Review Results

Comment

The only change in this .SRCINFO hunk is a version bump for an existing binary package from 150.0.4055.0 to 152.0.4167.0. No sources, checksums, install scripts, build logic, permissions, or metadata affecting trust boundaries were changed in the provided diff. On its face this is a routine upstream version update with no direct security red flags in the reviewed hunk.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-dev-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 150.0.4055.0
+	pkgver = 152.0.4167.0
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change is a routine version bump in .SRCINFO: it updates the Microsoft Edge Dev binary package URL, checksum, and provided version to a newer upstream release. The source remains HTTPS on the official Microsoft package repository, and there are no new build steps, scripts, permissions changes, or other suspicious metadata introduced by this diff. Based on the provided hunk alone, I don’t see a security issue.

@@ -22,14 +22,14 @@ pkgbase = microsoft-edge-dev-bin
 	optdepends = libunity: for download progress on KDE
 	optdepends = ttf-liberation: fix fonts for some PDFs - CRBug #369991
 	optdepends = xdg-utils
-	provides = microsoft-edge=150.0.4055.0
+	provides = microsoft-edge=152.0.4167.0
 	conflicts = microsoft-edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_150.0.4055.0-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_152.0.4167.0-1_amd64.deb
 	source = microsoft-edge-dev.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 33571ed1370389e33c54951726bbf92fd89ec73fd7fbd7ef2292d94439f81956
+	sha256sums = 35f5c653dfe1a99d35c7cb9296c7807935d50f62b469fed6a4ae6ffe40ecebe1
 	sha256sums = 285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

This change only bumps pkgver in PKGBUILD from 150.0.4055.0 to 152.0.4167.0. No build logic, source URLs, checksums, install scripts, permissions, or packaging behavior changed. On the provided diff alone there are no new security red flags; it appears to be a routine version update.

@@ -10,7 +10,7 @@ _channel=dev
 _pkgname=microsoft-edge-dev
 pkgname=microsoft-edge-dev-bin
 _pkgshortname=msedge-dev
-pkgver=150.0.4055.0
+pkgver=152.0.4167.0
 pkgrel=1
 _uprel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"

Comment

The change is a routine version bump for a binary package from Microsoft’s official HTTPS repository, with the corresponding SHA-256 updated for the new .deb. No new sources, scripts, install hooks, privilege changes, or build-time network behavior were introduced in this diff. The only security-relevant question is trust in the upstream binary itself, which is unchanged by this patch and already inherent to the package design.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
         "$_pkgname.sh"
         "Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('33571ed1370389e33c54951726bbf92fd89ec73fd7fbd7ef2292d94439f81956'
+sha256sums=('35f5c653dfe1a99d35c7cb9296c7807935d50f62b469fed6a4ae6ffe40ecebe1'
             '285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')