Review Results

Comment

The change is a routine version bump in .SRCINFO from 1.92.143 to 1.92.144 with no accompanying changes to sources, checksums, install scripts, or packaging logic in the provided diff. By itself this does not introduce any new attack surface or integrity concern; it simply tracks a newer upstream binary release. Risk is therefore minimal.

@@ -1,6 +1,6 @@
 pkgbase = brave-bin
 	pkgdesc = Web browser that blocks ads and trackers by default (binary release)
-	pkgver = 1.92.143
+	pkgver = 1.92.144
 	pkgrel = 1
 	epoch = 1
 	url = https://brave.com

Comment

The change is a routine version bump in .SRCINFO from Brave 1.92.143 to 1.92.144, updating the pinned release URLs, noextract filenames, and checksums accordingly. The sources remain HTTPS GitHub release assets, there are no new build-time commands, scripts, or privilege-related artifacts introduced by this diff, and the package metadata still points to the expected upstream Brave browser release. No security red flags are evident in the provided hunk.

@@ -17,19 +17,19 @@ pkgbase = brave-bin
 	optdepends = cups: Printer support
 	optdepends = libgnome-keyring: Enable GNOME keyring support
 	optdepends = libnotify: Native notification support
-	provides = brave=1.92.143
+	provides = brave=1.92.144
 	provides = brave-browser
 	conflicts = brave
-	noextract = brave-bin-1.92.143-x86_64.zip
-	noextract = brave-bin-1.92.143-aarch64.zip
+	noextract = brave-bin-1.92.144-x86_64.zip
+	noextract = brave-bin-1.92.144-aarch64.zip
 	options = !strip
 	source = brave-bin.sh
 	source = brave-browser.desktop
 	sha256sums = 75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00
 	sha256sums = c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a
-	source_x86_64 = brave-bin-1.92.143-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.92.143/brave-browser-1.92.143-linux-amd64.zip
-	sha256sums_x86_64 = 95a0402e6da4c35683d4edcfe74043558a06fd6de5341dcccf1f148ac0534809
-	source_aarch64 = brave-bin-1.92.143-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.92.143/brave-browser-1.92.143-linux-arm64.zip
-	sha256sums_aarch64 = 6f321d6c538dce3cab4791e7cbaeec33c84e5d9884a88251b339cbca2cec412e
+	source_x86_64 = brave-bin-1.92.144-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.92.144/brave-browser-1.92.144-linux-amd64.zip
+	sha256sums_x86_64 = 67854d08fb57d45620341ebb4df4c9164cbd3fe5cd2c696f2b0ac8d16a3945a2
+	source_aarch64 = brave-bin-1.92.144-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.92.144/brave-browser-1.92.144-linux-arm64.zip
+	sha256sums_aarch64 = 18315a79caff2a86f7928445804cb9cb3a2c8d10e0d24c3382de7e0391ce6145
 
 pkgname = brave-bin

Comment

The change is a simple version bump in PKGBUILD from 1.92.143 to 1.92.144 with no other modifications. There are no new sources, build steps, install scripts, permissions changes, or packaging logic introduced in the reviewed hunk. Based on the provided diff alone, this appears low risk and consistent with a routine upstream release update.

@@ -10,7 +10,7 @@
 # Contributor: Giusy Digital <kurmikon at libero dot it>
 
 pkgname=brave-bin
-pkgver=1.92.143
+pkgver=1.92.144
 pkgrel=1
 epoch=1
 pkgdesc='Web browser that blocks ads and trackers by default (binary release)'

Comment

The change is a routine version bump for a binary package, updating the pinned SHA-256 checksums for the upstream Brave release archives. The source URLs remain HTTPS GitHub release assets, there are no new build-time downloads, scripts, patches, or privilege-related changes, and the diff does not introduce any persistence or execution logic. Risk is low and limited to the usual trust in upstream binary artifacts.

@@ -35,8 +35,8 @@ source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://github.com/brave/brave
 noextract=(${pkgname}-${pkgver}-x86_64.zip ${pkgname}-${pkgver}-aarch64.zip)
 sha256sums=('75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00'
             'c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a')
-sha256sums_x86_64=('95a0402e6da4c35683d4edcfe74043558a06fd6de5341dcccf1f148ac0534809')
-sha256sums_aarch64=('6f321d6c538dce3cab4791e7cbaeec33c84e5d9884a88251b339cbca2cec412e')
+sha256sums_x86_64=('67854d08fb57d45620341ebb4df4c9164cbd3fe5cd2c696f2b0ac8d16a3945a2')
+sha256sums_aarch64=('18315a79caff2a86f7928445804cb9cb3a2c8d10e0d24c3382de7e0391ce6145')
 
 prepare() {
 	mkdir -p brave