Review Results

Comment

The change is a straightforward version bump in .SRCINFO from 17.8.1 to 17.10.0, with the source URL and SHA256 updated accordingly. The source remains an HTTPS PyPI tarball, there are no new build-time commands, no added scripts, and no packaging metadata changes that suggest privilege escalation, persistence, or integrity bypass. Based on this diff alone, I see no security issue.

@@ -1,6 +1,6 @@
 pkgbase = ocrmypdf
 	pkgdesc = A tool to add an OCR text layer to scanned PDF files, allowing them to be searched
-	pkgver = 17.8.1
+	pkgver = 17.10.0
 	pkgrel = 1
 	url = https://github.com/ocrmypdf/OCRmyPDF
 	install = ocrmypdf.install

Comment

The change is a straightforward upstream version bump in .SRCINFO from ocrmypdf 17.8.1 to 17.10.0, with the source still fetched over HTTPS from the official PyPI files host and accompanied by an updated SHA-256 checksum. No new sources, scripts, install hooks, or packaging directives are introduced in the provided diff hunk. Based on this diff alone, I see no security red flags.

@@ -30,7 +30,7 @@ pkgbase = ocrmypdf
 	depends = python-uharfbuzz
 	depends = python-fpdf2
 	optdepends = jbig2enc: Better compression algorithm; results in smaller PDF files
-	source = https://files.pythonhosted.org/packages/source/o/ocrmypdf/ocrmypdf-17.8.1.tar.gz
-	sha256sums = 6f72e4da5fd7805e5d677c0fc55ad380c70e1c7ad33dd9ce2402575194803e08
+	source = https://files.pythonhosted.org/packages/source/o/ocrmypdf/ocrmypdf-17.10.0.tar.gz
+	sha256sums = 3e80a22e7ca9a746034e990414c9f18791f168800f3ede92101504f45be6129c
 
 pkgname = ocrmypdf

Comment

The change is a straightforward version bump in PKGBUILD from 17.8.1 to 17.10.0, with the source URL still pointing to the official PyPI release tarball over HTTPS and the checksum updated accordingly. No new sources, build steps, install scripts, or packaging behaviors were introduced in the diff hunk provided. Based on this change alone, I do not see a supply-chain or privilege-escalation concern.

@@ -5,7 +5,7 @@
 # Contributor: Daniel Reuter <daniel.robin.reuter@googlemail.com>
 
 pkgname=ocrmypdf
-pkgver=17.8.1
+pkgver=17.10.0
 pkgrel=1
 pkgdesc="A tool to add an OCR text layer to scanned PDF files, allowing them to be searched"
 url="https://github.com/ocrmypdf/OCRmyPDF"

Comment

The change only updates the upstream tarball checksum for the same HTTPS PyPI source URL. No build logic, install script, dependencies, or packaging behavior changed, and there are no new network fetches or execution paths introduced by this diff. This appears to be a routine upstream release integrity update with no security red flags in the reviewed hunk.

@@ -17,7 +17,7 @@ depends=('python>=3.9' 'img2pdf' 'python-pillow' 'tesseract' 'ghostscript' 'unpa
 makedepends=('python-hatch-vcs' 'python-build' 'python-installer' 'python-wheel')
 optdepends=('jbig2enc: Better compression algorithm; results in smaller PDF files')
 source=("https://files.pythonhosted.org/packages/source/${pkgname::1}/$pkgname/$pkgname-$pkgver.tar.gz")
-sha256sums=('6f72e4da5fd7805e5d677c0fc55ad380c70e1c7ad33dd9ce2402575194803e08')
+sha256sums=('3e80a22e7ca9a746034e990414c9f18791f168800f3ede92101504f45be6129c')
 install="${pkgname}.install"
 
 build() {