AUR AI Reviewer

Review Results

Version #1803 of discord_arch_electron · commit 17174dfec552 · status Reviewed

Risk 0/5 · Safe .SRCINFO
Result #630

Comment

The only change in this .SRCINFO hunk is a version bump from 1.0.149 to 1.0.150. No sources, checksums, build steps, install scripts, or permissions are altered, and there are no new integrity or execution red flags visible in the provided diff. Based on this hunk alone, the change appears low risk.

@@ -1,6 +1,6 @@
 pkgbase = discord_arch_electron
 	pkgdesc = Discord using system provided electron for increased security and performance
-	pkgver = 1.0.149
+	pkgver = 1.0.150
 	pkgrel = 1
 	epoch = 1
 	url = https://discord.com
Risk 0/5 · Safe .SRCINFO
Result #631

Comment

This change is a routine version bump in .SRCINFO from Discord 1.0.149 to 1.0.150, updating the upstream tarball URLs and corresponding SHA-512 checksums. The sources remain HTTPS and point to Discord-controlled domains, with no new sources, scripts, patches, or build logic introduced. Since only metadata changed and there are no signs of integrity bypass or malicious packaging behavior in this diff, the risk is low.

@@ -18,39 +18,39 @@ pkgbase = discord_arch_electron
 	provides = discord
 	conflicts = discord
 	options = !strip
-	source = https://dl.discordapp.net/apps/linux/1.0.149/discord-1.0.149.tar.gz
+	source = https://dl.discordapp.net/apps/linux/1.0.150/discord-1.0.150.tar.gz
 	source = LICENSE.html::https://discord.com/terms
 	source = OSS-LICENSES.html::https://discord.com/licenses
 	source = discord-launcher.sh
 	source = krisp-patcher.py
-	source = core-1.0.149.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.149/full.distro
-	source = discord_desktop_core-1.0.149.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.149/discord_desktop_core/1/full.distro
-	source = discord_zstd-1.0.149.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.149/discord_zstd/1/full.distro
-	source = discord_krisp-1.0.149.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.149/discord_krisp/1/full.distro
-	source = discord_rpc-1.0.149.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.149/discord_rpc/1/full.distro
-	source = discord_utils-1.0.149.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.149/discord_utils/1/full.distro
-	source = discord_voice-1.0.149.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.149/discord_voice/1/full.distro
-	source = discord_game_utils-1.0.149.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.149/discord_game_utils/1/full.distro
-	source = discord_erlpack-1.0.149.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.149/discord_erlpack/1/full.distro
-	source = discord_modules-1.0.149.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.149/discord_modules/1/full.distro
-	source = discord_spellcheck-1.0.149.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.149/discord_spellcheck/1/full.distro
-	source = discord_dispatch-1.0.149.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.149/discord_dispatch/1/full.distro
-	sha512sums = 07cec6aea9e36ffe7d786b55ea76f38e7469d14fc2c2d853686230f416f4e07886f02c883d929338d4b87c3d7a0b412f0e0da94f62f6b976d65a59dab759bff0
+	source = core-1.0.150.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.150/full.distro
+	source = discord_desktop_core-1.0.150.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.150/discord_desktop_core/1/full.distro
+	source = discord_zstd-1.0.150.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.150/discord_zstd/1/full.distro
+	source = discord_krisp-1.0.150.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.150/discord_krisp/1/full.distro
+	source = discord_rpc-1.0.150.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.150/discord_rpc/1/full.distro
+	source = discord_utils-1.0.150.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.150/discord_utils/1/full.distro
+	source = discord_voice-1.0.150.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.150/discord_voice/1/full.distro
+	source = discord_game_utils-1.0.150.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.150/discord_game_utils/1/full.distro
+	source = discord_erlpack-1.0.150.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.150/discord_erlpack/1/full.distro
