatziko\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "ezin izan da %s.pacnew erauzi: bidea luzeegia da"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "ezin izan da uneko lan direktorioa lortu\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "ezin izan da direktorioa hona aldatu %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "ezin izan da laneko direktorioa berreskuratu (%s)\n"
@@ -149,7 +149,7 @@ msgstr ""
 "ezin izan da %s direktorioa sortu: %s\n"
 "\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "izen baliogabea '%s' datu-base sarreran\n"
@@ -171,18 +171,18 @@ msgstr "Balidazio mota ezezaguna %s paketearentzat: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "ezin izan da %s fitxategia ireki: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s datu-basea kontraesankorra da: izenak ez datoz bat %s paketean\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "%s datu-basea kontraesankorra da: bertsioak ez datoz bat %s paketean\n"
@@ -243,7 +243,7 @@ msgstr "paketearen metadatuak falta dira hemen: %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "sinadura fitxategiaren irakurketak huts egin du: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "beharrezko gakoa falta da gako sortan\n"
@@ -253,35 +253,35 @@ msgstr "beharrezko gakoa falta da gako sortan\n"
 msgid "removing invalid file: %s\n"
 msgstr "fitxategi baliogabea ezabatzen: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "ezin izan da '%s' fitxategi deskripzioa prozesatu '%s' datu-basetik\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "ezin izan da '%s'  datu-basea irakurri (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "%s datu-basea kontraesankorra da: %s paketearen fitxategi izena legez "
 "kanpokoa da\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "%s datu-basea kontraesankorra da: %s paketearen fitxategi izena luzeegia da\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "datu-base fitxategi ezezaguna: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -367,62 +367,62 @@ msgstr "ezin izan da %s erro muntatze puntua zehaztu\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "%s partizioa soilik irakurtzeko moduan muntatuta dago\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
-msgstr "huts egin du deskargarako behin behineko fitxategiaren sorrerak\n"
+msgstr ""

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "diskoa"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "huts egin du '%s' fitxategia '%s'-tik erauzteak: %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "huts egin du '%s' fitxategia eskuratzean hemendik: %s :  aurreikusitako "
 "deskarga tamaina gainditu da\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s ez dago osorik antza: %jd/%jd byte\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr ""
 "'%s' url baliogabea da\n"
 "\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -437,12 +437,17 @@ msgstr "ezin izan da erro direktorioa aldatu (%s)\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, fuzzy, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "ezin izan da %s berrizendatu %s gisa (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "fitxategi batzuk eskuratzeak huts egin du\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -678,51 +683,56 @@ msgid "conflicting files"
 msgstr "fitxategien arteko gatazka"

 #: lib/libalpm/error.c:142
+#, fuzzy, c-format
+msgid "failed to initialize download"
+msgstr "huts egin du deskargarako behin behineko fitxategiaren sorrerak\n"
+
+#: lib/libalpm/error.c:144
 #, c-format
 msgid "failed to retrieve some files"
 msgstr "ezin izan dira fitxategi batzuk eskuratu"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "adierazpen erregular baliogabea"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "libarchive errorea"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "errorea liburutegia deskargatzean"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme errorea"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "errorea kanpo deskarga programa deitzean"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "ustegabeko errorea"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "blokeo fitxategia falta da %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "ezin izan da %s blokeo fitxategia ezabatu\n"
@@ -804,7 +814,7 @@ msgstr "ezin izan da direktorioa ireki: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr ""

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "ezin izan da fitxategiaren egoera zehaztu: %s: %s\n"
@@ -886,94 +896,177 @@ msgstr "ezin izan da datu-base sarrera ezabatu %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "ezin izan da '%s' sarrera ezabatu katxetik\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr ""

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr ""

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr ""

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: beharrezko sinadura falta da\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr ""

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr ""

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr ""

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr ""
@@ -1023,27 +1116,27 @@ msgstr "ebatzi ezineko paketeen arteko gatazka detektatu da\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr ""

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "ez dago behar beste leku libre diskoan\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "ezin izan da ezabaketa transakzioa egikaritu\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "ezin izan da transakzioa egikaritu\n"
@@ -1068,12 +1161,12 @@ msgstr "ezin izan da %s ezabatu\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "ezin tempdir ezabatu %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "ezin izan da kanalizazioan idatzi (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "ezin izan da kanalizaziotik irakurri (%s)\n"
@@ -1127,3 +1220,23 @@ msgstr "ez dago %s katxerik, sortzen...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "ezin izan da pakete katxea aurkitu edo sortu, %s erabiliko da ordez\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/eu_ES.po
+++ b/lib/libalpm/po/eu_ES.po
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Osoitz <oelkoro@gmail.com>, 2013\n"
 "Language-Team: Basque (Spain) (http://app.transifex.com/toofishes/archlinux-"
@@ -39,17 +39,17 @@ msgstr "bertsio zahartzen %s paketea (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr ""

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "oharra eman da %s erauztean (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "ezin izan da %s erauzi (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "ezin izan da %s berrizendatu %s gisa (%s)\n"
@@ -95,18 +95,18 @@ msgstr "erauzi: ez da direktorioa %s fitxategiarekin gainidatziko\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "ezin izan da %s.pacnew erauzi: bidea luzeegia da"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "ezin izan da uneko lan direktorioa lortu\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "ezin izan da direktorioa hona aldatu %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "ezin izan da laneko direktorioa berreskuratu (%s)\n"
@@ -148,7 +148,7 @@ msgstr ""
 "ezin izan da %s direktorioa sortu: %s\n"
 "\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "izen baliogabea '%s' datu-base sarreran\n"
@@ -170,18 +170,18 @@ msgstr "Balidazio mota ezezaguna %s paketearentzat: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "ezin izan da %s fitxategia ireki: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s datu-basea kontraesankorra da: izenak ez datoz bat %s paketean\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "%s datu-basea kontraesankorra da: bertsioak ez datoz bat %s paketean\n"
@@ -242,7 +242,7 @@ msgstr "paketearen metadatuak falta dira hemen: %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "sinadura fitxategiaren irakurketak huts egin du: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "beharrezko gakoa falta da gako sortan\n"
@@ -252,35 +252,35 @@ msgstr "beharrezko gakoa falta da gako sortan\n"
 msgid "removing invalid file: %s\n"
 msgstr "fitxategi baliogabea ezabatzen: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "ezin izan da '%s' fitxategi deskripzioa prozesatu '%s' datu-basetik\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr ""

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "%s datu-basea kontraesankorra da: %s paketearen fitxategi izena legez "
 "kanpokoa da\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "%s datu-basea kontraesankorra da: %s paketearen fitxategi izena luzeegia da\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "datu-base fitxategi ezezaguna: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -366,62 +366,62 @@ msgstr "ezin izan da %s erro muntatze puntua zehaztu\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "%s partizioa soilik irakurtzeko moduan muntatuta dago\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
-msgstr "huts egin du deskargarako behin behineko fitxategiaren sorrerak\n"
+msgstr ""

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "diskoa"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "huts egin du '%s' fitxategia '%s'-tik erauzteak: %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "huts egin du '%s' fitxategia eskuratzean hemendik: %s :  aurreikusitako "
 "deskarga tamaina gainditu da\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s ez dago osorik antza: %jd/%jd byte\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr ""
 "'%s' url baliogabea da\n"
 "\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -436,12 +436,17 @@ msgstr "ezin izan da erro direktorioa aldatu (%s)\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, fuzzy, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "ezin izan da %s berrizendatu %s gisa (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "fitxategi batzuk eskuratzeak huts egin du\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -677,51 +682,56 @@ msgid "conflicting files"
 msgstr "fitxategien arteko gatazka"

 #: lib/libalpm/error.c:142
+#, fuzzy, c-format
+msgid "failed to initialize download"
+msgstr "huts egin du deskargarako behin behineko fitxategiaren sorrerak\n"
+
+#: lib/libalpm/error.c:144
 #, c-format
 msgid "failed to retrieve some files"
 msgstr "ezin izan dira fitxategi batzuk eskuratu"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "adierazpen erregular baliogabea"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "libarchive errorea"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "errorea liburutegia deskargatzean"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme errorea"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "errorea kanpo deskarga programa deitzean"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "ustegabeko errorea"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "blokeo fitxategia falta da %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "ezin izan da %s blokeo fitxategia ezabatu\n"
@@ -803,7 +813,7 @@ msgstr "ezin izan da direktorioa ireki: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr ""

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "ezin izan da fitxategiaren egoera zehaztu: %s: %s\n"
@@ -885,94 +895,177 @@ msgstr "ezin izan da datu-base sarrera ezabatu %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "ezin izan da '%s' sarrera ezabatu katxetik\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr ""

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr ""

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr ""

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: beharrezko sinadura falta da\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr ""

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr ""

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr ""

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr ""
@@ -1022,27 +1115,27 @@ msgstr "ebatzi ezineko paketeen arteko gatazka detektatu da\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr ""

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "ez dago behar beste leku libre diskoan\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "ezin izan da ezabaketa transakzioa egikaritu\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "ezin izan da transakzioa egikaritu\n"
@@ -1067,12 +1160,12 @@ msgstr "ezin izan da %s ezabatu\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "ezin tempdir ezabatu %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "ezin izan da kanalizazioan idatzi (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "ezin izan da kanalizaziotik irakurri (%s)\n"
@@ -1126,3 +1219,23 @@ msgstr "ez dago %s katxerik, sortzen...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "ezin izan da pakete katxea aurkitu edo sortu, %s erabiliko da ordez\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/fi.po
+++ b/lib/libalpm/po/fi.po
@@ -18,7 +18,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Sami Korkalainen, 2018\n"
 "Language-Team: Finnish (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -49,17 +49,17 @@ msgstr "varhennetaan paketti %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "levyn arkisto-objektia ei voida varata"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "annettiin varoitus purettaessa %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "tiedostoa %s ei voitu purkaa (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "kohdetta %s ei voitu nimetä uudelleen kohteeksi %s (%s)\n"
@@ -104,18 +104,18 @@ msgstr "purku: kansiota ei korvata tiedostolla %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "ei voitu purkaa %s.pacnew: polku liian pitkä"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "nykyisen kansion sijaintia ei voitu määrittää\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "ei voitu vaihtaa kansioon %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "työhakemistoa ei voitu palauttaa (%s)\n"
@@ -155,7 +155,7 @@ msgstr "poistetaan virheellinen tietokanta: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "kansiota %s ei voitu luoda: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "virheellinen nimi tietokantamerkinnälle '%s'\n"
@@ -177,18 +177,18 @@ msgstr "tuntematon validointityyppi paketille %s: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "tiedostoa %s ei voitu avata: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "tietokanta %s on epäyhtenäinen: paketin %s nimi ei täsmää\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "tietokanta %s on epäyhtenäinen: paketin %s versio ei täsmää\n"
@@ -249,7 +249,7 @@ msgstr "paketin metadata puuttuu tiedostosta %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "allekirjoitustiedoston lukeminen epäonnistui: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "vaadittu avain puuttuu avainrenkaasta\n"
@@ -259,34 +259,34 @@ msgstr "vaadittu avain puuttuu avainrenkaasta\n"
 msgid "removing invalid file: %s\n"
 msgstr "poistetaan virheellinen tiedosto: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "paketin kuvaustiedostoa '%s' ei voitu jäsentää tietokannassa '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr ""

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "tietokanta %s on epäyhtenäinen: paketin %s tiedostonimi on virheellinen\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "tietokanta %s on epäyhtenäinen: paketin %s tiedostonimi on liian pitkä\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "tuntematon tietokantatiedosto: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -371,60 +371,60 @@ msgstr "juuren %s liitospistettä ei voitu selvittää\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Osio %s on liitetty vain lukutilassa\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
-msgstr "väliaikaistiedoston luonti lataamista varten epäonnistui\n"
+msgstr ""

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "levy"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "tiedoston '%s' nouto palvelimelta %s epäonnistui : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "tiedoston '%s' noutaminen koneelta %s epäonnistui: odotettu latauskoko "
 "ylittyi\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s näyttää katkenneen: %jd/%jd tavua\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "osoite '%s' on virheellinen\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -439,12 +439,17 @@ msgstr "juurikansiota ei voitu vaihtaa (%s)\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, fuzzy, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "kohdetta %s ei voitu nimetä uudelleen kohteeksi %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "joidenkin tiedostojen noutaminen epäonnistui\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -680,51 +685,56 @@ msgid "conflicting files"
 msgstr "ristiriidassa olevia tiedostoja"

 #: lib/libalpm/error.c:142
+#, fuzzy, c-format
+msgid "failed to initialize download"
+msgstr "väliaikaistiedoston luonti lataamista varten epäonnistui\n"
+
+#: lib/libalpm/error.c:144
 #, c-format
 msgid "failed to retrieve some files"
 msgstr "joidenkin tiedostojen noutaminen epäonnistui"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "virheellinen säännöllinen lauseke"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "libarchive-virhe"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "latauskirjaston virhe"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme-virhe"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "virhe kutsuttaessa ulkoista latausohjelmaa"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "odottamaton virhe"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "puuttuva lukkotiedosto %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "lukkotiedostoa %s ei voitu poistaa\n"
@@ -806,7 +816,7 @@ msgstr "kansiota ei voitu avata: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr ""

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "tiedoston %s stat-toiminnon ei voitu tehdä: %s\n"
@@ -888,94 +898,177 @@ msgstr "ei voitu poistaa tietokantamerkintää %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "merkintää '%s' ei voitu poistaa välimuistista\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr ""

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr ""

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr ""

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: pakollinen allekirjoitus puuttuu\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr ""

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr ""

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr ""

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr ""
@@ -1025,27 +1118,27 @@ msgstr "ratkaisemattomia pakettiristiriitoja havaittu\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr ""

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "ei tarpeeksi vapaata levytilaa\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "poistotoimenpidettä ei voitu suorittaa\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "toimenpidettä ei voitu suorittaa\n"
@@ -1070,12 +1163,12 @@ msgstr "%s ei voitu poistaa\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "väliaikaiskansiota %s ei voitu poistaa\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "ei voitu kirjoittaa putkeen (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "ei voitu lukea putkesta (%s)\n"
@@ -1131,3 +1224,23 @@ msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "pakettivälimuistia ei ollut olemassa eikä sitä voitu luoda. Käytetään %s sen "
 "sijaan\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/fr.po
+++ b/lib/libalpm/po/fr.po
@@ -22,7 +22,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Xavier Devlamynck <magicrhesus@ouranos.be>, 2011\n"
 "Language-Team: French (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -54,17 +54,17 @@ msgstr "retourne à la version antérieure du paquet %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "Impossible d’allouer l’objet d’archive disque"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "problème pendant l’extraction de %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "l’extraction de %s a échoué (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "impossible de renommer %s en %s (%s)\n"
@@ -109,18 +109,18 @@ msgstr "extraction : n’écrase pas le répertoire par le fichier %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "impossible d’extraire %s.pacnew : chemin trop long"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "déterminer le répertoire courant a échoué\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "changer de répertoire vers %s a échoué (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "impossible de restaurer le répertoire de travail (%s)\n"
@@ -160,7 +160,7 @@ msgstr "suppression d’une base de données non valide : %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "la création du répertoire %s a échoué : %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "nom incorrect pour l’entrée de base de données « %s »\n"
@@ -182,18 +182,18 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "l’ouverture du fichier %s a échoué : %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "le dépôt %s est incohérent : noms différents pour le paquet %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "le dépôt %s est incohérent : versions différentes pour le paquet %s\n"
@@ -254,7 +254,7 @@ msgstr "méta-données du paquet manquantes dans %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "échec lors de la lecture du fichier de signature : %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "clé requise absente du trousseau\n"
@@ -264,36 +264,36 @@ msgstr "clé requise absente du trousseau\n"
 msgid "removing invalid file: %s\n"
 msgstr "suppression du fichier non valide : %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "impossible d’analyser le fichier « %s » de description du paquet depuis la "
 "base de données « %s »\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "impossible de lire la base de données « %s » (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "le dépôt %s est incohérent : le nom de fichier du paquet %s est incorrect\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "le dépôt %s est incohérent : le nom de fichier du paquet %s est trop long\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "fichier de base de données inconnu : %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -380,60 +380,60 @@ msgstr "impossible de déterminer le point de montage de la racine %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "La partition %s est en lecture seule\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "échec de création d’un fichier temporaire pour le téléchargement\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr "trop d'erreurs pour %s, ignoré pour le reste de la transaction\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr "erreur fatale pour %s, ignoré pour le reste de la transaction\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disque"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "échec de récupération du fichier « %s » depuis %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "échec de récupération du fichier « %s » depuis %s : taille attendue "
 "dépassée\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s est apparemment tronqué : %jd/%jd octets\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "l’URL « %s » est non valide\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "échec à initialiser une tâche de téléchargement pour %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl a retourné l'erreur %dpour le transfert\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "erreur de curl pour le transfert: %d\n"
@@ -448,12 +448,17 @@ msgstr "impossible de se placer dans le répertoire de téléchargement %s\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "erreur lors de la récupération de certains fichiers\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "téléchargement terminé avec succès mais aucun fichier dans le cache\n"
@@ -692,50 +697,55 @@ msgstr "conflit de fichiers "

