Review Results

Comment

The change is a straightforward version bump in .SRCINFO from 154.0b3 to 154.0b4 for the Firefox Beta binary package. No new sources, scripts, checksums, dependencies, install hooks, or packaging behavior are introduced by this diff. Based on the provided hunk alone, there are no security red flags.

@@ -1,6 +1,6 @@
 pkgbase = firefox-beta-bin
 	pkgdesc = Standalone web browser from mozilla.org - Beta
-	pkgver = 154.0b3
+	pkgver = 154.0b4
 	pkgrel = 1
 	url = https://www.mozilla.org/en-US/firefox/channel/#beta
 	install = firefox-beta-bin.install

Comment

The change is a routine version bump in .SRCINFO from Firefox beta 154.0b3 to 154.0b4, updating the upstream archive URL, provided virtual version, and matching SHA256 for the tarball. No new sources, scripts, build steps, permissions, or install-time behavior are introduced by this diff. The source remains on Mozilla's HTTPS archive and is pinned to a specific release tarball, so there is no supply-chain red flag in the reviewed hunk.

@@ -21,13 +21,13 @@ pkgbase = firefox-beta-bin
 	optdepends = networkmanager: Location detection via available WiFi networks
 	optdepends = pulseaudio: Sound
 	optdepends = upower: Battery API
-	provides = firefox=154.0b3
+	provides = firefox=154.0b4
 	conflicts = firefox-beta
-	source = https://archive.mozilla.org/pub/firefox/releases/154.0b3/linux-x86_64/en-US/firefox-154.0b3.tar.xz
+	source = https://archive.mozilla.org/pub/firefox/releases/154.0b4/linux-x86_64/en-US/firefox-154.0b4.tar.xz
 	source = firefox-beta.sh
 	source = firefox-beta-bin.desktop
 	source = policies.json
-	sha256sums = 2d2d8e431242d6c063fc5af1548110e13201aa647415b43ac85269903e03472d
+	sha256sums = e2038478dea478cbea75296647e488840e1d46328c12208d1b764b203d5c2b1d
 	sha256sums = 4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b
 	sha256sums = 210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761
 	sha256sums = e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c

Comment

The change is a simple version bump in PKGBUILD from 154.0b3 to 154.0b4. No build logic, sources, checksums, install scripts, or packaging behavior changed, and there are no new integrity or execution red flags in the provided diff. This appears to be a routine upstream version update with minimal security risk.

@@ -3,7 +3,7 @@
 
 pkgname=firefox-beta-bin
 _pkgname=firefox-beta
-pkgver=154.0b3
+pkgver=154.0b4
 _major=${pkgver/rc*}
 _build=${pkgver/*rc}
 pkgrel=1

Comment

The change is a routine upstream version bump for the Firefox beta binary package: it updates the Mozilla archive URL from 154.0b3 to 154.0b4 and refreshes the corresponding SHA-256 checksum. The source remains HTTPS on the official Mozilla archive, there are no new build-time downloads, scripts, patches, privilege changes, or packaging behavior changes in this diff. No security red flags are introduced by this hunk.

@@ -22,11 +22,11 @@ optdepends=('ffmpeg: H264/AAC/MP3 decoding'
 provides=("firefox=$pkgver")
 conflicts=('firefox-beta')
 install=$pkgname.install
-source=("https://archive.mozilla.org/pub/firefox/releases/154.0b3/linux-x86_64/en-US/firefox-154.0b3.tar.xz"
+source=("https://archive.mozilla.org/pub/firefox/releases/154.0b4/linux-x86_64/en-US/firefox-154.0b4.tar.xz"
         "$_pkgname.sh"
         "$pkgname.desktop"
         "policies.json")
-sha256sums=('2d2d8e431242d6c063fc5af1548110e13201aa647415b43ac85269903e03472d'
+sha256sums=('e2038478dea478cbea75296647e488840e1d46328c12208d1b764b203d5c2b1d'
             '4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b'
             '210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761'
             'e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c')