Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 17.8.0 to 17.8.1. No sources, checksums, build steps, dependencies, install scripts, or packaging behavior changed in the provided diff, so there is no new security concern visible here.

@@ -1,6 +1,6 @@
 pkgbase = ocrmypdf
 	pkgdesc = A tool to add an OCR text layer to scanned PDF files, allowing them to be searched
-	pkgver = 17.8.0
+	pkgver = 17.8.1
 	pkgrel = 1
 	url = https://github.com/ocrmypdf/OCRmyPDF
 	install = ocrmypdf.install

Comment

The change is a straightforward upstream version bump in .SRCINFO from ocrmypdf 17.8.0 to 17.8.1, with the source URL still using HTTPS on files.pythonhosted.org and the checksum updated accordingly. No new sources, build steps, install scripts, or packaging metadata red flags are introduced by this diff. Based on the provided hunk alone, this appears low risk.

@@ -30,7 +30,7 @@ pkgbase = ocrmypdf
 	depends = python-uharfbuzz
 	depends = python-fpdf2
 	optdepends = jbig2enc: Better compression algorithm; results in smaller PDF files
-	source = https://files.pythonhosted.org/packages/source/o/ocrmypdf/ocrmypdf-17.8.0.tar.gz
-	sha256sums = c36d9e53c93ef3c3fd41f283cffce20626ee39a7cc0ff4c2bf484a03634a114c
+	source = https://files.pythonhosted.org/packages/source/o/ocrmypdf/ocrmypdf-17.8.1.tar.gz
+	sha256sums = 6f72e4da5fd7805e5d677c0fc55ad380c70e1c7ad33dd9ce2402575194803e08
 
 pkgname = ocrmypdf

Comment

The change is a version bump in PKGBUILD from 17.8.0 to 17.8.1 with no other modifications. There are no new sources, build steps, install scripts, permissions changes, or packaging logic introduced in the reviewed hunk. Based on the provided diff, this is low risk and does not indicate a supply-chain or privilege-escalation issue.

@@ -5,7 +5,7 @@
 # Contributor: Daniel Reuter <daniel.robin.reuter@googlemail.com>
 
 pkgname=ocrmypdf
-pkgver=17.8.0
+pkgver=17.8.1
 pkgrel=1
 pkgdesc="A tool to add an OCR text layer to scanned PDF files, allowing them to be searched"
 url="https://github.com/ocrmypdf/OCRmyPDF"

Comment

The change only updates the SHA-256 checksum for the upstream source tarball in PKGBUILD. The source URL remains the official PyPI files.pythonhosted.org HTTPS endpoint, and there are no new build steps, scripts, network fetches, privilege changes, or packaging behavior changes. This is a routine integrity update for a versioned source archive and does not introduce an obvious security concern in the diff shown.

@@ -17,7 +17,7 @@ depends=('python>=3.9' 'img2pdf' 'python-pillow' 'tesseract' 'ghostscript' 'unpa
 makedepends=('python-hatch-vcs' 'python-build' 'python-installer' 'python-wheel')
 optdepends=('jbig2enc: Better compression algorithm; results in smaller PDF files')
 source=("https://files.pythonhosted.org/packages/source/${pkgname::1}/$pkgname/$pkgname-$pkgver.tar.gz")
-sha256sums=('c36d9e53c93ef3c3fd41f283cffce20626ee39a7cc0ff4c2bf484a03634a114c')
+sha256sums=('6f72e4da5fd7805e5d677c0fc55ad380c70e1c7ad33dd9ce2402575194803e08')
 install="${pkgname}.install"
 
 build() {