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "échec de récupération de certains fichiers"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "expression régulière incorrecte"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "erreur de libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "erreur de la bibliothèque de téléchargement"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "erreur de gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "erreur en invoquant le client externe de téléchargement"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "compilé sans prise en charge de signature"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "erreur non prévue"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "fichier de verrou manquant %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "la suppression du fichier de verrouillage %s a échoué\n"
@@ -817,7 +827,7 @@ msgstr "impossible d’ouvrir le dossier %s : %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "impossible d’ouvrir le fichier : %s%s : %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "impossible de connaître l’état du fichier %s : %s\n"
@@ -900,95 +910,178 @@ msgstr "la suppression de l’entrée de base de données %s-%s a échoué\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "la suppression du cache de l’entrée « %s » a échoué\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""
 "Le trousseau de clés publique est introuvable ; avez-vous exécuté « %s » ?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "erreur GPGME : %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "recherche de la clé %s via WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "erreur gpg : %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "le trousseau de clés n’est pas accessible en écriture\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "clé « %s » sur le serveur de clés\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "la clé « %s » n’a pas pu être importée\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "la clé « %s » ne peut être recherchée à distance\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s : signature requise manquante\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s : la signature de « %s » est de confiance mitigée\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s : la signature de « %s » est de confiance inconnue\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s : la signature de « %s » n’est pas digne de confiance\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s : la clé « %s » est inconnue\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s : la clé « %s » est désactivée\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s : la signature de « %s » est périmée\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s : la clé « %s » est inconnue\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s : la clé « %s » est désactivée\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s : la signature de « %s » n’est pas valide\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s : erreur de format de signature\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s : format de signature non pris en charge\n"
@@ -1040,27 +1133,27 @@ msgstr ""
 "suppression de « %s-%s » de la liste cible car cela entre en conflit avec "
 "« %s-%s »\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr "%s : impossible de trouver le paquet dans le cache\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "impossible de lire le fichier %s : %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "espace disque insuffisant\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "appliquer la transaction de suppression a échoué\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "appliquer la transaction a échoué\n"
@@ -1085,14 +1178,14 @@ msgstr "la suppression de %s a échoué\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "la suppression du répertoire temporaire %s a échoué\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr ""
 "impossible d’écrire dans le tube (%s)\n"
 "\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "impossible de lire à partir du tube (%s)\n"
@@ -1148,3 +1241,23 @@ msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "impossible de trouver ou de créer le cache des paquets, utilisation de %s à "
 "la place\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/gl.po
+++ b/lib/libalpm/po/gl.po
@@ -3,7 +3,7 @@
 # This file is distributed under the same license as the libalpm package.
 #
 # Translators:
-# Adrián Chaves Fernández <adriyetichaves@gmail.com>, 2013-2014
+# Adrián Chaves Fernández <adrian@chaves.gal>, 2013-2014
 # Alexandre Filgueira <faidoc@gmail.com>, 2013
 # Alexandre Filgueira <faidoc@gmail.com>, 2013
 # Alexandre Filgueira <faidoc@gmail.com>, 2013
@@ -15,7 +15,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Alexandre Filgueira <faidoc@gmail.com>, 2013\n"
 "Language-Team: Galician (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -46,17 +46,17 @@ msgstr "desactualizando a versión do paquete %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "memoria insuficiente para o obxecto de arquivo de disco"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "alerta producida mentres se extraía %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "Non foi posíbel extraer «%s» (%s).\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "Non foi posíbel cambiar o nome de «%s» a «%s» (%s).\n"
@@ -102,18 +102,18 @@ msgstr ""
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "non se pode extraer %s.pacnew: ruta demasiado longa"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "non se puido obter o directorio de traballo actual\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "non se puido cambiar o directorio a %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "non se puido restaurar o directorio de traballo (%s)\n"
@@ -153,7 +153,7 @@ msgstr "quitando a base de datos non válida: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "non se puido crear o directorio %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "nome non válido para a entrada '%s' da base de datos\n"
@@ -175,21 +175,21 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr ""
 "non se puido abrir o arquivo %s: %s\n"
 "\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr ""
 "a base de datos %s é inconsistente: o nome no paquete %s non concorda\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -251,7 +251,7 @@ msgstr "faltan os metadatos do paquete en %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "non foi posíbel ler o ficheiro da sinatura: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "a clave requirida falta no depósito de claves\n"
@@ -261,38 +261,38 @@ msgstr "a clave requirida falta no depósito de claves\n"
 msgid "removing invalid file: %s\n"
 msgstr "eliminando arquivo inválido: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "non se puido analizar o arquivo de descrición do paquete '%s'  da base de "
 "datos '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "non se puido ler a base de datos '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "a base de datos %s é inconsistente: o nome do ficheiro do paquete %s non "
 "está permitido\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "a base de datos %s é inconsistente: o nome do ficheiro do paquete %s é "
 "demasiado longo\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "ficheiro de base de datos descoñecido: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -380,60 +380,60 @@ msgstr "non se puido determinar o punto de montaxe da raiz %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "A partición %s está montada como só lectura\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "error ao crear un arquivo temporal para a descarga\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr "demasiados erros de %s, omitindo o que queda desta transacción\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr "erro fatal de %s, omitindo o que queda desta transacción\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disco"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "error ao obter o arquivo '%s' dende %s: %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "Non foi posíbel obter o ficheiro «%s» de «%s»: superouse o tamaño de "
 "descarga esperado.\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s parece estar truncado:  %jd/%jd bytes\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "a dirección '%s' non é válida\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "fallou a preparación da descarga para %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "«curl» devolveu un erro %dda transferencia\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "erro de tranferencia de «curl»: %d\n"
@@ -448,12 +448,17 @@ msgstr "non se puido cambiar o directorio de descargas %s\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "non foi posíbel descargar algúns dos ficheiros\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "a descarga compleouse correctamente pero non hai ficheiro na caché\n"
@@ -691,50 +696,55 @@ msgstr "arquivos en conflicto"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "error ao descargar algúns arquivos"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "expresión regular non válida"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "error de libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "error de descarga de biblioteca"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "error de gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "error invocando o descargador externo"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "compilado sen soporte de sinatura"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "error inesperado"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "Falta «%s» ao ficheiro de bloqueo.\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "Non foi posíbel eliminar o ficheiro de bloqueo «%s».\n"
@@ -816,7 +826,7 @@ msgstr "non foi posíbel abrir o cartafol «%s»: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "non foi posíbel abrir o ficheiro:%s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "non foi posíbel executar a orde «stat» co ficheiro «%s»: %s\n"
@@ -900,95 +910,178 @@ msgstr "non se puido quitar a entrada %s-%s da base de datos\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "non se puido quitar a entrada '%s' do caché\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""
 "Non se atopou o depósito de claves público; probaches a executar '%s'?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "erro de GPGME: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "buscando a clave %s usando WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "erro de gpg: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "non se pode escribir no depósito de claves\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "clave \"%s\" no servidor de claves\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "a clave \"%s\" non se puido importar\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "a clave \"%s\" non se puido buscar de forma remota\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: fáltalle a sinatura obrigatoria.\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: a sinatura de \"%s\" é de confianza mínima\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: a sinatura de \"%s\" é de unha confianza descoñecida\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: a sinatura de \"%s\" nunca debería ser confiada\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: a clave \"%s\" é descoñecida\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: a clave \"%s\" está desactivada\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: a sinatura de \"%s\" caducou\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: a clave \"%s\" é descoñecida\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: a clave \"%s\" está desactivada\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: a sinatura de \"%s\" non é válida\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: erro no formato da sinatura\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: formato da sinatura non soportado\n"
@@ -1040,27 +1133,27 @@ msgstr ""
 "quitando '%s-%s' da lista de obxectivos porque entra en conflito con '%s-"
 "%s'\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr "%s: non se puido encontrar o paquete na caché\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "errou a lectura do ficherio %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "non hai espazo de almacenamento dabondo\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "non se puido enviar a operación de eliminación\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "non se puido asignar a transacción\n"
@@ -1085,12 +1178,12 @@ msgstr "non se puido eliminar %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "non se puido eliminar o directorio temporal %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "non se pode escribir na tubería (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "non se pode ler da tubería (%s)\n"
@@ -1145,3 +1238,23 @@ msgstr "non existe o caché %s, creando...\n"
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "non se puido atopar ou crear a caché do paquete, en lugar utilizarase %s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/hi.po
+++ b/lib/libalpm/po/hi.po
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Panwar108 <caspian7pena@gmail.com>, 2018,2020-2021\n"
 "Language-Team: Hindi (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -39,17 +39,17 @@ msgstr "पैकेज डाउनग्रेड होगा %s (%s => %s)\n
 msgid "cannot allocate disk archive object"
 msgstr "डिस्क संग्रह वस्तु का आवंटन विफल"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "%s (%s) अनपैक करते समय चेतावनी दी गई\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr " %s (%s) अनपैक करना विफल\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "%s का नाम बदलकर %s करना विफल (%s)\n"
@@ -92,18 +92,18 @@ msgstr "अनपैक : डायरेक्टरी फाइल %s से
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "%s.pacnew अनपैक करना विफल : पथ काफी लंबा है"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "वर्तमान कार्यरत डायरेक्टरी प्राप्त करना विफल\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "डायरेक्टरी बदल कर %s (%s) करना विफल\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "कार्यरत डायरेक्टरी हेतु पुनः स्थापना विफल (%s)\n"
@@ -143,7 +143,7 @@ msgstr "अमान्य डेटाबेस हट रहा है : %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "%s डायरेक्टरी बनाना विफल :%s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "डेटाबेस प्रविष्टि '%s' हेतु अमान्य नाम\n"
@@ -165,18 +165,18 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "%s फाइल खोलना विफल : %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s डेटाबेस विसंगति : %s पैकेज हेतु नाम बेमेल\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "%s डेटाबेस विसंगति : %s पैकेज हेतु संस्करण बेमेल\n"
@@ -237,7 +237,7 @@ msgstr "%s में पैकेज मेटाडेटा अमान्य
 msgid "failed to read signature file: %s\n"
 msgstr "हस्ताक्षर फाइल रीड करना विफल : %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "कुंजी-संग्रह से आवश्यक कुंजी अनुपस्थित\n"
@@ -247,32 +247,32 @@ msgstr "कुंजी-संग्रह से आवश्यक कुं
 msgid "removing invalid file: %s\n"
 msgstr "अमान्य फाइल हट रही है : %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "डेटाबेस '%s' से पैकेज विवरण फाइल '%s' प्राप्यता विफल\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "'%s' (%s) डेटाबेस रीड करना विफल\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "%s डेटाबेस विसंगति : %s पैकेज का फाइल नाम अमान्य है\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "%s डेटाबेस विसंगति : %s पैकेज का फाइल नाम काफी लंबा है\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "अज्ञात डेटाबेस फाइल : %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -357,58 +357,58 @@ msgstr "रुट हेतु %s माउंट पॉइंट निर्
 msgid "Partition %s is mounted read only\n"
 msgstr "माउंट विभाजन %s केवल रीड योग्य है\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "डाउनलोड हेतु अस्थायी फाइल बनाना विफल\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr "%s हेतु अत्यधिक त्रुटियाँ हुई, यह शेष संचालन के दौरान निरस्त रहेगा\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "डिस्क"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "%s से फाइल '%s' प्राप्त करना विफल : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr "%s से फाइल '%s' प्राप्त करना विफल : डाउनलोड आकर अपेक्षा से अधिक\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s खंडित प्रतीत होता है : %jd/%jd बाइट\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "यूआरएल '%s' अमान्य है\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "%s हेतु डाउनलोड अवस्था सेट करना विफल\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "अंतरण हेतु curl से प्राप्त त्रुटि %d\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "curl अंतरण त्रुटि : %d\n"
@@ -423,12 +423,17 @@ msgstr "डाउनलोड डायरेक्टरी %s हेतु ड
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "कुछ फ़ाइलें प्राप्त करने में विफल\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "डाउनलोड करना सफल परन्तु कैश में फाइल मौजूद नहीं है\n"
@@ -665,50 +670,55 @@ msgstr "विरुद्ध फाइलें"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "कुछ फाइलें प्राप्त करना विफल"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "अमान्य सामान्य व्यंजक"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "Libarchive त्रुटि"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "डाउनलोड लाइब्रेरी त्रुटि"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "GPGme त्रुटि"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "बाह्य डाउनलोड साधन उपयोग करना विफल"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "हस्ताक्षर समर्थन बिना संयोजित"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "अनपेक्षित त्रुटि"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "लॉक फाइल अनुपस्थित %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "लॉक फाइल %s हटाना विफल \n"
@@ -790,7 +800,7 @@ msgstr "डायरेक्टरी खोलना विफल : %s : %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "फाइल खोलना विफल : %s %s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "फाइल %s स्थिति प्राप्त करना विफल : %s\n"
@@ -872,94 +882,177 @@ msgstr "डेटाबेस प्रविष्टि हटाना वि
 msgid "could not remove entry '%s' from cache\n"
 msgstr "कैश से प्रविष्टि '%s' हटाना विफल\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "सार्वजानिक कुंजी-संग्रह नहीं मिला; क्या आपने '%s' निष्पादित किया?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "GPGME त्रुटि : %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "वेब कुंजी डायरेक्टरी द्वारा कुंजी %s खोज\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "GPG त्रुटि : %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "कुंजी-संग्रह राइट योग्य नहीं है\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "कुंजी सर्वर पर कुंजी \"%s\"\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "कुंजी \"%s\" आयात विफल\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "कुंजी \"%s\" हेतु दूरस्थ खोज विफल\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s : आवश्यक हस्ताक्षर अनुपस्थित\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s : \"%s\" के हस्ताक्षर की विश्वसनीयता आंशिक है\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s : \"%s\" के हस्ताक्षर की विश्वसनीयता अज्ञात है\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s : \"%s\" का हस्ताक्षर विश्वसनीय नहीं है\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: कुंजी \"%s\" अज्ञात है\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: कुंजी \"%s\" निष्क्रिय है\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s : \"%s\" के हस्ताक्षर की मान्यता समाप्त हो चुकी है\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: कुंजी \"%s\" अज्ञात है\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: कुंजी \"%s\" निष्क्रिय है\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s : \"%s\" का हस्ताक्षर अमान्य है\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: हस्ताक्षर प्रारूप त्रुटि\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: असमर्थित हस्ताक्षर प्रारूप\n"
@@ -1009,27 +1102,27 @@ msgstr "असमन्वयित विरुद्ध पैकेज पह
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "%s फ़ाइल रीड करने में विफल : %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "अपर्याप्त डिस्क स्पेस\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "हटाने हेतु संचालन संचित करना विफल\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "संचालन संचित करना विफल\n"
@@ -1054,12 +1147,12 @@ msgstr "%s हटाना विफल\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "अस्थायी डायरेक्टरी %s हटाना विफल\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "पाइप (%s) पर राइट करने में विफल\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "पाइप (%s) से रीड करने में विफल\n"
@@ -1113,3 +1206,23 @@ msgstr "कोई %s कैश मौजूद नहीं है, बनाई
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "पैकेज कैश खोज या बनाना विफल, अतः %s उपयोग होगा\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/hr.po
+++ b/lib/libalpm/po/hr.po
@@ -9,7 +9,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Viktor Coric <viktor_coric94@hotmail.com>, 2016\n"
 "Language-Team: Croatian (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -41,12 +41,12 @@ msgstr "unazađujem paket %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr ""

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "dano upozorenje tijekom raspakiranja  %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr ""
@@ -54,7 +54,7 @@ msgstr ""
 "\n"
 "\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "ne mogu preimenivati %s u %s (%s)\n"
@@ -98,18 +98,18 @@ msgstr "raspakiravanje: ne pišem preko direktorija datotekom %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "nije moguće raspakirati %s.pacnew: putanja je preduga"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "ne mogu dobaviti trenutni radni direktorij\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "ne mogu promjeniti direktorij u  %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr ""
@@ -155,7 +155,7 @@ msgstr "uklanjam neispravnu bazu podataka: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "ne mogu napraviti direktorij %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr ""
@@ -179,18 +179,18 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "ne mogu otvoriti datoteku %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s baza podatak je nedosljedna: ime se ne podudara sa paketom %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -254,7 +254,7 @@ msgstr "nedostaju metapodaci paketa u %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "ne mogu pročitati datoteku sa potpisom: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "traženi ključ nedostaje u privjesku\n"
@@ -264,32 +264,32 @@ msgstr "traženi ključ nedostaje u privjesku\n"
 msgid "removing invalid file: %s\n"
 msgstr "uklanjam neispravnu datoteku: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "ne mogu obraditi datoteku opisa paketa '%s' iz baze podataka '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "ne mogu čitati db '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "nedosljednost baze podataka %s: ime paketa %s je nevažeći\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "nedosljednost baze podataka %s: ime paketa %s je predugo\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "nepoznata datoteka baze podataka: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -377,60 +377,60 @@ msgstr "ne mogu odrediti točku montiranja za root %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Particija %s je montirana samo za čitanje\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
-msgstr "neuspjela izrada privremene datoteke za preuzimanje\n"
+msgstr ""

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disk"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "neuspjelo primanje datoteke '%s' iz %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "greška pri dobavljanju datoteke '%s' iz %s: veličina preuzimanja je veća od "
 "očekivane\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s je okrnjen: %jd%jd bajtova\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "url '%s' je neispravan\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -445,12 +445,17 @@ msgstr "ne mogu promjeniti direktorij u direktorij za skidanje od %s\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, fuzzy, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "ne mogu preimenivati %s u %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "neuspjelo primanje nekin datoteka\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -686,51 +691,56 @@ msgid "conflicting files"
 msgstr "sukobljene datoteke"

 #: lib/libalpm/error.c:142
+#, fuzzy, c-format
+msgid "failed to initialize download"
+msgstr "neuspjela izrada privremene datoteke za preuzimanje\n"
+
+#: lib/libalpm/error.c:144
 #, c-format
 msgid "failed to retrieve some files"
 msgstr "neuspjelo primanje nekih datoteka"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "neispravan regularni izraz"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "libarchive greška"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "Greška pri preuzimanju biblioteke"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme greška"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "Greška pri dozivanju vanjskog preuzimatelja"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "neočekivana greška"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "datoteka za zaključavanje nedostaje %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "ne mogu ukloniti datoteku za zaključavanje %s\n"
@@ -812,7 +822,7 @@ msgstr "ne mogu otvoriti direktorij: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr ""

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "ne mogu odrediti pojedinosti datoteke %s: %s\n"
@@ -896,96 +906,179 @@ msgstr "ne mogu ukloniti unos baze podataka  %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "ne mogu ukloniti unos '%s' iz cachea\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "GPGME greška: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "gpg greška: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr ""

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr ""

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr ""

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr ""
 "%s: nedostaje potrebni potpis\n"
 "\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: ključ \"%s\" je nepoznat\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: ključ \"%s\" je onemogućen\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr ""

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: ključ \"%s\" je nepoznat\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: ključ \"%s\" je onemogućen\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr ""

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: greška formata potpisa\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: nepodržani format potpisa\n"
@@ -1037,27 +1130,27 @@ msgstr "otkriveni su nerješivi sukobi paketa\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr ""

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "nema dovoljno slobodnog prostora\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "ne mogu izvršiti transakciju uklanjanja\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "ne mogu izvršiti transakciju\n"
@@ -1082,12 +1175,12 @@ msgstr "ne mogu ukloniti %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "ne mogu ukloniti privremeni direktorij %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "ne mogu pisati u cijev (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "ne mogu čitati iz cijevi (%s)\n"
@@ -1141,3 +1234,23 @@ msgstr "%s cache ne postoji, pravim...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "ne mogu naći ili napraviti cache paketa, koristim %s umjesto toga\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/hu.po
+++ b/lib/libalpm/po/hu.po
--- a/lib/libalpm/po/id.po
+++ b/lib/libalpm/po/id.po
@@ -16,7 +16,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: se7entime <se7entime@disroot.org>, 2013,2015\n"
 "Language-Team: Indonesian (http://app.transifex.com/toofishes/archlinux-"
@@ -47,17 +47,17 @@ msgstr "menurunkan paket %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr ""

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "peringatan diberikan ketika mengekstrak %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "tidak dapat mengekstrak %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "tidak dapat mengubah nama %s menjadi %s (%s)\n"
@@ -102,18 +102,18 @@ msgstr "ekstrak: tidak menimpa direktori dengan berkas %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "gagal mengekstrak %s.pacnew: jalur terlalu panjang"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "tidak dapat mendapatkan direktori kerja saat ini\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "tidak dapat mengganti direktori ke %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "tidak dapat mengembalikan direktori kerja (%s)\n"
@@ -153,7 +153,7 @@ msgstr "menghapus semua database tak valid: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "tidak dapat membuat direktori %s:%s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "nama entry '%s' database tidak valid\n"
@@ -175,18 +175,18 @@ msgstr "tipe validasi tidak dikenal untuk paket %s: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "tidak dapat membuka berkas %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s database tidak konsisten: nama tidak cocok pada paket %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "%s database tidak konsisten: versi tidak sama pada paket %s\n"
@@ -247,7 +247,7 @@ msgstr "paket %s kehilangan metadata\n"
 msgid "failed to read signature file: %s\n"
 msgstr "gagal membaca berkas signatur: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "key yang dibutuhkan tidak ada pada keyring\n"
@@ -257,32 +257,32 @@ msgstr "key yang dibutuhkan tidak ada pada keyring\n"
 msgid "removing invalid file: %s\n"
 msgstr "menghapus berkas tidak valid: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "tidak dapat menerjemahkan deskripsi berkas '%s' dari db '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr ""

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "%s basis data tidak konsisten: nama berkas paket %s adalah ilegal\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "%s basis data tidak konsisten: nama berkas paket %s terlalu panjang\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "berkas database tidak dikenal: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -367,59 +367,59 @@ msgstr "tidak dapat menentukan titik kait root %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Partisi %s dikaitkan hanya baca\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
-msgstr "gagal membuat berkas unduhan temporer\n"
+msgstr ""

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "diska"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "gagal mendapatkan berkas '%s' dari %s: %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "gagal mendapatkan berkas '%s' dari %s: ukuran unduhan melebihi perkiraan\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s sepertinya tidak lengkap: %jd/%jd byte\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "url '%s' tidak valid\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -434,12 +434,17 @@ msgstr "tidak dapat mengubah direktori root (%s)\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, fuzzy, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "tidak dapat mengubah nama %s menjadi %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "gagal mendapatkan beberapa berkas\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -675,51 +680,56 @@ msgid "conflicting files"
 msgstr "berkas yang konflik"

 #: lib/libalpm/error.c:142
+#, fuzzy, c-format
+msgid "failed to initialize download"
+msgstr "gagal membuat berkas unduhan temporer\n"
+
+#: lib/libalpm/error.c:144
 #, c-format
 msgid "failed to retrieve some files"
 msgstr "gagal mendapatkan beberapa berkas"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "regular expression tidak valid"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "libarchive error"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "pustaka pengunduhan error"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme error"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "galat melibatkan pengunduh eksternal"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "galat tak terduga"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "berkas lock tidak ditemukan %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "tidak dapat menghapus berkas kunci %s\n"
@@ -801,7 +811,7 @@ msgstr "tidak dapat membuka direktori: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr ""

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "tidak dapat mencatat stat berkas %s: %s\n"
@@ -883,94 +893,177 @@ msgstr "tidak dapat menghapus entry database %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "tidak dapat menghapus entry '%s' dari cache\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr ""

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr ""

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr ""

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: tidak mempunyai signature yang dibutuhkan\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr ""

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr ""

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr ""

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr ""
@@ -1020,27 +1113,27 @@ msgstr "konflik paket tak terselesaikan terdeteksi\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr ""

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "ruang kosong tidak cukup\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "tidak dapat melakukan transaksi penghapusan\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "tidak dapat melakukan transaksi\n"
@@ -1065,12 +1158,12 @@ msgstr "tidak dapat menghapus %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "tidak dapat menghapus direktori temporer %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "gagal menulis ke pipa (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "gagal membaca dari pipa (%s)\n"
@@ -1124,3 +1217,23 @@ msgstr "tidak ada %s cache yang ada, membuat...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "tidak dapat membuat cache paket, gunakan %s saja\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/it.po
+++ b/lib/libalpm/po/it.po
@@ -10,15 +10,15 @@
 # d574d4bb40c84861791a694a999cce69_9aabecb <ec34fbc10d74f76d8160c2aae04a84b4_6702>, 2014
 # Dan McGee <dpmcgee@gmail.com>, 2011
 # Giovanni Scafora <scafora.giovanni@gmail.com>, 2011-2013,2015,2022
-# Giovanni Scafora <scafora.giovanni@gmail.com>, 2023-2024
+# Giovanni Scafora <scafora.giovanni@gmail.com>, 2023-2025
 # ~Smlb <smlb@riseup.net>, 2014
 msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
-"Last-Translator: Giovanni Scafora <scafora.giovanni@gmail.com>, 2023-2024\n"
+"Last-Translator: Giovanni Scafora <scafora.giovanni@gmail.com>, 2023-2025\n"
 "Language-Team: Italian (http://app.transifex.com/toofishes/archlinux-pacman/"
 "language/it/)\n"
 "Language: it\n"
@@ -50,17 +50,17 @@ msgstr ""
 msgid "cannot allocate disk archive object"
 msgstr "impossibile allocare l'oggetto archivio su disco"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "è stato rilevato un warning durante l'estrazione di %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "impossibile estrarre %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "impossibile rinominare %s in %s (%s)\n"
@@ -105,18 +105,18 @@ msgstr "estrazione: impossibile sovrascrivere la directory con il file %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "impossibile estrarre %s.pacnew: percorso troppo lungo"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "impossibile determinare la directory corrente\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "impossibile spostarsi nella directory %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "impossibile ripristinare la directory di lavoro (%s)\n"
@@ -156,7 +156,7 @@ msgstr "rimozione del database non valido: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "impossibile creare la directory %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "nome non valido per la voce del database '%s'\n"
@@ -178,19 +178,19 @@ msgstr "motivo di installazione sconosciuto del pacchetto %s: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "impossibile aprire il file %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr ""
 "il database %s è inconsistente: il nome non corrisponde con il pacchetto %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -253,7 +253,7 @@ msgstr "manca il metadata del pacchetto in %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "impossibile leggere il file della firma: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "la chiave richiesta non è presente nel portachiavi\n"
@@ -263,37 +263,37 @@ msgstr "la chiave richiesta non è presente nel portachiavi\n"
 msgid "removing invalid file: %s\n"
 msgstr "rimozione del file non valido: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "impossibile analizzare il file della descrizione del pacchetto '%s' dal "
 "database '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "impossibile leggere il database '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "il database %s è inconsistente: il nome del pacchetto %s è illegale\n"
 " \n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "il database %s è inconsistente: il nome del pacchetto %s è troppo lungo\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "database sconosciuto: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr "%s: chiave sconosciuta '%s' nel database\n"
@@ -382,60 +382,60 @@ msgstr "impossibile determinare il punto di montaggio della root %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "La partizione %s è montata in sola lettura\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "impossibile creare la directory temporanea per il download\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr "troppi errori da %s, ignoro il resto dell'operazione\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr "errore fatale di %s, ignoro le restanti operazioni\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disco"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "impossibile scaricare il pacchetto '%s' da %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "impossibile scaricare il file '%s' da %s: la dimensione di download supera "
 "quella attesa\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s sembra essere incompleto: %jd/%jd byte\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "l'url '%s' non è valido\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "impossibile impostare un payload di download per %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl ha restituito l'errore %d dal download\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "errore di curl: %d\n"
@@ -450,12 +450,17 @@ msgstr "impossibile accedere alla directory di download %s\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr "impossibile effettuare il passaggio alla sandbox dell'utente '%s'!\n"

