Review Results

Comment

The only change in this .SRCINFO hunk is a pkgver bump from 150.0.4078.65 to 150.0.4078.80. No sources, checksums, install scripts, permissions, or build logic are modified here, so there is no new security concern visible in this diff. This looks like a routine upstream version update in the metadata only.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 150.0.4078.65
+	pkgver = 150.0.4078.80
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change only updates the pinned Microsoft Edge .deb source URL and its corresponding SHA-256 checksum in .SRCINFO, moving from one upstream release to a newer one. The source remains HTTPS on the official Microsoft package repository, and there are no new build-time commands, scripts, or privilege-related artifacts introduced by this diff. Based on the provided hunk alone, this is a routine version bump with no evident security red flags.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_150.0.4078.65-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_150.0.4078.80-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 9adf1fc7a8091393c616230b79c789e6b98b9b09905dac71ed563cc8f210ab21
+	sha256sums = e1035f7d1aea83a692e119fee86b3e5b9d5203bb655b6fcb7b3f7b8bb9f7f9e4
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change only bumps pkgver from 150.0.4078.65 to 150.0.4078.80 in PKGBUILD. No build logic, sources, checksums, install scripts, or permissions are altered, so there is no new security-relevant behavior in this diff. This appears to be a routine version update for a prebuilt binary package.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=150.0.4078.65
+pkgver=150.0.4078.80
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change only updates the SHA-256 checksum for the upstream Microsoft Edge .deb source in PKGBUILD. The source URL remains HTTPS and points to the official Microsoft package repository, and there are no new build steps, scripts, or privilege-related changes in this diff hunk. On its face this is a routine integrity pin update, not an added attack surface. The only caveat is that a checksum change should ideally correspond to an expected upstream package refresh, but there is no evidence here of malicious behavior.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('9adf1fc7a8091393c616230b79c789e6b98b9b09905dac71ed563cc8f210ab21'
+sha256sums=('e1035f7d1aea83a692e119fee86b3e5b9d5203bb655b6fcb7b3f7b8bb9f7f9e4'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')