Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 1.1.14 to 1.3.0. No sources, checksums, build steps, install scripts, or permissions are changed here, so there is no direct security impact visible in this diff. Based on the provided hunk alone, this is low risk.

@@ -1,6 +1,6 @@
 pkgbase = zmusic
 	pkgdesc = GZDoom's music system as a standalone library
-	pkgver = 1.1.14
+	pkgver = 1.3.0
 	pkgrel = 1
 	url = https://github.com/ZDoom/ZMusic
 	arch = x86_64

Comment

The change only bumps the pinned upstream git tag in .SRCINFO from 1.1.14 to 1.3.0 while keeping the source on the official ZDoom/ZMusic GitHub repository over HTTPS. No new sources, scripts, install hooks, or packaging behavior are introduced by this diff. Based on the provided hunk alone, this is low risk.

@@ -16,7 +16,7 @@ pkgbase = zmusic
 	depends = libsndfile
 	depends = mpg123
 	optdepends = soundfont-fluid: default soundfont for FluidSynth
-	source = zmusic::git+https://github.com/ZDoom/ZMusic#tag=1.1.14
+	source = zmusic::git+https://github.com/ZDoom/ZMusic#tag=1.3.0
 	source = 0001-Use-correct-soundfont-path.patch
 	sha256sums = SKIP
 	sha256sums = 6c1b5bf589e5c36186869276ade865d35fdf860241dcd2e0f557e5a82dfd066f

Comment

The change is limited to metadata: maintainer attribution and a version bump from 1.1.14 to 1.3.0. No build logic, sources, install scripts, permissions, or network behavior changed in the provided hunk. Based on this diff alone there are no security-relevant red flags.

@@ -1,6 +1,7 @@
-# Maintainer: Jan Cholasta <grubber at grubber cz>
+# Maintainer: xente <laynepedersen at gmail dot com>
+# Contributer: Jan Cholasta <grubber at grubber cz>
 pkgname=zmusic
-pkgver=1.1.14
+pkgver=1.3.0
 pkgrel=1
 pkgdesc="GZDoom's music system as a standalone library"
 arch=('x86_64' 'aarch64')