Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 5.2.4.32425 to 5.2.5.32528 and an updated generated timestamp. No source URLs, checksums, build steps, dependencies, install scripts, or packaging directives changed in the reviewed diff. Based on this hunk alone there are no security red flags or integrity concerns.

@@ -1,7 +1,7 @@
 # Generated by mksrcinfo v8
-# Thu Jul 23 10:02:59 UTC 2026
+# Tue Aug  4 08:02:53 UTC 2026
 pkgbase = bcompare
-	pkgver = 5.2.4.32425
+	pkgver = 5.2.5.32528
 	pkgrel = 1
 	url = https://www.scootersoftware.com
 	arch = x86_64

Comment

The change is a straightforward version bump in .SRCINFO for the upstream Beyond Compare tarball, with the source still using HTTPS from the official vendor domain and a matching updated SHA-256 checksum. No new sources, build steps, scripts, or packaging behavior are introduced by this diff, so there is no evident security regression in the reviewed hunk.

@@ -10,8 +10,8 @@ pkgbase = bcompare
 	makedepends = sed
 	depends = qt6-base
 	options = !strip
-	source = https://www.scootersoftware.com/files/bcompare-5.2.4.32425.x86_64.tar.gz
-	sha256sums = c1a050d3741e422e1f0fd270d2301d5087b9217cf5d91647da408231a5b09dcf
+	source = https://www.scootersoftware.com/files/bcompare-5.2.5.32528.x86_64.tar.gz
+	sha256sums = aaa9967ca7b74bab9e1ccfad118c5417331c2c8ec26c4b8d05e8a41605f4a847
 
 pkgname = bcompare
 	pkgdesc = Beyond Compare 5: Compare, sync, and merge files and folders.

Comment

The change is a simple version bump plus updated SHA-256 for the upstream tarball. The source remains the official HTTPS Scooter Software download URL, there are no new build steps, no new scripts, and no changes to package install behavior or permissions. I did note the PKGBUILD still executes the upstream install.sh during packaging, but that is pre-existing and unchanged by this diff. No new security issues are introduced by this commit.

@@ -12,7 +12,7 @@
 
 pkgbase=bcompare
 pkgname=('bcompare' 'bcompare-kde6' 'bcompare-kde5' 'bcompare-kde4' 'bcompare-nautilus' 'bcompare-thunar' 'bcompare-cinnamon' 'bcompare-mate')
-pkgver=5.2.4.32425
+pkgver=5.2.5.32528
 pkgrel=1
 arch=('x86_64')
 url='https://www.scootersoftware.com'

Comment

The change only updates the SHA-256 checksum for the upstream tarball source URL. The source remains an HTTPS download from the vendor’s site, and there are no new build steps, scripts, or privilege-related changes in this hunk. The security impact is limited to integrity verification of the same upstream artifact; without evidence that the URL or package contents changed maliciously, this is low risk.

@@ -21,7 +21,7 @@ groups=('utility')
 depends=('qt6-base')
 makedepends=('sed')
 source=("https://www.scootersoftware.com/files/${pkgbase}-${pkgver}.x86_64.tar.gz")
-sha256sums=('c1a050d3741e422e1f0fd270d2301d5087b9217cf5d91647da408231a5b09dcf')
+sha256sums=('aaa9967ca7b74bab9e1ccfad118c5417331c2c8ec26c4b8d05e8a41605f4a847')
 options=('!strip') # Do not strip binaries because it breaks them down
 
  prepare() {