Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 1.92.140 to 1.92.141. No new sources, build steps, dependencies, install scripts, permissions, or other packaging metadata changed in the provided diff. On its face this is a routine upstream version update with no security red flags visible in the reviewed hunk.

@@ -1,6 +1,6 @@
 pkgbase = brave-bin
 	pkgdesc = Web browser that blocks ads and trackers by default (binary release)
-	pkgver = 1.92.140
+	pkgver = 1.92.141
 	pkgrel = 1
 	epoch = 1
 	url = https://brave.com

Comment

The change is a routine version bump in .SRCINFO for brave-bin: it updates the provided version, noextract filenames, and upstream GitHub release URLs/checksums from 1.92.140 to 1.92.141. The sources remain HTTPS and point to the official Brave release assets, with no new build-time execution, install-script changes, or suspicious metadata. No security-relevant red flags are evident in this diff alone.

@@ -17,19 +17,19 @@ pkgbase = brave-bin
 	optdepends = cups: Printer support
 	optdepends = libgnome-keyring: Enable GNOME keyring support
 	optdepends = libnotify: Native notification support
-	provides = brave=1.92.140
+	provides = brave=1.92.141
 	provides = brave-browser
 	conflicts = brave
-	noextract = brave-bin-1.92.140-x86_64.zip
-	noextract = brave-bin-1.92.140-aarch64.zip
+	noextract = brave-bin-1.92.141-x86_64.zip
+	noextract = brave-bin-1.92.141-aarch64.zip
 	options = !strip
 	source = brave-bin.sh
 	source = brave-browser.desktop
 	sha256sums = 75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00
 	sha256sums = c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a
-	source_x86_64 = brave-bin-1.92.140-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.92.140/brave-browser-1.92.140-linux-amd64.zip
-	sha256sums_x86_64 = 7935abc3349424ecd7d8752ae5b0dc123afda484f90e954f02e057095feff581
-	source_aarch64 = brave-bin-1.92.140-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.92.140/brave-browser-1.92.140-linux-arm64.zip
-	sha256sums_aarch64 = f1f41b811ad33bef32f74d584c5a1b806abd029ccf15fdd45edbbbd2efd2836b
+	source_x86_64 = brave-bin-1.92.141-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.92.141/brave-browser-1.92.141-linux-amd64.zip
+	sha256sums_x86_64 = 8ae740ffd38cc33c0eb16f2f1cce89fde009deb8bb2ba2ea3e514942829ae2ab
+	source_aarch64 = brave-bin-1.92.141-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.92.141/brave-browser-1.92.141-linux-arm64.zip
+	sha256sums_aarch64 = 5cc6250d65e4750bc5744542a16527d026256910c9de30df2b9daca4e01c88d7
 
 pkgname = brave-bin

Comment

The change only bumps pkgver from 1.92.140 to 1.92.141 in PKGBUILD. No source URLs, checksums, build steps, install scripts, permissions, or package metadata beyond the version number are altered in the provided diff. On its face this is a routine upstream version update with no security-relevant red flags in the reviewed hunk.

@@ -10,7 +10,7 @@
 # Contributor: Giusy Digital <kurmikon at libero dot it>
 
 pkgname=brave-bin
-pkgver=1.92.140
+pkgver=1.92.141
 pkgrel=1
 epoch=1
 pkgdesc='Web browser that blocks ads and trackers by default (binary release)'

Comment

The change only bumps brave-bin from 1.92.140 to 1.92.141 and updates the pinned SHA-256 checksums for the prebuilt upstream ZIPs on x86_64 and aarch64. I do not see any new sources, build-time network fetches, script execution, privilege changes, or packaging logic changes. The package still downloads from the official Brave GitHub release URLs over HTTPS and verifies the archives by checksum, so this is a routine version refresh with no obvious security regression in the diff provided.

@@ -35,8 +35,8 @@ source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://github.com/brave/brave
 noextract=(${pkgname}-${pkgver}-x86_64.zip ${pkgname}-${pkgver}-aarch64.zip)
 sha256sums=('75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00'
             'c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a')
-sha256sums_x86_64=('7935abc3349424ecd7d8752ae5b0dc123afda484f90e954f02e057095feff581')
-sha256sums_aarch64=('f1f41b811ad33bef32f74d584c5a1b806abd029ccf15fdd45edbbbd2efd2836b')
+sha256sums_x86_64=('8ae740ffd38cc33c0eb16f2f1cce89fde009deb8bb2ba2ea3e514942829ae2ab')
+sha256sums_aarch64=('5cc6250d65e4750bc5744542a16527d026256910c9de30df2b9daca4e01c88d7')
 
 prepare() {
 	mkdir -p brave