Review Results

Comment

The only change in this .SRCINFO hunk is a pkgver bump from 152.0.7977.8 to 152.0.7977.13. No source URLs, checksums, build logic, install scripts, or package metadata affecting trust boundaries changed. On its face this is a routine upstream version update with no security red flags in the provided diff.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome-beta
 	pkgdesc = The popular web browser by Google (Beta Channel)
-	pkgver = 152.0.7977.8
+	pkgver = 152.0.7977.13
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome-beta.install

Comment

The change only updates the pinned upstream Google Chrome beta .deb URLs and their SHA-512 checksums in .SRCINFO from 152.0.7977.8-1 to 152.0.7977.13-1 for x86_64 and aarch64. The source remains on Google's official HTTPS domain, and there are no new scripts, build steps, privilege changes, or other suspicious artifacts in this diff. This looks like a routine version bump with integrity hashes updated accordingly.

@@ -26,9 +26,9 @@ pkgbase = google-chrome-beta
 	source = google-chrome-beta.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = 17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_152.0.7977.8-1_amd64.deb
-	sha512sums_x86_64 = 5eec818a4d740aadf1df88e8f563a72c1e5d68614d610b0bd25c0602ba6a014956c09cbbc66029acd5214e6d83061720ec8fc03320781c05e6ede92db6677bb2
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_152.0.7977.8-1_arm64.deb
-	sha512sums_aarch64 = fae931ec1efe925d70d7b4398ddb8dba6d4a66541a8ed8db35f011aebd8a52d2c3e7e3ef8401245a0d142b0c959ca088c4b185dfb0d1df33563dcbbe90248270
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_152.0.7977.13-1_amd64.deb
+	sha512sums_x86_64 = e04ce322d35c0db141b1efbf9d7581d8cd1412d4c572f9fe5ef4392ffd09deb823208c33750f80bbdfb8d93f2b14eb4f21e9c8fc7313b77bf69a20f1d4e6dd98
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_152.0.7977.13-1_arm64.deb
+	sha512sums_aarch64 = 9992f92a31e343f24120cd420dbabea28fbf7c573a9d9c871f3f244b65d4ae0513757f021414555ee11cc247d9e30ab9934cacc092e32be3d29a2a99b344de20
 
 pkgname = google-chrome-beta

Comment

The change is a simple version bump in PKGBUILD from 152.0.7977.8 to 152.0.7977.13 with no other logic changes. There are no new sources, build steps, install scripts, permissions changes, or packaging behavior changes in the provided diff. On its face this is a routine upstream beta update and does not introduce an obvious security concern in the reviewed hunk.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-beta" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome-beta
-pkgver=152.0.7977.8
+pkgver=152.0.7977.13
 pkgrel=1
 pkgdesc="The popular web browser by Google (Beta Channel)"
 arch=(

Comment

The change only updates the SHA-512 checksums for the architecture-specific Google Chrome .deb sources. The source URLs remain HTTPS and point to the official Google download host, with no new build-time execution, install-script, or packaging behavior changes. This is a routine integrity hash refresh and does not introduce a security concern in the diff itself.

@@ -42,8 +42,8 @@ source=(
 )
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             '17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03')
-sha512sums_x86_64=('5eec818a4d740aadf1df88e8f563a72c1e5d68614d610b0bd25c0602ba6a014956c09cbbc66029acd5214e6d83061720ec8fc03320781c05e6ede92db6677bb2')
-sha512sums_aarch64=('fae931ec1efe925d70d7b4398ddb8dba6d4a66541a8ed8db35f011aebd8a52d2c3e7e3ef8401245a0d142b0c959ca088c4b185dfb0d1df33563dcbbe90248270')
+sha512sums_x86_64=('e04ce322d35c0db141b1efbf9d7581d8cd1412d4c572f9fe5ef4392ffd09deb823208c33750f80bbdfb8d93f2b14eb4f21e9c8fc7313b77bf69a20f1d4e6dd98')
+sha512sums_aarch64=('9992f92a31e343f24120cd420dbabea28fbf7c573a9d9c871f3f244b65d4ae0513757f021414555ee11cc247d9e30ab9934cacc092e32be3d29a2a99b344de20')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")