diff --git a/app-admin/rsyslog/rsyslog-8.2512.0.ebuild b/app-admin/rsyslog/rsyslog-8.2512.0.ebuild
index 6a58b3379e1fa..7d7066ca970e5 100644
--- a/app-admin/rsyslog/rsyslog-8.2512.0.ebuild
+++ b/app-admin/rsyslog/rsyslog-8.2512.0.ebuild
@@ -19,7 +19,7 @@ else
 	SRC_URI="https://github.com/${PN}/${PN}/archive/refs/tags/v${PV}.tar.gz
 		-> ${P}.tar.gz"
 
-	KEYWORDS="amd64 arm ~arm64 ~ppc64 ~riscv x86"
+	KEYWORDS="amd64 arm arm64 ~ppc64 ~riscv x86"
 fi
 
 LICENSE="GPL-3 LGPL-3 Apache-2.0"
diff --git a/app-containers/aardvark-dns/aardvark-dns-1.17.0.ebuild b/app-containers/aardvark-dns/aardvark-dns-1.17.0.ebuild
index 1272b60d09398..8d7a1b452384d 100644
--- a/app-containers/aardvark-dns/aardvark-dns-1.17.0.ebuild
+++ b/app-containers/aardvark-dns/aardvark-dns-1.17.0.ebuild
@@ -1,4 +1,4 @@
-# Copyright 2023-2025 Gentoo Authors
+# Copyright 2023-2026 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=8
@@ -16,7 +16,7 @@ if [[ ${PV} == 9999* ]]; then
 else
 	SRC_URI="${CARGO_CRATE_URIS}"
 	SRC_URI+="https://github.com/containers/aardvark-dns/releases/download/v${PV}/${PN}-v${PV}-vendor.tar.gz"
-	KEYWORDS="~amd64 ~arm64 ~loong ~ppc64 ~riscv"
+	KEYWORDS="~amd64 arm64 ~loong ~ppc64 ~riscv"
 fi
 
 # main
diff --git a/app-containers/netavark/netavark-1.17.1.ebuild b/app-containers/netavark/netavark-1.17.1.ebuild
index c0d9aae5fdada..2be86096100b8 100644
--- a/app-containers/netavark/netavark-1.17.1.ebuild
+++ b/app-containers/netavark/netavark-1.17.1.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2025 Gentoo Authors
+# Copyright 1999-2026 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=8
@@ -16,7 +16,7 @@ if [[ ${PV} == 9999* ]]; then
 	EGIT_REPO_URI="https://github.com/containers/netavark.git"
 else
 	SRC_URI="${CARGO_CRATE_URIS} https://github.com/containers/netavark/releases/download/v${PV}/${PN}-v${PV}-vendor.tar.gz"
-	KEYWORDS="~amd64 ~arm64 ~loong ~ppc64 ~riscv"
+	KEYWORDS="~amd64 arm64 ~loong ~ppc64 ~riscv"
 fi
 
 # main
diff --git a/app-containers/podman/podman-5.7.1.ebuild b/app-containers/podman/podman-5.7.1.ebuild
index 36c6887628c5f..771c3a6b05c83 100644
--- a/app-containers/podman/podman-5.7.1.ebuild
+++ b/app-containers/podman/podman-5.7.1.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2025 Gentoo Authors
+# Copyright 1999-2026 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=8
@@ -17,7 +17,7 @@ else
 	SRC_URI="https://github.com/containers/podman/archive/v${PV/_rc/-rc}.tar.gz -> ${P}.tar.gz"
 	S="${WORKDIR}/${P/_rc/-rc}"
 	[[ ${PV} != *rc* ]] && \
-		KEYWORDS="~amd64 ~arm64 ~loong ~riscv"
+		KEYWORDS="~amd64 arm64 ~loong ~riscv"
 fi
 
 # main pkg
diff --git a/app-doc/python-docs/python-docs-3.13.11.ebuild b/app-doc/python-docs/python-docs-3.13.11.ebuild
index 905686f2a8ea2..dcbeb9c2b0bbb 100644
--- a/app-doc/python-docs/python-docs-3.13.11.ebuild
+++ b/app-doc/python-docs/python-docs-3.13.11.ebuild
@@ -11,7 +11,7 @@ S=${WORKDIR}/${MY_P}
 
