Review Results

Comment

Risk is low. The change only bumps google-chrome-dev to a newer upstream dev-channel version and updates the corresponding Google-hosted .deb URL and checksum in .SRCINFO. The source remains HTTPS on the official dl.google.com domain, and there are no new build steps, scripts, privileges, or additional sources introduced by this diff. The main residual risk is the usual trust in a prebuilt upstream binary package, but that was already present before this change.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome-dev
 	pkgdesc = The popular web browser by Google (Dev Channel)
-	pkgver = 152.0.7953.3
+	pkgver = 152.0.7967.2
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome-dev.install

Comment

The change is a routine version bump in .SRCINFO for the Google Chrome Dev package, updating the upstream Debian package URL and its corresponding SHA-512 checksum. The source remains on Google's official HTTPS domain, there are no new sources, scripts, build steps, or privilege-related artifacts introduced by this diff, and no evidence of typosquatting, network fetches outside source=(), or packaging hygiene regressions. Risk is therefore minimal.

@@ -21,10 +21,10 @@ pkgbase = google-chrome-dev
 	provides = google-chrome
 	options = !emptydirs
 	options = !strip
-	source = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_152.0.7953.3-1_amd64.deb
+	source = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_152.0.7967.2-1_amd64.deb
 	source = eula_text.html
 	source = google-chrome-unstable.sh
-	sha512sums = f3bb6021ff4186e829b542e8a08b9890880e9a9a4d62119259a386f3d491273b853714cf98cf13a7d562028224dd3d3022d23149ab35f1efa58dcfdbd574c9c8
+	sha512sums = 7db4f8ca8614dde9cd7bf13f81f4eb3f0241a3ffa6463de97c7150f2ccaed7541bea1872ec374cdd59d17dfe86e8827c7a80812ec7a435739f660754c8f45251
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = 445eb36a588f49af018ded3d852b63e0523ffac20c25be721f3ef4663591256849432bebb3d9f352e4f53cbe1fb77fa67cf8911c9161f826490a21adbdcc81f4
 

Comment

The change is a simple version bump in PKGBUILD from 152.0.7953.3 to 152.0.7967.2 with no other modifications shown. There are no new sources, scripts, install hooks, permissions changes, or build-time execution paths introduced in the provided diff hunk. Based on this hunk alone, I do not see a security issue.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-unstable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome-dev
-pkgver=152.0.7953.3
+pkgver=152.0.7967.2
 pkgrel=1
 pkgdesc="The popular web browser by Google (Dev Channel)"
 arch=('x86_64')

Comment

Risk is low. The change only bumps pkgver and updates the SHA-512 checksum for the official Google-hosted .deb source in PKGBUILD. No new sources, scripts, install hooks, privilege changes, or build logic were introduced. The package still downloads from HTTPS dl.google.com and remains pinned to a specific versioned artifact, so this looks like a routine upstream version update rather than a security concern.

@@ -36,7 +36,7 @@ _channel=unstable
 source=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb"
 	'eula_text.html'
 	"google-chrome-$_channel.sh")
-sha512sums=('f3bb6021ff4186e829b542e8a08b9890880e9a9a4d62119259a386f3d491273b853714cf98cf13a7d562028224dd3d3022d23149ab35f1efa58dcfdbd574c9c8'
+sha512sums=('7db4f8ca8614dde9cd7bf13f81f4eb3f0241a3ffa6463de97c7150f2ccaed7541bea1872ec374cdd59d17dfe86e8827c7a80812ec7a435739f660754c8f45251'
             'a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             '445eb36a588f49af018ded3d852b63e0523ffac20c25be721f3ef4663591256849432bebb3d9f352e4f53cbe1fb77fa67cf8911c9161f826490a21adbdcc81f4')