Review Results

Comment

The change only bumps pkgver in .SRCINFO from 153.0.7979.3 to 153.0.7993.0. No build logic, sources, checksums, install scripts, or packaging metadata beyond the version number changed. On its face this is a routine upstream version update with no added security red flags in the reviewed hunk.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome-dev
 	pkgdesc = The popular web browser by Google (Dev Channel)
-	pkgver = 153.0.7979.3
+	pkgver = 153.0.7993.0
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome-dev.install

Comment

The change only updates the pinned upstream Google Chrome Dev .deb URLs and their SHA-512 checksums to a newer version. The sources remain HTTPS from the official dl.google.com domain, and there is no evidence in this diff of added scripts, build-time downloads, privilege escalation, or packaging changes. This is a routine version bump with integrity hashes updated accordingly, so I do not see a security issue in the reviewed hunk.

@@ -26,9 +26,9 @@ pkgbase = google-chrome-dev
 	source = google-chrome-unstable.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = 445eb36a588f49af018ded3d852b63e0523ffac20c25be721f3ef4663591256849432bebb3d9f352e4f53cbe1fb77fa67cf8911c9161f826490a21adbdcc81f4
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_153.0.7979.3-1_amd64.deb
-	sha512sums_x86_64 = 9652dd0f2dff5f72e7c3b2effa7ab7c7df32eae231356294cbd24c8d14d67be5075b9add91eec436a94bda68a1be6182bb33bd1a66d808fa5d28ddc0bd190b3b
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_153.0.7979.3-1_arm64.deb
-	sha512sums_aarch64 = c79e3ba60a3b01165111d5c9749468144ade104ed932b8d5d7ed63737b3fab453593af57c3be67c2561eb5a5fd652bbcce4cbeac32adf8f0f41cc0bf0b122993
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_153.0.7993.0-1_amd64.deb
+	sha512sums_x86_64 = 3d9820c8b3c3dd476807a64c69d6176decd0507ba78c1caff1755837783b523c513a5eeb08fe72c5984a33010979a3ceca86574395799b45ae64c2e5a1fffea2
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_153.0.7993.0-1_arm64.deb
+	sha512sums_aarch64 = 68cefa2a698adeb6007b48bdffd77c972d7b7996e2227a25e18770da0d439291ed7f4f3394e89c477d10dace0d74ddeea1fbb38eff69f7aeb70f88242d783f8b
 
 pkgname = google-chrome-dev

Comment

The change is a routine version bump in PKGBUILD from 153.0.7979.3 to 153.0.7993.0 with no accompanying changes to sources, checksums, build logic, install scripts, or packaging behavior. Based on the provided diff hunk, there are no new security red flags such as added network fetches, privilege escalation, persistence, or integrity bypasses. Risk is minimal.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-unstable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome-dev
-pkgver=153.0.7979.3
+pkgver=153.0.7993.0
 pkgrel=1
 pkgdesc="The popular web browser by Google (Dev Channel)"
 arch=(

Comment

The change only updates architecture-specific SHA-512 checksums for the Google Chrome Dev .deb sources. Source URLs remain HTTPS and point to the official Google download host, with no new build-time execution, install-script, or packaging behavior changes. This is a routine integrity update with no evident security regression in the diff provided.

@@ -42,8 +42,8 @@ source=(
 )
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             '445eb36a588f49af018ded3d852b63e0523ffac20c25be721f3ef4663591256849432bebb3d9f352e4f53cbe1fb77fa67cf8911c9161f826490a21adbdcc81f4')
-sha512sums_x86_64=('9652dd0f2dff5f72e7c3b2effa7ab7c7df32eae231356294cbd24c8d14d67be5075b9add91eec436a94bda68a1be6182bb33bd1a66d808fa5d28ddc0bd190b3b')
-sha512sums_aarch64=('c79e3ba60a3b01165111d5c9749468144ade104ed932b8d5d7ed63737b3fab453593af57c3be67c2561eb5a5fd652bbcce4cbeac32adf8f0f41cc0bf0b122993')
+sha512sums_x86_64=('3d9820c8b3c3dd476807a64c69d6176decd0507ba78c1caff1755837783b523c513a5eeb08fe72c5984a33010979a3ceca86574395799b45ae64c2e5a1fffea2')
+sha512sums_aarch64=('68cefa2a698adeb6007b48bdffd77c972d7b7996e2227a25e18770da0d439291ed7f4f3394e89c477d10dace0d74ddeea1fbb38eff69f7aeb70f88242d783f8b')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")