Review Results

Comment

The change is a simple version bump in .SRCINFO from 150.0.4078.96 to 150.0.4078.99 with no other metadata changes. .SRCINFO is generated package metadata and this diff does not introduce new sources, scripts, dependencies, install hooks, or permission changes. Based on the provided hunk alone, there is no evident security impact.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 150.0.4078.96
+	pkgver = 150.0.4078.99
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

Risk is low. The change only bumps the packaged Microsoft Edge .deb from 150.0.4078.96-1 to 150.0.4078.99-1 and updates the corresponding SHA-256 in .SRCINFO. The source remains the official Microsoft packages repository over HTTPS, with no new sources, scripts, install hooks, or build logic changes. This is a routine upstream version refresh with no obvious supply-chain or privilege-escalation concerns in the diff provided.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_150.0.4078.96-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_150.0.4078.99-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = f9d27300b51dd1500c9b03771cb54221e2165d53425e17024fce5340e2788464
+	sha256sums = 46a83dcaf910e22ba72d3b3d6eb54fd155afe5db74a439b4f465c623b672665c
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

This change only bumps pkgver from 150.0.4078.96 to 150.0.4078.99 in the PKGBUILD metadata. No source URLs, checksums, build steps, install scripts, permissions, or package relationships are altered. Based on the provided diff, there are no new security concerns introduced by this version bump alone.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=150.0.4078.96
+pkgver=150.0.4078.99
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change is a routine upstream version bump for a binary package, with the source URL still using HTTPS and pinned to a specific Microsoft release artifact. The only substantive modification is the expected checksum update for the new .deb payload; no new sources, scripts, install hooks, privilege changes, or build-time network behavior were introduced. I did not find any additional red flags in the reviewed hunk.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('f9d27300b51dd1500c9b03771cb54221e2165d53425e17024fce5340e2788464'
+sha256sums=('46a83dcaf910e22ba72d3b3d6eb54fd155afe5db74a439b4f465c623b672665c'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')