Flatpak has gone through some updates, including few security related, however, there is no way of updating it in Ubuntu for now either via PPA or any other means.

https://github.com/flatpak/flatpak/releases

I let these slip for a few weeks, so this one covers everything since the last post rather than a single week. The catalog grew from 40 to 55 apps.

Contributed by other people

Four of this window's packages came in as pull requests from outside, and two of them from the app's own developer:

• Zuko (⭐ 12) — Private remote shells over Iroh: no open inbound ports, no VPN, pair once and reconnect by name. Submitted and maintained by its author, @adonm, who has kept shipping the version bumps since.
• LibreDB Studio (⭐ 135) — Open-source SQL IDE that runs entirely on your machine; PostgreSQL, MySQL, MongoDB and more. Submitted by the LibreDB project itself (@cevheri).
• Harbor Beta (⭐ 1.3k) — Beta channel of Harbor, a desktop media client for Stremio addons. Packaged by @AdityaHebballe, who also followed up with the desktop-integration fixes.
• Antigravity — Google's desktop command center for running local AI coding agents in parallel. Packaged by @h1zardian. Note this is the Antigravity desktop app, not the Antigravity IDE — the two split upstream and the tarball here carries no editor at all.

And the first outside contribution to the site itself: @cevheri noticed the header search was cramped on phones and sent a fix giving it its own row under 480px. Small patch, but it's the part of the site I look at least and most people see first — thank you.

Upstreams packaging their own app is exactly the loop we're after: the people who build it decide how it's sandboxed, and packaging issues route to whoever can actually fix them.

New apps

Thirteen more, most of them AI/agent desktops — enough that the site now has its own AI section:

• goose (⭐ 52.5k) — Open-source AI agent that installs, executes, edits and tests; now stewarded by the Agentic AI Foundation.
• Cockpit Tools (⭐ 15.4k) — Manage and switch accounts across AI coding assistants and IDEs, with plan and quota per account.
• Claude Code Haha (⭐ 14k) — Desktop workspace running several coding agents side by side, each on its own git branch or worktree.
• DeepChat (⭐ 6.2k) — Local-first LLM client that hosts MCP servers, runs skills and agents, and speaks ACP.
• Lap (⭐ 1.7k) — Offline-first photo manager that reads your existing folder tree in place, built for 100k-file libraries.
• thClaws (⭐ 1.2k) — Rust AI agent harness in one binary: GUI with terminal/chat/files tabs, plus CLI, headless and web.
• DocKit (⭐ 1.1k) — Desktop GUI client for Elasticsearch, OpenSearch, DynamoDB and MongoDB, with natural-language queries.
• SqlKit (⭐ 536) — Agentic SQL client for 40+ databases — PostgreSQL, MySQL, Oracle, SQLite, ClickHouse and more.
• tldraw offline (⭐ 515) — tldraw's infinite canvas as a desktop app: no accounts, no servers, portable .tldraw files.
• Alma (⭐ 392) — AI assistant by yetone with persistent memory, a skill system and multi-provider support.
• ZCode — Z.ai's agentic coding desktop app for GLM models, with editor, terminals and diff review in one window. Upstream marks the Linux build beta.
• WeMeet — Tencent Meeting, the cloud HD conferencing client.
• THS — Hithink RoyalFlush (同花顺) A-share quotes, charting and portfolio tracking.

The site speaks Chinese now

The whole site has a Simplified Chinese locale — UI chrome, content pages, catalog sections and the sandbox-permission strings. AppStream metainfo is read per xml:lang, so translated upstream descriptions come through instead of falling back to English.

Also on the site:

• App pages show What's New, taken from the upstream release the current pin points at, so you can see what changed before you update.
• The homepage catalog folds behind a sticky control bar and reveals five rows at a time instead of being one endless wall.
• A dedicated AI section, since a third of the catalog now lives there.

Packaging notes

Most of the month's bug fixes were one bug wearing different hats: Flatpak redirects the XDG directories, not $HOME itself. An app that keeps its state in ~/.something gets a tmpfs there and silently loses everything on restart. Fixed that way for dbx (~/.dbx, ~/.duckdb), TriliumNext (the note database) and AB Download Manager (~/.abdm, which also unblocked its tray).

The mirror image: cc-switch had a single-file --filesystem grant for a config the tool rewrites atomically — renaming onto a bind mount is EBUSY, so the write fails. Those per-tool grants are gone; the app page documents the flatpak override commands instead, for anyone who wants them.

WeMeet needed its own trick: screen sharing only works under XWayland, so the package forces it there rather than shipping a session that silently shares a black rectangle.

Developer-approved

14 apps now carry the blue shield — upstream explicitly authorized the flatpark listing. New this window: Zuko and LibreDB Studio, both approved by construction since their developers submitted them.

Infrastructure

• The daily pin robot now unpacks the payload before pinning it and holds back anything that fails to unpack, instead of publishing a build that only breaks on the user's machine.
• verify builds against a temporary local remote and cleans up afterwards, so a failed verification can't leave junk in your flatpak config.
• Push-mode updates (upstream release webhook → dispatch → PR) have been running in production the whole window; the daily cron is now the fallback path.

Auto-updates

The pin pipeline ran every day of the window, refreshing extra-data pins across Markra, dbx, Alma, Orca, ZenNotes, Tine, Claude Desktop, electerm, LibreDB Studio, Folia, Longbridge Pro, Aptakube, SqlKit and others.

As always: https://flatpark.org — issues and PRs welcome, especially "this app has no Linux packaging and should" suggestions.# flatpark — update (Jul 12 – Aug 8)

I let these slip for a few weeks, so this one covers everything since the last post rather than a single week. The catalog grew from 40 to 55 apps.