Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 150.0.7871.114 to 150.0.7871.124. No sources, checksums, build steps, install scripts, permissions, or package metadata affecting trust boundaries were changed in the provided diff. On its face this is a routine upstream version update with no security red flags visible in the reviewed hunk.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome
 	pkgdesc = The popular web browser by Google (Stable Channel)
-	pkgver = 150.0.7871.114
+	pkgver = 150.0.7871.124
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome.install

Comment

The change only updates the pinned Google Chrome upstream .deb URL from 150.0.7871.114-1 to 150.0.7871.124-1 and refreshes the corresponding sha512 checksum in .SRCINFO. This is a routine version bump with no new sources, no build-script changes, no added network fetches beyond the existing official dl.google.com download, and no packaging/persistence red flags visible in the diff. Risk is low.

@@ -20,10 +20,10 @@ pkgbase = google-chrome
 	optdepends = kwallet: for storing passwords in KWallet
 	options = !emptydirs
 	options = !strip
-	source = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_150.0.7871.114-1_amd64.deb
+	source = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_150.0.7871.124-1_amd64.deb
 	source = eula_text.html
 	source = google-chrome-stable.sh
-	sha512sums = d9db8b204380b384df25d1eaf36c51d5d29c263c061973f37bd3389ba1ce9afc0d4dfc469cfaccd6dc6ac40d3f7871320cfe9d8c49826e3e3e12cf2baf865095
+	sha512sums = 711e74171beed23affd6c6b6283370545c6530710e3242242cbc997612d0be243480d3c0ec797e5f0ff541ab80b2a7d596f2abdf709a8c8e3ae1caf7813a953e
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94
 

Comment

The change is a straightforward version bump in PKGBUILD from 150.0.7871.114 to 150.0.7871.124 with no accompanying changes to sources, build logic, install scripts, or packaging metadata. Based on the provided diff, there are no new supply-chain, persistence, privilege-escalation, or integrity red flags introduced by this commit.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-stable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome
-pkgver=150.0.7871.114
+pkgver=150.0.7871.124
 pkgrel=1
 pkgdesc="The popular web browser by Google (Stable Channel)"
 arch=('x86_64')

Comment

The change is a routine upstream version bump for the Google Chrome binary package, with the corresponding SHA-512 checksum updated for the downloaded .deb. The source remains the official HTTPS dl.google.com URL, there are no new build-time downloads, scripts, patches, privilege changes, or packaging behavior changes in this diff. Risk is therefore minimal.

@@ -35,7 +35,7 @@ _channel=stable
 source=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb"
 	'eula_text.html'
 	"google-chrome-$_channel.sh")
-sha512sums=('d9db8b204380b384df25d1eaf36c51d5d29c263c061973f37bd3389ba1ce9afc0d4dfc469cfaccd6dc6ac40d3f7871320cfe9d8c49826e3e3e12cf2baf865095'
+sha512sums=('711e74171beed23affd6c6b6283370545c6530710e3242242cbc997612d0be243480d3c0ec797e5f0ff541ab80b2a7d596f2abdf709a8c8e3ae1caf7813a953e'
             'a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             'de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94')