+	source = discord_modules-1.0.150.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.150/discord_modules/1/full.distro
+	source = discord_spellcheck-1.0.150.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.150/discord_spellcheck/1/full.distro
+	source = discord_dispatch-1.0.150.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.150/discord_dispatch/1/full.distro
+	sha512sums = ef38c8c9dbdcecdb0d08202d5576ccfdfa7789b7bf3a5c5b41bffba3308ecd738a1285e89514407968aa1f59d0a3693582b3dd77c9b1e9891180365e32549b2c
 	sha512sums = SKIP
 	sha512sums = SKIP
 	sha512sums = d5373e2b2e9754bdcdbcda81fc1392ce6605939651839868823f3c3e0bf16f6fba2fb73bc1a0ff230eebd743d1463f2e8b2295503248f14845b3a56e57385bd1
 	sha512sums = 85da93530b2b92faad58cc84d0f7ddaea6b22fbec413e806c1981eb6369a301ec995eee6bfbe6b828e2cd0baf6168e578bbde456f2450a13199994ff9a1e7cd0
-	sha512sums = 8a630c3376cf7069f57ca22f2420e11a834c57be8a7016b9ae7125d4bd2a61b3456ba217b075e8554bfdfde3e4f59e4ff8758370641389c388af5a3383642c14
-	sha512sums = 21a12d18a330046d9d9dd7593be827b40baa4cf3915ce7968a279b43febb99c4c8a4134d2f26f3649cd991559fe155699cd5feb91bd97510bc2323de8d033bc2
-	sha512sums = 810c1219f3d008b945e75951d468d64aed2b342208c1eb9756374a880283a8a9984cf6bfa94e608fe48b3de8bdbf75f80789a1f6c1987637933e776b035b2a0a
-	sha512sums = 905e69d2af3615c80dd772d0096cb9a3773cfa42d4616f7f1709d78a4b0b8c9de19fd62d5c68943bd489fbb931aea593c1c5c67cf1c89c20d01b74158b963a81
-	sha512sums = f65e4f4b20eeac3b0efc958592fb184521b3c74d4ef95ebf12783bd057fa777ed1ff0c7b0a59369c50dc089a13f15d0799a461747d670fc37a171bb637b27ac8
-	sha512sums = 3d7410f8bdaad81563696eba0c185d187052289c29d8f23eed7067e9725e95cfa18d3ffd49c69431bf90bff943af63dcd1d823cfb0c8ee5f90a2ce8a752439c4
-	sha512sums = 11cea4c898b7290c73f3cc9aebfb4b115709487710cfe5a15843c9c21003714a57ade0440db680f44ae2ad202485e4ce302e99b44e20a4d3761b1d49b0f87192
-	sha512sums = e0f8c7c4b16d0ec39fa0e7b04954135568778e431f88aecc1292ec953a33278733f155ff876b2e4150c80894fadefbc99f8f0d7d7c6acf5cd093b098fb3be1bd
-	sha512sums = c3c48374265aa106301020463416133975536ad99e7c00e7617714270d9ee470b0143800216494fde14e2c2409322ee6dafed01497d68fda8af53f9f8ef29f23
-	sha512sums = 6e4e6c8d8d7338b88e3875a863b003472d46991b60f8df545a282efd0f09d0d6ddf53c813b5c394b42ce5d6bc489e6d3febb71e5d88a9bc0d623a467aef87416
-	sha512sums = 22a795896e538aa8065001acb0ea66363a879db672e8d72cea85dea4f516b68a341ef33b4516cf968f1215b17b7d434ae454ff55c94151a27086b87394460380
-	sha512sums = 802492d1d83dd3f197eb0e7a3fcde1f8b02a664d198729fc81b0c81a811bf29c2d0bfb7592a52f6e165efaaed9bdcea91a43000cb0d2bc16a8d63d62f06901f6
+	sha512sums = f0a322304334265bc3ee1485eec718df70320a089992ac8c4c2802ce418e8d58d5b1fcf700ab98216f81512f5aeb4e29fedbf4dbddcc465ee90c9b815d4bc1e7
+	sha512sums = a96fbea3946631a63210812bb67e9921fdfc2c415e120e1919c1ec4880187b6cd9433668c5ca5fdbbfcc1c23c6a759995d734f0e9096baed4dea5da8eac9a536
+	sha512sums = a33345164429656bbcc28c48b6d82bf39ef622753686447199661ae2cb8a11780080db02a0a20d838a2dfb2625e4599478f8b16ea120c3ce250193f6133effd5
+	sha512sums = 0464dada650407f44e7d3fd378e2fee36496dc898f25e2e486bb993d01afbc5233228b61ffa76a68ededba40887c91938d06c149280ca56e6c58790838d3a8e2
+	sha512sums = 75fb9521399db1ffac32b97baa6ed09055b243a83a2b83864f8ba52060cc204b308305b7d917d3e2c78f7aaeaeed2ea23b927cc34d973446907ed4f403dbd75f
+	sha512sums = ceb6589cd74c06766d26311422d1522f88dbcb569d7c600c0d1e915404f19bf8d35c310d6c6aa1813477809e0de21c0fbc7a4a74eaafd31b2e50e16cded8fdb7
+	sha512sums = afa90192782ff0f7a03d9b0f0e3a53258ef7bb632ec991513c349d6b859cf26264f6cd1b9d54a96e9bc91afe1669bd849752aec22b5010c92cda0ef59e513ddd
+	sha512sums = c92c12100a5181309503c1ba2ffd41a9e9287b21645d86119ef823f1192958ee6cfa6fcce657647b8cfdc65cad8b767cce53cb3300c996875343fe2c1d1faa14
+	sha512sums = 621291c04f248d69e9ae0022d84e6903b375e75598ea3198f787c94fd4efe1b944df42a9b8a6974ef5cdc18de3f7db03da26c73a7bf176f2d3524d6a298e3ea9
+	sha512sums = 178f3b9089015712c7d487c3da340942b2b445cdb88c1e6f27579f25415b4526e671438019b6ba55827127d53fe77830053d96456935aabf9a4ebf77a8b819d7
+	sha512sums = ce8bf2acba824bb3bd400b13744498b65e295fc4dd586a7306ddcd53e41c8b14435d4ca0319bc956868a1fbd6b7ecf062379ba925a2a0f356b7e13e11159a512
+	sha512sums = 02d447669047ee1a94430633614c7eaa5f582dc80581464635b2beb36d418e6318937369aa3a1b3d59f36ccee62b6520abd55092c8ef49dd9e7a0950230a114e
 
