AUR AI Reviewer

Review Results

Version #1951 of megasync · commit 8d6b749bda43 · status Reviewed

Risk 0/5 · Safe .SRCINFO
Result #1313

Comment

The only change in this .SRCINFO hunk is a version bump from 6.5.0.2 to 6.5.1.0. No source URLs, checksums, build steps, install scripts, permissions, or package metadata that would affect trust boundaries were changed in the provided diff. Based on this hunk alone, there is no evident security impact.

@@ -1,6 +1,6 @@
 pkgbase = megasync
 	pkgdesc = Official MEGA desktop application for syncing with MEGA Cloud Drive
-	pkgver = 6.5.0.2
+	pkgver = 6.5.1.0
 	pkgrel = 1
 	url = https://github.com/meganz/MEGAsync/
 	arch = x86_64
Risk 0/5 · Safe .SRCINFO
Result #1314

Comment

The change is a straightforward version bump in .SRCINFO: it updates pkgver and switches the upstream MEGAsync git tag from v6.5.0.2_OSX to the newer v6.5.1.0_Linux, with the corresponding source checksum refreshed. The source remains an HTTPS GitHub URL pinned to a specific tag, and there are no new build-time commands, extra downloads, privilege changes, or packaging/persistence red flags in this diff. No security issue is evident from the metadata-only update.

@@ -30,12 +30,12 @@ pkgbase = megasync
 	depends = qt5-x11extras
 	depends = sqlite
 	depends = zlib
-	source = git+https://github.com/meganz/MEGAsync.git#tag=v6.5.0.2_OSX
+	source = git+https://github.com/meganz/MEGAsync.git#tag=v6.5.1.0_Linux
 	source = meganz-sdk::git+https://github.com/meganz/sdk.git
 	source = 010-megasync-sdk-fix-cmake-dependencies-detection.patch
 	source = 020-megasync-app-fix-cmake-dependencies-detection.patch
 	source = 030-megasync-app-disable-isolated-gfx-for-disabling-freeimage-in-sdk.patch
-	sha256sums = d8d97e125299fb9c061aa33cbbca050f49915925662ed40bb449be2cc57446b0
+	sha256sums = 17d7beec0cb9560c7211db098a22b8daf81894dec110be27fd5303501f210b6b
 	sha256sums = SKIP
 	sha256sums = 5219537875385e9399b1a76a5775722053880cdfc0c33b5726504e020e11ad70
 	sha256sums = a5883be2d00dbacaacf78231bfeeac27f4e8a471c3256370e94fec3e55b1d171
Risk 0/5 · Safe PKGBUILD
Result #1315

Comment

The change only bumps pkgver from 6.5.0.2 to 6.5.1.0 in PKGBUILD. No source URLs, build logic, install scripts, permissions, or packaging behavior are modified in the provided diff hunk. Based on this hunk alone, there are no new security concerns introduced.

@@ -7,7 +7,7 @@
 # Contributor: Hexchain Tong <i at hexchain dot org>
 
 pkgname=megasync
-pkgver=6.5.0.2
+pkgver=6.5.1.0
 pkgrel=1
 pkgdesc='Official MEGA desktop application for syncing with MEGA Cloud Drive'
 arch=('x86_64')
Risk 0/5 · Safe PKGBUILD
Result #1316

Comment

The change is a straightforward upstream version/tag bump and checksum update, with the source still fetched over HTTPS from the official MEGA GitHub repository. No new build steps, scripts, binaries, privilege changes, or packaging behavior were introduced. The only substantive change is switching from the macOS tag suffix to the Linux tag suffix for the same version, which is expected for a Linux package and does not itself indicate a security issue.

@@ -40,12 +40,12 @@ makedepends=(
     'cmake'
     'git'
     'qt5-tools')
-source=("git+https://github.com/meganz/MEGAsync.git#tag=v${pkgver}_OSX"
+source=("git+https://github.com/meganz/MEGAsync.git#tag=v${pkgver}_Linux"
         'meganz-sdk'::'git+https://github.com/meganz/sdk.git'
         '010-megasync-sdk-fix-cmake-dependencies-detection.patch'
         '020-megasync-app-fix-cmake-dependencies-detection.patch'
         '030-megasync-app-disable-isolated-gfx-for-disabling-freeimage-in-sdk.patch')
-sha256sums=('d8d97e125299fb9c061aa33cbbca050f49915925662ed40bb449be2cc57446b0'
+sha256sums=('17d7beec0cb9560c7211db098a22b8daf81894dec110be27fd5303501f210b6b'
             'SKIP'
             '5219537875385e9399b1a76a5775722053880cdfc0c33b5726504e020e11ad70'
             'a5883be2d00dbacaacf78231bfeeac27f4e8a471c3256370e94fec3e55b1d171'