Review Results

Comment

The diff only updates generated metadata in .SRCINFO: timestamp and pkgver from 8.1.4087.40 to 8.2.4106.4. No build logic, sources, checksums, install scripts, or permissions changed in the reviewed hunk, so there is no direct security impact visible here. The only caveat is that .SRCINFO must stay in sync with PKGBUILD, but this snippet alone does not introduce any new attack surface.

@@ -1,8 +1,8 @@
 # Generated by makepkg 7.1.0
-# Mon Jul  6 09:10:34 UTC 2026
+# Thu Jul 16 16:11:40 UTC 2026
 pkgbase = vivaldi-snapshot
 	pkgdesc = An advanced browser made with the power user in mind. Snapshot
-	pkgver = 8.1.4087.40
+	pkgver = 8.2.4106.4
 	pkgrel = 1
 	url = https://vivaldi.com
 	arch = x86_64

Comment

The change only updates the upstream Vivaldi snapshot RPM URL and its corresponding SHA-512 checksum in .SRCINFO. The source remains HTTPS on the official Vivaldi download domain, and there are no new build-time commands, scripts, or privilege-related changes introduced by this diff. This looks like a routine version bump with integrity metadata updated accordingly, so I see no security concern in the reviewed hunk.

@@ -36,9 +36,9 @@ pkgbase = vivaldi-snapshot
 	optdepends = upower: Battery Status API support
 	options = !strip
 	options = !zipman
-	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.1.4087.40-1.x86_64.rpm
+	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.2.4106.4-1.x86_64.rpm
 	source = 0001-add-support-for-user-flags.patch
-	sha512sums = 1ae6241753c908f0e85164cdc6b452fc4dc4d7f8f5329d80589964f7677506b9be09ea5aa494ac1a5757010dd9e3eb15fc045cebb55da42d1c849d151f4d519a
+	sha512sums = 2612e5e88a30bc6122a28ae17311ce9b66d2fe03016145548decb2f275558241e9654084fc27c284beec9c988d5054b488635a9ce7228733e2eab64a0d28303c
 	sha512sums = a9bdab0fb0f394af17d1b126bae2d0cdc55e63eaa6eaf36eb994735047d3d7bc5000d75ab930f74b76b283c5addefbd4e4e63c5e4f2908bd53c270e73641c19d
 
 pkgname = vivaldi-snapshot

Comment

The change is a straightforward version bump in PKGBUILD from Vivaldi Snapshot 8.1.4087.40 to 8.2.4106.4, with no added sources, build steps, install scripts, permissions changes, or other packaging logic changes. I do not see any integrity, execution, or persistence red flags in this diff hunk itself.

@@ -2,8 +2,8 @@
 # Contributor: TZ86
 
 pkgname=vivaldi-snapshot
-_rpmversion=8.1.4087.40-1
-pkgver=8.1.4087.40
+_rpmversion=8.2.4106.4-1
+pkgver=8.2.4106.4
 pkgrel=1
 pkgdesc='An advanced browser made with the power user in mind. Snapshot'
 url="https://vivaldi.com"

Comment

The change is limited to bumping the Vivaldi snapshot version and updating the corresponding SHA-512 checksum in PKGBUILD. The source remains the official HTTPS Vivaldi download URL, there are no new build-time commands, no added scripts, and no packaging/persistence changes. I do not see any security-relevant regression in this diff.

@@ -42,7 +42,7 @@ optdepends=(
 )
 source=("https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-${_rpmversion}.x86_64.rpm"
         '0001-add-support-for-user-flags.patch')
-sha512sums=('1ae6241753c908f0e85164cdc6b452fc4dc4d7f8f5329d80589964f7677506b9be09ea5aa494ac1a5757010dd9e3eb15fc045cebb55da42d1c849d151f4d519a'
+sha512sums=('2612e5e88a30bc6122a28ae17311ce9b66d2fe03016145548decb2f275558241e9654084fc27c284beec9c988d5054b488635a9ce7228733e2eab64a0d28303c'
             'a9bdab0fb0f394af17d1b126bae2d0cdc55e63eaa6eaf36eb994735047d3d7bc5000d75ab930f74b76b283c5addefbd4e4e63c5e4f2908bd53c270e73641c19d')
 
 package() {