Review Results

Comment

The change only bumps the package version in .SRCINFO from 154.0b1 to 154.0b3. No build logic, sources, install scripts, permissions, or dependencies are altered in the reviewed diff. For an AUR binary package, this is a routine metadata update and does not introduce an obvious security risk by itself.

@@ -1,6 +1,6 @@
 pkgbase = firefox-beta-bin
 	pkgdesc = Standalone web browser from mozilla.org - Beta
-	pkgver = 154.0b1
+	pkgver = 154.0b3
 	pkgrel = 1
 	url = https://www.mozilla.org/en-US/firefox/channel/#beta
 	install = firefox-beta-bin.install

Comment

The change is a routine version bump in .SRCINFO from Firefox beta 154.0b1 to 154.0b3, updating the upstream archive URL, provided version, and matching checksum. The source remains the official Mozilla archive over HTTPS, with no new sources, scripts, install hooks, or packaging behavior changes introduced by this diff. No security red flags are evident from the metadata-only update.

@@ -21,13 +21,13 @@ pkgbase = firefox-beta-bin
 	optdepends = networkmanager: Location detection via available WiFi networks
 	optdepends = pulseaudio: Sound
 	optdepends = upower: Battery API
-	provides = firefox=154.0b1
+	provides = firefox=154.0b3
 	conflicts = firefox-beta
-	source = https://archive.mozilla.org/pub/firefox/releases/154.0b1/linux-x86_64/en-US/firefox-154.0b1.tar.xz
+	source = https://archive.mozilla.org/pub/firefox/releases/154.0b3/linux-x86_64/en-US/firefox-154.0b3.tar.xz
 	source = firefox-beta.sh
 	source = firefox-beta-bin.desktop
 	source = policies.json
-	sha256sums = 6bf5f825bb99858c1b4896c69a643b2724cfda885b3f8aa67e217830cbbbdf03
+	sha256sums = 2d2d8e431242d6c063fc5af1548110e13201aa647415b43ac85269903e03472d
 	sha256sums = 4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b
 	sha256sums = 210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761
 	sha256sums = e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c

Comment

The change only bumps pkgver from 154.0b1 to 154.0b3 in PKGBUILD. No build logic, sources, checksums, install scripts, or permissions were altered, and there are no new integrity or execution concerns visible in this diff. This is a routine version update with negligible security risk.

@@ -3,7 +3,7 @@
 
 pkgname=firefox-beta-bin
 _pkgname=firefox-beta
-pkgver=154.0b1
+pkgver=154.0b3
 _major=${pkgver/rc*}
 _build=${pkgver/*rc}
 pkgrel=1

Comment

The change is a straightforward upstream version bump for the Firefox beta binary package: it switches the Mozilla archive URL from 154.0b1 to 154.0b3 and updates the corresponding SHA-256 checksum. The source remains HTTPS on the official Mozilla archive, there are no new build-time downloads, scripts, patches, privilege changes, or packaging behavior changes in the diff. No security red flags are introduced by this hunk.

@@ -22,11 +22,11 @@ optdepends=('ffmpeg: H264/AAC/MP3 decoding'
 provides=("firefox=$pkgver")
 conflicts=('firefox-beta')
 install=$pkgname.install
-source=("https://archive.mozilla.org/pub/firefox/releases/154.0b1/linux-x86_64/en-US/firefox-154.0b1.tar.xz"
+source=("https://archive.mozilla.org/pub/firefox/releases/154.0b3/linux-x86_64/en-US/firefox-154.0b3.tar.xz"
         "$_pkgname.sh"
         "$pkgname.desktop"
         "policies.json")
-sha256sums=('6bf5f825bb99858c1b4896c69a643b2724cfda885b3f8aa67e217830cbbbdf03'
+sha256sums=('2d2d8e431242d6c063fc5af1548110e13201aa647415b43ac85269903e03472d'
             '4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b'
             '210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761'
             'e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c')