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "impossibile spostare %s in %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "impossibile scaricare alcuni file\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "download completato con successo ma nessun file nella cache\n"
@@ -692,50 +697,55 @@ msgstr "file in conflitto"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr "impossibile inizializzare il download"
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "impossibile scaricare alcuni file"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "l'espressione regolare non è valida"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "errore di libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "si è verificato un errore della libreria di download"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "errore di gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "si è verificato un errore lanciando il downloader esterno"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "compilato senza il supporto per la firma"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "errore inaspettato"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "manca il file di lock %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "impossibile rimuovere il file di lock %s\n"
@@ -817,7 +827,7 @@ msgstr "impossibile accedere alla directory: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "impossibile aprire il file: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "impossibile trovare il file %s: %s\n"
@@ -908,95 +918,195 @@ msgstr "impossibile rimuovere la voce %s-%s del database\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "impossibile rimuovere la voce '%s' dalla cache\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+"impossibile limitare l’accesso al filesystem perché Landlock non è "
+"supportato dal kernel!\n"
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr "ABI di Landlock < 2, LANDLOCK_ACCESS_FS_REFER non è supportato\n"
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr "ABI di Landlock < 3, LANDLOCK_ACCESS_FS_TRUNCATE non è supportato\n"
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+"impossibile limitare l’accesso al filesystem perché non è stato possibile "
+"creare il ruleset di Landlock: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+"impossibile aprire il filesystem root in modalità sola lettura tramite "
+"Landlock: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+"impossibile limitare l’accesso al filesystem perché non è stato possibile "
+"aggiungere la regola Landlock per /: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+"impossibile aprire la directory di download in modalità scrittura tramite "
+"Landlock: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+"impossibile limitare l’accesso al filesystem perché non è stato possibile "
+"applicare il ruleset di Landlock: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+"impossibile limitare l’accesso al filesystem perché non è stato possibile "
+"aggiungere la regola Landlock per la directory temporanea di download: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+"l'accesso al filesystem è stato limitato a %s, l'ABI di Landlock è %d\n"
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+"impossibile inizializzare seccomp per filtrare le chiamate di sistema nella "
+"sandbox di download!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr "impossibile limitare la syscall %s tramite seccomp!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr "impossibile limitare le syscall tramite seccomp: %d!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr "limitate correttamente %d syscall tramite seccomp\n"
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Portachiavi pubblico non trovato; hai eseguito '%s'?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "Errore di GPGME: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "ricerca della chiave %s tramite WKD in corso\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "errore GPG: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "il portachiavi non è scrivibile\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "chiave \"%s\" sul server delle chiavi\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "la chiave \"%s\" non può essere importata\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "impossibile cercare la chiave \"%s\" sul server remoto\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: manca la firma PGP\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: la firma di \"%s\" ha un'affidabilità marginale\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: la firma di \"%s\" ha un'affidabilità sconosciuta\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""
 "%s: la firma di \"%s\" non dovrebbe mai essere considerata affidabile\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: chiave \"%s\" è sconosciuta\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: chiave \"%s\" è disabilitata\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: la firma di \"%s\" è scaduta\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: chiave \"%s\" è sconosciuta\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: chiave \"%s\" è disabilitata\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: la firma di \"%s\" non è valida\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: errore del formato della firma\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: il formato della firma non è supportato\n"
@@ -1049,27 +1159,27 @@ msgstr ""
 "rimozione in corso di '%s-%s' dall'elenco perché va in conflitto con '%s-"
 "%s'\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr "%s: impossibile trovare il pacchetto nella cache\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "impossibile leggere il file %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "lo spazio libero sul disco non è sufficiente\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "impossibile eseguire l'operazione di rimozione\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "impossibile eseguire l'operazione\n"
@@ -1094,12 +1204,12 @@ msgstr "impossibile rimuovere %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "impossibile rimuovere la directory temporanea %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "impossibile scrivere nella pipe (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "impossibile leggere dalla pipe (%s)\n"
@@ -1155,3 +1265,25 @@ msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "impossibile trovare o creare la cache del pacchetto, al suo posto sarà usato "
 "%s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr "l'utente '%s' per il download non esiste\n"
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr "impossibile ottenere l’utente di download '%s': %s\n"
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr "impossibile creare la directory temporanea di download %s: %s\n"
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
+"impossibile modificare il proprietario della directory temporanea di "
+"download %s: %s\n"
--- a/lib/libalpm/po/ja.po
+++ b/lib/libalpm/po/ja.po
@@ -12,7 +12,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Satoru Abe <s@polamjag.info>, 2015\n"
 "Language-Team: Japanese (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -43,17 +43,17 @@ msgstr "パッケージ %s のダウングレード (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "ディスクアーカイブオブジェクトを割り当てることができません"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "%s の展開中に警告が発生しました (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "%s を展開できませんでした (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "%s を %s に名前を変更できませんでした (%s)\n"
@@ -62,8 +62,8 @@ msgstr "%s を %s に名前を変更できませんでした (%s)\n"
 #, c-format
 msgid "file not found in file list for package %s. skipping extraction of %s\n"
 msgstr ""
-"パッケージ %s のファイルリストに含まれているファイルが見つかりませんでし"
-"た。%s の展開をスキップします。\n"
+"パッケージ %s のファイルリストに含まれているファイルが見つかりませんでした。"
+"%s の展開をスキップします。\n"

 #: lib/libalpm/add.c:219
 #, c-format
@@ -98,18 +98,18 @@ msgstr "extract: ディレクトリをファイルで上書きできません %s
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "%s.pacnew を展開できませんでした: パスが長すぎます"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "現在の作業ディレクトリを取得できませんでした\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "ディレクトリを %s に変更できませんでした (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "作業ディレクトリを復帰できませんでした (%s)\n"
@@ -149,7 +149,7 @@ msgstr "無効なデータベースを削除: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "キャッシュディレクトリ %s を作成できませんでした: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "無効な名前のデータベースエントリ '%s'\n"
@@ -171,18 +171,18 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "ファイル %s を開けませんでした: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s データベースは矛盾しています: パッケージ %s の名前の不整合\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "%s データベースは矛盾しています: パッケージ %s のバージョンの不整合\n"
@@ -243,7 +243,7 @@ msgstr "%s にパッケージのメタデータが見つかりません\n"
 msgid "failed to read signature file: %s\n"
 msgstr "署名ファイルの読み込みに失敗しました: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "キーリングに必要なキーがありません\n"
@@ -253,35 +253,35 @@ msgstr "キーリングに必要なキーがありません\n"
 msgid "removing invalid file: %s\n"
 msgstr "無効なファイルを削除: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "パッケージ定義ファイル '%s' (データベース '%s') をパースできませんでした\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "データベース '%s' を読み込めませんでした (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "%s データベースは矛盾しています: パッケージ %s のファイル名が不正です\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "%s データベースは矛盾しています: パッケージ %s のファイル名が長すぎます\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "未知のデータベースファイル: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -366,60 +366,60 @@ msgstr "root マウントポイント %s を決定できませんでした\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "パーティション %s は読み込み専用でマウントされています\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "ダウンロードのための一時ファイルを作成できませんでした\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr "%s からのエラーが多すぎるため、残りの処理ではスキップします\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "ディスク"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "ファイル '%s' を %s から取得するのに失敗しました : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "ファイル '%s' を %s から取得するのに失敗しました : 想定されるダウンロードサイ"
 "ズを超過しています\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s が途中で切れています: %jd/%jd バイト\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "url '%s' は無効です\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "%s のダウンロードペイロードのセットアップに失敗しました\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl が転送からエラー %d を返しました\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "curl 転送エラー: %d\n"
@@ -434,12 +434,17 @@ msgstr "作業ディレクトリをダウンロードディレクトリ %s に
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "複数のファイルの取得に失敗しました\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "ダウンロードは成功しましたがキャッシュにファイルがありません\n"
@@ -676,50 +681,55 @@ msgstr "衝突しているファイル"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "ファイルの取得に失敗しました"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "無効な正規表現"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "libarchive エラー"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "ダウンロードライブラリエラー"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme エラー"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "外部のダウンローダーの呼び出しエラー"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "コンパイル時に署名のサポートが有効にされていません"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "予期しないエラー"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "ロックファイル %s が見つかりません\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "ロックファイル %s を削除できませんでした\n"
@@ -801,7 +811,7 @@ msgstr "ディレクトリを開けませんでした: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "ファイルを開けませんでした: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "ファイル %s を確認できませんでした: %s\n"
@@ -883,94 +893,177 @@ msgstr "データベースエントリ %s-%s を削除できませんでした\n
 msgid "could not remove entry '%s' from cache\n"
 msgstr "キャッシュからエントリ '%s' を削除できませんでした\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "公開キーリングが見つかりません。'%s' を実行済みですか？\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "GPGME エラー: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "WKD を使ってキー %s を検索\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "gpg エラー: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "キーリングに書き込みできません\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "キーサーバのキー \"%s\"\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "キー \"%s\" をインポートできませんでした\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "キー \"%s\" をリモートで検索できませんでした\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: 必要な署名が見つかりません\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: \"%s\" の署名は部分的に信頼されています\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: \"%s\" の署名は信頼されていません\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: \"%s\" の署名は信頼できません\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: キー \"%s\" は不明です\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: キー \"%s\" は無効です\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: \"%s\" の署名は期限切れです\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: キー \"%s\" は不明です\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: キー \"%s\" は無効です\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: \"%s\" の署名は無効です\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: 署名フォーマットエラー\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: サポートされていない署名フォーマット\n"
@@ -1020,27 +1113,27 @@ msgstr "解決できないパッケージの衝突が検出されました\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "ファイル %s を読み込めませんでした: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "十分な空き容量がありません\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "削除処理が完了できませんでした\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "処理が完了できませんでした\n"
@@ -1065,12 +1158,12 @@ msgstr "%s を削除できません\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "一時ディレクトリ %s を削除できません\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "パイプに書き込めません (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "パイプを読み込めません (%s)\n"
@@ -1125,3 +1218,23 @@ msgstr "%s キャッシュが存在しません、作成します...\n"
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "パッケージキャッシュを発見・作成できませんでした、かわりに %s を使用します\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/kk.po
+++ b/lib/libalpm/po/kk.po
@@ -9,7 +9,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Dan McGee <dpmcgee@gmail.com>, 2011\n"
 "Language-Team: Kazakh (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -40,17 +40,17 @@ msgstr "дестенің нұсқасын төмендету %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "дискі архив объектін бөлу мүмкін емес"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "%s тарқатқанда ескерту алынды (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "%s тарқату қатесі (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "%s атын жаңа %s атына ауыстыру мүмкін емес (%s)\n"
@@ -95,18 +95,18 @@ msgstr "тарқату: бума %s файлымен ауыстырылмайд
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "%s.pacnew тарқату мүмкін емес: жол тым ұзын"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "ағымдағы жұмыс бумасын анықтау мүмкін емес\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "%s бумасына ауысу мүмкін емес (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "жұмыс бумасын (%s) қалпына келтіру мүмкін емес\n"
@@ -146,7 +146,7 @@ msgstr "қате дерекқорды өшіру: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "%s бумасын жасау мүмкін емес: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "дерекқордағы '%s' жазбасының аты қате\n"
@@ -168,18 +168,18 @@ msgstr "%s дестесі үшін растау түрі белгісіз: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "%s файлын ашу мүмкін емес: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "дерекқордағы қате ақпарат %s: %s дестесінің аты сәйкес келмейді\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "дерекқордағы қате ақпарат %s: %s дестесінің нұсқасы сәйкес келмейді\n"
@@ -240,7 +240,7 @@ msgstr "%s ішінде дестенің мета мәліметтері жоқ\
 msgid "failed to read signature file: %s\n"
 msgstr "қолтаңба файлын оқу сәтсіз аяқталды: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "кілттер бауында керек кілт жоқ болып тұр\n"
@@ -250,32 +250,32 @@ msgstr "кілттер бауында керек кілт жоқ болып тұ
 msgid "removing invalid file: %s\n"
 msgstr "қате файлды өшіру: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "'%s' десте сипаттама файлын, '%s' дерекқорынан, талдау мүмкін емес\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr ""

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "%s дерекқоры екімәнді: %s дестесінің файл аты жарамсыз\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "%s дерекқоры екімәнді: %s дестесінің файл аты тым ұзын\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "белгісіз дерекқор файлы: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -360,59 +360,59 @@ msgstr "%s түбірлік бумасының тіркелу нүктесін
 msgid "Partition %s is mounted read only\n"
 msgstr "%s бөлімі тек оқу үшін тіркелген\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
-msgstr "жүктеп алу үшін уақытша файлды жасау сәтсіз аяқталды\n"
+msgstr ""

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "дискі"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "'%s' файлын  %s адресінен алу қатемен аяқталды : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "'%s' файлын %s ішінен алу қатесі : күтілген жүктеп алу өлшемінен асып кетті\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s қысқартылған сияқты: %jd/%jd байт\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "'%s' сілтемесі қате\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -427,12 +427,17 @@ msgstr "түбірлік буманы ауыстыру мүмкін емес (%s
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, fuzzy, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "%s атын жаңа %s атына ауыстыру мүмкін емес (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "кейбір файлдарды алу сәтсіз аяқталды\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -668,51 +673,56 @@ msgid "conflicting files"
 msgstr "ерегісетін файлдар"

 #: lib/libalpm/error.c:142
+#, fuzzy, c-format
+msgid "failed to initialize download"
+msgstr "жүктеп алу үшін уақытша файлды жасау сәтсіз аяқталды\n"
+
+#: lib/libalpm/error.c:144
 #, c-format
 msgid "failed to retrieve some files"
 msgstr "кейбір файлдарды алу сәтсіз аяқталды"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "тұрақты өрнек дұрыс емес"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "libarchive қатесі орын алды"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "download library қатесі орын алды"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme қатесі"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "сыртқы жүктемелер менеджерін шақыру қатемен аяқталды"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "күтпеген қате кетті"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "блоктау файлы жоқ %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "%s оқшау файлын өшіру мүмкін емес\n"
@@ -794,7 +804,7 @@ msgstr "буманы ашу мүмкін емес: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr ""

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "%s файлын табу мүмкін емес: %s\n"
@@ -876,94 +886,177 @@ msgstr "дерекқордан %s-%s жазбасын өшіру мүмкін е
 msgid "could not remove entry '%s' from cache\n"
 msgstr "кэш ішінен '%s' жазбасын өшіру мүмкін емес\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr ""

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr ""

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr ""

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: міндетті қолтаңба жоқ\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr ""

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr ""

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr ""

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr ""
@@ -1013,27 +1106,27 @@ msgstr "дестелердің шешілмейтін ерегісі табыл
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr ""

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "бос диск орны жеткіліксіз\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "өшіруге сұранымды орындау мүмкін емес\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "сұранымды аяқтау мүмкін емес\n"
@@ -1058,12 +1151,12 @@ msgstr "%s өшіру мүмкін емес\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "%s уақытша бумасын өшіру мүмкін емес\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr ""

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr ""
@@ -1117,3 +1210,23 @@ msgstr "%s кэші жоқ болып тұр, құрылады...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "дестелер кэшін табу не жасау мүмкін емес, орнына %s қолданылады\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/ko.po
+++ b/lib/libalpm/po/ko.po
@@ -17,7 +17,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Thomas Sungjin Kang <potopro@gmail.com>, 2013\n"
 "Language-Team: Korean (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -48,17 +48,17 @@ msgstr "꾸러미 %s (%s => %s) 다운그레이드\n"
 msgid "cannot allocate disk archive object"
 msgstr "디스크 보관소 객체를 할당할 수 없습니다"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "%s 추출 시 경고 발생 (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "%s를 추출할 수 없습니다. (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "%s의 이름을 %s로 바꾸지 못했습니다.(%s)\n"
@@ -103,18 +103,18 @@ msgstr "추출: %s 파일로 디렉터리를 덮어쓰지 못함\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "%s.pacnew를 추출할 수 없습니다: 경로가 너무 깁니다"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "현재 작업 디렉터리를 가져올 수 없습니다.\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "%s로 디렉터리를 변경할 수 없습니다. (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "작업 디렉터리를 복원할 수 없습니다. (%s)\n"
@@ -154,7 +154,7 @@ msgstr "잘못된 데이터베이스를 삭제함: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "%s 디렉터리를 만들 수 없습니다: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "데이터베이스 항목 이름으로 '%s'가 맞지 않습니다.\n"
@@ -176,18 +176,18 @@ msgstr "%s 꾸러미에 알 수 없는 설치 이유: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "%s 파일을 열 수 없습니다: %s \n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s 데이터베이스 부조화: %s 꾸러미의 이름이 일치하지 않습니다.\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "%s 데이터베이스 부조화: %s꾸러미의 버전이 일치하지 않습니다. \n"
@@ -248,7 +248,7 @@ msgstr "%s에서 메타데이터가 누락되었습니다.\n"
 msgid "failed to read signature file: %s\n"
 msgstr "서명 파일을 읽는 데 실패: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "키링에서 필요한 키를 찾을 수 없습니다.\n"
@@ -258,32 +258,32 @@ msgstr "키링에서 필요한 키를 찾을 수 없습니다.\n"
 msgid "removing invalid file: %s\n"
 msgstr "잘못된 파일을 제거함: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "'%s' 파일 꾸러미 명세 파일을 '%s' db에서 알아내지 못하였습니다.\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "데이터베이스 '%s'를 읽을 수 없습니다 (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "%s 데이터베이스 부조화: %s 꾸러미의 파일이 규칙에 어긋났습니다.\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "%s 데이터베이스 부조화: %s 꾸러미의 파일이름이 너무 깁니다.\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "알 수 없는 데이터베이스 파일: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr "%s: 알 수 없는 '%s' 키가 동기화 데이터베이스에 있습니다\n"
@@ -368,58 +368,58 @@ msgstr "루트 마운트 지점 %s를 확인할 수 없습니다.\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "파티션 %s가 읽기 전용으로 마운트되었습니다.\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "다운로드를 위한 임시파일을 만드는 데 실패하였습니다.\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr "너무 많은 오류, 서버: %s, 이 처리의 나머지를 위해서 건너뜀\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr "%s에 치명 오류: 이 트랜잭션의 나머지는 건너뜁니다\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "디스크"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "파일 '%s'를 %s에서 가져오는 데 실패 : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr "파일 '%s'를 %s에서 가져오는 데 실패 : 예상 내려받기 크기 초과\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s가 잘린 것 같습니다.: %jd/%jd 바이트\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "url '%s'가 잘못되었습니다.\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "다운로드 페이로드를 구성하지 못함, 대상: %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl이 전송 중 오류 %d을 돌려 줌\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "curl 전송 오류: %d\n"
@@ -434,12 +434,17 @@ msgstr "%s 다운로드 디렉터리로 이동할 수 없습니다\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "일부 파일을 가져오지 못했습니다.\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "다운로드를 성공적으로 완료하였지만 캐시에 파일이 없음\n"
@@ -676,50 +681,55 @@ msgstr "파일이 충돌합니다."

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "일부 파일을 가져오는 데 실패했습니다."

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "정규식이 잘못되었습니다."

