Review Results

Comment

The change is a routine version bump in .SRCINFO from 150.0.4078.48 to 150.0.4078.65 with no alteration to sources, checksums, build steps, install scripts, or package metadata beyond pkgver. On its face this does not introduce any new attack surface or packaging red flags. Risk is therefore minimal.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 150.0.4078.48
+	pkgver = 150.0.4078.65
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change is a routine upstream version bump for the prebuilt Microsoft Edge .deb in .SRCINFO, with the source URL staying on the official Microsoft packages domain and the checksum updated accordingly. No new sources, scripts, install-time actions, or packaging behavior are introduced by this diff. Risk is low and limited to the usual trust inherent in a binary package from upstream.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_150.0.4078.48-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_150.0.4078.65-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 6c091da6c061b83b4ab0e3a9946127dc91ae8f3a0632c4e1c0b6d5e31775f4b5
+	sha256sums = 9adf1fc7a8091393c616230b79c789e6b98b9b09905dac71ed563cc8f210ab21
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change is a routine version bump in PKGBUILD from 150.0.4078.48 to 150.0.4078.65 with no other metadata, source, build, or install-script changes shown. On its face this does not introduce new execution paths, privilege changes, network behavior, or integrity regressions. I see no security concern in the provided diff hunk alone.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=150.0.4078.48
+pkgver=150.0.4078.65
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change only updates the SHA-256 checksum for the Microsoft Edge .deb source package. The source URL remains HTTPS and points to the official Microsoft repository, with no new build-time execution, no added sources, and no packaging/script changes. This looks like a routine upstream package refresh rather than a security-relevant modification.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('6c091da6c061b83b4ab0e3a9946127dc91ae8f3a0632c4e1c0b6d5e31775f4b5'
+sha256sums=('9adf1fc7a8091393c616230b79c789e6b98b9b09905dac71ed563cc8f210ab21'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')