 pkgname = discord_arch_electron
Risk 0/5 · Safe PKGBUILD
Result #632

Comment

The change is a simple version bump in PKGBUILD from 1.0.149 to 1.0.150 with no accompanying changes to sources, build logic, install scripts, permissions, or dependencies. Based on the provided diff, there are no new security red flags or integrity concerns introduced by this commit.

@@ -9,7 +9,7 @@
 _pkgname=discord
 _electron=electron
 pkgname=${_pkgname}_arch_electron
-pkgver=1.0.149
+pkgver=1.0.150
 pkgrel=1
 epoch=1
 pkgdesc="Discord using system provided ${_electron} for increased security and performance"
Risk 0/5 · Safe PKGBUILD
Result #633

Comment

The change is a routine version bump from 1.0.149 to 1.0.150 with corresponding checksum updates for the same HTTPS Discord-hosted release artifacts. No new sources, scripts, build steps, privilege changes, or packaging logic were introduced. I don’t see any supply-chain red flags in the diff itself; the only security-relevant action is trusting the new upstream tarballs, which is expected for a version update and is covered by the updated sha512sums.

@@ -46,23 +46,23 @@ source=("https://dl.discordapp.net/apps/linux/${pkgver}/${_pkgname}-${pkgver}.ta
         "discord_modules-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_modules/1/full.distro"
         "discord_spellcheck-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_spellcheck/1/full.distro"
         "discord_dispatch-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_dispatch/1/full.distro")
-sha512sums=('07cec6aea9e36ffe7d786b55ea76f38e7469d14fc2c2d853686230f416f4e07886f02c883d929338d4b87c3d7a0b412f0e0da94f62f6b976d65a59dab759bff0'
+sha512sums=('ef38c8c9dbdcecdb0d08202d5576ccfdfa7789b7bf3a5c5b41bffba3308ecd738a1285e89514407968aa1f59d0a3693582b3dd77c9b1e9891180365e32549b2c'
             '2590151db4404a9ecbae2c45269c74f5ea26479967de5bc0b221a9143f4efeeeda9e335c23cf1f982680ab4fd895dcf3fd5731bd230908b3b2568eee0ec223ec'
             '5cccf397a772fed0db9b19253e496e78af27810227325ce681de985e2e0fbbdb195873d9642574ad3ae7bfcf4699bfdaa16933ca50c13cb98a1ff53c86c6de05'
             'd5373e2b2e9754bdcdbcda81fc1392ce6605939651839868823f3c3e0bf16f6fba2fb73bc1a0ff230eebd743d1463f2e8b2295503248f14845b3a56e57385bd1'
             '85da93530b2b92faad58cc84d0f7ddaea6b22fbec413e806c1981eb6369a301ec995eee6bfbe6b828e2cd0baf6168e578bbde456f2450a13199994ff9a1e7cd0'
-            '8a630c3376cf7069f57ca22f2420e11a834c57be8a7016b9ae7125d4bd2a61b3456ba217b075e8554bfdfde3e4f59e4ff8758370641389c388af5a3383642c14'
-            '21a12d18a330046d9d9dd7593be827b40baa4cf3915ce7968a279b43febb99c4c8a4134d2f26f3649cd991559fe155699cd5feb91bd97510bc2323de8d033bc2'
-            '810c1219f3d008b945e75951d468d64aed2b342208c1eb9756374a880283a8a9984cf6bfa94e608fe48b3de8bdbf75f80789a1f6c1987637933e776b035b2a0a'
-            '905e69d2af3615c80dd772d0096cb9a3773cfa42d4616f7f1709d78a4b0b8c9de19fd62d5c68943bd489fbb931aea593c1c5c67cf1c89c20d01b74158b963a81'