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "libarchive 오류"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "다운로드 라이브러리 오류"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme 오류"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "외부 다운로더 호출 오류"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "서명 지원 없이 컴파일됨"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "예기치 않은 오류"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "잠금 파일 %s가 없습니다.\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "잠금 파일 %s를 삭제하지 못하였습니다.\n"
@@ -801,7 +811,7 @@ msgstr "디렉터리를 열 수 없습니다: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "파일을 열 수 없습니다: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "%s 파일 상태를 알 수 없음: %s\n"
@@ -887,94 +897,177 @@ msgstr "데이터베이스 항목인 %s-%s를 제거하지 못했습니다.\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "캐시에서 '%s' 항목을 제거하지 못했습니다.\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "공개 키링을 찾을 수 없습니다; '%s'을 실행하셨나요?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "GPGME 오류: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "WKD를 사용해서 키 %s를 찾는 중\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "gpg 오류: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "키링을 쓸 수 없음\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "키 \"%s\"가 키서버에 있음\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "\"%s\" 키를 들여오지 못했습니다\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "원격의 \"%s\" 키를 조회하지 못했습니다\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: 필요한 서명이 없습니다.\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: \"%s\" 로부터의 서명은 부분 신뢰입니다\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: \"%s\"로부터의 서명은 알 수 없는 신뢰입니다\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: \"%s\"로부터의 서명은 신뢰될 수 없습니다\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: \"%s\" 키는 알 수 없는 키입니다\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: \"%s\" 키는 비활성화 되었습니다\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: \"%s\"로부터의 서명이 만료되었습니다\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: \"%s\" 키는 알 수 없는 키입니다\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: \"%s\" 키는 비활성화 되었습니다\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: \"%s\"로부터의 서명이 유효하지 않습니다\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: 서명 형식 오류\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: 지원하지 않는 서명 형식\n"
@@ -1024,27 +1117,27 @@ msgstr "해결할 수 없는 꾸러미 충돌이 있습니다.\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr "대상 목록의 '%s-%s'이(가) '%s-%s'와(과) 동시에 존재하여 제거합니다\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr "%s: 캐시에서 꾸러미를 찾을 수 없습니다\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "파일 %s 읽기 실패: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "디스크 여유 공간이 부족합니다.\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "삭제 처리를 커밋하지 못하였습니다.\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "처리를 커밋하지 못하였습니다.\n"
@@ -1069,12 +1162,12 @@ msgstr "%s를 제거할 수 없습니다.\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "임시 디렉터리 %s를 제거하지 못하였습니다.\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "파이프에 기록할 수 없습니다.(%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "파이프로부터 읽을 수 없습니다.(%s)\n"
@@ -1128,3 +1221,23 @@ msgstr "%s 캐시가 없으므로 생성 중...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "꾸러미 캐시를 찾거나 생성할 수 없어 대신 %s를 사용합니다.\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/libalpm.pot
+++ b/lib/libalpm/po/libalpm.pot
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: libalpm\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -37,17 +37,17 @@ msgstr ""
 msgid "cannot allocate disk archive object"
 msgstr ""

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr ""

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr ""

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr ""
@@ -86,18 +86,18 @@ msgstr ""
 msgid "unable to extract %s.pacnew: path too long"
 msgstr ""

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr ""

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr ""

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr ""
@@ -137,7 +137,7 @@ msgstr ""
 msgid "could not create directory %s: %s\n"
 msgstr ""

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr ""
@@ -159,18 +159,18 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr ""

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr ""

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -231,7 +231,7 @@ msgstr ""
 msgid "failed to read signature file: %s\n"
 msgstr ""

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr ""
@@ -241,32 +241,32 @@ msgstr ""
 msgid "removing invalid file: %s\n"
 msgstr ""

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr ""

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr ""

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -351,58 +351,58 @@ msgstr ""
 msgid "Partition %s is mounted read only\n"
 msgstr ""

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr ""

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr ""

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr ""

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr ""

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -417,12 +417,17 @@ msgstr ""
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr ""

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -659,50 +664,55 @@ msgstr ""

 #: lib/libalpm/error.c:142
 #, c-format
-msgid "failed to retrieve some files"
+msgid "failed to initialize download"
 msgstr ""

 #: lib/libalpm/error.c:144
 #, c-format
-msgid "invalid regular expression"
+msgid "failed to retrieve some files"
 msgstr ""

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:146
 #, c-format
-msgid "libarchive error"
+msgid "invalid regular expression"
 msgstr ""

 #: lib/libalpm/error.c:152
 #, c-format
-msgid "download library error"
+msgid "libarchive error"
 msgstr ""

 #: lib/libalpm/error.c:154
 #, c-format
-msgid "gpgme error"
+msgid "download library error"
 msgstr ""

 #: lib/libalpm/error.c:156
 #, c-format
+msgid "gpgme error"
+msgstr ""
+
+#: lib/libalpm/error.c:158
+#, c-format
 msgid "error invoking external downloader"
 msgstr ""

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr ""

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr ""

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr ""
@@ -784,7 +794,7 @@ msgstr ""
 msgid "could not open file: %s%s: %s\n"
 msgstr ""

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr ""
@@ -866,94 +876,177 @@ msgstr ""
 msgid "could not remove entry '%s' from cache\n"
 msgstr ""

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr ""

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr ""

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr ""

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr ""

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr ""

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr ""

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr ""

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr ""
@@ -1003,27 +1096,27 @@ msgstr ""
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr ""

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr ""

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr ""

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr ""
@@ -1048,12 +1141,12 @@ msgstr ""
 msgid "could not remove tmpdir %s\n"
 msgstr ""

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr ""

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr ""
@@ -1107,3 +1200,23 @@ msgstr ""
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/lt.po
+++ b/lib/libalpm/po/lt.po
@@ -10,7 +10,7 @@
 # Kiprianas Spiridonovas <k.spiridonovas@gmail.com>, 2013
 # Moo, 2023
 # Moo, 2015-2019
-# Moo, 2023-2024
+# Moo, 2023-2025
 # Tautvydas Ž., 2021
 # Tautvydas Ž., 2021
 # Dan McGee <dpmcgee@gmail.com>, 2011
@@ -18,9 +18,9 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
-"Last-Translator: Dan McGee <dpmcgee@gmail.com>, 2011\n"
+"Last-Translator: Moo, 2023-2025\n"
 "Language-Team: Lithuanian (http://app.transifex.com/toofishes/archlinux-"
 "pacman/language/lt/)\n"
 "Language: lt\n"
@@ -51,17 +51,17 @@ msgstr "pasendinamas paketas %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "nepavyksta paskirstyti disko archyvo objektą"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "bandant išskleisti gautas įspėjimas %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "nepavyko išskleisti %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "nepavyko pervadint %s į %s (%s)\n"
@@ -105,18 +105,18 @@ msgstr "išskleidimas: nepakeistas aplankas failu %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "nepavyko išskleisti %s.pacnew: per ilgas kelias"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "nepavyko nustatyt dabartinio aplanko\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "nepavyko pakeist aplanko į %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "nepavyko atstatyt darbinio aplanko (%s)\n"
@@ -156,7 +156,7 @@ msgstr "šalinama neteisinga duomenų bazė: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "nepavyko sukurti aplanko %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "neteisingas duomenų bazės įrašo pavadinimas „%s“\n"
@@ -178,19 +178,19 @@ msgstr "nežinoma paketo %s įdiegimo priežastis: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "nepavyko atverti failo %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr ""
 "%s duomenų bazės nesuderinamumas: pavadinimas neatitinka nurodyto pakete %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -252,7 +252,7 @@ msgstr "trūksta paketo meta duomenų %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "nepavyko perskaityt parašo failo: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "reikia rakto kurio nėra raktinėje\n"
@@ -262,33 +262,33 @@ msgstr "reikia rakto kurio nėra raktinėje\n"
 msgid "removing invalid file: %s\n"
 msgstr "šalinamas neteisingas failas: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "nepavyko perskaityt paketo aprašymo failo %s iš duomenų bazės „%s“\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "nepavyko perskaityti duomenų bazės \"%s\" (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "%s duomenų bazės nesuderinamumas: netinkamas paketo „%s“ failo vardas\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "%s duomenų bazės nesuderinamumas: paketo %s failo vardas per ilgas\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "nežinomas duomenų bazės failas: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr "%s: nežinomas raktas „%s“ sinchronizavimo duomenų bazėje\n"
@@ -375,60 +375,60 @@ msgstr "nepavyko nustatyt šakninio prijungimo taško %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Skirsnis %s prijungtas tik skaitymui\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "nepavyko sukurti laikino failo parsiuntimui\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr "per daug klaidų iš %s, praleidžiama likusi šios operacijos dalis\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""
 "lemtingoji klaida iš %s, praleidžiama likusiai šios operacijos daliai\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "diskas"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "nepavyko gauti failo „%s“ iš %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "gauti failo „%s“ iš %s nepavyko: viršytas tikėtasis parsiuntimo dydis\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s atrodo apkarpyta: %jd/%jd baitai\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "neteisingas url „%s“\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "nepavyko nustatyti %s atsisiuntimo naudingojo krovinio\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl grąžino %d perkėlimo klaidą\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "cur perkėlimo klaida: %d\n"
@@ -443,12 +443,17 @@ msgstr "nepavyko pereiti į parsiuntimų katalogą %s\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr "nepavyko perjungti į smėliadėžės naudotoją „%s“!\n"

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "nepavyko perkelti %s į %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "nepavyko gauti kai kurių failų\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "atsisiuntimas sėkmingai baigtas, bet talpykloje nėra failo\n"
@@ -685,50 +690,55 @@ msgstr "nesuderinami failai"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr "nepavyko inicijuoti atsisiuntimo"
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "nepavyko gauti kai kurių failų"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "netinkamos reguliariosios išraiškos"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "libarchive klaida"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "parsiuntimo bibliotekos klaida"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme klaida"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "klaida iškviečiant išorinį parsiuntėją"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "sukompiliuota be parašo palaikymo"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "netikėta klaida"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "failas %s neužrakintas\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "nepavyko pašalinti užrakinto failo %s\n"
@@ -810,7 +820,7 @@ msgstr "nepavyko atverti aplanko %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "nepavyko atverti failo: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "nepavyko sukurti failo %s: %s\n"
@@ -900,94 +910,177 @@ msgstr "nepavyko pašalinti duomenų bazės įrašo %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "iš podėlio nepavyko pašalinti įrašo „%s“\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Viešoji raktinė nerasta; ar buvote paleidę \"%s\"?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "GPGME klaida: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "ieškoma rakto %s naudojant WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "gpg klaida: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "raktinė nėra skirta rašymui\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "raktas \"%s\" esantis raktų serveryje\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "nepavyko importuoti rakto \"%s\"\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "rakto \"%s\" nepavyko rasti nuotoliniu būdu\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: trūksta parašo\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: parašas iš \"%s\" yra ribinio pasitikėjimo\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: parašas iš \"%s\" yra nežinomo pasitikėjimo\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: parašu iš \"%s\" niekada neturėtų būti pasitikima\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: raktas \"%s\" yra nežinomas\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: raktas \"%s\" yra išjungtas\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: parašo iš \"%s\" galiojimas yra pasibaigęs\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: raktas \"%s\" yra nežinomas\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: raktas \"%s\" yra išjungtas\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: parašas iš \"%s\" yra negaliojantis\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: parašo formato klaida\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: nepalaikomas parašo formatas\n"
@@ -1037,27 +1130,27 @@ msgstr "aptikti neišsprendžiami paketų nesuderinamumai\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr "iš paskirties sąrašo šalinamas „%s-%s“ dėl konfliktų su „%s-%s“\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr "%s: nepavyko rasti paketo podėlyje\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "nepavyko perskaityt failą %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "nepakanka laisvos vietos\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "nepavyko įvykdyti šalinimo perdavimo\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "nepavyko įvykdyti perdavimo\n"
@@ -1082,12 +1175,12 @@ msgstr "nepavyko pašalinti %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "nepavyko pašalinti tmpdir %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "nepavyko įrašyti į pipe (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "nepavyko perskaityti iš pipe (%s)\n"
@@ -1141,3 +1234,23 @@ msgstr "%s podėlis neegzistuoja, kuriamas...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "nepavyko rasti ar sukurti podėlio paketui, vietoj jo naudojama %s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr "nepavyko sukurti laikinojo atsiuntimo katalogo %s: %s\n"
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/nb.po
+++ b/lib/libalpm/po/nb.po
@@ -3,9 +3,7 @@
 # This file is distributed under the same license as the libalpm package.
 #
 # Translators:
-# Alexander F. Rødseth <rodseth@gmail.com>, 2011,2013,2016-2019,2021
-# Alexander F. Rødseth <rodseth@gmail.com>, 2011,2013,2021
-# Alexander F. Rødseth <rodseth@gmail.com>, 2011,2013
+# Alexander F. Rødseth <xyproto@archlinux.org>, 2011,2013,2016-2025
 # Eyolf Østrem <eyolf@oestrem.com>, 2014
 # Jon Gjengset <jon@thesquareplanet.com>, 2011,2013,2015,2017
 # Thor K. H. <nitrolinken@gmail.com>, 2019
@@ -13,9 +11,9 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
-"Last-Translator: Thor K. H. <nitrolinken@gmail.com>, 2019\n"
+"Last-Translator: Alexander F. Rødseth <xyproto@archlinux.org>, 2025\n"
 "Language-Team: Norwegian Bokmål (http://app.transifex.com/toofishes/"
 "archlinux-pacman/language/nb/)\n"
 "Language: nb\n"
@@ -44,17 +42,17 @@ msgstr "nedgraderer pakke %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "kunne ikke opprette arkiv på disk"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "fikk en advarsel ved utpakking av %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "kan ikke pakke ut %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "kunne ikke omdøpe %s til %s (%s)\n"
@@ -97,18 +95,18 @@ msgstr "utpakking: overskriver ikke mappe med fil %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "kan ikke pakke ut %s.pacnew: stien er for lang"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "kunne ikke finne gjeldende mappe\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "kan ikke åpne mappen %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "kan ikke gjenopprette gjeldende mappe (%s)\n"
@@ -148,7 +146,7 @@ msgstr "fjerner ugyldig database: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "kunne ikke opprette mappe %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "ugyldig navn for databaseoppføring '%s'\n"
@@ -166,22 +164,22 @@ msgstr "korrupt databaseoppføring '%s'\n"
 #: lib/libalpm/be_local.c:663
 #, c-format
 msgid "unknown install reason for package %s: %s\n"
-msgstr ""
+msgstr "ukjent grunn til å ha installert pakke %s: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "kunne ikke åpne fil %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s databasen er ikke konsistent: navn samsvarer ikke med pakke %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "%s databasen er ikke konsistent: versjon samsvarer ikke med pakke %s\n"
@@ -194,12 +192,12 @@ msgstr "ukjent validering for pakke %s: %s\n"
 #: lib/libalpm/be_local.c:841
 #, c-format
 msgid "%s: unknown key '%s' in local database\n"
-msgstr ""
+msgstr "%s: ukjent nøkkel '%s' i lokal database\n"

 #: lib/libalpm/be_package.c:255
 #, c-format
 msgid "%s: unknown key '%s' in package description\n"
-msgstr ""
+msgstr "%s: ukjent nøkkel '%s' i pakkebeskrivelse\n"

 #: lib/libalpm/be_package.c:482 lib/libalpm/be_package.c:635
 #: lib/libalpm/be_package.c:647
@@ -242,7 +240,7 @@ msgstr "mangler metadata i %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "kan ikke lese signaturfil: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "den nødvendige nøkkelen finnes ikke på nøkkelringen\n"
@@ -252,35 +250,35 @@ msgstr "den nødvendige nøkkelen finnes ikke på nøkkelringen\n"
 msgid "removing invalid file: %s\n"
 msgstr "sletter ugyldig fil: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "kan ikke forstå pakkebeskrivelsen i filen '%s' fra databasen '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "kan ikke lese database '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "%s databasen er ikke konsistent: filnavnet i pakken %s er ulovlig\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "%s databasen er ikke konsistent: filnavnet i pakken %s er for langt\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "ukjent databasefil: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
-msgstr ""
+msgstr "%s: ukjent nøkkel '%s' i synkroniseringsdatabasen\n"

 #: lib/libalpm/db.c:413
 #, c-format
@@ -362,59 +360,59 @@ msgstr "kunne ikke montere bunnmappen %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Partisjonen %s kan bare leses fra\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "kunne ikke opprette midlertidig fil i sammengeng med nedlasting\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""
 "hopper over %s for resten av transaksjonen, fordi den har for mange feil\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
-msgstr ""
+msgstr "fatal feil fra %s, hopper over for resten av transaksjonen\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disk"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "kunne ikke laste ned '%s' fra %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr "kunne ikke laste ned '%s' fra %s : filen er større enn forventet\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s ser ut til å være avkortet: %jd/%jd bytes\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "url '%s' er ugyldig\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "kunne ikke sette opp en nedlastningsnyttelast for %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "feilen %d oppstod ved overføring med curl\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "curl overføringsfeil: %d\n"
@@ -427,14 +425,19 @@ msgstr "kan ikke gå inn i nedlastingsmappen %s\n"
 #: lib/libalpm/dload.c:968
 #, c-format
 msgid "switching to sandbox user '%s' failed!\n"
-msgstr ""
+msgstr "bytte til sandkassebruker '%s' feilet!\n"

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "kunne ikke flytte %s til %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "noen filer kunne ikke hentes\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "vellykket nedlastning, men ingen fil havnet i mellomlageret\n"
@@ -671,50 +674,55 @@ msgstr "motstridende filer"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr "kunne ikke sette i gang nedlastning"
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "noen filer kunne ikke hentes"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "ugyldig regulært uttrykk"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "feil i libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "feil i nedlastingsbibliotek"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme feil"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "feil ved bruk av eksternt nedlastningsprogram"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "kompilert uten støtte for signaturer"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "uventet feil"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "låsefil mangler %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "kunne ikke fjerne låsefil %s\n"
@@ -796,7 +804,7 @@ msgstr "kunne ikke åpne mappen: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "kan ikke åpne fil: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "kunne ikke inspisere fil: %s: %s\n"
@@ -814,7 +822,7 @@ msgstr "kunne ikke laste all metadata for pakken %s-%s\n"
 #: lib/libalpm/package.c:869
 #, c-format
 msgid "invalid package metadata (name or version missing)"
-msgstr ""
+msgstr "ugyldig metadata for pakke (navn eller versjon mangler)"

 #: lib/libalpm/package.c:874
 #, c-format
@@ -822,13 +830,15 @@ msgid ""
 "invalid metadata for package %s-%s (package name cannot start with '.' or "
 "'-')\n"
 msgstr ""
+"ugyldig metadata for pakke %s-%s (navnet kan ikke begynne med '.' eller "
+"'-')\n"

 #: lib/libalpm/package.c:878
 #, c-format
 msgid ""
 "invalid metadata for package %s-%s (package name contains invalid "
 "characters)\n"
-msgstr ""
+msgstr "ugyldig metadata for pakke %s-%s (navnet inneholder ugyldige tegn)\n"

 #: lib/libalpm/package.c:885 lib/libalpm/package.c:889
 #, c-format
@@ -836,12 +846,13 @@ msgid ""
 "invalid metadata for package %s-%s (package version contains invalid "
 "characters)\n"
 msgstr ""
+"ugyldig metadata for pakke %s-%s (versjonen inneholder ugyldige tegn)\n"

 #: lib/libalpm/package.c:895
 #, c-format
 msgid ""
 "invalid metadata for package %s-%s (package name and version too long)\n"
-msgstr ""
+msgstr "ugyldig metadata for pakke %s-%s (navn og versjon er for lang)\n"

