Review Results

Comment

The only change in the provided hunk is a version bump in .SRCINFO from 17.6.0 to 17.8.0. This metadata file does not contain executable logic, and the diff shown does not introduce new sources, build steps, install scripts, permissions changes, or other security-relevant behavior. Based on this hunk alone, there is no evidence of supply-chain risk or malicious behavior.

@@ -1,6 +1,6 @@
 pkgbase = ocrmypdf
 	pkgdesc = A tool to add an OCR text layer to scanned PDF files, allowing them to be searched
-	pkgver = 17.6.0
+	pkgver = 17.8.0
 	pkgrel = 1
 	url = https://github.com/ocrmypdf/OCRmyPDF
 	install = ocrmypdf.install

Comment

The change is a straightforward version bump in .SRCINFO from ocrmypdf 17.6.0 to 17.8.0, with the source URL and SHA256 updated accordingly. The source remains on files.pythonhosted.org over HTTPS, and there are no new build-time commands, extra sources, or packaging/persistence changes in this diff. Based on the provided hunk alone, this looks low risk.

@@ -30,7 +30,7 @@ pkgbase = ocrmypdf
 	depends = python-uharfbuzz
 	depends = python-fpdf2
 	optdepends = jbig2enc: Better compression algorithm; results in smaller PDF files
-	source = https://files.pythonhosted.org/packages/source/o/ocrmypdf/ocrmypdf-17.6.0.tar.gz
-	sha256sums = 2ae7b09363774f0b4ae786520980e168c4dfafd3c43556dc123db0041c68ed43
+	source = https://files.pythonhosted.org/packages/source/o/ocrmypdf/ocrmypdf-17.8.0.tar.gz
+	sha256sums = c36d9e53c93ef3c3fd41f283cffce20626ee39a7cc0ff4c2bf484a03634a114c
 
 pkgname = ocrmypdf

Comment

The change only bumps pkgver from 17.6.0 to 17.8.0 in PKGBUILD. No source URLs, checksums, build steps, install scripts, permissions, or package metadata were altered in the provided hunk. On its face this is a routine version update with no security-relevant behavior change visible in the diff.

@@ -5,7 +5,7 @@
 # Contributor: Daniel Reuter <daniel.robin.reuter@googlemail.com>
 
 pkgname=ocrmypdf
-pkgver=17.6.0
+pkgver=17.8.0
 pkgrel=1
 pkgdesc="A tool to add an OCR text layer to scanned PDF files, allowing them to be searched"
 url="https://github.com/ocrmypdf/OCRmyPDF"

Comment

The change only updates the SHA-256 checksum for the upstream source tarball in PKGBUILD. The source URL remains the official files.pythonhosted.org release tarball over HTTPS, and there are no changes to build commands, install scripts, dependencies, or any added execution paths. This is a normal versioned integrity update with no security red flags in the diff provided.

@@ -17,7 +17,7 @@ depends=('python>=3.9' 'img2pdf' 'python-pillow' 'tesseract' 'ghostscript' 'unpa
 makedepends=('python-hatch-vcs' 'python-build' 'python-installer' 'python-wheel')
 optdepends=('jbig2enc: Better compression algorithm; results in smaller PDF files')
 source=("https://files.pythonhosted.org/packages/source/${pkgname::1}/$pkgname/$pkgname-$pkgver.tar.gz")
-sha256sums=('2ae7b09363774f0b4ae786520980e168c4dfafd3c43556dc123db0041c68ed43')
+sha256sums=('c36d9e53c93ef3c3fd41f283cffce20626ee39a7cc0ff4c2bf484a03634a114c')
 install="${pkgname}.install"
 
 build() {