Review Results

Comment

Risk score 0. The change only bumps the packaged PyCharm version in .SRCINFO and updates the corresponding upstream tarball URLs and SHA-256 checksums. The sources remain HTTPS from JetBrains' official download host, with no new build logic, scripts, permissions changes, or install-time behavior introduced by this diff.

@@ -1,6 +1,6 @@
 pkgbase = pycharm
 	pkgdesc = The only Python IDE you need. Bundled with the official JetBrains Runtime (JBR)
-	pkgver = 2026.2
+	pkgver = 2026.2.0.1
 	pkgrel = 1
 	url = https://www.jetbrains.com/pycharm/
 	arch = x86_64

Comment

The change only updates the upstream PyCharm release tarball URLs and their corresponding SHA-256 checksums in .SRCINFO, from 2026.2 to 2026.2.0.1 for x86_64 and aarch64. The sources remain HTTPS on the official JetBrains download domain, and there are no new scripts, build steps, or packaging behaviors introduced by this diff. This is a low-risk metadata-only version bump with no obvious security concerns.

@@ -37,9 +37,9 @@ pkgbase = pycharm
 	source = ltedit.desktop
 	sha256sums = 444611514a2e2e168d20ec866af0102fbdd0472af00925847471609578b187b7
 	sha256sums = 944d01526dcc0e6d4c321873bd42d2c7885973e929f3b363c31019f642af0101
-	source_x86_64 = https://download-cf.jetbrains.com/python/pycharm-2026.2.tar.gz
-	sha256sums_x86_64 = ac36f7c0743465215bf8227079b77272945338c485c1da6b924e56468046bd5a
-	source_aarch64 = https://download-cf.jetbrains.com/python/pycharm-2026.2-aarch64.tar.gz
-	sha256sums_aarch64 = 3b63d2f490c14c541c98afd851f218069a3c885ceaedd9bdb00e5a07285cf802
+	source_x86_64 = https://download-cf.jetbrains.com/python/pycharm-2026.2.0.1.tar.gz
+	sha256sums_x86_64 = 4a37cb2d15703553c61e814d8e014bfa47308508470de5f968c4e9645b771675
+	source_aarch64 = https://download-cf.jetbrains.com/python/pycharm-2026.2.0.1-aarch64.tar.gz
+	sha256sums_aarch64 = f29b6a782a58fabb232715db8fef9765bfdaebc6eb590ed462c4f96562227427
 
 pkgname = pycharm

Comment

The change is a simple version bump in PKGBUILD from 2026.2 to 2026.2.0.1 with no accompanying changes to sources, build steps, install scripts, permissions, or dependencies. Based on the provided diff hunk alone, there are no security-relevant red flags such as new network fetches, privilege escalation, or suspicious packaging behavior.

@@ -5,7 +5,7 @@
 # Contributor: Juan Francisco Miranda <aurarchlinux.sleek355 at passfwd dot com>
 
 pkgname=pycharm
-pkgver=2026.2
+pkgver=2026.2.0.1
 pkgrel=1
 provides=("pycharm")
 replaces=("pycharm-professional")

Comment

The change is limited to bumping the package version and updating the per-architecture SHA-256 checksums for the upstream JetBrains tarballs. The source URLs remain HTTPS and point to the official JetBrains download host, with no new build-time network access, scripts, patches, or packaging logic changes. I do note that the package ships prebuilt upstream binaries, but that was already true before this diff and the new checksums are the expected integrity control for those downloads. No additional security concerns are introduced by this hunk.

@@ -33,8 +33,8 @@ source_x86_64=("https://download-cf.jetbrains.com/python/${pkgname}-${pkgver}.ta
 source_aarch64=("https://download-cf.jetbrains.com/python/${pkgname}-${pkgver}-aarch64.tar.gz")
 sha256sums=('444611514a2e2e168d20ec866af0102fbdd0472af00925847471609578b187b7'
             '944d01526dcc0e6d4c321873bd42d2c7885973e929f3b363c31019f642af0101')
-sha256sums_x86_64=('ac36f7c0743465215bf8227079b77272945338c485c1da6b924e56468046bd5a')
-sha256sums_aarch64=('3b63d2f490c14c541c98afd851f218069a3c885ceaedd9bdb00e5a07285cf802')
+sha256sums_x86_64=('4a37cb2d15703553c61e814d8e014bfa47308508470de5f968c4e9645b771675')
+sha256sums_aarch64=('f29b6a782a58fabb232715db8fef9765bfdaebc6eb590ed462c4f96562227427')
 makedepends=('python-setuptools' 'cython')
 optdepends=(
     'ipython: For enhanced interactive Python shell inside Pycharm'