 #: lib/libalpm/remove.c:111
 #, c-format
@@ -878,94 +889,193 @@ msgstr "kunne ikke fjerne databaseoppføring %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "kunne ikke fjerne oppføring '%s' fra mellomlageret\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+"kunne ikke gi begrenset filsystemtilgang fordi Landlock ikke støttes av "
+"kjernen!\n"
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER støttes ikke\n"
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE støttes ikke\n"
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+"kunne ikke begrense filsystemtilgang fordi regelsettet for Landlock ikke "
+"kunne opprettes: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+"kunne ikke åpne rotfilsystemet for å gjøre det skrivebeskyttet via Landlock: "
+"%s\n"
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+"kunne ikke begrense filsystemtilgang fordi Landlock sin regel for / ikke "
+"kunne legges til: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+"kunne ikke åpne nedlastningsmappen for å gjøre den skrivbar via Landlock: "
+"%s\n"
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+"kunne ikke begrense filsystemtilgang fordi Landlock sitt regelsett ikke "
+"kunne tas i bruk: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+"kunne ikke begrense filsystemtilgang fordi Landlock sin regel for "
+"midlertidig nedlastning ikke kunne legges til: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr "begrenset filsystemtilgang til %s, Landlock sitt ABI er%d\n"
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+"feil ved start av seccomp, for filtrering av systemkall i "
+"nedlastningssandkassen!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr "feil ved bruk av seccomp for å begrense systemkall %s!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr "feil ved bruk av seccomp for å begrense systemkall: %d!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr "seccomp begrenset %d systemkall\n"
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Fant ikke offentlig nøkkelring. Har du kjørt '%s'?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "GPGME feil: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "slår opp nøkkel %s med bruk av WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "gpg feil: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "nøkkelringen er ikke skrivbar\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "nøkkel \"%s\" på nøkkeltjener\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "kan ikke importere nøkkel \"%s\"\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "kunne ikke finne nøkkel \"%s\" på avstand\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: mangler påkrevd signatur\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: signaturen fra \"%s\" har veldig liten tillit\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: signaturen fra \"%s\" har ukjent tillit\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: signaturen fra \"%s\" er ikke til å stole på\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: nøkkel \"%s\" er ukjent\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: nøkkrl \"%s\" er slått av\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: signaturen fra \"%s\" er utløpt\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: nøkkel \"%s\" er ukjent\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: nøkkrl \"%s\" er slått av\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: signaturen fra \"%s\" er ugyldig\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: feil ved signaturformatering\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: signaturformatet er ikke støttet\n"
@@ -1013,29 +1123,29 @@ msgstr "uløselige pakkekollisjoner oppdaget\n"
 #: lib/libalpm/sync.c:566
 #, c-format
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
-msgstr ""
+msgstr "fjerner '%s-%s' fra listen over mål fordi den kolliderer med '%s-%s'\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
-msgstr ""
+msgstr "%s: fant ikke pakken i mellomlageret\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "kunne ikke lese fil %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "ikke nok ledig diskplass\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "kunne ikke utføre transaksjon (fjerning)\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "kunne ikke utføre transaksjon\n"
@@ -1060,12 +1170,12 @@ msgstr "kunne ikke fjerne %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "kunne ikke fjerne midlertidig mappe %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "kunne ikke skrive til dataledning (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "kunne ikke lese fra dataledning (%s)\n"
@@ -1121,3 +1231,24 @@ msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "kunne ikke finne eller opprette mellomlager for pakker, bruker %s "
 "istedenfor\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr "nedlastningsbrukeren '%s' finnes ikke\n"
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr "kunne ikke få tak i nedlastningsbruker '%s': %s\n"
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr "kunne ikke lage midlertidig nedlastningsmappe %s: %s\n"
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
+"kunne ikke endre filrettigheter for midlertidig nedlastningsmappe %s: %s\n"
--- a/lib/libalpm/po/nl.po
+++ b/lib/libalpm/po/nl.po
@@ -4,6 +4,7 @@
 #
 # Translators:
 # 56d5d7c9ccc04394ef84fc87640272f6, 2011,2015
+# Heimen Stoffels <vistausss@fastmail.com>, 2025
 # Peter van den Hurk, 2014
 # a91dc94891efad958223abaf78f68e63_4458573, 2014-2015
 # Philip Goto <philip.goto@gmail.com>, 2021
@@ -18,7 +19,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: zenlord <zenlord@gmail.com>, 2013,2015,2019\n"
 "Language-Team: Dutch (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -49,17 +50,17 @@ msgstr "pakket %s downgraden (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "Kon geen schijfuimte voor archiefobject toewijzen"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "waarschuwing tijdens uitpakken van %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "kon %s (%s) niet uitpakken\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "kan %s niet hernoemen als %s (%s)\n"
@@ -104,18 +105,18 @@ msgstr "uitpakken: map wordt niet overschreven met bestand %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "kan %s.pacnew niet uitpakken: pad te lang"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "kan de huidige werkmap niet bepalen\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "kan niet naar de map %s (%s) wisselen\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "kan werkmap (%s) niet terugzetten\n"
@@ -155,7 +156,7 @@ msgstr "ongeldige database: %s wordt verwijderd\n"
 msgid "could not create directory %s: %s\n"
 msgstr "kan map %s: %s niet aanmaken\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "ongeldige naam voor database record '%s'\n"
@@ -173,22 +174,22 @@ msgstr "database record '%s' corrupt\n"
 #: lib/libalpm/be_local.c:663
 #, c-format
 msgid "unknown install reason for package %s: %s\n"
-msgstr ""
+msgstr "onbekende installatiereden voor pakket %s: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "kan bestand %s: %s niet openen\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s database is inconsistent: naam onjuist voor pakket %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -203,12 +204,12 @@ msgstr "onbekend type van validatie voor pakket %s: %s\n"
 #: lib/libalpm/be_local.c:841
 #, c-format
 msgid "%s: unknown key '%s' in local database\n"
-msgstr ""
+msgstr "%s: onbekende sleutel ‘%s’ in lokale databank\n"

 #: lib/libalpm/be_package.c:255
 #, c-format
 msgid "%s: unknown key '%s' in package description\n"
-msgstr ""
+msgstr "%s: onbekende sleutel ‘%s’ in pakketbeschrijving\n"

 #: lib/libalpm/be_package.c:482 lib/libalpm/be_package.c:635
 #: lib/libalpm/be_package.c:647
@@ -251,7 +252,7 @@ msgstr "metagegevens van pakket ontbreken in %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "fout tijdens lezen van handtekeningsbestand: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "vereiste sleutel ontbreekt in sleutelhanger\n"
@@ -261,35 +262,35 @@ msgstr "vereiste sleutel ontbreekt in sleutelhanger\n"
 msgid "removing invalid file: %s\n"
 msgstr "ongeldig bestand '%s' wordt verwijderd\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "kan bestand met pakketbeschrijving '%s' uit db '%s' niet verwerken\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "Kon database '%s' niet lezen (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "%s database is inconsistent: foutieve bestandsnaam voor pakket %s\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "%s database is inconsistent: te lange bestandsnaam voor pakket %s\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "onbekend databasebestand: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
-msgstr ""
+msgstr "%s: onbekende sleutel ‘%s’ in synchronisatiedatabank\n"

 #: lib/libalpm/db.c:413
 #, c-format
@@ -371,61 +372,62 @@ msgstr "kan koppelpunt voor root niet bepalen %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Partitie %s is gekoppeld als alleen-lezen\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "aanmaken van tijdelijk bestand voor download mislukt\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""
 "te veel fouten van %s, wordt overgeslagen voor de rest van deze transactie\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""
+"te veel fouten van %s - wordt overgeslagen voor de rest van deze overdracht\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "schijf"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "kan het bestand '%s' niet ophalen van %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "kon het bestand '%s' niet ophalen van %s : verwachte download grootte "
 "overschreden\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s werd onderbroken: %jd/%jd bytes\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "url '%s' is niet geldig\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "download-payload instellen voor %s mislukt\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl retourneerde fout %d van overdracht\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "curl-overdrachtsfout: %d\n"
@@ -438,14 +440,19 @@ msgstr "kon de huidige map niet naar de downloadmap %s wijzigen\n"
 #: lib/libalpm/dload.c:968
 #, c-format
 msgid "switching to sandbox user '%s' failed!\n"
+msgstr "Het overschakelen naar sandboxgebruiker ‘%s’ is mislukt!\n"
+
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "Niet alle bestanden konden worden opgehaald\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "downloaden succesvol maar geen bestand in de cache\n"
@@ -682,50 +689,55 @@ msgstr "conflicterende bestanden"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "kon niet alle bestanden ophalen"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "ongeldige reguliere expressie"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "libarchive fout"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "downloadbibliotheek fout"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme fout"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "fout bij oproepen van externe downloader"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "gecompileerd zonder ondersteuning voor handtekeningen"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "onverwachte fout"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "vergrendelbestand mist %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "kan het vergrendelbestand %s niet verwijderen\n"
@@ -807,7 +819,7 @@ msgstr "kan map niet openen: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "kan bestand niet openen: %s %s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "kan bestand niet 'stat'ten %s: %s\n"
@@ -825,7 +837,7 @@ msgstr "kan de metadata voor het pakket %s-%s niet volledig laden\n"
 #: lib/libalpm/package.c:869
 #, c-format
 msgid "invalid package metadata (name or version missing)"
-msgstr ""
+msgstr "ongeldige pakketgegevens (naam of versie ontbreekt)"

 #: lib/libalpm/package.c:874
 #, c-format
@@ -833,6 +845,8 @@ msgid ""
 "invalid metadata for package %s-%s (package name cannot start with '.' or "
 "'-')\n"
 msgstr ""
+"ongeldige pakketgegevens in %s-%s (pakketnaam mag niet beginnen met ‘.’ of "
+"eindigen op ‘-’)\n"

 #: lib/libalpm/package.c:878
 #, c-format
@@ -840,6 +854,7 @@ msgid ""
 "invalid metadata for package %s-%s (package name contains invalid "
 "characters)\n"
 msgstr ""
+"ongeldige pakketgegevens in %s-%s (pakketnaam bevat ongeldige tekens)\n"

 #: lib/libalpm/package.c:885 lib/libalpm/package.c:889
 #, c-format
@@ -847,12 +862,14 @@ msgid ""
 "invalid metadata for package %s-%s (package version contains invalid "
 "characters)\n"
 msgstr ""
+"ongeldige pakketgegevens in %s-%s (pakketversie bevat ongeldige tekens)\n"

 #: lib/libalpm/package.c:895
 #, c-format
 msgid ""
 "invalid metadata for package %s-%s (package name and version too long)\n"
 msgstr ""
+"ongeldige pakketgegevens in %s-%s (pakketnaam en -versie zijn te lang)\n"

 #: lib/libalpm/remove.c:111
 #, c-format
@@ -889,94 +906,177 @@ msgstr "kan database record %s-%s niet verwijderen\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "kan record '%s' niet uit de cache verwijderen\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Publieke sleutelbos niet gevonden; werd '%s' al uitgevoerd?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "GPGME fout: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "sleutel %s opzoeken met behulp van WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "gpg fout: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "kan niet schrijven naar sleutelbos\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "sleutel \"%s\" op keyserver\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "sleutel \"%s\" kon niet geïmporteerd worden\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "sleutel \"%s\" kon niet gevonden worden\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: ontbrekende PGP handtekening\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: handtekening van \"%s\" is marginaal vertrouwd\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: handtekening van \"%s\" is onbekend vertrouwd\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: handtekening van \"%s\" mag nooit vertrouwd worden\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: sleutel \"%s\" is onbekend\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: sleutel \"%s\" is uitgeschakeld\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: handtekening van \"%s\" is vervallen\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: sleutel \"%s\" is onbekend\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: sleutel \"%s\" is uitgeschakeld\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s handtekening van \"%s\" is ongeldig\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: fout in formaat van handtekening\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: formaat van handtekening wordt niet ondersteund\n"
@@ -1025,28 +1125,30 @@ msgstr "onoplosbaar conflict tussen paketten gevonden\n"
 #, c-format
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""
+"‘%s-%s’, wordt verwijderd van de doellijst, omdat het conflicteert met ‘%s-"
+"%s’\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
-msgstr ""
+msgstr "%s: het pakket is niet aanwezig in de cache\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "fout bij het lezen van bestand '%s': %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "Onvoldoende vrije schijfruimte\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "kan de verwijdertransactie niet voltooien\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "kan transactie niet voltooien\n"
@@ -1071,12 +1173,12 @@ msgstr "kan %s niet verwijderen\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "kan de tijdelijke map %s niet verwijderen\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "kan niet schrijven naar pipe (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "kan niet lezen uit pipe (%s)\n"
@@ -1130,3 +1232,23 @@ msgstr "%s-cache bestaat niet, wordt aangemaakt...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "kan pakket-cache niet vinden of aanmaken, %s wordt gebruikt\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/pl.po
+++ b/lib/libalpm/po/pl.po
@@ -13,15 +13,15 @@
 # megamann, 2014
 # megamann, 2014-2015
 # megamann, 2015
-# Piotr Strębski <strebski@gmail.com>, 2013,2017-2018,2022-2023
-# Piotr Strębski <strebski@gmail.com>, 2013
+# Piotr Strebski <strebski@gmail.com>, 2013,2017-2018,2022-2024
+# Piotr Strebski <strebski@gmail.com>, 2013
 # Sebastian Jakubiak, 2019
 # Sebastian Jakubiak, 2019
 msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Sebastian Jakubiak, 2019\n"
 "Language-Team: Polish (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -54,17 +54,17 @@ msgstr "dezaktualizowanie pakietu %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "nie można przydzielić na dysku obiektu archiwum "

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "wystąpił błąd podczas rozpakowywania %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "nie udało się rozpakować %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "nie udało się zmienić nazwy %s na %s (%s)\n"
@@ -109,18 +109,18 @@ msgstr "rozpakowywanie: nie nadpisuję katalogu plikiem %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "nie można wyodrębnić %s.pacnew: ścieżka zbyt długa"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "nie można znaleźć obecnego katalogu\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "nie udało się zmienić katalogu na %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "nie można powrócić do katalogu roboczego (%s)\n"
@@ -160,7 +160,7 @@ msgstr "usuwanie niepoprawnej bazy danych: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "nie można stworzyć katalogu %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "nieprawidłowa nazwa dla wpisu bazy danych '%s'\n"
@@ -178,22 +178,22 @@ msgstr "zepsuty wpis w bazie danych '%s'\n"
 #: lib/libalpm/be_local.c:663
 #, c-format
 msgid "unknown install reason for package %s: %s\n"
-msgstr ""
+msgstr "nieznany powód instalacji pakietu %s: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "nie udało się otworzyć pliku %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "Baza danych %s jest niespójna: niedopasowana nazwa w pakiecie %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "Baza danych %s jest niespójna: niedopasowana wersja w pakiecie %s\n"
@@ -206,12 +206,12 @@ msgstr "nieznany rodzaj walidacji dla pakietu %s: %s\n"
 #: lib/libalpm/be_local.c:841
 #, c-format
 msgid "%s: unknown key '%s' in local database\n"
-msgstr ""
+msgstr "%s: nieznany klucz „%s” w lokalnej bazie danych\n"

 #: lib/libalpm/be_package.c:255
 #, c-format
 msgid "%s: unknown key '%s' in package description\n"
-msgstr ""
+msgstr "%s: nieznany klucz „%s” w opisie pakietu\n"

 #: lib/libalpm/be_package.c:482 lib/libalpm/be_package.c:635
 #: lib/libalpm/be_package.c:647
@@ -254,7 +254,7 @@ msgstr "brak metadanych pakietu w %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "nie udało się odczytać pliku podpisu: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "brak wymaganego klucza w pęku kluczy\n"
@@ -264,36 +264,36 @@ msgstr "brak wymaganego klucza w pęku kluczy\n"
 msgid "removing invalid file: %s\n"
 msgstr "usuwanie nieprawidłowego pliku: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "nie można odczytać pliku opisowego pakietu '%s' z bazy '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "nie można odczytać bazy danych '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "Baza danych %s jest niespójna: nazwa pliku pakietu %s jest niedozwolona\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "Baza danych %s jest niespójna: nazwa pliku pakietu %s jest za długa\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "nieznana baza danych pliku: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
-msgstr ""
+msgstr "%s: nieznany klucz „%s” w bazie danych synchronizacji\n"

 #: lib/libalpm/db.c:413
 #, c-format
@@ -375,60 +375,60 @@ msgstr "nie można określić punktu montowania partycji systemowej %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Partycja %s jest zamontowana tylko do odczytu\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "nie udało się stworzyć tymczasowego pliku pobierania\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
-msgstr ""
+msgstr "zbyt wiele błędów z %s, pominięcie pozostałej części tej transakcji\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
-msgstr ""
+msgstr "błąd krytyczny z %s, pomijanie pozostałej części tej transakcji\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "dysk"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "nie udało się pobrać pliku '%s' z %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "nie powiodło się pobieranie pliku '%s' z %s : oczekiwany rozmiar pobierania "
 "został przekroczony\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s wygląda, jakby został obcięty %jd/%jd bajtów\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "url '%s' jest błędny\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl zwrócił błąd %d z transferu\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "błąd transferu curl: %d\n"
@@ -436,19 +436,24 @@ msgstr "błąd transferu curl: %d\n"
 #: lib/libalpm/dload.c:963
 #, c-format
 msgid "could not chdir to download directory %s\n"
-msgstr ""
+msgstr "nie można użyć polecenia chdir, aby pobrać katalog %s\n"

 #: lib/libalpm/dload.c:968
 #, c-format
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "nie udało się pobrać niektórych plików\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "pobieranie zakończone pomyślnie, ale brak pliku w pamięci podręcznej\n"
@@ -685,51 +690,56 @@ msgstr "konfliktujące pliki"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "nie udało się odzyskać niektórych plików"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "nieprawidłowe wyrażenie regularne"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "błąd libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "błąd pobierania biblioteki"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "błąd gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr ""
 "wystąpił błąd podczas odwoływania się do zewnętrznego programu pobierającego"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "skompilowano ze wsparciem dla podpisów"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "niespodziewany błąd"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "brakująca blokada pliku %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "nie udało się usunąć pliku blokującego %s\n"
@@ -737,7 +747,7 @@ msgstr "nie udało się usunąć pliku blokującego %s\n"
 #: lib/libalpm/hook.c:95
 #, c-format
 msgid "Missing trigger targets in hook: %s\n"
-msgstr ""
+msgstr "Brakujące cele wyzwalacza w haku: %s\n"

 #: lib/libalpm/hook.c:101
 #, c-format
@@ -811,7 +821,7 @@ msgstr "nie można otworzyć katalogu: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "nie można otworzyć pliku: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "nie udało się odczytać stat dla pliku %s: %s\n"
@@ -829,7 +839,7 @@ msgstr "nie można w pełni załadować metadanych dla pakietu %s-%s\n"
 #: lib/libalpm/package.c:869
 #, c-format
 msgid "invalid package metadata (name or version missing)"
-msgstr ""
+msgstr "nieprawidłowe metadane pakietu (brak nazwy lub wersji)"

 #: lib/libalpm/package.c:874
 #, c-format
@@ -837,6 +847,8 @@ msgid ""
 "invalid metadata for package %s-%s (package name cannot start with '.' or "
 "'-')\n"
 msgstr ""
+"nieprawidłowe metadane pakietu %s-%s (nazwa pakietu nie może zaczynać się od "
+"„.” ani „-”)\n"

 #: lib/libalpm/package.c:878
 #, c-format
@@ -894,95 +906,178 @@ msgstr "nie udało się usunąć wpisu %s-%s z bazy danych\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "nie udało się usunąć wpisu '%s' z pamięci podręcznej\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""
 "Publiczny zestaw kluczy nie został odnaleziony; czy uruchomiłeś '%s'?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "Błąd GPGME: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "szukam klucza %s przy pomocy WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "błąd gpg: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "zestaw kluczy jest niezapisywalny\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "klucz \"%s\" na keyserverze\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "klucz \"%s\" nie może zostać zaimportowany\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "klucz \"%s\" nie może zostać sprawdzony zdalnie\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: brakuje wymaganego podpisu\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: podpis od \"%s\" posiada zaufanie krańcowe\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: podpis od \"%s\" posiada nieznane zaufanie\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: podpisowi od \"%s\" nigdy nie powinno się ufać\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: klucz \"%s\" jest nieznany\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: klucz \"%s\" jest wyłączony\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: podpis od \"%s\" jest wygasły\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: klucz \"%s\" jest nieznany\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: klucz \"%s\" jest wyłączony\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: podpis od \"%s\" jest nieprawidłowy\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: błąd formatu podpisu\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: niewspierany format podpisu\n"
@@ -1032,27 +1127,27 @@ msgstr "odkryto nierozwiązywalne konflikty pakietów\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
-msgstr ""
+msgstr "%s: nie można odnaleźć pakietu w pamięci podręcznej\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "nie udało się odczytać pliku %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "niewystarczające miejsce na dysku\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "nie udało się wykonać transakcji usuwania\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "nie udało się wykonać transakcji\n"
@@ -1077,12 +1172,12 @@ msgstr "nie można usunąć %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "nie udało się usunąć katalogu tymczasowego %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "nie można zapisać do potoku (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "nie można odczytać z potoku (%s)\n"
@@ -1138,3 +1233,23 @@ msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "nie można odnaleźć lub stworzyć pamięci podręcznej pakietu, używam %s w "
 "zamian\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/pt.po
+++ b/lib/libalpm/po/pt.po
@@ -3,6 +3,7 @@
 # This file is distributed under the same license as the libalpm package.
 #
 # Translators:
+# André Moreira <afrmscb@gmail.com>, 2025
 # ArchGalileu <geral@gasparsantos.eu>, 2011,2014
 # Bruno Guerreiro <american.jesus.pt@gmail.com>, 2016
 # ArchGalileu <geral@gasparsantos.eu>, 2011
@@ -13,9 +14,9 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
-"Last-Translator: Rui <xymarior@yandex.com>, 2019\n"
+"Last-Translator: André Moreira <afrmscb@gmail.com>, 2025\n"
 "Language-Team: Portuguese (http://app.transifex.com/toofishes/archlinux-"
 "pacman/language/pt/)\n"
 "Language: pt\n"
@@ -45,17 +46,17 @@ msgstr "a fazer downgrade do pacote %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "não foi possível alocar objeto de pacote de disco"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "aviso apresentado ao extrair %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "não foi possível extrair %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "não foi possível renomear %s para %s (%s)\n"
@@ -100,18 +101,18 @@ msgstr "extração: não sobrescrever diretório com o ficheiro %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "incapaz de extrair %s.pacnew: caminho demasiado longo"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "não foi possível obter o diretório de trabalho atual\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "não foi possível mudar o diretório para %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "não é possível restaurar diretório em trabalho (%s)\n"
@@ -151,7 +152,7 @@ msgstr "a remover banco de dados inválido: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "não foi possível criar o diretório %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "nome inválido para a entrada na base de dados '%s'\n"
@@ -167,24 +168,24 @@ msgid "corrupted database entry '%s'\n"
 msgstr "entrada da base de dados corrompida '%s'\n"

 #: lib/libalpm/be_local.c:663
-#, fuzzy, c-format
+#, c-format
 msgid "unknown install reason for package %s: %s\n"
-msgstr "tipo de validação desconhecida para o pacote %s: %s\n"
+msgstr "motivo desconhecido para a instalação do pacote %s: %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "não foi possível abrir o ficheiro %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s base de dados está inconsistente: nome no pacote %s não coincide\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -198,12 +199,12 @@ msgstr "tipo de validação desconhecida para o pacote %s: %s\n"
 #: lib/libalpm/be_local.c:841
 #, c-format
 msgid "%s: unknown key '%s' in local database\n"
-msgstr ""
+msgstr "%s: chave desconhecida '%s' na base de dados local\n"

 #: lib/libalpm/be_package.c:255
 #, c-format
 msgid "%s: unknown key '%s' in package description\n"
-msgstr ""
+msgstr "%s: chave desconhecida '%s' na descrição do pacote\n"

