Review Results

Comment

The change is a straightforward version bump in .SRCINFO from dxvk 3.0.1 to 3.0.2, updating the release tarball URL and corresponding checksum, plus the provided virtual package version. The source remains an HTTPS GitHub release asset from the upstream project, and there are no new build-time commands, install scripts, or packaging directives introduced in this diff. No integrity or persistence red flags are present in the reviewed hunk.

@@ -1,19 +1,19 @@
 pkgbase = dxvk-bin
 	pkgdesc = A Vulkan-based compatibility layer for Direct3D 9/10/11 which allows running 3D applications on Linux using Wine (Windows DLL binary files)
-	pkgver = 3.0.1
+	pkgver = 3.0.2
 	pkgrel = 1
 	url = https://github.com/doitsujin/dxvk
 	arch = x86_64
 	license = zlib/libpng
 	provides = dxvk
 	provides = d9vk
-	provides = dxvk=3.0.1
+	provides = dxvk=3.0.2
 	conflicts = dxvk
 	conflicts = d9vk
 	options = !strip
-	source = https://github.com/doitsujin/dxvk/releases/download/v3.0.1/dxvk-3.0.1.tar.gz
+	source = https://github.com/doitsujin/dxvk/releases/download/v3.0.2/dxvk-3.0.2.tar.gz
 	source = setup_dxvk.sh
-	sha256sums = bebb6284db590535b7b005c102ebf6850c98842cff0fded9aacb74babae14c49
+	sha256sums = 9c538924110a7cdef871ca36dee218c0774124374ffdeb38af4b76be55bdf7c2
 	sha256sums = 2ca9ece1b6c36446e9f6955d3d03ab72b173c8f85539a2848febc51b38be705e
 
 pkgname = dxvk-bin

Comment

The change is a simple version bump in PKGBUILD from 3.0.1 to 3.0.2 with no accompanying changes to source URLs, build logic, install scripts, permissions, or dependencies in the provided diff hunk. On its face this does not introduce any new security risk. I did not see evidence in the reviewed change of network-at-build, privilege escalation, persistence, or integrity issues.

@@ -3,7 +3,7 @@
 
 pkgbase=dxvk-bin
 pkgname=('dxvk-bin')
-pkgver=3.0.1
+pkgver=3.0.2
 pkgrel=1
 pkgdesc="A Vulkan-based compatibility layer for Direct3D 9/10/11 which allows running 3D applications on Linux using Wine (Windows DLL binary files)"
 url="https://github.com/doitsujin/dxvk"

Comment

The change is a straightforward version bump from dxvk 3.0.1 to 3.0.2 with an updated SHA-256 for the upstream release tarball. The source remains the official GitHub release URL over HTTPS, and there are no new build-time downloads, scripts, privilege changes, or packaging logic changes in this hunk. No security concerns are evident from the diff provided.

@@ -15,7 +15,7 @@ options=(!strip)
 source=("https://github.com/doitsujin/dxvk/releases/download/v$pkgver/dxvk-$pkgver.tar.gz"
 "setup_dxvk.sh"
 )
-sha256sums=('bebb6284db590535b7b005c102ebf6850c98842cff0fded9aacb74babae14c49'
+sha256sums=('9c538924110a7cdef871ca36dee218c0774124374ffdeb38af4b76be55bdf7c2'
             '2ca9ece1b6c36446e9f6955d3d03ab72b173c8f85539a2848febc51b38be705e')
 
 package_dxvk-bin () {