 LICENSE="PSF-2"
 SLOT="$(ver_cut 1-2)"
-KEYWORDS="~alpha amd64 ~arm arm64 ~hppa ~m68k ~mips ppc ppc64 ~s390 ~sparc x86"
+KEYWORDS="~alpha amd64 arm arm64 ~hppa ~m68k ~mips ppc ppc64 ~s390 ~sparc x86"
 
 src_install() {
 	rm -r _sources || die
diff --git a/app-editors/featherpad/featherpad-1.6.3.ebuild b/app-editors/featherpad/featherpad-1.6.3.ebuild
index ae8199d77ce67..a04a22287bbc0 100644
--- a/app-editors/featherpad/featherpad-1.6.3.ebuild
+++ b/app-editors/featherpad/featherpad-1.6.3.ebuild
@@ -12,7 +12,7 @@ S="${WORKDIR}/FeatherPad-${PV}"
 
 LICENSE="GPL-3+"
 SLOT="0"
-KEYWORDS="~amd64 ~arm ~arm64 ~ppc ~ppc64 ~riscv ~x86"
+KEYWORDS="~amd64 ~arm arm64 ~ppc ~ppc64 ~riscv ~x86"
 IUSE="+X"
 
 RDEPEND="
diff --git a/app-misc/fastfetch/fastfetch-2.56.1.ebuild b/app-misc/fastfetch/fastfetch-2.56.1.ebuild
index 372fe2dc0a47a..2a038c1416890 100644
--- a/app-misc/fastfetch/fastfetch-2.56.1.ebuild
+++ b/app-misc/fastfetch/fastfetch-2.56.1.ebuild
@@ -15,7 +15,7 @@ if [[ ${PV} == *9999 ]]; then
 	[[ "${EGIT_BRANCH}" == "" ]] && die "Please set a git branch"
 else
 	SRC_URI="https://github.com/fastfetch-cli/fastfetch/archive/refs/tags/${PV}.tar.gz -> ${P}.tar.gz"
-	KEYWORDS="amd64 ~arm ~arm64 ~loong ~ppc ppc64 ~riscv ~sparc ~x86"
+	KEYWORDS="amd64 ~arm arm64 ~loong ~ppc ppc64 ~riscv ~sparc ~x86"
 fi
 
 LICENSE="MIT"
diff --git a/app-shells/pwsh/pwsh-7.5.4-r2.ebuild b/app-shells/pwsh/pwsh-7.5.4-r2.ebuild
index afadb87ef6e4a..b07a316761662 100644
--- a/app-shells/pwsh/pwsh-7.5.4-r2.ebuild
+++ b/app-shells/pwsh/pwsh-7.5.4-r2.ebuild
@@ -172,7 +172,7 @@ SRC_URI="
 
 LICENSE="MIT"
 SLOT="$(ver_cut 1-2)"
-KEYWORDS="amd64 ~arm ~arm64"
+KEYWORDS="amd64 arm arm64"
 IUSE="gui vanilla"
 
 RDEPEND="
diff --git a/dev-java/log4j-api/log4j-api-2.25.2.ebuild b/dev-java/log4j-api/log4j-api-2.25.2.ebuild
index ff125bffa0887..83ac633d7aa43 100644
--- a/dev-java/log4j-api/log4j-api-2.25.2.ebuild
+++ b/dev-java/log4j-api/log4j-api-2.25.2.ebuild
@@ -15,7 +15,7 @@ SRC_URI="mirror://apache/logging/log4j/${PV}/apache-log4j-${PV}-src.zip
 
 LICENSE="Apache-2.0"
 SLOT="0"
-KEYWORDS="amd64 ~arm64 ppc64"
+KEYWORDS="amd64 arm64 ppc64"
 RESTRICT="test"	# Too many test-dependencies not packaged.
 