 #: lib/libalpm/be_package.c:482 lib/libalpm/be_package.c:635
 #: lib/libalpm/be_package.c:647
@@ -246,7 +247,7 @@ msgstr "em falta metadados do pacote em %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "falha ao ler o ficheiro de assinatura: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "chave necessária em falta no chaveiro\n"
@@ -256,40 +257,40 @@ msgstr "chave necessária em falta no chaveiro\n"
 msgid "removing invalid file: %s\n"
 msgstr "a remover ficheiro inválido: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "não é possível analisar descrição do pacote '%s' da base de dados '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
-msgstr ""
+msgstr "Não foi possível ler a base de dados '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "a base de dados %s está inconsistente: nome do ficheiro de pacote %s é "
 "ilegal\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "a base de dados %s está inconsistente: o nome de ficheiro do pacote %s é "
 "demasiado longo\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "ficheiro desconhecido da base de dados: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
-msgstr ""
+msgstr "%s: chave desconhecida '%s' na base de dados de sincronização\n"

 #: lib/libalpm/db.c:413
 #, c-format
@@ -374,83 +375,89 @@ msgstr "não é possível determinar o ponto de montagem do \"root\" %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "A partição %s está montada somente para leitura\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "erro ao criar ficheiro temporário para download\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
-msgstr ""
+msgstr "demasiados erros de %s, ignorando o restante desta transação\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
-msgstr ""
+msgstr "Erro fatal de %s, ignorando o restante desta transação\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disco"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "falha ao obter ficheiro '%s' de %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "falhou a obtenção do ficheiro '%s' de %s : o tamanho esperado da "
 "transferência foi excedido\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s parece estar quebrado: %jd/%jd bytes\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "url '%s' é inválida\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
-msgstr ""
+msgstr "Falha ao configurar uma carga útil de download para %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
-msgstr ""
+msgstr "O curl retornou o erro %d da transferência\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
-msgstr ""
+msgstr "Erro de transferência do curl: %d\n"

 #: lib/libalpm/dload.c:963
-#, fuzzy, c-format
+#, c-format
 msgid "could not chdir to download directory %s\n"
-msgstr "não foi possível mudar o diretório raiz (%s)\n"
+msgstr "Não foi possível mudar para o diretório de download %s\n"

 #: lib/libalpm/dload.c:968
 #, c-format
 msgid "switching to sandbox user '%s' failed!\n"
-msgstr ""
+msgstr "Falha ao mudar para o utilizador sandbox '%s'!\n"

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "Não foi possível mover %s para %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "falha ao obter alguns ficheiros\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
+"O download foi concluído com sucesso, mas não há nenhum ficheiro na cache\n"

 #: lib/libalpm/error.c:40
 #, c-format
@@ -580,7 +587,7 @@ msgstr "objeto alvo duplicado"
 #: lib/libalpm/error.c:94
 #, c-format
 msgid "duplicate filename"
-msgstr ""
+msgstr "nome de ficheiro duplicado"

 #: lib/libalpm/error.c:98
 #, c-format
@@ -684,50 +691,55 @@ msgstr "ficheiros em conflito"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr "Falha ao inicializar o download"
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "falha ao descarregar alguns ficheiros"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "expressão regular inválida"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "erro na libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "erro na biblioteca de descargas"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "erro gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "erro ao invocar o programa de descargas externo"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
-msgstr ""
+msgstr "compilado sem suporte para assinatura"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "erro inesperado"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "bloquear o ficheiro em falta %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "não foi possível remover o ficheiro bloqueado %s\n"
@@ -735,69 +747,69 @@ msgstr "não foi possível remover o ficheiro bloqueado %s\n"
 #: lib/libalpm/hook.c:95
 #, c-format
 msgid "Missing trigger targets in hook: %s\n"
-msgstr ""
+msgstr "Alvos de acionamento ausentes no gancho: %s\n"

 #: lib/libalpm/hook.c:101
 #, c-format
 msgid "Missing trigger type in hook: %s\n"
-msgstr ""
+msgstr "Tipo de acionamento ausente no gancho: %s\n"

 #: lib/libalpm/hook.c:107
 #, c-format
 msgid "Missing trigger operation in hook: %s\n"
-msgstr ""
+msgstr "Operação de acionamento ausente no gancho: %s\n"

 #: lib/libalpm/hook.c:134
 #, c-format
 msgid "Missing Exec option in hook: %s\n"
-msgstr ""
+msgstr "Opção Exec ausente no gancho: %s\n"

 #: lib/libalpm/hook.c:140
 #, c-format
 msgid "Missing When option in hook: %s\n"
-msgstr ""
+msgstr "Opção Ausente Quando no gancho: %s\n"

 #: lib/libalpm/hook.c:143
 #, c-format
 msgid "AbortOnFail set for PostTransaction hook: %s\n"
-msgstr ""
+msgstr "AbortOnFail definido para o gancho PostTransaction: %s\n"

 #: lib/libalpm/hook.c:160
 #, c-format
 msgid "error while reading hook %s: %s\n"
-msgstr ""
+msgstr "Erro ao ler o gancho %s: %s\n"

 #: lib/libalpm/hook.c:162 lib/libalpm/hook.c:206 lib/libalpm/hook.c:248
 #, c-format
 msgid "hook %s line %d: invalid option %s\n"
-msgstr ""
+msgstr "gancho %s linha %d: opção inválida %s\n"

 #: lib/libalpm/hook.c:172
 #, c-format
 msgid "hook %s line %d: invalid section %s\n"
-msgstr ""
+msgstr "gancho %s linha %d: secção inválida %s\n"

 #: lib/libalpm/hook.c:184 lib/libalpm/hook.c:199 lib/libalpm/hook.c:218
 #: lib/libalpm/hook.c:241
 #, c-format
 msgid "hook %s line %d: invalid value %s\n"
-msgstr ""
+msgstr "gancho %s linha %d: valor inválido %s\n"

 #: lib/libalpm/hook.c:188 lib/libalpm/hook.c:211 lib/libalpm/hook.c:222
 #: lib/libalpm/hook.c:236
 #, c-format
 msgid "hook %s line %d: overwriting previous definition of %s\n"
-msgstr ""
+msgstr "gancho %s linha %d: substituindo a definição anterior de %s\n"

 #: lib/libalpm/hook.c:243
 #, c-format
 msgid "hook %s line %d: unable to set option (%s)\n"
-msgstr ""
+msgstr "gancho %s linha %d: impossível definir a opção (%s)\n"

 #: lib/libalpm/hook.c:513
 #, c-format
 msgid "unable to run hook %s: %s\n"
-msgstr ""
+msgstr "Não é possível executar o gancho %s: %s\n"

 #: lib/libalpm/hook.c:547 lib/libalpm/hook.c:559 lib/libalpm/remove.c:378
 #, c-format
@@ -807,9 +819,9 @@ msgstr "não foi possível aceder ao diretório: %s: %s\n"
 #: lib/libalpm/hook.c:575
 #, c-format
 msgid "could not open file: %s%s: %s\n"
-msgstr ""
+msgstr "Não foi possível abrir o ficheiro: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "não foi possível obter o estado do ficheiro %s: %s\n"
@@ -817,7 +829,7 @@ msgstr "não foi possível obter o estado do ficheiro %s: %s\n"
 #: lib/libalpm/hook.c:621
 #, c-format
 msgid "could not read directory: %s: %s\n"
-msgstr ""
+msgstr "Não foi possível ler o diretório: %s: %s\n"

 #: lib/libalpm/package.c:614
 #, c-format
@@ -828,7 +840,7 @@ msgstr ""
 #: lib/libalpm/package.c:869
 #, c-format
 msgid "invalid package metadata (name or version missing)"
-msgstr ""
+msgstr "metadados do pacote inválidos (nome ou versão em falta)"

 #: lib/libalpm/package.c:874
 #, c-format
@@ -836,6 +848,8 @@ msgid ""
 "invalid metadata for package %s-%s (package name cannot start with '.' or "
 "'-')\n"
 msgstr ""
+"metadados inválidos para o pacote %s-%s (o nome do pacote não pode começar "
+"com '.' ou '-')\n"

 #: lib/libalpm/package.c:878
 #, c-format
@@ -843,6 +857,8 @@ msgid ""
 "invalid metadata for package %s-%s (package name contains invalid "
 "characters)\n"
 msgstr ""
+"metadados inválidos para o pacote %s-%s (o nome do pacote contém caracteres "
+"inválidos)\n"

 #: lib/libalpm/package.c:885 lib/libalpm/package.c:889
 #, c-format
@@ -850,12 +866,16 @@ msgid ""
 "invalid metadata for package %s-%s (package version contains invalid "
 "characters)\n"
 msgstr ""
+"metadados inválidos para o pacote %s-%s (a versão do pacote contém "
+"caracteres inválidos)\n"

 #: lib/libalpm/package.c:895
 #, c-format
 msgid ""
 "invalid metadata for package %s-%s (package name and version too long)\n"
 msgstr ""
+"metadados inválidos para o pacote %s-%s (nome e versão do pacote demasiado "
+"longos)\n"

 #: lib/libalpm/remove.c:111
 #, c-format
@@ -875,7 +895,7 @@ msgstr "não foi possível remover o ficheiro '%s': %s\n"
 #: lib/libalpm/remove.c:403 lib/libalpm/remove.c:412
 #, c-format
 msgid "could not backup %s due to PATH_MAX overflow\n"
-msgstr ""
+msgstr "Não foi possível fazer backup de %s devido a overflow de PATH_MAX\n"

 #: lib/libalpm/remove.c:570
 #, c-format
@@ -892,97 +912,197 @@ msgstr "não foi possível remover a entrada da base de dados %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "não foi possível remover a entrada '%s' da cache\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+"A restrição do acesso ao sistema de ficheiros falhou porque o Landlock não é "
+"suportado pelo kernel!\n"
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER não é suportado\n"
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE não é suportado\n"
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+"Falha ao restringir o acesso ao sistema de ficheiros porque o conjunto de "
+"regras Landlock não pôde ser criado: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+"Falha ao abrir o sistema de ficheiros raiz para torná-lo só de leitura "
+"através do Landlock: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+"Falha ao restringir o acesso ao sistema de ficheiros porque a regra Landlock "
+"para / não pôde ser adicionada: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+"Falha ao abrir o diretório de downloads para torná-lo gravável através do "
+"Landlock: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+"Falha ao restringir o acesso ao sistema de ficheiros porque o conjunto de "
+"regras Landlock não pôde ser aplicado: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+"Falha ao restringir o acesso ao sistema de ficheiros porque a regra Landlock "
+"para o diretório de downloads temporários não pôde ser adicionada: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+"O acesso ao sistema de ficheiros foi restringido a %s, Landlock ABI é %d\n"
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+"Erro ao inicializar o seccomp para filtrar chamadas do sistema na área "
+"restrita de downloads!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr "Erro ao restringir a chamada de sistema %s via seccomp!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr "erro ao restringir chamadas de sistema através do seccomp: %d!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr "restringiu com sucesso %d chamadas de sistema através do seccomp\n"
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
-msgstr ""
+msgstr "Chave pública não encontrada; executou '%s'?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
-msgstr ""
+msgstr "Erro GPGME: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
-msgstr ""
+msgstr "pesquisando a chave %s usando WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
-msgstr ""
+msgstr "Erro gpg: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
-msgstr ""
+msgstr "o chaveiro não é gravável\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
-msgstr ""
+msgstr "chave \"%s\" no servidor de chaves\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
-msgstr ""
+msgstr "A chave \"%s\" não pôde ser importada\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
-msgstr ""
+msgstr "A chave \"%s\" não pôde ser pesquisada remotamente\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: não tem a assinatura requerida\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
-msgstr ""
+msgstr "%s: a assinatura de \"%s\" é de confiança marginal\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
-msgstr ""
+msgstr "%s: a assinatura de \"%s\" tem confiança desconhecida\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
-msgstr ""
+msgstr "%s: a assinatura de \"%s\" nunca deve ser confiada\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
-msgstr ""
+msgstr "%s: a assinatura de \"%s\" está expirada\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: a chave \"%s\" é desconhecida\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: a chave \"%s\" está desabilitada\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
-msgstr ""
+msgstr "%s: a assinatura de \"%s\" é inválida\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
-msgstr ""
+msgstr "%s: erro no formato da assinatura\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
-msgstr ""
+msgstr "%s: formato de assinatura não suportado\n"

 #: lib/libalpm/sync.c:96
 #, c-format
@@ -1017,7 +1137,7 @@ msgstr "não foi possível substituir %s por %s\n"
 #: lib/libalpm/sync.c:477
 #, c-format
 msgid "packages %s and %s have the same filename: %s\n"
-msgstr ""
+msgstr "Os pacotes %s e %s têm o mesmo nome de ficheiro: %s\n"

 #: lib/libalpm/sync.c:546 lib/libalpm/sync.c:618
 #, c-format
@@ -1028,28 +1148,29 @@ msgstr "detetado conflito entre pacotes sem solução\n"
 #, c-format
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""
+"removendo '%s-%s' da lista de destinos porque entra em conflito com '%s-%s'\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
-msgstr ""
+msgstr "%s: não foi possível encontrar o pacote na cache\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
-msgstr ""
+msgstr "Falha ao ler o ficheiro %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "não há espaço livre suficiente no disco\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "não foi possível efetuar a operação de remoção\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "não foi possível efetuar a operação\n"
@@ -1074,12 +1195,12 @@ msgstr "não é possível remover%s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "não foi possível remover o diretório temporário %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "incapaz de escrever para o pipe (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "incapaz de ler do pipe (%s)\n"
@@ -1135,3 +1256,24 @@ msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "não é possível encontrar ou criar cache do pacote, em uso %s como "
 "alternativa\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr "O utilizador de download '%s' não existe\n"
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr "Falha ao obter o utilizador de download '%s': %s\n"
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr "Falha ao criar o diretório temporário de download %s: %s\n"
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
+"Falha ao alterar o proprietário do diretório temporário de downloads %s: %s\n"
--- a/lib/libalpm/po/pt_BR.po
+++ b/lib/libalpm/po/pt_BR.po
@@ -7,7 +7,7 @@
 # Dan McGee <dpmcgee@gmail.com>, 2011
 # Rafael Fontenelle <rffontenelle@gmail.com>, 2011-2014
 # Rafael Fontenelle <rafaelff@gnome.org>, 2018
-# Rafael Fontenelle <rffontenelle@gmail.com>, 2011,2015,2017-2019,2021,2023-2024
+# Rafael Fontenelle <rffontenelle@gmail.com>, 2011,2015,2017-2019,2021,2023-2025
 # Rafael Fontenelle <rffontenelle@gmail.com>, 2011
 # Sandro <sandrossv@hotmail.com>, 2011
 # Sandro <sandrossv@hotmail.com>, 2011
@@ -15,10 +15,10 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Rafael Fontenelle <rffontenelle@gmail.com>, "
-"2011,2015,2017-2019,2021,2023-2024\n"
+"2011,2015,2017-2019,2021,2023-2025\n"
 "Language-Team: Portuguese (Brazil) (http://app.transifex.com/toofishes/"
 "archlinux-pacman/language/pt_BR/)\n"
 "Language: pt_BR\n"
@@ -48,17 +48,17 @@ msgstr "fazendo downgrade do pacote %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "não foi possível alocar objeto de pacote de disco"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "recebido aviso ao extrair %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "não foi possível extrair %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "não foi possível renomear %s para %s (%s)\n"
@@ -103,21 +103,21 @@ msgstr "extração: não sobrescrevendo diretório com arquivo %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "não foi possível extrair %s.pacnew: caminho longo demais"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "não foi possível obter o diretório de trabalho atual\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "não foi possível mudar para o diretório %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
-msgstr "falha em recuperar o diretório de trabalho (%s)\n"
+msgstr "não foi possível recuperar o diretório de trabalho (%s)\n"

 #: lib/libalpm/add.c:579
 #, c-format
@@ -154,7 +154,7 @@ msgstr "removendo base de dados inválida: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "não foi possível criar o diretório %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "nome inválido para o registro na base de dados \"%s\"\n"
@@ -176,19 +176,19 @@ msgstr "motivo da instalação desconhecido para o pacote %s %s\n"

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "não foi possível abrir o arquivo %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr ""
 "a base de dados %s está inconsistente: nome não coincidente no pacote %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -223,7 +223,7 @@ msgstr "erro ao ler mtree do pacote %s: %s\n"
 #: lib/libalpm/be_package.c:601
 #, c-format
 msgid "could not parse package description file in %s\n"
-msgstr "não foi possível interpretar o arquivo de descrição do pacote em %s\n"
+msgstr "não foi possível analisar o arquivo de descrição do pacote em %s\n"

 #: lib/libalpm/be_package.c:606
 #, c-format
@@ -250,7 +250,7 @@ msgstr "faltando metadados do pacote em %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "falha ao ler o arquivo de assinatura: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "faltando chave necessária no chaveiro\n"
@@ -260,38 +260,38 @@ msgstr "faltando chave necessária no chaveiro\n"
 msgid "removing invalid file: %s\n"
 msgstr "removendo arquivo inválido: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "não foi possível analisar arquivo de descrição de pacote \"%s\" da base de "
 "dados \"%s\"\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "não foi possível ler a bd \"%s\" (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "a base de dados %s está inconsistente: nome de arquivo do pacote %s é "
 "ilegal\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "a base de dados %s está inconsistente: nome de arquivo do pacote %s é muito "
 "grande\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "arquivo de base de dados inválido: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr "%s: chave desconhecida \"%s\" na base de dados de sincronização\n"
@@ -378,59 +378,59 @@ msgstr "não foi possível determinar o ponto de montagem raiz %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Partição %s está montada somente para leitura\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
-msgstr "falha em criar arquivo temporário para download\n"
+msgstr "falha ao criar arquivo temporário para download\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr "muitos erros de %s, ignorando o restante desta transação\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr "erro fatal de %s, ignorando o restante desta transação\n"

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disco"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "falha ao obter o arquivo \"%s\" de %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "falha ao obter arquivo \"%s\" de %s: esperava tamanho de download excedido\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s parece estar truncado: %jd/%jd bytes\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "a url \"%s\" é inválida\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "falha ao configurar um conteúdo de download para %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl retornou erro %d da transferência\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "erro de transferência do curl: %d\n"
@@ -445,12 +445,17 @@ msgstr "não foi possível mudar para o diretório de download %s\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr "troca para usuário de isolamento \"%s\" falhou!\n"

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "não foi possível mover %s para %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "falha ao obter alguns arquivos\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "download concluído com sucesso, mas nenhum arquivo no cache\n"
@@ -687,50 +692,55 @@ msgstr "arquivos conflitantes"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr "falha ao iniciar o download"
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "falha ao obter alguns arquivos"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "expressão regular inválida"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "erro no libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "erro na biblioteca de download"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "erro no gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "erro ao chamar o programa de download externo"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "compilado sem suporte a assinatura"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "erro inesperado"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "arquivo de trava faltando %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "não foi possível remover o arquivo de trava %s\n"
@@ -812,7 +822,7 @@ msgstr "não foi possível abrir o diretório: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "não foi possível abrir o arquivo: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "não foi possível obter o estado do arquivo %s: %s\n"
@@ -825,7 +835,8 @@ msgstr "não foi possível ler o diretório : %s: %s\n"
 #: lib/libalpm/package.c:614
 #, c-format
 msgid "could not fully load metadata for package %s-%s\n"
-msgstr "falha em carregar completamente os metadados para o pacote %s-%s\n"
+msgstr ""
+"não foi possível carregar completamente os metadados para o pacote %s-%s\n"

 #: lib/libalpm/package.c:869
 #, c-format
@@ -902,94 +913,195 @@ msgstr "não foi possível remover o registro da base de dados %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "não foi possível remover a entrada \"%s\" do cache\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+"falha ao restringir acesso ao sistema de arquivos porque Landlock não é "
+"suportado pelo kernel!\n"
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER não é suportado\n"
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE não é suportado\n"
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+"falha ao restringir acesso ao sistema de arquivos porque o conjunto de "
+"regras de Landlock não pôde ser criado: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+"falha ao abrir o sistema de arquivos raiz para torná-lo somente leitura via "
+"Landlock: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+"falha ao restringir o acesso ao sistema de arquivos porque a regra de "
+"Landlock para / não pôde ser adicionada: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+"falha ao abrir o diretório de download para torná-lo gravável via Landlock: "
+"%s\n"
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+"falha ao restringir o acesso ao sistema de arquivos porque o conjunto de "
+"regras de Landlock não pôde ser aplicado: %s\n"
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+"falha ao restringir o acesso ao sistema de arquivos porque a regra de "
+"Landlock para o diretório temporário de download não pôde ser adicionado: "
+"%s\n"
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+"o acesso ao sistema de arquivos foi restrito a %s, a ABI de Landlock é %d\n"
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+"erro ao inicializar seccomp para filtrar chamadas do sistema isolamento de "
+"download!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr "erro ao restringir a chamadas de sistema %s via seccomp!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr "erro ao restringir chamadas de sistema via seccomp: %d!\n"
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr "restringidas com sucesso %d chamadas de sistema via seccomp\n"
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Chaveiro público não encontrado; você chegou a executar \"%s\"?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "Erro no GPGME: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "procurando a chave %s usando WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "erro no gpg: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "o chaveiro não pode ser escrito\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "chave \"%s\" no servidor de chaves\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "a chave \"%s\" não pôde ser importada\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "a chave \"%s\" não pôde ser procurada remotamente\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: faltando assinatura exigida\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: a assinatura de \"%s\" tem confiança parcial\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: a assinatura de \"%s\" tem confiança desconhecida\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: a assinatura de \"%s\" nunca deve ser confiada\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: a chave \"%s\" é desconhecida\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: a chave \"%s\" está desabilitada\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: a assinatura de \"%s\" está expirada\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: a chave \"%s\" é desconhecida\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: a chave \"%s\" está desabilitada\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: a assinatura de \"%s\" é inválida\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: erro de formato de assinatura\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: formato de assinatura sem suporte\n"
@@ -1040,27 +1152,27 @@ msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""
 "removendo \"%s-%s\" da lista de pacotes porque ele conflita com \"%s-%s\"\n"

