Review Results

Comment

The change only adds `aarch64` to `.SRCINFO` for the existing `google-chrome-beta` package metadata. This is a metadata-only update and does not alter build commands, sources, install scripts, permissions, or runtime behavior. I see no security-relevant red flags in this diff hunk alone.

@@ -5,6 +5,7 @@ pkgbase = google-chrome-beta
 	url = https://www.google.com/chrome
 	install = google-chrome-beta.install
 	arch = x86_64
+	arch = aarch64
 	license = custom:chrome
 	depends = alsa-lib
 	depends = gtk3

Comment

Risk is low. The change only updates .SRCINFO metadata to add aarch64 support and split the Google Chrome beta .deb source/checksums per-architecture. The source URLs remain HTTPS and point to the official Google download host, and there is no new build-time code execution, install-script logic, or privilege-related behavior introduced by this diff. The only notable concern is that this package is still a prebuilt binary download from upstream, but that was already true before this change and the new checksum entries preserve integrity verification.

@@ -21,11 +22,13 @@ pkgbase = google-chrome-beta
 	provides = google-chrome
 	options = !emptydirs
 	options = !strip
-	source = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_151.0.7922.47-1_amd64.deb
 	source = eula_text.html
 	source = google-chrome-beta.sh
-	sha512sums = 1f435614fde3503f30b45f0a399089bb5e301eb608a65bd15c62481bbd25c01a2e35410c3567e53e8c8755d914396f456e7dd34c067aa2d0047549edb0d3b4f1
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = 17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_151.0.7922.47-1_amd64.deb
+	sha512sums_x86_64 = 1f435614fde3503f30b45f0a399089bb5e301eb608a65bd15c62481bbd25c01a2e35410c3567e53e8c8755d914396f456e7dd34c067aa2d0047549edb0d3b4f1
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_151.0.7922.47-1_arm64.deb
+	sha512sums_aarch64 = 70e4ac6c415eca0c946080ee7cf002778df0130c57804456df8e487eba76047a716391487d03a53d730a5b9f4ce0c3f58ccc533c0d7d0ffd4901fda5c3102d1e
 
 pkgname = google-chrome-beta

Comment

The change only expands the package architecture list from x86_64 to include aarch64. This is a metadata-only change and does not alter sources, build steps, install scripts, permissions, or runtime behavior. I did not see any new integrity, privilege, or persistence concerns in the provided diff hunk.

@@ -10,7 +10,10 @@ pkgname=google-chrome-beta
 pkgver=151.0.7922.47
 pkgrel=1
 pkgdesc="The popular web browser by Google (Beta Channel)"
-arch=('x86_64')
+arch=(
+    'x86_64'
+    'aarch64'
+)
 url="https://www.google.com/chrome"
 license=('custom:chrome')
 depends=(

Comment

Low risk change. The patch only adds aarch64 support by introducing an arm64 Google Chrome .deb source and a corresponding checksum, while keeping the existing x86_64 source pinned to the same upstream HTTPS URL. No new build-time code execution, install-script changes, privilege escalation, or suspicious external hosts are introduced. The main caveat is that the package still relies on Google’s prebuilt binary blobs, but that was already true before this change and is not newly worsened here.

@@ -33,12 +36,17 @@ provides=('google-chrome')
 options=('!emptydirs' '!strip')
 install=$pkgname.install
 _channel=beta
-source=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb"
-	'eula_text.html'
-	"google-chrome-$_channel.sh")
-sha512sums=('1f435614fde3503f30b45f0a399089bb5e301eb608a65bd15c62481bbd25c01a2e35410c3567e53e8c8755d914396f456e7dd34c067aa2d0047549edb0d3b4f1'
-            'a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
+source=(
+    'eula_text.html'
+    "google-chrome-$_channel.sh"
+)
+sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             '17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03')
+sha512sums_x86_64=('1f435614fde3503f30b45f0a399089bb5e301eb608a65bd15c62481bbd25c01a2e35410c3567e53e8c8755d914396f456e7dd34c067aa2d0047549edb0d3b4f1')
+sha512sums_aarch64=('70e4ac6c415eca0c946080ee7cf002778df0130c57804456df8e487eba76047a716391487d03a53d730a5b9f4ce0c3f58ccc533c0d7d0ffd4901fda5c3102d1e')
+
+source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
+source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")
 
 package() {
 	bsdtar -xf data.tar.xz -C "$pkgdir/"