Review Results

Comment

The change only adjusts runtime dependencies from versioned Lua 5.4 packages (`lua54`, `lua54-lgi`) to the unversioned `lua`/`lua-lgi` packages. This does not introduce new code execution paths, network fetches, privilege changes, or packaging/install-script behavior. The main effect is dependency flexibility and potential ABI/runtime compatibility differences, but not a security issue in itself.

@@ -16,7 +16,7 @@ arch=('i686' 'x86_64')
 url='https://awesomewm.org/'
 license=('GPL2')
 depends=('cairo' 'dbus' 'gdk-pixbuf2' 'libxdg-basedir' 'libxkbcommon-x11'
-         'lua54' 'lua54-lgi' 'pango' 'startup-notification' 'xcb-util-cursor'
+         'lua' 'lua-lgi' 'pango' 'startup-notification' 'xcb-util-cursor'
          'xcb-util-keysyms' 'xcb-util-wm' 'xcb-util-xrm' 'libxfixes')
 makedepends=('asciidoctor' 'cmake' 'docbook-xsl' 'git' 'imagemagick' 'ldoc'
              'xmlto')

Comment

The change only bumps the Lua version variable from 5.4 to 5.5 in PKGBUILD. This does not introduce new sources, network fetches, privilege changes, install-script behavior, or packaging red flags. I did not see any security-relevant impact from this diff alone.

@@ -31,7 +31,7 @@ backup=('etc/xdg/awesome/rc.lua')
 source=("$pkgname::git+https://github.com/awesomeWM/awesome.git")
 md5sums=('SKIP')
 
-_LUA_VER=5.4
+_LUA_VER=5.5
 _BUILD_DOCS=${_BUILD_DOCS:-0}
 
 pkgver() {