Review Results

Comment

The change only bumps pkgver in .SRCINFO from 151.0.7922.108 to 151.0.7922.137. No source URLs, build logic, install scripts, permissions, or other packaging metadata changed in the provided diff. On its face this is a routine version update with no security red flags visible in the reviewed hunk.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome
 	pkgdesc = The popular web browser by Google (Stable Channel)
-	pkgver = 151.0.7922.108
+	pkgver = 151.0.7922.137
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome.install

Comment

The change only updates the pinned upstream Google Chrome binary package URLs and their SHA-512 checksums from 151.0.7922.108-1 to 151.0.7922.137-1 for x86_64 and aarch64. The sources remain HTTPS on the official dl.google.com domain, and the new checksums indicate the package is still integrity-pinned rather than fetched dynamically. No new build-time code execution, install-script behavior, or privilege/persistence mechanism is introduced by this .SRCINFO-only update. Risk is low.

@@ -25,9 +25,9 @@ pkgbase = google-chrome
 	source = google-chrome-stable.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_151.0.7922.108-1_amd64.deb
-	sha512sums_x86_64 = 4d6430a203bd6ce38eb6431dac70be9354ab9c59d8c74a6de8a1085d7e53a9e4bc8707097e64f08b52d7e6b329c6d955fa0854cf479beaa8ba9a5c97ddf75351
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_151.0.7922.108-1_arm64.deb
-	sha512sums_aarch64 = 53cd86827a5ab2310e3fde62c8fb8430c79f87b468a8233bee2e3abe762defe54da363b559785c7e0c120b87212c600b489b7b86e4a49edce46eb39e5bc42e60
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_151.0.7922.137-1_amd64.deb
+	sha512sums_x86_64 = 1d6bb6aa793d3646605c0bb346e800d306f76ee8d30f5bcbe920a2d70ee90fbdb1203cd1552e26e21e243af8bbdc8d461c8ca49249b77a5f92533396606c1cd7
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_151.0.7922.137-1_arm64.deb
+	sha512sums_aarch64 = e7170ca340c3a66916606a09416156b6fcda1b0f1f19ef5fef7c31f5f10e7dae381b80dcc2bb89cbf60b715b22309912887386effc25a2c12d14e769db06052d
 
 pkgname = google-chrome

Comment

This change only bumps pkgver in PKGBUILD from 151.0.7922.108 to 151.0.7922.137. No build logic, sources, checksums, install scripts, permissions, or dependency metadata changed, and there are no new execution or integrity red flags in the provided diff hunk. On its face this is a routine version update with no security impact visible from the diff.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-stable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome
-pkgver=151.0.7922.108
+pkgver=151.0.7922.137
 pkgrel=1
 pkgdesc="The popular web browser by Google (Stable Channel)"
 arch=(

Comment

The change only updates the SHA-512 checksums for the architecture-specific Google Chrome .deb sources while keeping the HTTPS source URLs unchanged. There are no new build-time commands, no additional sources, and no packaging/script changes that would introduce execution or persistence risks. Security impact is limited to integrity metadata maintenance for upstream binaries; assuming the new checksums correspond to the intended official Google downloads, this is low risk.

@@ -39,8 +39,8 @@ source=('eula_text.html'
         "google-chrome-$_channel.sh")
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             'de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94')
-sha512sums_x86_64=('4d6430a203bd6ce38eb6431dac70be9354ab9c59d8c74a6de8a1085d7e53a9e4bc8707097e64f08b52d7e6b329c6d955fa0854cf479beaa8ba9a5c97ddf75351')
-sha512sums_aarch64=('53cd86827a5ab2310e3fde62c8fb8430c79f87b468a8233bee2e3abe762defe54da363b559785c7e0c120b87212c600b489b7b86e4a49edce46eb39e5bc42e60')
+sha512sums_x86_64=('1d6bb6aa793d3646605c0bb346e800d306f76ee8d30f5bcbe920a2d70ee90fbdb1203cd1552e26e21e243af8bbdc8d461c8ca49249b77a5f92533396606c1cd7')
+sha512sums_aarch64=('e7170ca340c3a66916606a09416156b6fcda1b0f1f19ef5fef7c31f5f10e7dae381b80dcc2bb89cbf60b715b22309912887386effc25a2c12d14e769db06052d')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")