Review Results

Comment

The change is a straightforward version bump in .SRCINFO from 3.6.1.85592 to 3.6.2.85969, with the corresponding JetBrains download URL and b2sum updated. The source remains an HTTPS URL on the official JetBrains domain, and there are no new scripts, patches, binaries, or packaging logic changes in this diff. Based on the provided hunk alone, I see no security red flags.

@@ -1,6 +1,6 @@
 pkgbase = jetbrains-toolbox
 	pkgdesc = Manage all your JetBrains Projects and Tools
-	pkgver = 3.6.1.85592
+	pkgver = 3.6.2.85969
 	pkgrel = 1
 	url = https://www.jetbrains.com/toolbox/
 	arch = x86_64

Comment

The change is a straightforward version bump in .SRCINFO from JetBrains Toolbox 3.6.1.85592 to 3.6.2.85969, with the corresponding upstream HTTPS source URL and updated b2sum. No new sources, no build-script changes, no install hooks, and no suspicious metadata were introduced in this diff. Based on the provided hunk alone, this looks like a routine upstream update with low security risk.

@@ -16,11 +16,11 @@ pkgbase = jetbrains-toolbox
 	optdepends = xdg-utils: open URLs
 	options = !strip
 	options = !debug
-	source = https://download.jetbrains.com/toolbox/jetbrains-toolbox-3.6.1.85592.tar.gz
+	source = https://download.jetbrains.com/toolbox/jetbrains-toolbox-3.6.2.85969.tar.gz
 	source = jetbrains-toolbox.desktop
 	source = icon.svg
 	source = LICENSE
-	b2sums = 56e3b89fab99ac03ee46a7ae4a91fbf189ff369180bf303663f5b9bdce09d4db33fde4bd2ff03fcf55c4b6ed4a2e814a57a23767d79f6dcd4b67d77c17cfbf4f
+	b2sums = 2d70c3e36d8a92503032ae7a8d07f66c30223dd3550b03efec5e7bd49c230ccd1af43a9fae347d632e01998ac4c619de22a90b4f9a58f74fff553680aac6fafe
 	b2sums = 29b6d4be91d9276bce9e5413fb877db82de414198e343ff3f7aa5d03f65cf42c80f78ec3b43f601394fecc6a31712d1c475f3fdec71e51be5732ec7b1eb8dca9
 	b2sums = 4b10487746fcb7f328cbdc8b17432f82618c5695baee4ef30e23ff3c4d4b6096daf2fcdfb4c1e2e179e2e61f68bbd88104e5df5a2e6e969aad0a68a75cfff496
 	b2sums = dadaf0e67b598aa7a7a4bf8644943a7ee8ebf4412abb17cd307f5989e36caf9d0db529a0e717a9df5d9537b10c4b13e814b955ada6f0d445913c812b63804e77

Comment

The change is a straightforward version bump in PKGBUILD from 3.6.1.85592 to 3.6.2.85969, with the corresponding source checksum updated. No new sources, build steps, install scripts, permissions changes, or other suspicious packaging behavior were introduced in this diff. Risk is low and limited to the usual trust in the upstream JetBrains release artifact.

@@ -1,7 +1,7 @@
 # Maintainer: Frederik Schwan <freswa at archlinux dot org>
 
 pkgname=jetbrains-toolbox
-pkgver=3.6.1.85592
+pkgver=3.6.2.85969
 pkgrel=1
 pkgdesc='Manage all your JetBrains Projects and Tools'
 arch=('x86_64' 'i686')

Comment

The change is a routine version bump for JetBrains Toolbox from 3.6.1.85592 to 3.6.2.85969 with the corresponding B2 checksum update for the upstream tarball. No new sources, scripts, install hooks, privilege changes, or packaging logic were introduced. Based on the diff shown, there are no security red flags beyond the normal trust in the upstream release and checksum update.

@@ -22,7 +22,7 @@ source=("https://download.jetbrains.com/toolbox/${pkgname}-${pkgver}.tar.gz"
         jetbrains-toolbox.desktop
         icon.svg
         LICENSE)
-b2sums=('56e3b89fab99ac03ee46a7ae4a91fbf189ff369180bf303663f5b9bdce09d4db33fde4bd2ff03fcf55c4b6ed4a2e814a57a23767d79f6dcd4b67d77c17cfbf4f'
+b2sums=('2d70c3e36d8a92503032ae7a8d07f66c30223dd3550b03efec5e7bd49c230ccd1af43a9fae347d632e01998ac4c619de22a90b4f9a58f74fff553680aac6fafe'
         '29b6d4be91d9276bce9e5413fb877db82de414198e343ff3f7aa5d03f65cf42c80f78ec3b43f601394fecc6a31712d1c475f3fdec71e51be5732ec7b1eb8dca9'
         '4b10487746fcb7f328cbdc8b17432f82618c5695baee4ef30e23ff3c4d4b6096daf2fcdfb4c1e2e179e2e61f68bbd88104e5df5a2e6e969aad0a68a75cfff496'
         'dadaf0e67b598aa7a7a4bf8644943a7ee8ebf4412abb17cd307f5989e36caf9d0db529a0e717a9df5d9537b10c4b13e814b955ada6f0d445913c812b63804e77')