Review Results

Comment

The change only bumps the package version in .SRCINFO from 150.0.7871.181 to 150.0.7871.186. No source URLs, build logic, install scripts, permissions, or other packaging metadata changed in the provided diff. On its face this is a routine version update with no security-relevant red flags in the reviewed hunk.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome
 	pkgdesc = The popular web browser by Google (Stable Channel)
-	pkgver = 150.0.7871.181
+	pkgver = 150.0.7871.186
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome.install

Comment

The change only updates the pinned upstream Chrome .deb version and its corresponding SHA-512 checksum in .SRCINFO. The source remains the official HTTPS dl.google.com release artifact, with no new sources, scripts, or build logic introduced. This is a routine version bump with no evident security red flags in the diff provided.

@@ -20,10 +20,10 @@ pkgbase = google-chrome
 	optdepends = kwallet: for storing passwords in KWallet
 	options = !emptydirs
 	options = !strip
-	source = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_150.0.7871.181-1_amd64.deb
+	source = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_150.0.7871.186-1_amd64.deb
 	source = eula_text.html
 	source = google-chrome-stable.sh
-	sha512sums = 2b42f58b1501bf6e8226fd6098a5e06587f9a388fb89cd936980368ef50294ea18f9a61cd19c04796d71c308e4be46eaddcec1b67332f45eac75fdaf8d81d7cc
+	sha512sums = e9305be5b833860d03af4429856974369ba74a9ee18dabefd27a892ecbb454c725f4ef83b2b14330334599143a1098d9e29d18fa89583cfb5b3e49bd0eb737e0
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94
 

Comment

This change is a straightforward version bump in PKGBUILD from 150.0.7871.181 to 150.0.7871.186 with no other modifications to sources, build steps, install scripts, or packaging logic. On the provided diff there are no new integrity, persistence, privilege, or network red flags. Risk is minimal.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-stable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome
-pkgver=150.0.7871.181
+pkgver=150.0.7871.186
 pkgrel=1
 pkgdesc="The popular web browser by Google (Stable Channel)"
 arch=('x86_64')

Comment

This is a routine version bump of the Google Chrome stable package from 150.0.7871.181 to 150.0.7871.186, with the corresponding SHA-512 updated for the upstream .deb. The source remains the official HTTPS dl.google.com URL, there are no new build-time downloads, scripts, privilege changes, or packaging logic changes. No security-relevant red flags are introduced by this diff alone.

@@ -35,7 +35,7 @@ _channel=stable
 source=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb"
 	'eula_text.html'
 	"google-chrome-$_channel.sh")
-sha512sums=('2b42f58b1501bf6e8226fd6098a5e06587f9a388fb89cd936980368ef50294ea18f9a61cd19c04796d71c308e4be46eaddcec1b67332f45eac75fdaf8d81d7cc'
+sha512sums=('e9305be5b833860d03af4429856974369ba74a9ee18dabefd27a892ecbb454c725f4ef83b2b14330334599143a1098d9e29d18fa89583cfb5b3e49bd0eb737e0'
             'a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             'de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94')