Review Results

Comment

The change only bumps pkgver in .SRCINFO from 1.32.8 to 1.32.9. No build logic, sources, checksums, install scripts, or packaging behavior changed in the reviewed hunk. This is a metadata-only version update with no security-relevant impact visible in the provided diff.

@@ -1,6 +1,6 @@
 pkgbase = gallery-dl
 	pkgdesc = Command-line program to download image-galleries and collections from several image hosting sites
-	pkgver = 1.32.8
+	pkgver = 1.32.9
 	pkgrel = 1
 	url = https://codeberg.org/mikf/gallery-dl
 	arch = any

Comment

The change is a straightforward version bump in .SRCINFO from gallery-dl v1.32.8 to v1.32.9, with the corresponding source checksum updated. The source remains an HTTPS tag-pinned upstream Codeberg repository and still uses the existing PGP key, so there is no new supply-chain or build-time execution risk visible in this diff. No install scripts, patches, or packaging behavior changed.

@@ -27,8 +27,8 @@ pkgbase = gallery-dl
 	optdepends = python-psycopg: PostgreSQL support
 	optdepends = python-truststore: Support using system certificates
 	optdepends = python-jinja: Jinja template support
-	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.8?signed
+	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.9?signed
 	validpgpkeys = 3E09F5908333DD83DBDCE7375680CA389D365A88
-	sha512sums = b11e4db8310f97c362ae3d97b893907f089caa0b9ab00c98215690612427ac4db3982851f3d75af125f8a764e92c9cb76a8ef1a55949e61a46a896e5422a2e7b
+	sha512sums = 9899a2660b7847c0b640f4b6cc441dbecad64a6f7e4c441e8b6b68a13e37902de73f568e601863d795efc6a003d041a3e3e450f5bae3729ab37a07c604db5066
 
 pkgname = gallery-dl

Comment

The change is a routine version bump in PKGBUILD from 1.32.8 to 1.32.9, with the source tag and sha512 checksum updated accordingly. The package still uses an HTTPS git source pinned to a signed tag, and there are no added build-time downloads, scripts, privilege changes, or packaging behavior changes in this diff. No security concerns are evident from this version-only update.

@@ -2,7 +2,7 @@
 # Contributor: LLL2yu <lll2yu@protonmail.com>
 
 pkgname=gallery-dl
-pkgver=1.32.8
+pkgver=1.32.9
 pkgrel=1
 pkgdesc='Command-line program to download image-galleries and collections from several image hosting sites'
 arch=(any)

Comment

The change is a straightforward version bump from 1.32.8 to 1.32.9 with an updated sha512 checksum. The source remains the upstream signed git tag over HTTPS, and there are no new build steps, scripts, network fetches, privilege changes, or packaging behavior changes in the diff. I did not find any security-relevant regression in this hunk.

@@ -29,7 +29,7 @@ optdepends=(
 )
 source=(git+"${url}".git#tag=v"${pkgver}"?signed)
 validpgpkeys=(3E09F5908333DD83DBDCE7375680CA389D365A88) #Mike Fährmann
-sha512sums=('b11e4db8310f97c362ae3d97b893907f089caa0b9ab00c98215690612427ac4db3982851f3d75af125f8a764e92c9cb76a8ef1a55949e61a46a896e5422a2e7b')
+sha512sums=('9899a2660b7847c0b640f4b6cc441dbecad64a6f7e4c441e8b6b68a13e37902de73f568e601863d795efc6a003d041a3e3e450f5bae3729ab37a07c604db5066')
 
 prepare() {
     # Clean out old wheels etc.