Review Results

Comment

The change only bumps the package version in .SRCINFO from 1.32.7 to 1.32.8. No sources, build logic, install scripts, permissions, or dependencies are altered in the reviewed hunk, so there is no new security concern visible here.

@@ -1,6 +1,6 @@
 pkgbase = gallery-dl
 	pkgdesc = Command-line program to download image-galleries and collections from several image hosting sites
-	pkgver = 1.32.7
+	pkgver = 1.32.8
 	pkgrel = 1
 	url = https://codeberg.org/mikf/gallery-dl
 	arch = any

Comment

The change is a routine version bump in .SRCINFO from v1.32.7 to v1.32.8, with the corresponding sha512 checksum updated. The source remains the official upstream Codeberg repository over HTTPS and is still pinned to a specific tag with signed source verification and a valid PGP key. No new build steps, scripts, dependencies, or packaging behaviors are introduced by this metadata-only change.

@@ -27,8 +27,8 @@ pkgbase = gallery-dl
 	optdepends = python-psycopg: PostgreSQL support
 	optdepends = python-truststore: Support using system certificates
 	optdepends = python-jinja: Jinja template support
-	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.7?signed
+	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.8?signed
 	validpgpkeys = 3E09F5908333DD83DBDCE7375680CA389D365A88
-	sha512sums = c3789d2627d916ecce4e09a95ecdd5ee373ba5273afbce5b0784ca4c482dd842c74472aa632e01ba28f2349da1c0384d6251a75fca9cc0b2f928714ae1473259
+	sha512sums = b11e4db8310f97c362ae3d97b893907f089caa0b9ab00c98215690612427ac4db3982851f3d75af125f8a764e92c9cb76a8ef1a55949e61a46a896e5422a2e7b
 
 pkgname = gallery-dl

Comment

The change is a trivial version bump in PKGBUILD from 1.32.7 to 1.32.8 with no other modifications. Based on the provided diff, there are no new sources, build steps, install scripts, permissions changes, or other security-relevant behavior introduced. Risk is minimal and limited to the usual trust in upstream release contents, which are not altered here.

@@ -2,7 +2,7 @@
 # Contributor: LLL2yu <lll2yu@protonmail.com>
 
 pkgname=gallery-dl
-pkgver=1.32.7
+pkgver=1.32.8
 pkgrel=1
 pkgdesc='Command-line program to download image-galleries and collections from several image hosting sites'
 arch=(any)

Comment

The change is a routine version bump from 1.32.7 to 1.32.8 with the corresponding source checksum update. The source remains a pinned, signed git tag over HTTPS, and there are no new build steps, scripts, patches, or packaging changes that introduce execution, persistence, or integrity risks. No suspicious dependencies or install-time behavior were added in this diff.

@@ -29,7 +29,7 @@ optdepends=(
 )
 source=(git+"${url}".git#tag=v"${pkgver}"?signed)
 validpgpkeys=(3E09F5908333DD83DBDCE7375680CA389D365A88) #Mike Fährmann
-sha512sums=('c3789d2627d916ecce4e09a95ecdd5ee373ba5273afbce5b0784ca4c482dd842c74472aa632e01ba28f2349da1c0384d6251a75fca9cc0b2f928714ae1473259')
+sha512sums=('b11e4db8310f97c362ae3d97b893907f089caa0b9ab00c98215690612427ac4db3982851f3d75af125f8a764e92c9cb76a8ef1a55949e61a46a896e5422a2e7b')
 
 prepare() {
     # Clean out old wheels etc.