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr "%s: não foi possível encontrar o pacote no cache\n"

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "falha ao ler o arquivo %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "espaço livre em disco insuficiente\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "não foi possível efetuar a transação de remoção\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "não foi possível efetuar a transação\n"
@@ -1085,12 +1197,12 @@ msgstr "não foi possível remover %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "não foi possível remover o diretório temporário %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "não foi possível escrever para o pipe (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "não foi possível ler do pipe (%s)\n"
@@ -1145,3 +1257,23 @@ msgstr "cache %s não existe, criando...\n"
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "falha em encontrar ou criar cache do pacote, usando %s em substituição\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr "o usuário de download \"%s\" não existe\n"
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr "falha ao obter o usuário de download \"%s\": %s\n"
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr "falha ao criar o diretório de temporário de download %s: %s\n"
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr "falha ao fazer chown o diretório de temporário de download %s: %s\n"
--- a/lib/libalpm/po/ro.po
+++ b/lib/libalpm/po/ro.po
@@ -22,7 +22,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Arthur Țițeică <arthur.titeica@gmail.com>, 2013-2015\n"
 "Language-Team: Romanian (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -54,17 +54,17 @@ msgstr "se retrogradează pachetul %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "nu poate fi alocat obiectul de arhivă disc"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "s-a primit o avertizare la extragerea %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "nu s-a putut extrage %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "nu s-a putut redenumi %s în %s (%s)\n"
@@ -109,18 +109,18 @@ msgstr "extragere: nu se suprascrie dir cu fișierul %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "nu se poate extrage %s.pacnew: cale prea lungă"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "nu s-a putut determina directorul de lucru curent\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "nu s-a putut schimba directorul în %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "nu s-a putut restabili directorul de lucru curent (%s)\n"
@@ -160,7 +160,7 @@ msgstr "se elimină baza de date nevalidă %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "nu s-a putut crea directorul %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "nume nevalid pentru intrarea în baza de date '%s'\n"
@@ -182,19 +182,19 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "nu s-a putut deschide fișierul %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr ""
 "baza de date %s este inconsecventă: nepotrivire de nume la pachetul %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -256,7 +256,7 @@ msgstr "lipsă metadate pentru pachet în %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "eșec la citirea fișierului de semnătură: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "cheia necesară lipsește din lanțul de chei\n"
@@ -266,37 +266,37 @@ msgstr "cheia necesară lipsește din lanțul de chei\n"
 msgid "removing invalid file: %s\n"
 msgstr "se elimină fișierul nevalid: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "nu s-a putut analiza fișierul '%s' de descriere a pachetului din db '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "nu s-a putut citi baza de date '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "baza de date %s este inconsistentă: numele de fișier al pachetului %s este "
 "nepermis\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "baza de date %s este inconsistentă: numele de fișier al pachetului %s este "
 "prea lung\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "fișier pentru baza de date necunoscut: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -383,61 +383,61 @@ msgstr "nu s-a putut determina locul de montare al partiției root %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Partiția %s este montată numai pentru citire\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "eșec la crearea fișierului temporar pentru descărcare\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""
 "prea multe erori de la %s, trec peste pentru restul acestei tranzacții\n"

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disc"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "eșec la obținerea fișierului '%s' din %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "eșec la obținerea fișierului '%s' din %s : dimensiunea de descărcare "
 "așteptată a fost depășită\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s pare a fi trunchiat: %jd/%jd octeți\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "Adresa url '%s' este nevalidă\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr "eșec la configurarea încărcăturii pentru descărcarea %s\n"

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr "curl a returnat eroarea %d de la transfer\n"

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr "eroare de transfer curl: %d\n"
@@ -452,12 +452,17 @@ msgstr "nu s-a putut schimba directorul în cel de descărcare %s\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "eșec la obținerea unor fișiere\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr "descărcare finalizată cu succes dar fișierul nu există în cache\n"
@@ -694,50 +699,55 @@ msgstr "fișiere în conflict"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "eșec la obținerea unor fișiere"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "expresie regulată nevalidă"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "eroare libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "eroare în biblioteca de descărcare"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "eroare gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "eroare la invocarea descărcătorului extern"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr "compilat fară suport pentru semnături"

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "eroare neașteptată"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "lipsește fișierul de blocare %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "nu s-a putut elimina fișierul de blocare %s\n"
@@ -819,7 +829,7 @@ msgstr "nu s-a putut deschide directorul: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "nu s-a putut deschide fișierul: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "nu s-a putut determina starea fișierului %s: %s\n"
@@ -903,94 +913,177 @@ msgstr "nu s-a putut elimina intrarea în baza de date %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "nu s-a putut elimina intrarea '%s' din cache\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Brelocul public nu a fost găsit; ai executat '%s'?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "eroare GPGME: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr "se caută cheia %s utilizând WKD\n"

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr "eroare gpg: %s\n"

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "brelocul nu poate fi scris\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr "cheia ”%s” pe serverul de chei\n"

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "cheia ”%s” nu a putut fi importată\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "cheia ”%s” nu a putut fi căutată la distanță\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: lipsește semnătura necesară\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: semnătura de la ”%s” e de încredere marginală\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: semnătura de la ”%s” e de încredere necunoscută\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: semnătura de la ”%s” nu ar trebui sa fie de incredere vreodată\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: cheia ”%s” e necunoscută\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: cheia ”%s” e dezactivată\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: semnătura de la ”%s” e expirată\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: cheia ”%s” e necunoscută\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: cheia ”%s” e dezactivată\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: semnătura de la ”%s” e nevalidă\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: eroare de format al semnăturii\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: format de semnătură nesuportat\n"
@@ -1040,27 +1133,27 @@ msgstr "s-au detectat conflicte nerezolvabile în pachet\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "eșec la citirea fișierului %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "nu există destul spațiu liber pe disc\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "nu s-a putut efectua tranzacția de eliminare\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "nu s-a putut efectua tranzacția\n"
@@ -1085,12 +1178,12 @@ msgstr "nu s-a putut elimina %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "nu s-a putut elimina tmpdir %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "nu se poate scrie în redirecționare (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "nu se poate citi din redirecționare (%s)\n"
@@ -1146,3 +1239,23 @@ msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "nu s-a putut găsi sau crea cache-ul pentru pachet; se folosește %s în "
 "schimb.\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/ru.po
+++ b/lib/libalpm/po/ru.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Анатолий Валерианович <ffox909@mail.ru>, 2016\n"
 "Language-Team: Russian (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -53,17 +53,17 @@ msgstr "откат версии пакета %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "не удалось выделить объект архивного диска"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "получено предупреждение при извлечении %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "не удалось извлечь %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "не удалось переименовать %s в %s (%s)\n"
@@ -106,18 +106,18 @@ msgstr "извлечение: не перезаписывается катало
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "не удалось извлечь %s.pacnew: путь слишком длинный"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "не удалось определить текущий рабочий каталог\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "не удалось изменить каталог на %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "не удалось восстановить рабочий каталог (%s)\n"
@@ -157,7 +157,7 @@ msgstr "удаление некорректной базы данных %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "не удалось создать каталог %s: (%s)\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "неправильное имя для записи в базе данных '%s'\n"
@@ -179,19 +179,19 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "не удалось открыть файл %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr ""
 "противоречивая информация в базе данных %s: не совпадает имя пакета %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr ""
@@ -253,7 +253,7 @@ msgstr "отсутствуют метаданные пакета в %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "не удалось прочитать файл с подписью: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "требуемый ключ отсутствует в цепочке ключей\n"
@@ -263,36 +263,36 @@ msgstr "требуемый ключ отсутствует в цепочке к
 msgid "removing invalid file: %s\n"
 msgstr "удаляется ошибочный файл: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "не удалось разобрать файл описания '%s' из базы '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "не удалось прочитать базу данных '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "противоречивая информация в базе данных %s: неправильное имя файла для "
 "пакета %s\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr ""
 "противоречивая информация в базе данных %s: имя файла пакета %s слишком "
 "длинное\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "неизвестный файл базы данных: '%s'\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -377,58 +377,58 @@ msgstr "не удалось определить точку монтирован
 msgid "Partition %s is mounted read only\n"
 msgstr "Раздел %s смонтирован только для чтения\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
-msgstr "не удалось создать временный файл для загрузки\n"
+msgstr ""

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "диск"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "не удалось получить файл '%s' из %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr "не удалось получить файл '%s' из %s: превышен ожидаемый размер\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s, видимо, обрезан: %jd/%jd байт\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "ссылка '%s' некорректна\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -443,12 +443,17 @@ msgstr "не удалось перейти в каталог загрузок %s
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, fuzzy, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "не удалось переименовать %s в %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "не удалось получить некоторые файлы\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -684,51 +689,56 @@ msgid "conflicting files"
 msgstr "конфликтующие файлы"

 #: lib/libalpm/error.c:142
+#, fuzzy, c-format
+msgid "failed to initialize download"
+msgstr "не удалось создать временный файл для загрузки\n"
+
+#: lib/libalpm/error.c:144
 #, c-format
 msgid "failed to retrieve some files"
 msgstr "не удалось получить некоторые файлы"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "неверное регулярное выражение"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "ошибка в libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "ошибка в библиотеке загрузки"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "ошибка gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "ошибка вызова внешнего менеджера загрузки"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "непредвиденная ошибка"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "не найден lock-файл %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "не удалось удалить  локфайл %s\n"
@@ -810,7 +820,7 @@ msgstr "не удалось открыть каталог %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "не удалось открыть файл: %s %s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "не удалось определить статус файла %s: %s\n"
@@ -892,94 +902,177 @@ msgstr "не удалось удалить из базы данных запис
 msgid "could not remove entry '%s' from cache\n"
 msgstr "не удалось удалить запись '%s' из кэша\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "ошибка GPGME: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr ""

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "не удалось импортировать ключ \"%s\"\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr ""

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: не найдена необходимая подпись\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr ""

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: неизвестный ключ \"%s\"\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: подпись от \"%s\" просрочена\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: неизвестный ключ \"%s\"\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: подпись от \"%s\" некорректна\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: ошибка формата подписи\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: неподдерживаемый формат подписи\n"
@@ -1029,27 +1122,27 @@ msgstr "обнаружен неразрешимый конфликт пакет
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr ""

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "недостаточно места на диске\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "не удалось завершить транзакцию удаления\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "не удалось завершить транзакцию\n"
@@ -1074,12 +1167,12 @@ msgstr "не удалось удалить %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "не удалось удалить временный каталог %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "не удалось записать в пайп (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "не удалось чтение из пайпа (%s)\n"
@@ -1133,3 +1226,23 @@ msgstr "кэш %s не существует, создается...\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "не удалось найти или создать кеш пакета, используется %s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/sk.po
+++ b/lib/libalpm/po/sk.po
@@ -16,7 +16,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Jose Riha <jose1711@gmail.com>, 2011,2022\n"
 "Language-Team: Slovak (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -48,17 +48,17 @@ msgstr "prechádza sa na staršiu verziu balíka %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr ""

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "varovanie pri rozbaľovaní %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "nie je možné rozbaliť %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "nie je možné premenovať %s na %s (%s)\n"
@@ -102,18 +102,18 @@ msgstr "rozbalenie: adresár nebol prepísaný súborom %s\n"
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "nepodarilo sa extrahovať %s.pacnew: cesta je príliš dlhá"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "nie je možné zistiť aktuálny pracovný adresár\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "nie je možné prepnúť sa do adresára %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "nie je možné obnoviť pracovný adresár (%s)\n"
@@ -153,7 +153,7 @@ msgstr "odstraňuje sa neplatná databáza: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "nie je možné vytvoriť adresár %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "neplatná názov záznamu v databáze '%s'\n"
@@ -175,18 +175,18 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "nie je možné otvoriť súbor %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s databáza nie je konzistentná: nesúhlasí meno balíčka %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "%s databáza nie je konzistentná: nesúhlasí verzia balíčka %s\n"
@@ -247,7 +247,7 @@ msgstr "chýbaju metadáta balíčka v %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "zlyhalo načítanie súboru s podpisom: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "požadovaný kľúč nebol nájdený v kľúčenke\n"
@@ -257,32 +257,32 @@ msgstr "požadovaný kľúč nebol nájdený v kľúčenke\n"
 msgid "removing invalid file: %s\n"
 msgstr "odstraňuje sa neplatný súbor: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "nie je možné nájsť súbor s popisom balíčku '%s' z databázy '%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "chyba pri čítaní databázy '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "%s databáza nie je konzistentná: názov balíčka %s nie je povolený\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "%s databáza nie je konzistentná: názov balíčka %s je príliš dlhý\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "neznámy databázový súbor: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -370,60 +370,60 @@ msgstr "nepodarilo sa určiť bod pripojenia pre koreň %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Partícia %s je pripojená iba v režime na čítanie\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
-msgstr "chyba pri vytváraní dočasného súboru pre sťahovanie\n"
+msgstr ""

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disk"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "chyba pri získavaní súboru '%s' z %s: %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "chyba pri sťahovaní súboru '%s' z %s : očakávaná veľkosť sťahovaného súboru "
 "bola prekročená\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "%s vyzerá byť skrátený:  %jd/%jd bytov\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "URL '%s' je neplatná\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -438,12 +438,17 @@ msgstr ""
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, fuzzy, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "nie je možné premenovať %s na %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "zlyhalo získanie niektorých súborov\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -679,51 +684,56 @@ msgid "conflicting files"
 msgstr "konfliktné súbory"

 #: lib/libalpm/error.c:142
+#, fuzzy, c-format
+msgid "failed to initialize download"
+msgstr "chyba pri vytváraní dočasného súboru pre sťahovanie\n"
+
+#: lib/libalpm/error.c:144
 #, c-format
 msgid "failed to retrieve some files"
 msgstr "chyba pri získavaní niektorých súborov"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "neplatný regulárny výraz"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "chyba knižnice libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "chyba knižnice pre sťahovanie súborov"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "chyba v gpgme"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "chyba volania externého programu pre sťahovanie súborov"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "neočakávaná chyba"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "chýba zamykací súbor %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "nie je možné odstrániť zamykací súbor %s\n"
@@ -805,7 +815,7 @@ msgstr "nepodarilo sa otvoriť adresár: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr ""

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "nepodarilo sa získať status súboru %s: %s\n"
@@ -887,94 +897,177 @@ msgstr "nie je možné odstrániť záznam databáze %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "nie je možné odstrániť položku '%s' z cache\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "Chyba GPGME: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "zväzok kľúčov nie je zapisovateľný\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr ""

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr ""

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: chýba vyžadovaný podpis\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: podpis od \"%s\" má čiastočnú dôveru\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: pri podpise od \"%s\" nie je známa úroveň dôvery\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: podpisu od \"%s\" by ste nemali nikdy dôverovať\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: kľúč \"%s\" je neznámy\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr ""
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: platnosť podpisu od \"%s\" vypršala\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: kľúč \"%s\" je neznámy\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr ""
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: podpis od \"%s\" je neplatný\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: chyba formátu podpisu\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: nepodporovaný formát podpisu\n"
@@ -1024,27 +1117,27 @@ msgstr "zistený konflikt nerozlíšiteľných balíčkov\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr "zlyhalo čítanie súboru %s: %s\n"

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "nedostatok voľného miesta na disku\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "nie je možné uskutočniť transakciu pre odstránenie\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "nie je možné uskutočniť transakciu\n"
@@ -1069,12 +1162,12 @@ msgstr "%s nie je možné vymazať\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "nie je možné odstrániť dočasný adresár %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "nie je možné zapísať do zreťazenia (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "nie je možné čítať zo zreťazenia (%s)\n"
@@ -1130,3 +1223,23 @@ msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "nie je možné nájsť alebo vytvoriť cache pre balíček,  miesto toho sa používa "
 "%s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/sl.po
+++ b/lib/libalpm/po/sl.po
@@ -19,7 +19,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: 35e31c1f7beb9a73365b56f93b1457f5_fbd83d3, 2014\n"
 "Language-Team: Slovenian (http://app.transifex.com/toofishes/archlinux-"
@@ -51,17 +51,17 @@ msgstr "obnavljanje prejšnje različice paketa %s (%s => %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr ""

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "opozorilo podano med razširjanjem %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "ni mogoče razširiti %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "%s ni mogoče preimenovati v %s (%s)\n"
@@ -108,18 +108,18 @@ msgstr ""
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "ni mogoče razširiti %s.pacnew: pot predolga"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "ni mogoče dobiti trenutne delovne mape\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "ni bilo mogoče spremeniti mape v %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "delovne mape (%s) ni bilo mogoče obnoviti\n"
@@ -159,7 +159,7 @@ msgstr "odstranjevanje neveljavne podatkovne baze: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "Ne morem ustvariti mape %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "neveljavno ime vnosa v podatkovno bazo '%s'\n"
@@ -181,18 +181,18 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "ni mogoče odpreti datoteke %s:%s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "%s podatkovna baza je v neskladju: ime v paketu %s se ne ujema\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "%s podatkovna baza ni usklajena: verzija se razlikuje od paketa %s\n"
@@ -253,7 +253,7 @@ msgstr "v %s manjkajo metapodatki paketa\n"
 msgid "failed to read signature file: %s\n"
 msgstr "ni mogoče prebrati podpisa datoteke: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "zahtevan ključ iz baze ključev manjka\n"
@@ -263,35 +263,35 @@ msgstr "zahtevan ključ iz baze ključev manjka\n"
 msgid "removing invalid file: %s\n"
 msgstr "odstranjevanje neveljavne datoteke: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr ""
 "ni bilo mogoče razčleniti datoteke opisa paketa '%s' iz podatkovne baze "
 "'%s'\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "ni mogoče prebrati podatkovne baze '%s' (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr ""
 "%s podatkovna baza je v neskladju: ime datoteke paketa %s je neveljavno\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "%s podatkovna baza je v neskladju: ime paketa %s je predolgo\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "neznana podatkovna baza datoteke: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -376,60 +376,60 @@ msgstr "ni bilo mogoče določiti korenske priklopne točke %s\n"
 msgid "Partition %s is mounted read only\n"
 msgstr "Razdelek %s je priklopljen samo za branje\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
-msgstr "napaka pri ustvarjanju začasne datoteke za prenos\n"
+msgstr ""

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "disk"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "napaka pri pridobivanju datoteke '%s' iz %s : %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "napaka pri pridobivanju datoteke '%s' iz %s : pričakovana velikost prenosa "
 "presežena\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "zdi se, da je %s prirezan: %jd/%jd bajtov \n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "url naslov '%s' je neveljaven\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -444,12 +444,17 @@ msgstr "ni se bilo mogoče prestaviti v imenik prenosov: %s\n"
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, fuzzy, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr "%s ni mogoče preimenovati v %s (%s)\n"
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "ni mogoče prejeti nekaterih datotek\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -685,51 +690,56 @@ msgid "conflicting files"
 msgstr "spor datotek"

 #: lib/libalpm/error.c:142
+#, fuzzy, c-format
+msgid "failed to initialize download"
+msgstr "napaka pri ustvarjanju začasne datoteke za prenos\n"
+
+#: lib/libalpm/error.c:144
 #, c-format
 msgid "failed to retrieve some files"
 msgstr "ni mogoče prejeti nekaterih datotek"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "neveljaven logični izraz"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "napaka libarchive"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "napaka pri prenosu knjižnice"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "gpgme napaka"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "napaka pri klicu zunanjega prenosnika"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "nepričakovana napaka"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "zaklenjena datoteka manjka %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "ni bilo mogoče odstraniti zaklenjene datoteke %s\n"
@@ -811,7 +821,7 @@ msgstr "ni mogoče odpreti mape: %s:%s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "ni mogoče odpreti datoteke: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "ne morem prebrati statusa datoteke %s:%s\n"
@@ -893,94 +903,177 @@ msgstr "ne morem odstraniti vnosa podatkovne baze %s-%s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr " vnosa '%s' ne morem odstraniti iz predpomnilnika\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr ""

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "GPGME napaka: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "v bazo ključev ni mogoče pisati\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr ""

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr ""

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: manjka zahtevan podpis\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr ""

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: podpisu iz \"%s\" nikoli ne bi smeli zaupati\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: ključ \"%s\" je neznan\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: ključ \"%s\" je onemogočen\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr ""

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: ključ \"%s\" je neznan\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: ključ \"%s\" je onemogočen\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr ""

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr ""

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr ""
@@ -1030,27 +1123,27 @@ msgstr "zaznani so bili nerešljivi spori paketa\n"
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr ""

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "na disku ni dovolj razpoložljivega prostora\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "ni bilo možno uveljaviti odstranitve transakcije\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "ni bilo mogoče uveljaviti transakcije\n"
@@ -1075,12 +1168,12 @@ msgstr "ni bilo mogoče odstraniti %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "ni bilo mogoče odstraniti začasne mape %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr ""

