Signing keyrings refresh only for a newer package
pull request 15034, merged into quattro, refreshes the signing keyrings only when a newer package is out, instead of reinstalling them on every update. The merge is not in version 4.0.4.
Every update had been reinstalling archlinux-keyring and the platform keyrings, and that reinstall ran the package's trust update again. The merged update asks pacman to skip a package that is already current. David Heinemeier Hansson said that reinstall was about 2s per update, more on a slower machine.
The pull request says a repository entry is keyed by version, so new or revoked keys still arrive as a new package version, and the skip does not drop that version. The keyring step still syncs before the main upgrade. David Heinemeier Hansson opened and merged the change.