Review Results

Comment

The change only bumps pkgrel from 1 to 2 in .SRCINFO, with no changes to sources, build logic, dependencies, install scripts, or shipped artifacts. This is a metadata-only rebuild indicator and does not introduce any new security-relevant behavior.

@@ -1,7 +1,7 @@
 pkgbase = linux-lqx
 	pkgdesc = Linux Liquorix
 	pkgver = 7.1.6.lqx1
-	pkgrel = 1
+	pkgrel = 2
 	url = https://liquorix.net/
 	arch = x86_64
 	license = GPL-2.0-only

Comment

The change only bumps the upstream liquorix-package tarball from 7.1-8 to 7.1-9 in .SRCINFO and updates its recorded sha512 checksum accordingly. The source remains an HTTPS GitHub archive from the same upstream project, with no new sources, scripts, install hooks, or build logic introduced in this diff. Based on the provided hunk, this is a routine version refresh with no evident security impact.

@@ -23,12 +23,12 @@ pkgbase = linux-lqx
 	options = !strip
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.tar.xz
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.tar.sign
-	source = https://github.com/damentz/liquorix-package/archive/7.1-8.tar.gz
+	source = https://github.com/damentz/liquorix-package/archive/7.1-9.tar.gz
 	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
 	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	sha512sums = d4d9c45261813559341c67ea53d4a47f5a04d1ad15e3c2b8222a09b5483380d2bfd31b8c675e144db2eb91f560d6cb28f66187a5ea4f24f6dfb82a4ad48064cc
 	sha512sums = SKIP
-	sha512sums = faec5aa53380820ed1cee3ea90cffbb071284cbd8a2069b41eb356f1c94b7e50355f26ae268ec0d50c3edc444fe3491e8c77340b74b083abcadddfdd51af9d01
+	sha512sums = 620910e99e5b56268aed7f2c984d7034f7a48c9bdd0033cfea3768c13fcdb01106b8b3f2a95561cc3fb36c6a53848f0b04f3742699af4cb1364f030f149fc1eb
 
 pkgname = linux-lqx
 	pkgdesc = The Linux Liquorix kernel and modules

Comment

The change is a pure version bump in PKGBUILD metadata: _lqxpatchrel 8->9 and pkgrel 1->2. No source URLs, build commands, install scripts, permissions, or package contents are altered in the provided diff. Based on this hunk alone there are no security-relevant red flags.

@@ -54,11 +54,11 @@ _htmldocs_enable=
 _major=7.1
 _srcname=linux-${_major}
 _lqxpatchname=liquorix-package
-_lqxpatchrel=8
+_lqxpatchrel=9
 _lqxpatchver=${_lqxpatchname}-${_major}-${_lqxpatchrel}
 pkgbase=linux-lqx
 pkgver=7.1.6.lqx1
-pkgrel=1
+pkgrel=2
 pkgdesc='Linux Liquorix'
 url='https://liquorix.net/'
 arch=(x86_64)

Comment

The change only bumps the Liquorix patch release reference and updates the corresponding SHA-512 checksum for the third source archive. There are no new sources, no build-script logic changes, no added network fetches, and no privilege/persistence mechanisms introduced. The modified checksum is consistent with a source tarball update rather than an integrity regression. Overall this is a routine version/hash refresh with low security risk.

@@ -106,7 +106,7 @@ validpgpkeys=(
 )
 sha512sums=('d4d9c45261813559341c67ea53d4a47f5a04d1ad15e3c2b8222a09b5483380d2bfd31b8c675e144db2eb91f560d6cb28f66187a5ea4f24f6dfb82a4ad48064cc'
             'SKIP'
-            'faec5aa53380820ed1cee3ea90cffbb071284cbd8a2069b41eb356f1c94b7e50355f26ae268ec0d50c3edc444fe3491e8c77340b74b083abcadddfdd51af9d01')
+            '620910e99e5b56268aed7f2c984d7034f7a48c9bdd0033cfea3768c13fcdb01106b8b3f2a95561cc3fb36c6a53848f0b04f3742699af4cb1364f030f149fc1eb')