 BDEPEND="
diff --git a/dev-java/plexus-classworlds/plexus-classworlds-2.9.0.ebuild b/dev-java/plexus-classworlds/plexus-classworlds-2.9.0.ebuild
index 9d8683ce74673..30d525899db4a 100644
--- a/dev-java/plexus-classworlds/plexus-classworlds-2.9.0.ebuild
+++ b/dev-java/plexus-classworlds/plexus-classworlds-2.9.0.ebuild
@@ -15,7 +15,7 @@ S="${WORKDIR}/${PN}-${P}"
 
 LICENSE="Apache-2.0"
 SLOT="0"
-KEYWORDS="amd64 ~arm64 ppc64"
+KEYWORDS="amd64 arm64 ppc64"
 
 DEPEND="
 	>=virtual/jdk-1.8:*
diff --git a/dev-lang/python/python-3.13.11.ebuild b/dev-lang/python/python-3.13.11.ebuild
index 3414a23add7d6..ba9ad75214dd4 100644
--- a/dev-lang/python/python-3.13.11.ebuild
+++ b/dev-lang/python/python-3.13.11.ebuild
@@ -32,7 +32,7 @@ S="${WORKDIR}/${MY_P}"
 
 LICENSE="PSF-2"
 SLOT="${PYVER}"
-KEYWORDS="~alpha amd64 ~arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86"
+KEYWORDS="~alpha amd64 arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86"
 IUSE="
 	bluetooth debug +ensurepip examples gdbm jit libedit +ncurses pgo
 	+readline +sqlite +ssl test tk valgrind
diff --git a/dev-python/python-tests/python-tests-3.13.11.ebuild b/dev-python/python-tests/python-tests-3.13.11.ebuild
index 8c534f1e322de..39f605f6e0b76 100644
--- a/dev-python/python-tests/python-tests-3.13.11.ebuild
+++ b/dev-python/python-tests/python-tests-3.13.11.ebuild
@@ -28,7 +28,7 @@ S="${WORKDIR}/${MY_P}/Lib"
 
 LICENSE="PSF-2"
 SLOT="${PYVER}"
-KEYWORDS="~alpha amd64 ~arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86"
+KEYWORDS="~alpha amd64 arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86"
 # enable by default to help CI handle it (we have no additional deps)
 IUSE="+python_targets_${PYTHON_COMPAT[0]}"
 REQUIRED_USE="${PYTHON_REQUIRED_USE}"
diff --git a/kde-plasma/plasma-vault/plasma-vault-6.5.5-r2.ebuild b/kde-plasma/plasma-vault/plasma-vault-6.5.5-r2.ebuild
new file mode 100644
index 0000000000000..900f53a63cc95
--- /dev/null
+++ b/kde-plasma/plasma-vault/plasma-vault-6.5.5-r2.ebuild
@@ -0,0 +1,79 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+KFMIN=6.22.0
+QTMIN=6.10.1
+inherit ecm flag-o-matic plasma.kde.org xdg
+
+DESCRIPTION="Plasma applet and services for creating encrypted vaults"
+HOMEPAGE+=" https://cukic.co/2017/02/03/vaults-encryption-in-plasma/"
+
+LICENSE="LGPL-3"
+SLOT="6"
+KEYWORDS="amd64 ~arm64 ~ppc64 ~riscv ~x86"
+IUSE="networkmanager"
+
+DEPEND="
+	>=dev-qt/qtbase-${QTMIN}:6[dbus,gui,widgets]
+	>=dev-qt/qtdeclarative-${QTMIN}:6
+	>=kde-frameworks/kcodecs-${KFMIN}:6
+	>=kde-frameworks/kconfig-${KFMIN}:6
+	>=kde-frameworks/kcoreaddons-${KFMIN}:6
+	>=kde-frameworks/kdbusaddons-${KFMIN}:6
+	>=kde-frameworks/ki18n-${KFMIN}:6
+	>=kde-frameworks/kio-6.22.1:6
+	>=kde-frameworks/kitemmodels-${KFMIN}:6
+	>=kde-frameworks/kservice-${KFMIN}:6
+	>=kde-plasma/libksysguard-${KDE_CATV}:6
+	>=kde-plasma/libplasma-${KDE_CATV}:6
+	>=kde-plasma/plasma-activities-${KDE_CATV}:6=
+	networkmanager? ( >=kde-frameworks/networkmanager-qt-${KFMIN}:6 )
+"
+RDEPEND="${DEPEND}
+	>=app-crypt/gocryptfs-1.8
+"
+
+pkg_pretend() {
+	if [[ -n "${REPLACING_VERSIONS}" ]] && ! has_version app-crypt/gocryptfs; then
+		ewarn "${CATEGORY}/${PN} now depends on app-crypt/gocryptfs exclusively."
+		ewarn "If you still use deprecated CryFS or EncFS, you must put them in @world."
+	fi
+}
+
+src_configure() {
+	# ODR violations (bug #909446, kde#471836)
+	filter-lto
+
+	local mycmakeargs=(
+		$(cmake_use_find_package networkmanager KF6NetworkManagerQt)
+	)
+
+	ecm_src_configure
+}
+
+pkg_postinst() {
+	xdg_pkg_postinst
+
+	local has_deprecated_backend
+	dropping_backend() {
+		if has_version ${2}; then
+			elog "${CATEGORY}/${PN} will drop support for ${1} in the future."
+			elog "Migrate away from any ${2} vaults before that happens."
+			elog
+			has_deprecated_backend=1
+		fi
+	}
+
+	dropping_backend CryFS sys-fs/cryfs
+	dropping_backend EncFS sys-fs/encfs
+
+	if [[ has_deprecated_backend ]]; then
+		elog "The only supported backend going forward will be app-crypt/gocryptfs."
+		elog
+		elog "See also:"
+		elog "https://invent.kde.org/plasma/plasma-vault/-/merge_requests/57"
+		elog "https://invent.kde.org/plasma/plasma-vault/-/merge_requests/62"
+	fi
+}
diff --git a/net-mail/dovecot/dovecot-2.4.2-r2.ebuild b/net-mail/dovecot/dovecot-2.4.2-r2.ebuild
index 8f126fcd50254..4c55d80203fe1 100644
--- a/net-mail/dovecot/dovecot-2.4.2-r2.ebuild
+++ b/net-mail/dovecot/dovecot-2.4.2-r2.ebuild
@@ -25,7 +25,7 @@ S="${WORKDIR}/${MY_P}"
 PIEGONHOLE_S="../dovecot-pigeonhole-${MY_PV}"
 LICENSE="LGPL-2.1 MIT"
 SLOT="0/${PV}"
-KEYWORDS="amd64 ~arm ~arm64 ~hppa ~mips ~ppc ~ppc64 ~riscv ~sparc ~x86"
+KEYWORDS="amd64 ~arm arm64 ~hppa ~mips ~ppc ~ppc64 ~riscv ~sparc ~x86"
 