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr ""
@@ -1136,3 +1229,23 @@ msgid "couldn't find or create package cache, using %s instead\n"
 msgstr ""
 "predpomnilnika paketa ni bilo mogoče najti ali ustvariti, zato se uporabi "
 "%s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/lib/libalpm/po/sr.po
+++ b/lib/libalpm/po/sr.po
@@ -14,7 +14,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Arch Linux Pacman package manager\n"
 "Report-Msgid-Bugs-To: https://gitlab.archlinux.org/pacman/pacman/-/issues\n"
-"POT-Creation-Date: 2024-07-14 19:10+1000\n"
+"POT-Creation-Date: 2025-11-01 17:34+1000\n"
 "PO-Revision-Date: 2010-11-29 23:17+0000\n"
 "Last-Translator: Slobodan Terzić <githzerai06@gmail.com>, 2011,2015,2018\n"
 "Language-Team: Serbian (http://app.transifex.com/toofishes/archlinux-pacman/"
@@ -46,17 +46,17 @@ msgstr "разграђујем пакет %s (%s -> %s)\n"
 msgid "cannot allocate disk archive object"
 msgstr "не могу да доделим објекат архиве диска"

-#: lib/libalpm/add.c:143 lib/libalpm/util.c:408
+#: lib/libalpm/add.c:143 lib/libalpm/util.c:410
 #, c-format
 msgid "warning given when extracting %s (%s)\n"
 msgstr "дато је упозорење при распакивању %s (%s)\n"

-#: lib/libalpm/add.c:146 lib/libalpm/util.c:411
+#: lib/libalpm/add.c:146 lib/libalpm/util.c:413
 #, c-format
 msgid "could not extract %s (%s)\n"
 msgstr "не могу да распакујем %s (%s)\n"

-#: lib/libalpm/add.c:159 lib/libalpm/dload.c:707 lib/libalpm/remove.c:550
+#: lib/libalpm/add.c:159 lib/libalpm/dload.c:710 lib/libalpm/remove.c:550
 #, c-format
 msgid "could not rename %s to %s (%s)\n"
 msgstr "не могу да преименујем %s у %s (%s)\n"
@@ -99,18 +99,18 @@ msgstr "распакивање: не преписујем фасциклу фа
 msgid "unable to extract %s.pacnew: path too long"
 msgstr "не могу да распакујем %s.pacnew: путања је предугачка"

-#: lib/libalpm/add.c:510 lib/libalpm/util.c:354 lib/libalpm/util.c:624
+#: lib/libalpm/add.c:510 lib/libalpm/util.c:356 lib/libalpm/util.c:624
 #, c-format
 msgid "could not get current working directory\n"
 msgstr "не могу да одредим радну фасциклу\n"

-#: lib/libalpm/add.c:515 lib/libalpm/util.c:359 lib/libalpm/util.c:629
+#: lib/libalpm/add.c:515 lib/libalpm/util.c:361 lib/libalpm/util.c:629
 #: lib/libalpm/util.c:684
 #, c-format
 msgid "could not change directory to %s (%s)\n"
 msgstr "не могу да променим фасциклу у %s (%s)\n"

-#: lib/libalpm/add.c:571 lib/libalpm/util.c:429 lib/libalpm/util.c:808
+#: lib/libalpm/add.c:571 lib/libalpm/util.c:431 lib/libalpm/util.c:808
 #, c-format
 msgid "could not restore working directory (%s)\n"
 msgstr "не могу да повратим радну фасциклу (%s)\n"
@@ -150,7 +150,7 @@ msgstr "уклањам неисправну базу: %s\n"
 msgid "could not create directory %s: %s\n"
 msgstr "не могу да направим фасциклу %s: %s\n"

-#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:339
+#: lib/libalpm/be_local.c:608 lib/libalpm/be_sync.c:338
 #, c-format
 msgid "invalid name for database entry '%s'\n"
 msgstr "неисправно име уноса базе „%s“\n"
@@ -172,18 +172,18 @@ msgstr ""

 #: lib/libalpm/be_local.c:743 lib/libalpm/be_local.c:856
 #: lib/libalpm/be_local.c:996 lib/libalpm/be_local.c:1102
-#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:792 lib/libalpm/util.c:273
-#: lib/libalpm/util.c:289
+#: lib/libalpm/diskspace.c:135 lib/libalpm/dload.c:795 lib/libalpm/util.c:275
+#: lib/libalpm/util.c:291
 #, c-format
 msgid "could not open file %s: %s\n"
 msgstr "не могу да отворим фајл %s: %s\n"

-#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:612
+#: lib/libalpm/be_local.c:759 lib/libalpm/be_sync.c:611
 #, c-format
 msgid "%s database is inconsistent: name mismatch on package %s\n"
 msgstr "недоследност базе „%s“: разлика у имену пакета %s\n"

-#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:618
+#: lib/libalpm/be_local.c:765 lib/libalpm/be_sync.c:617
 #, c-format
 msgid "%s database is inconsistent: version mismatch on package %s\n"
 msgstr "недоследност базе „%s“: разлика у верзији пакета %s\n"
@@ -244,7 +244,7 @@ msgstr "недостају метаподаци пакета %s\n"
 msgid "failed to read signature file: %s\n"
 msgstr "не могу да прочитам фајл потписа: %s\n"

-#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:976
+#: lib/libalpm/be_package.c:768 lib/libalpm/sync.c:977
 #, c-format
 msgid "required key missing from keyring\n"
 msgstr "захтеваног кључа нема на привеску\n"
@@ -254,32 +254,32 @@ msgstr "захтеваног кључа нема на привеску\n"
 msgid "removing invalid file: %s\n"
 msgstr "уклањам неисправан фајл: %s\n"

-#: lib/libalpm/be_sync.c:471
+#: lib/libalpm/be_sync.c:470
 #, c-format
 msgid "could not parse package description file '%s' from db '%s'\n"
 msgstr "не могу да обрадим фајл описа пакета „%s“ из базе „%s“\n"

-#: lib/libalpm/be_sync.c:486
+#: lib/libalpm/be_sync.c:485
 #, c-format
 msgid "could not read db '%s' (%s)\n"
 msgstr "не могу да читам базу „%s“ (%s)\n"

-#: lib/libalpm/be_sync.c:519 lib/libalpm/be_sync.c:524
+#: lib/libalpm/be_sync.c:518 lib/libalpm/be_sync.c:523
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is illegal\n"
 msgstr "недоследност базе „%s“: име фајла пакета %s је неисправно\n"

-#: lib/libalpm/be_sync.c:529
+#: lib/libalpm/be_sync.c:528
 #, c-format
 msgid "%s database is inconsistent: filename of package %s is too long\n"
 msgstr "недоследност базе „%s“: име фајла пакета %s је предугачко\n"

-#: lib/libalpm/be_sync.c:594
+#: lib/libalpm/be_sync.c:593
 #, c-format
 msgid "unknown database file: %s\n"
 msgstr "непознат фајл базе: %s\n"

-#: lib/libalpm/be_sync.c:712
+#: lib/libalpm/be_sync.c:711
 #, c-format
 msgid "%s: unknown key '%s' in sync database\n"
 msgstr ""
@@ -364,60 +364,60 @@ msgstr "не могу да утврдим корену тачку монтира
 msgid "Partition %s is mounted read only\n"
 msgstr "Партиција %s је монтирана само за читање\n"

-#: lib/libalpm/dload.c:107
+#: lib/libalpm/dload.c:110
 #, c-format
 msgid "failed to create temporary file for download\n"
 msgstr "неуспело стварање привременог фајла преузимања\n"

-#: lib/libalpm/dload.c:198
+#: lib/libalpm/dload.c:201
 #, c-format
 msgid ""
 "too many errors from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:215
+#: lib/libalpm/dload.c:218
 #, c-format
 msgid "fatal error from %s, skipping for the remainder of this transaction\n"
 msgstr ""

-#: lib/libalpm/dload.c:310
+#: lib/libalpm/dload.c:313
 #, c-format
 msgid "disk"
 msgstr "диск"

-#: lib/libalpm/dload.c:532 lib/libalpm/dload.c:570 lib/libalpm/dload.c:583
+#: lib/libalpm/dload.c:535 lib/libalpm/dload.c:573 lib/libalpm/dload.c:586
 #, c-format
 msgid "failed retrieving file '%s' from %s : %s\n"
 msgstr "неуспешно преузимање фајла „%s“ са „%s“: %s\n"

-#: lib/libalpm/dload.c:562
+#: lib/libalpm/dload.c:565
 #, c-format
 msgid "failed retrieving file '%s' from %s : expected download size exceeded\n"
 msgstr ""
 "неуспело добављање фајла %s са %s: премашена је предвиђена величина "
 "преузимања\n"

-#: lib/libalpm/dload.c:685
+#: lib/libalpm/dload.c:688
 #, c-format
 msgid "%s appears to be truncated: %jd/%jd bytes\n"
 msgstr "изгледа да је %s окрњен: %jd/%jd бајтова\n"

-#: lib/libalpm/dload.c:776
+#: lib/libalpm/dload.c:779
 #, c-format
 msgid "url '%s' is invalid\n"
 msgstr "„%s“ је неисправан урл\n"

-#: lib/libalpm/dload.c:864
+#: lib/libalpm/dload.c:867
 #, c-format
 msgid "failed to setup a download payload for %s\n"
 msgstr ""

-#: lib/libalpm/dload.c:876
+#: lib/libalpm/dload.c:879
 #, c-format
 msgid "curl returned error %d from transfer\n"
 msgstr ""

-#: lib/libalpm/dload.c:900
+#: lib/libalpm/dload.c:902
 #, c-format
 msgid "curl transfer error: %d\n"
 msgstr ""
@@ -432,12 +432,17 @@ msgstr "не могу да пређем у фасциклу преузимања
 msgid "switching to sandbox user '%s' failed!\n"
 msgstr ""

-#: lib/libalpm/dload.c:1361 lib/libalpm/sync.c:861
+#: lib/libalpm/dload.c:1126
+#, c-format
+msgid "could not move %s into %s (%s)\n"
+msgstr ""
+
+#: lib/libalpm/dload.c:1412 lib/libalpm/sync.c:863
 #, c-format
 msgid "failed to retrieve some files\n"
 msgstr "неуспешно преузимање неких фајлова\n"

-#: lib/libalpm/dload.c:1384
+#: lib/libalpm/dload.c:1435
 #, c-format
 msgid "download completed successfully but no file in the cache\n"
 msgstr ""
@@ -674,50 +679,55 @@ msgstr "сукоб фајлова"

 #: lib/libalpm/error.c:142
 #, c-format
+msgid "failed to initialize download"
+msgstr ""
+
+#: lib/libalpm/error.c:144
+#, c-format
 msgid "failed to retrieve some files"
 msgstr "неуспешно преузимање неких фајлова"

-#: lib/libalpm/error.c:144
+#: lib/libalpm/error.c:146
 #, c-format
 msgid "invalid regular expression"
 msgstr "неисправан регуларни израз"

-#: lib/libalpm/error.c:150
+#: lib/libalpm/error.c:152
 #, c-format
 msgid "libarchive error"
 msgstr "грешка либархајва"

-#: lib/libalpm/error.c:152
+#: lib/libalpm/error.c:154
 #, c-format
 msgid "download library error"
 msgstr "грешка у библиотеци преузимања"

-#: lib/libalpm/error.c:154
+#: lib/libalpm/error.c:156
 #, c-format
 msgid "gpgme error"
 msgstr "грешка гпгмија"

-#: lib/libalpm/error.c:156
+#: lib/libalpm/error.c:158
 #, c-format
 msgid "error invoking external downloader"
 msgstr "грешка при покретању спољног програма за преузимање"

-#: lib/libalpm/error.c:159
+#: lib/libalpm/error.c:161
 #, c-format
 msgid "compiled without signature support"
 msgstr ""

-#: lib/libalpm/error.c:162
+#: lib/libalpm/error.c:164
 #, c-format
 msgid "unexpected error"
 msgstr "неочекивана грешка"

-#: lib/libalpm/handle.c:165
+#: lib/libalpm/handle.c:166
 #, c-format
 msgid "lock file missing %s\n"
 msgstr "недостаје забравни фајл %s\n"

-#: lib/libalpm/handle.c:171
+#: lib/libalpm/handle.c:172
 #, c-format
 msgid "could not remove lock file %s\n"
 msgstr "не могу да уклоним фајл браве %s\n"
@@ -799,7 +809,7 @@ msgstr "не могу да отворим фасциклу: %s: %s\n"
 msgid "could not open file: %s%s: %s\n"
 msgstr "не могу да отворим фајл: %s%s: %s\n"

-#: lib/libalpm/hook.c:595 lib/libalpm/util.c:279
+#: lib/libalpm/hook.c:595 lib/libalpm/util.c:281
 #, c-format
 msgid "could not stat file %s: %s\n"
 msgstr "не могу да одредим особине фајла %s: %s\n"
@@ -881,94 +891,177 @@ msgstr "не могу да уклоним унос базе %s — %s\n"
 msgid "could not remove entry '%s' from cache\n"
 msgstr "не могу да уклоним унос „%s“ из кеша\n"

+#: lib/libalpm/sandbox_fs.c:114
+#, c-format
+msgid ""
+"restricting filesystem access failed because Landlock is not supported by "
+"the kernel!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:119
+#, c-format
+msgid "Landlock ABI < 2, LANDLOCK_ACCESS_FS_REFER is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:125
+#, c-format
+msgid "Landlock ABI < 3, LANDLOCK_ACCESS_FS_TRUNCATE is not supported\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:132
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be created: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:139
+#, c-format
+msgid ""
+"opening the root filesystem to make it read-only via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:145
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for / could "
+"not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:156
+#, c-format
+msgid ""
+"opening the download directory to make it writable via Landlock failed: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:167
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock ruleset could not "
+"be applied: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:171
+#, c-format
+msgid ""
+"restricting filesystem access failed because the Landlock rule for the "
+"temporary download directory could not be added: %s\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_fs.c:177
+#, c-format
+msgid "filesystem access has been restricted to %s, Landlock ABI is %d\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:139
+#, c-format
+msgid ""
+"error initializing seccomp to filter system calls in the download sandbox!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:147
+#, c-format
+msgid "error restricting syscall %s via seccomp!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:157
+#, c-format
+msgid "error restricting syscalls via seccomp: %d!\n"
+msgstr ""
+
+#: lib/libalpm/sandbox_syscalls.c:160
+#, c-format
+msgid "successfully restricted %d syscalls via seccomp\n"
+msgstr ""
+
 #: lib/libalpm/signing.c:163
 #, c-format
 msgid "Public keyring not found; have you run '%s'?\n"
 msgstr "Јавни свежањ кључева није нађен; да ли сте покренули „%s“?\n"

-#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:773
+#: lib/libalpm/signing.c:199 lib/libalpm/signing.c:739
 #, c-format
 msgid "GPGME error: %s\n"
 msgstr "Грешка ГПГМЕ: %s\n"

-#: lib/libalpm/signing.c:275
+#: lib/libalpm/signing.c:280
 #, c-format
 msgid "looking up key %s using WKD\n"
 msgstr ""

-#: lib/libalpm/signing.c:289
+#: lib/libalpm/signing.c:294
 #, c-format
 msgid "gpg error: %s\n"
 msgstr ""

-#: lib/libalpm/signing.c:440 lib/libalpm/signing.c:513
+#: lib/libalpm/signing.c:406 lib/libalpm/signing.c:479
 #, c-format
 msgid "keyring is not writable\n"
 msgstr "привезак није уписив\n"

-#: lib/libalpm/signing.c:537
+#: lib/libalpm/signing.c:503
 #, c-format
 msgid "key \"%s\" on keyserver\n"
 msgstr ""

-#: lib/libalpm/signing.c:542
+#: lib/libalpm/signing.c:508
 #, c-format
 msgid "key \"%s\" could not be imported\n"
 msgstr "кључ „%s“ се не може увести\n"

-#: lib/libalpm/signing.c:546
+#: lib/libalpm/signing.c:512
 #, c-format
 msgid "key \"%s\" could not be looked up remotely\n"
 msgstr "кључ „%s“ се не може потражити удаљено\n"

-#: lib/libalpm/signing.c:932 lib/libalpm/sync.c:1052
+#: lib/libalpm/signing.c:898 lib/libalpm/sync.c:1053
 #, c-format
 msgid "%s: missing required signature\n"
 msgstr "%s: недостаје захтевани потпис\n"

-#: lib/libalpm/signing.c:947
+#: lib/libalpm/signing.c:912
 #, c-format
 msgid "%s: signature from \"%s\" is marginal trust\n"
 msgstr "%s: кључ из „%s“ има гранично поверење\n"

-#: lib/libalpm/signing.c:955
+#: lib/libalpm/signing.c:920
 #, c-format
 msgid "%s: signature from \"%s\" is unknown trust\n"
 msgstr "%s: кључ из „%s“ је непознатог поверења\n"

-#: lib/libalpm/signing.c:962
+#: lib/libalpm/signing.c:927
 #, c-format
 msgid "%s: signature from \"%s\" should never be trusted\n"
 msgstr "%s: кључу из „%s“ никада не треба веровати\n"

-#: lib/libalpm/signing.c:974
-#, c-format
-msgid "%s: key \"%s\" is unknown\n"
-msgstr "%s: кључ „%s“ је непознат\n"
-
-#: lib/libalpm/signing.c:983
-#, c-format
-msgid "%s: key \"%s\" is disabled\n"
-msgstr "%s: кључ „%s“ је онемогућен\n"
-
-#: lib/libalpm/signing.c:987
+#: lib/libalpm/signing.c:934 lib/libalpm/signing.c:962
 #, c-format
 msgid "%s: signature from \"%s\" is expired\n"
 msgstr "%s: кључ из „%s“ је истекао\n"

-#: lib/libalpm/signing.c:991
+#: lib/libalpm/signing.c:949
+#, c-format
+msgid "%s: key \"%s\" is unknown\n"
+msgstr "%s: кључ „%s“ је непознат\n"
+
+#: lib/libalpm/signing.c:958
+#, c-format
+msgid "%s: key \"%s\" is disabled\n"
+msgstr "%s: кључ „%s“ је онемогућен\n"
+
+#: lib/libalpm/signing.c:966
 #, c-format
 msgid "%s: signature from \"%s\" is invalid\n"
 msgstr "%s: кључ из „%s“ је неисправан\n"

-#: lib/libalpm/signing.c:1049 lib/libalpm/signing.c:1110
-#: lib/libalpm/signing.c:1189
+#: lib/libalpm/signing.c:1024 lib/libalpm/signing.c:1085
+#: lib/libalpm/signing.c:1167
 #, c-format
 msgid "%s: signature format error\n"
 msgstr "%s: грешка у формату потписа\n"

-#: lib/libalpm/signing.c:1142 lib/libalpm/signing.c:1175
-#: lib/libalpm/signing.c:1183
+#: lib/libalpm/signing.c:1117 lib/libalpm/signing.c:1150
+#: lib/libalpm/signing.c:1161
 #, c-format
 msgid "%s: unsupported signature format\n"
 msgstr "%s: неподржан формат потписа\n"
@@ -1018,27 +1111,27 @@ msgstr "откривени су неразрешиви сукоби пакета
 msgid "removing '%s-%s' from target list because it conflicts with '%s-%s'\n"
 msgstr ""

-#: lib/libalpm/sync.c:1020 lib/libalpm/sync.c:1187
+#: lib/libalpm/sync.c:1021 lib/libalpm/sync.c:1188
 #, c-format
 msgid "%s: could not find package in cache\n"
 msgstr ""

-#: lib/libalpm/sync.c:1066
+#: lib/libalpm/sync.c:1067
 #, c-format
 msgid "failed to read file %s: %s\n"
 msgstr ""

-#: lib/libalpm/sync.c:1324
+#: lib/libalpm/sync.c:1325
 #, c-format
 msgid "not enough free disk space\n"
 msgstr "нема довољно слободног простора на диску\n"

-#: lib/libalpm/sync.c:1346
+#: lib/libalpm/sync.c:1347
 #, c-format
 msgid "could not commit removal transaction\n"
 msgstr "не могу да обавим уклањање\n"

-#: lib/libalpm/sync.c:1354
+#: lib/libalpm/sync.c:1355
 #, c-format
 msgid "could not commit transaction\n"
 msgstr "не могу да обавим пренос\n"
@@ -1063,12 +1156,12 @@ msgstr "не могу да уклоним %s\n"
 msgid "could not remove tmpdir %s\n"
 msgstr "не могу да уклоним привремену фасциклу %s\n"

-#: lib/libalpm/util.c:512
+#: lib/libalpm/util.c:514
 #, c-format
 msgid "unable to write to pipe (%s)\n"
 msgstr "не могу да пишем у цев (%s)\n"

-#: lib/libalpm/util.c:571
+#: lib/libalpm/util.c:573
 #, c-format
 msgid "unable to read from pipe (%s)\n"
 msgstr "не могу да читам из цеви (%s)\n"
@@ -1122,3 +1215,23 @@ msgstr "не постоји кеш за %s; правим....\n"
 #, c-format
 msgid "couldn't find or create package cache, using %s instead\n"
 msgstr "не могу да нађем или направим кеш пакета, као замену користим %s\n"
+
+#: lib/libalpm/util.c:972
+#, c-format
+msgid "download user '%s' does not exist\n"
+msgstr ""
+
+#: lib/libalpm/util.c:975
+#, c-format
+msgid "failed to get download user '%s': %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:988
+#, c-format
+msgid "failed to create temporary download directory %s: %s\n"
+msgstr ""
+
+#: lib/libalpm/util.c:996
+#, c-format
+msgid "failed to chown temporary download directory %s: %s\n"
+msgstr ""
--- a/Show More
+++ b/Show More