Review Results

Comment

The change is a straightforward version bump in .SRCINFO from Rider 2026.1.4 to 2026.2, with matching JetBrains HTTPS download URLs and updated SHA256 checksums for both x86_64 and aarch64. No new sources, scripts, install hooks, or packaging logic are introduced by this diff. The package still points to the official JetBrains domain and remains pinned by checksum, so there is no evident supply-chain or persistence risk in the reviewed hunk.

@@ -1,6 +1,6 @@
 pkgbase = rider
 	pkgdesc = A cross-platform .NET IDE by JetBrains.
-	pkgver = 2026.1.4
+	pkgver = 2026.2
 	pkgrel = 1
 	epoch = 1
 	url = https://www.jetbrains.com/rider/

Comment

The change only bumps the upstream JetBrains Rider release tarball URLs from 2026.1.4 to 2026.2 for x86_64 and aarch64, with matching updated SHA-256 checksums. The sources remain HTTPS on the official JetBrains download domain, there are no new build-time commands, patches, install scripts, or packaging changes indicated by this .SRCINFO diff. No obvious supply-chain or persistence risk is introduced by this metadata-only version update.

@@ -15,9 +15,9 @@ pkgbase = rider
 	options = staticlibs
 	source = jetbrains-rider.desktop
 	sha256sums = 4d5438fd52380ccd09deef98cb82707f296ebb27a3faed2fceb1b68eba335ec8
-	source_x86_64 = https://download-cf.jetbrains.com/rider/JetBrains.Rider-2026.1.4.tar.gz
-	sha256sums_x86_64 = 2be5f633889dbfea03a82fdd91bccc4d7dd6df3c746f47bc653b3190feeb01f2
-	source_aarch64 = https://download-cf.jetbrains.com/rider/JetBrains.Rider-2026.1.4-aarch64.tar.gz
-	sha256sums_aarch64 = 1979b206bab1529c0ae1d8e3c2596f2bea677e4b43ac31e92c92a87b80f6c45a
+	source_x86_64 = https://download-cf.jetbrains.com/rider/JetBrains.Rider-2026.2.tar.gz
+	sha256sums_x86_64 = eebbc49e29852496cbc7f6399eb47b56e8a95fc921c4dae7c05cca6b2f6d22a7
+	source_aarch64 = https://download-cf.jetbrains.com/rider/JetBrains.Rider-2026.2-aarch64.tar.gz
+	sha256sums_aarch64 = 7ef76057543c80b81807f8a1ae9ba4256f43a8bba9678e4918a69deefa2f008a
 
 pkgname = rider

Comment

The change only bumps pkgver from 2026.1.4 to 2026.2 in PKGBUILD. No source URLs, checksums, build steps, install scripts, permissions, or package metadata were altered in the provided diff. On its face this is a routine version update with no new security red flags visible in the reviewed hunk.

@@ -1,7 +1,7 @@
 # Maintainer: Tim Hellhake
 
 pkgname=rider
-pkgver='2026.1.4'
+pkgver='2026.2'
 pkgrel=1
 epoch=1
 pkgdesc='A cross-platform .NET IDE by JetBrains.'

Comment

The change only updates SHA-256 checksums for the existing JetBrains Rider upstream tarballs on x86_64 and aarch64. The source URLs remain HTTPS and point to the same official JetBrains download host, with no new build steps, scripts, or packaging behavior changes. This is a routine integrity update and does not introduce an obvious security concern in the reviewed hunk.

@@ -18,9 +18,9 @@ _srcfile="JetBrains.Rider-${pkgver}"
 source=('jetbrains-rider.desktop')
 sha256sums=('4d5438fd52380ccd09deef98cb82707f296ebb27a3faed2fceb1b68eba335ec8')
 source_x86_64=("https://download-cf.jetbrains.com/rider/${_srcfile}.tar.gz")
-sha256sums_x86_64=('2be5f633889dbfea03a82fdd91bccc4d7dd6df3c746f47bc653b3190feeb01f2')
+sha256sums_x86_64=('eebbc49e29852496cbc7f6399eb47b56e8a95fc921c4dae7c05cca6b2f6d22a7')
 source_aarch64=("https://download-cf.jetbrains.com/rider/${_srcfile}-aarch64.tar.gz")
-sha256sums_aarch64=('1979b206bab1529c0ae1d8e3c2596f2bea677e4b43ac31e92c92a87b80f6c45a')
+sha256sums_aarch64=('7ef76057543c80b81807f8a1ae9ba4256f43a8bba9678e4918a69deefa2f008a')
 
 package() {
     install_base="/opt"