Review Results

Comment

The change is a simple version bump in .SRCINFO from 37.0.0 to 37.0.1. No build logic, sources, checksums, install scripts, or package metadata beyond pkgver are altered in the provided diff. While the URL remains HTTP in the existing metadata, this commit does not introduce that issue or any new security-relevant behavior. Based on the reviewed hunk alone, there is no evidence of malicious or risky behavior.

@@ -1,6 +1,6 @@
 pkgbase = android-sdk-platform-tools
 	pkgdesc = Platform-Tools for Google Android SDK (adb and fastboot)
-	pkgver = 37.0.0
+	pkgver = 37.0.1
 	pkgrel = 1
 	url = http://developer.android.com/sdk/index.html
 	install = android-sdk-platform-tools.install

Comment

The change is a straightforward version bump in .SRCINFO from platform-tools_r37.0.0 to r37.0.1 with corresponding checksum updates. The source remains the official Google HTTPS download URL, there are no new sources, scripts, or packaging logic changes, and .SRCINFO only records metadata for the existing PKGBUILD. No security-relevant red flags are introduced by this diff alone.

@@ -11,13 +11,13 @@ pkgbase = android-sdk-platform-tools
 	provides = adb
 	provides = android-tools
 	conflicts = adb
-	source = https://dl.google.com/android/repository/platform-tools_r37.0.0-linux.zip
+	source = https://dl.google.com/android/repository/platform-tools_r37.0.1-linux.zip
 	source = adb.service
 	source = license.html
 	source = package.xml
-	sha1sums = bcf323933980a59dccc3f14c339aed5fb2171163
+	sha1sums = 477254aa5f903c15cf51001717bdf347fb6b53e0
 	sha1sums = 49a40c129199844603afe71fce69c0908e062393
 	sha1sums = bfb91be7e0b602d765b7a1fcaf0ce1b7e1a93faa
-	sha1sums = 72a5dcc9c3f3e1985e6b6ac8b315875e50a7c18f
+	sha1sums = 8692a0016d7ec8710217a83c324a40649991f829
 
 pkgname = android-sdk-platform-tools

Comment

The change is a simple version bump in PKGBUILD from 37.0.0 to 37.0.1 with no other modifications. No new sources, build steps, install scripts, permissions changes, or dependency changes are introduced in the provided diff. Based on the diff alone, there are no security red flags.

@@ -4,7 +4,7 @@
 # Contributor: Christoph Bayer <chrbayer@criby.de>
 
 pkgname=android-sdk-platform-tools
-pkgver=37.0.0
+pkgver=37.0.1
 pkgrel=1
 pkgdesc='Platform-Tools for Google Android SDK (adb and fastboot)'
 arch=('x86_64')

Comment

The change only updates SHA1 checksums for existing upstream/downloaded files in PKGBUILD. The source URL remains the official Google HTTPS endpoint, there are no new sources, no build-time network fetches, no install-script changes, and no packaging logic changes. This is a low-risk integrity metadata update consistent with a new upstream release artifact.

@@ -18,10 +18,10 @@ source=("https://dl.google.com/android/repository/platform-tools_r${pkgver}-linu
         'adb.service'
         'license.html'
         'package.xml')
-sha1sums=('bcf323933980a59dccc3f14c339aed5fb2171163'
+sha1sums=('477254aa5f903c15cf51001717bdf347fb6b53e0'
           '49a40c129199844603afe71fce69c0908e062393'
           'bfb91be7e0b602d765b7a1fcaf0ce1b7e1a93faa'
-          '72a5dcc9c3f3e1985e6b6ac8b315875e50a7c18f')
+          '8692a0016d7ec8710217a83c324a40649991f829')
 
 package() {
   install -Dm644 "${srcdir}/adb.service" "${pkgdir}/usr/lib/systemd/system/adb.service"

Comment

The change is limited to namespace declarations in package.xml, updating/adding XML namespace aliases for newer Android repository schema versions. There are no executable changes, no source downloads, no install scripts, and no packaging behavior changes. This appears to be a benign metadata/schema update with no security impact.

@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
-<ns2:repository xmlns:ns2="http://schemas.android.com/repository/android/common/02" xmlns:ns3="http://schemas.android.com/repository/android/common/01" xmlns:ns4="http://schemas.android.com/repository/android/generic/01" xmlns:ns5="http://schemas.android.com/repository/android/generic/02" xmlns:ns6="http://schemas.android.com/sdk/android/repo/repository2/01" xmlns:ns7="http://schemas.android.com/sdk/android/repo/repository2/02" xmlns:ns8="http://schemas.android.com/sdk/android/repo/repository2/03" xmlns:ns9="http://schemas.android.com/sdk/android/repo/addon2/01" xmlns:ns10="http://schemas.android.com/sdk/android/repo/addon2/02" xmlns:ns11="http://schemas.android.com/sdk/android/repo/addon2/03" xmlns:ns12="http://schemas.android.com/sdk/android/repo/sys-img2/04" xmlns:ns13="http://schemas.android.com/sdk/android/repo/sys-img2/03" xmlns:ns14="http://schemas.android.com/sdk/android/repo/sys-img2/02" xmlns:ns15="http://schemas.android.com/sdk/android/repo/sys-img2/01">
+<ns2:repository xmlns:ns2="http://schemas.android.com/repository/android/common/02" xmlns:ns3="http://schemas.android.com/repository/android/common/01" xmlns:ns4="http://schemas.android.com/repository/android/generic/01" xmlns:ns5="http://schemas.android.com/repository/android/generic/02" xmlns:ns6="http://schemas.android.com/sdk/android/repo/repository2/04" xmlns:ns7="http://schemas.android.com/sdk/android/repo/repository2/01" xmlns:ns8="http://schemas.android.com/sdk/android/repo/repository2/02" xmlns:ns9="http://schemas.android.com/sdk/android/repo/repository2/03" xmlns:ns10="http://schemas.android.com/sdk/android/repo/addon2/01" xmlns:ns11="http://schemas.android.com/sdk/android/repo/addon2/02" xmlns:ns12="http://schemas.android.com/sdk/android/repo/addon2/03" xmlns:ns13="http://schemas.android.com/sdk/android/repo/addon2/04" xmlns:ns14="http://schemas.android.com/sdk/android/repo/sys-img2/05" xmlns:ns15="http://schemas.android.com/sdk/android/repo/sys-img2/04" xmlns:ns16="http://schemas.android.com/sdk/android/repo/sys-img2/03" xmlns:ns17="http://schemas.android.com/sdk/android/repo/sys-img2/02" xmlns:ns18="http://schemas.android.com/sdk/android/repo/sys-img2/01">
     <license id="android-sdk-license" type="text">Terms and Conditions
 
 This is the Android Software Development Kit License Agreement

Comment

The change is a one-line version bump in package.xml from platform-tools 37.0.0 to 37.0.1. No build logic, install scripts, sources, permissions, or network behavior are affected by this diff. Based on the provided hunk alone, there are no security red flags.

@@ -146,7 +146,7 @@ January 16, 2019</license>
         <revision>
             <major>37</major>
             <minor>0</minor>
-            <micro>0</micro>
+            <micro>1</micro>
         </revision>
         <display-name>Android SDK Platform-Tools</display-name>
         <uses-license ref="android-sdk-license"/>