Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 2026.2.0.1 to 2026.2.1. No sources, checksums, install scripts, dependencies, or build logic changed, so there is no new security-relevant behavior to assess from this diff alone. This appears to be a routine package update metadata change.

@@ -1,6 +1,6 @@
 pkgbase = webstorm
 	pkgdesc = JavaScript IDE and HTML editor
-	pkgver = 2026.2.0.1
+	pkgver = 2026.2.1
 	pkgrel = 1
 	url = https://www.jetbrains.com/webstorm/
 	arch = x86_64

Comment

The change is a straightforward upstream version bump in .SRCINFO from WebStorm 2026.2.0.1 to 2026.2.1, with the corresponding BLAKE2 checksum updated for the tarball. The source remains the official JetBrains HTTPS download URL, and there are no new sources, scripts, build steps, or packaging directives introduced in this diff. No security red flags are evident from this metadata-only update.

@@ -8,10 +8,10 @@ pkgbase = webstorm
 	license = custom:jetbrains
 	depends = glib2
 	options = !strip
-	source = https://download.jetbrains.com/webstorm/WebStorm-2026.2.0.1.tar.gz
+	source = https://download.jetbrains.com/webstorm/WebStorm-2026.2.1.tar.gz
 	source = jetbrains-webstorm.desktop
 	source = LICENSE
-	b2sums = 284b3b21abb66116e2ec25e93ca2bd17ece4fa5436bcda3bfd20e648a56865c0260e390121cadbbb1fe955a0f5337d69273970a6aa15e2d21ae3cf8adac300be
+	b2sums = eff74e5e1d8c4a524a3f3d203cd8ea57374781b191ee008cd059c24b6ea9bc815fe8ecc8336da7b00df04cd69764d2e021c775c7d6377071affd19b2ed1ee982
 	b2sums = a7c2c63112c967b1a866c2f27b5f4181a4a6a5666803a7a44fd9c4b707f69e69d21fbd8f95669f12e139838a3a90c730788f645cc303aed1ed78689637ec61ea
 	b2sums = dadaf0e67b598aa7a7a4bf8644943a7ee8ebf4412abb17cd307f5989e36caf9d0db529a0e717a9df5d9537b10c4b13e814b955ada6f0d445913c812b63804e77
 

Comment

The change is a routine version bump for an upstream JetBrains release. The source remains an HTTPS download from the official JetBrains domain, and the only other modification is the corresponding b2 checksum update. No new build steps, scripts, privileges, network fetches, or packaging behavior were introduced in this diff. Risk is low.

@@ -4,7 +4,7 @@
 
 pkgbase=webstorm
 pkgname=(webstorm webstorm-jre)
-pkgver=2026.2.0.1
+pkgver=2026.2.1
 pkgrel=1
 pkgdesc='JavaScript IDE and HTML editor'
 arch=('x86_64' 'i686')

Comment

The change is limited to bumping WebStorm from 2026.2.0.1 to 2026.2.1 and updating the corresponding b2sum for the upstream tarball. The source remains the official JetBrains HTTPS download URL, with no new build-time downloads, scripts, patches, privilege changes, or packaging logic changes. I don’t see any supply-chain or persistence red flags in this diff.

@@ -15,7 +15,7 @@ options=('!strip')
 source=("https://download.jetbrains.com/webstorm/WebStorm-${pkgver}.tar.gz"
         jetbrains-webstorm.desktop
         LICENSE)
-b2sums=('284b3b21abb66116e2ec25e93ca2bd17ece4fa5436bcda3bfd20e648a56865c0260e390121cadbbb1fe955a0f5337d69273970a6aa15e2d21ae3cf8adac300be'
+b2sums=('eff74e5e1d8c4a524a3f3d203cd8ea57374781b191ee008cd059c24b6ea9bc815fe8ecc8336da7b00df04cd69764d2e021c775c7d6377071affd19b2ed1ee982'
         'a7c2c63112c967b1a866c2f27b5f4181a4a6a5666803a7a44fd9c4b707f69e69d21fbd8f95669f12e139838a3a90c730788f645cc303aed1ed78689637ec61ea'
         'dadaf0e67b598aa7a7a4bf8644943a7ee8ebf4412abb17cd307f5989e36caf9d0db529a0e717a9df5d9537b10c4b13e814b955ada6f0d445913c812b63804e77')