 IUSE_DOVECOT_AUTH_DICT="cdb kerberos ldap lua mysql pam postgres sqlite"
 IUSE_DOVECOT_COMPRESS="lz4 zstd"
diff --git a/net-misc/nextcloud-client/nextcloud-client-4.0.4.ebuild b/net-misc/nextcloud-client/nextcloud-client-4.0.4.ebuild
index e021cc6025199..ddae967e68d94 100644
--- a/net-misc/nextcloud-client/nextcloud-client-4.0.4.ebuild
+++ b/net-misc/nextcloud-client/nextcloud-client-4.0.4.ebuild
@@ -15,7 +15,7 @@ S="${WORKDIR}/desktop-${PV/_/-}"
 
 LICENSE="CC-BY-3.0 GPL-2"
 SLOT="0"
-KEYWORDS="amd64 ~arm64 ~ppc64 ~x86"
+KEYWORDS="amd64 arm64 ~ppc64 ~x86"
 IUSE="dolphin nautilus test webengine"
 RESTRICT="!test? ( test )"
 
diff --git a/sys-kernel/raspberrypi-sources/raspberrypi-sources-6.12.47_p20250916.ebuild b/sys-kernel/raspberrypi-sources/raspberrypi-sources-6.12.47_p20250916.ebuild
index 8eb79206eb5f4..03143a02fbc10 100644
--- a/sys-kernel/raspberrypi-sources/raspberrypi-sources-6.12.47_p20250916.ebuild
+++ b/sys-kernel/raspberrypi-sources/raspberrypi-sources-6.12.47_p20250916.ebuild
@@ -1,4 +1,4 @@
-# Copyright 1999-2025 Gentoo Authors
+# Copyright 1999-2026 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=8
@@ -29,7 +29,7 @@ SRC_URI="
 	${GENPATCHES_URI}
 "
 
-KEYWORDS="~arm ~arm64"
+KEYWORDS="arm arm64"
 
 PATCHES=("${FILESDIR}"/${PN}-6.1.21-gentoo-kconfig.patch)