Review Results

Comment

The change is a straightforward version bump in .SRCINFO from sabctools 9.4.0 to 9.6.3, with the source URL and sha512 checksum updated accordingly. The source remains an HTTPS PyPI tarball, there are no new build-time commands, no added install scripts, no VCS floating references, and no suspicious metadata changes (depends/conflicts/provides unchanged). Based on the provided diff, this looks like a routine package update with no evident security red flags.

@@ -1,12 +1,12 @@
 pkgbase = python-sabctools
 	pkgdesc = implements three main sets of C implementations that are used within SABnzbd
-	pkgver = 9.4.0
+	pkgver = 9.6.3
 	pkgrel = 1
 	url = https://github.com/sabnzbd/sabctools/
 	arch = any
 	license = GPL-2.0-only
 	makedepends = python-setuptools
-	source = https://files.pythonhosted.org/packages/source/s/sabctools/sabctools-9.4.0.tar.gz
-	sha512sums = 33640622cc353b8dfce9a63f2aaeee351274be80da1ce829f25198f353fc1dc0de23f271cc326684739c7493096abbc5c2a38411c5784dde5b7ac5bce0773e6f
+	source = https://files.pythonhosted.org/packages/source/s/sabctools/sabctools-9.6.3.tar.gz
+	sha512sums = 93b0aa3c6a56665e481a648cbd70c1b3161f6341a1188e2f6084ee640ea05cbdd648de0b81b83b0088890109d592a531f778562893a410fe38844cb83cdef852
 
 pkgname = python-sabctools

Comment

The change only bumps pkgver from 9.4.0 to 9.6.3 and updates the corresponding PyPI tarball checksum. The source remains an HTTPS PyPI release tarball, there are no new build steps, no added scripts, and no packaging/persistence red flags in the diff. Based on the provided hunk, this is a routine version update with no evident security impact.

@@ -4,7 +4,7 @@
 pkgbase=python-sabctools
 pkgname='python-sabctools'
 _name=sabctools
-pkgver=9.4.0
+pkgver=9.6.3
 pkgrel=1
 pkgdesc="implements three main sets of C implementations that are used within SABnzbd"
 arch=('any')

Comment

The change only updates python-sabctools from 9.4.0 to 9.6.3 and refreshes the corresponding SHA-512 checksum for the PyPI source tarball. The source remains an HTTPS PyPI URL, there are no new build-time downloads, no added scripts, and package() still installs into $pkgdir only. No obvious supply-chain or privilege-escalation concerns are introduced by this diff.

@@ -12,7 +12,7 @@ url="https://github.com/sabnzbd/sabctools/"
 license=(GPL-2.0-only)
 makedepends=('python-setuptools')
 source=("https://files.pythonhosted.org/packages/source/${_name::1}/${_name}/${_name}-${pkgver}.tar.gz")
-sha512sums=('33640622cc353b8dfce9a63f2aaeee351274be80da1ce829f25198f353fc1dc0de23f271cc326684739c7493096abbc5c2a38411c5784dde5b7ac5bce0773e6f')
+sha512sums=('93b0aa3c6a56665e481a648cbd70c1b3161f6341a1188e2f6084ee640ea05cbdd648de0b81b83b0088890109d592a531f778562893a410fe38844cb83cdef852')
 
 package() {
   cd "${srcdir}/${_name}-${pkgver}"