Review Results

Comment

The change only bumps pkgver in .SRCINFO from 12.22.3 to 12.22.8. No source URLs, build logic, install scripts, permissions, or packaging behavior are altered in the reviewed diff. On its face this is a routine version metadata update with no security-relevant indicators in the provided hunk.

@@ -1,6 +1,6 @@
 pkgbase = postman-bin
 	pkgdesc = Build, test, and document your APIs faster
-	pkgver = 12.22.3
+	pkgver = 12.22.8
 	pkgrel = 1
 	url = https://www.getpostman.com
 	arch = x86_64

Comment

The change only updates the pinned upstream Postman release from 12.22.3 to 12.22.8 for x86_64 and aarch64, along with matching SHA-256 checksums in .SRCINFO. The download URLs remain HTTPS on the official Postman domain, and there are no new build-time commands, scripts, or privilege-related changes in this diff. This looks like a routine version bump with integrity metadata updated accordingly.

@@ -38,9 +38,9 @@ pkgbase = postman-bin
 	options = !strip
 	source = postman.desktop
 	sha256sums = d87542ac18455ff341da7c5efd01db96a01f659b1bf546840aa4ac8bd085802d
-	source_x86_64 = postman-12.22.3-linux-x86_64.tar.gz::https://dl.pstmn.io/download/version/12.22.3/linux64
-	sha256sums_x86_64 = 6c92039178292460c17d28ac0b07b82ab797bed55c018701d82310189bdf4c54
-	source_aarch64 = postman-12.22.3-linux-aarch64.tar.gz::https://dl.pstmn.io/download/version/12.22.3/linux_arm64
-	sha256sums_aarch64 = 9a8a2d8c50ad3e9541c79ef5ab9c93bda062d0990ae46c8ed1646538432d0d8e
+	source_x86_64 = postman-12.22.8-linux-x86_64.tar.gz::https://dl.pstmn.io/download/version/12.22.8/linux64
+	sha256sums_x86_64 = 503beef8158772edea807517f88220b4ed2e2891dfab5a4ab0181d906bf79e0e
+	source_aarch64 = postman-12.22.8-linux-aarch64.tar.gz::https://dl.pstmn.io/download/version/12.22.8/linux_arm64
+	sha256sums_aarch64 = 45701bda630b843174c1a32d3364610cbb7cc979a88ca894bb305c8011454457
 
 pkgname = postman-bin

Comment

The change is a straightforward version bump for a prebuilt upstream binary package, with updated SHA-256 checksums for the new release artifacts. The source URLs remain HTTPS and point to the vendor’s download host, and there are no new build steps, scripts, privilege changes, or additional sources introduced in this diff. No security-relevant red flags are present in the reviewed hunk.

@@ -4,7 +4,7 @@
 # Contributor: Juan Francisco Miranda <jfmiranda at gmail dot com>
 
 pkgname=postman-bin
-pkgver=12.22.3
+pkgver=12.22.8
 pkgrel=1
 pkgdesc="Build, test, and document your APIs faster"
 provides=('postman')

Comment

The change only bumps postman-bin from 12.22.3 to 12.22.8 and updates the corresponding SHA-256 checksums for the x86_64 and aarch64 upstream tarballs. The source URLs remain HTTPS and point to the official Postman download host, with no new build-time code execution, no added scripts, and no packaging changes beyond integrity metadata. Based on the diff shown, this is a routine version/checksum update with no evident security red flags.

@@ -20,8 +20,8 @@ source_x86_64=("postman-${pkgver}-linux-${arch[0]}.tar.gz::https://dl.pstmn.io/d
 source_aarch64=("postman-${pkgver}-linux-${arch[1]}.tar.gz::https://dl.pstmn.io/download/version/${pkgver}/linux_arm64")
 
 sha256sums=('d87542ac18455ff341da7c5efd01db96a01f659b1bf546840aa4ac8bd085802d')
-sha256sums_x86_64=('6c92039178292460c17d28ac0b07b82ab797bed55c018701d82310189bdf4c54')
-sha256sums_aarch64=('9a8a2d8c50ad3e9541c79ef5ab9c93bda062d0990ae46c8ed1646538432d0d8e')
+sha256sums_x86_64=('503beef8158772edea807517f88220b4ed2e2891dfab5a4ab0181d906bf79e0e')
+sha256sums_aarch64=('45701bda630b843174c1a32d3364610cbb7cc979a88ca894bb305c8011454457')
 
 package() {
   install -dm755 "${pkgdir}/opt/"