Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 5.34.2 to 5.35.0. No sources, checksums, build commands, install scripts, or packaging metadata affecting trust boundaries were changed in the provided diff. Based on this hunk alone, there is no evident security impact.

@@ -1,6 +1,6 @@
 pkgbase = c++utilities
 	pkgdesc = Common C++ classes and routines such as argument parser, IO and conversion utilities
-	pkgver = 5.34.2
+	pkgver = 5.35.0
 	pkgrel = 1
 	url = https://github.com/Martchus/cpp-utilities
 	arch = i686

Comment

The change is a straightforward upstream version bump in .SRCINFO from 5.34.2 to 5.35.0, with the source URL still using HTTPS to the official GitHub upstream and a matching updated SHA256 checksum. No new sources, scripts, install hooks, or packaging behavior are introduced by this diff hunk. Based on the provided change alone, there are no security red flags.

@@ -17,7 +17,7 @@ pkgbase = c++utilities
 	depends = libgcc
 	optdepends = c++utilities-doc: API documentation
 	provides = libc++utilities.so
-	source = c++utilities-5.34.2.tar.gz::https://github.com/Martchus/cpp-utilities/archive/v5.34.2.tar.gz
-	sha256sums = df3a63f99612046b0302fba4b7a217e31ec2becc0e5afa8937841b4d2241ff8d
+	source = c++utilities-5.35.0.tar.gz::https://github.com/Martchus/cpp-utilities/archive/v5.35.0.tar.gz
+	sha256sums = f9e2171ba59a6588afac03b7a8f019ea3170522e96786b2ade5f8f2c9a9157bb
 
 pkgname = c++utilities

Comment

The change is a straightforward version bump from 5.34.2 to 5.35.0 with the corresponding source tarball checksum update. The source remains an HTTPS GitHub release archive from the upstream project, there are no new build steps, no added scripts, and no packaging behavior changes. No security red flags are introduced by this diff alone.

@@ -5,7 +5,7 @@
 
 _reponame=cpp-utilities
 pkgname=c++utilities
-pkgver=5.34.2
+pkgver=5.35.0
 pkgrel=1
 arch=('i686' 'x86_64' 'armv6h' 'armv7h' 'aarch64')
 pkgdesc='Common C++ classes and routines such as argument parser, IO and conversion utilities'

Comment

The change only updates the SHA-256 checksum for the upstream release tarball in PKGBUILD. Source remains the official GitHub release archive over HTTPS, with no new build steps, scripts, dependencies, or packaging behavior introduced. I see no security-relevant regression in this diff hunk.

@@ -17,7 +17,7 @@ checkdepends=('cppunit')
 provides=(libc++utilities.so)
 url="https://github.com/Martchus/${_reponame}"
 source=("${pkgname}-${pkgver}.tar.gz::https://github.com/Martchus/${_reponame}/archive/v${pkgver}.tar.gz")
-sha256sums=('df3a63f99612046b0302fba4b7a217e31ec2becc0e5afa8937841b4d2241ff8d')
+sha256sums=('f9e2171ba59a6588afac03b7a8f019ea3170522e96786b2ade5f8f2c9a9157bb')
 
 build() {
   cd "$srcdir/${PROJECT_DIR_NAME:-$_reponame-$pkgver}"