Review Results

Comment

The change is low risk. It only switches the package from the versioned Arch Lua packages (`lua54`, `lua54-lgi`) to the unversioned `lua`, `lua-lgi` packages and updates `_LUA_VER` from 5.4 to 5.5. There is no added code execution, no new sources, no install-script changes, and no privilege/persistence behavior. The main impact is compatibility/packaging correctness: it may track the distro’s default Lua ABI instead of a pinned one, which could affect build/runtime behavior if the default changes, but that is not a security issue by itself.

@@ -16,7 +16,7 @@ arch=('i686' 'x86_64')
 url='https://awesomewm.org/'
 license=('GPL2')
 depends=('cairo' 'dbus' 'gdk-pixbuf2' 'libxdg-basedir' 'libxkbcommon-x11'
-         'lua54' 'lua54-lgi' 'pango' 'startup-notification' 'xcb-util-cursor'
+         'lua' 'lua-lgi' 'pango' 'startup-notification' 'xcb-util-cursor'
          'xcb-util-keysyms' 'xcb-util-wm' 'xcb-util-xrm' 'libxfixes')
 makedepends=('asciidoctor' 'cmake' 'docbook-xsl' 'git' 'imagemagick' 'ldoc'
              'xmlto')

Comment

The change only bumps the Lua version variable from 5.4 to 5.5 in PKGBUILD. This does not introduce any new source, build-time network access, privilege escalation, or packaging behavior changes in the reviewed hunk. The main risk is compatibility/build failure if Lua 5.5 is not available or supported, but that is not a security issue.

@@ -31,7 +31,7 @@ backup=('etc/xdg/awesome/rc.lua')
 source=("$pkgname::git+https://github.com/awesomeWM/awesome.git")
 md5sums=('SKIP')
 
-_LUA_VER=5.4
+_LUA_VER=5.5
 _BUILD_DOCS=${_BUILD_DOCS:-0}
 
 pkgver() {