-            'f65e4f4b20eeac3b0efc958592fb184521b3c74d4ef95ebf12783bd057fa777ed1ff0c7b0a59369c50dc089a13f15d0799a461747d670fc37a171bb637b27ac8'
-            '3d7410f8bdaad81563696eba0c185d187052289c29d8f23eed7067e9725e95cfa18d3ffd49c69431bf90bff943af63dcd1d823cfb0c8ee5f90a2ce8a752439c4'
-            '11cea4c898b7290c73f3cc9aebfb4b115709487710cfe5a15843c9c21003714a57ade0440db680f44ae2ad202485e4ce302e99b44e20a4d3761b1d49b0f87192'
-            'e0f8c7c4b16d0ec39fa0e7b04954135568778e431f88aecc1292ec953a33278733f155ff876b2e4150c80894fadefbc99f8f0d7d7c6acf5cd093b098fb3be1bd'
-            'c3c48374265aa106301020463416133975536ad99e7c00e7617714270d9ee470b0143800216494fde14e2c2409322ee6dafed01497d68fda8af53f9f8ef29f23'
-            '6e4e6c8d8d7338b88e3875a863b003472d46991b60f8df545a282efd0f09d0d6ddf53c813b5c394b42ce5d6bc489e6d3febb71e5d88a9bc0d623a467aef87416'
-            '22a795896e538aa8065001acb0ea66363a879db672e8d72cea85dea4f516b68a341ef33b4516cf968f1215b17b7d434ae454ff55c94151a27086b87394460380'
-            '802492d1d83dd3f197eb0e7a3fcde1f8b02a664d198729fc81b0c81a811bf29c2d0bfb7592a52f6e165efaaed9bdcea91a43000cb0d2bc16a8d63d62f06901f6')
+            'f0a322304334265bc3ee1485eec718df70320a089992ac8c4c2802ce418e8d58d5b1fcf700ab98216f81512f5aeb4e29fedbf4dbddcc465ee90c9b815d4bc1e7'
+            'a96fbea3946631a63210812bb67e9921fdfc2c415e120e1919c1ec4880187b6cd9433668c5ca5fdbbfcc1c23c6a759995d734f0e9096baed4dea5da8eac9a536'
+            'a33345164429656bbcc28c48b6d82bf39ef622753686447199661ae2cb8a11780080db02a0a20d838a2dfb2625e4599478f8b16ea120c3ce250193f6133effd5'
+            '0464dada650407f44e7d3fd378e2fee36496dc898f25e2e486bb993d01afbc5233228b61ffa76a68ededba40887c91938d06c149280ca56e6c58790838d3a8e2'
+            '75fb9521399db1ffac32b97baa6ed09055b243a83a2b83864f8ba52060cc204b308305b7d917d3e2c78f7aaeaeed2ea23b927cc34d973446907ed4f403dbd75f'
+            'ceb6589cd74c06766d26311422d1522f88dbcb569d7c600c0d1e915404f19bf8d35c310d6c6aa1813477809e0de21c0fbc7a4a74eaafd31b2e50e16cded8fdb7'
+            'afa90192782ff0f7a03d9b0f0e3a53258ef7bb632ec991513c349d6b859cf26264f6cd1b9d54a96e9bc91afe1669bd849752aec22b5010c92cda0ef59e513ddd'
+            'c92c12100a5181309503c1ba2ffd41a9e9287b21645d86119ef823f1192958ee6cfa6fcce657647b8cfdc65cad8b767cce53cb3300c996875343fe2c1d1faa14'
+            '621291c04f248d69e9ae0022d84e6903b375e75598ea3198f787c94fd4efe1b944df42a9b8a6974ef5cdc18de3f7db03da26c73a7bf176f2d3524d6a298e3ea9'
+            '178f3b9089015712c7d487c3da340942b2b445cdb88c1e6f27579f25415b4526e671438019b6ba55827127d53fe77830053d96456935aabf9a4ebf77a8b819d7'
+            'ce8bf2acba824bb3bd400b13744498b65e295fc4dd586a7306ddcd53e41c8b14435d4ca0319bc956868a1fbd6b7ecf062379ba925a2a0f356b7e13e11159a512'
+            '02d447669047ee1a94430633614c7eaa5f582dc80581464635b2beb36d418e6318937369aa3a1b3d59f36ccee62b6520abd55092c8ef49dd9e7a0950230a114e')
 
 # Skip "LICENSE.html" and "OSS-LICENSES.html" files hashes as they are unstable
 # Since "updpkgsums"/"pkgctl version upgrade" overwrite the checksum array with