Review Results

Comment

The change is a straightforward dependency switch from Lua 5.3 packages to Lua 5.4 packages (`lua`/`lua-lgi` -> `lua54`/`lua54-lgi`). It does not introduce new sources, build-time downloads, privilege escalation, install scripts, or packaging behavior changes. No security red flags are evident in this hunk alone.

@@ -16,7 +16,7 @@ arch=('i686' 'x86_64')
 url='https://awesomewm.org/'
 license=('GPL2')
 depends=('cairo' 'dbus' 'gdk-pixbuf2' 'libxdg-basedir' 'libxkbcommon-x11'
-         'lua' 'lua-lgi' 'pango' 'startup-notification' 'xcb-util-cursor'
+         'lua54' 'lua54-lgi' 'pango' 'startup-notification' 'xcb-util-cursor'
          'xcb-util-keysyms' 'xcb-util-wm' 'xcb-util-xrm' 'libxfixes')
 makedepends=('asciidoctor' 'cmake' 'docbook-xsl' 'git' 'imagemagick' 'ldoc'
              'xmlto')

Comment

The change only adjusts the Lua ABI version from 5.5 to 5.4 in PKGBUILD. This is a low-risk packaging metadata change with no new sources, no build-script execution changes, no privilege/persistence behavior, and no integrity-impacting modifications. I did not find any security-relevant red flags in the provided diff hunk.

@@ -31,7 +31,7 @@ backup=('etc/xdg/awesome/rc.lua')
 source=("$pkgname::git+https://github.com/awesomeWM/awesome.git")
 md5sums=('SKIP')
 
-_LUA_VER=5.5
+_LUA_VER=5.4
 _BUILD_DOCS=${_BUILD_DOCS:-0}
 
 pkgver() {