Review Results

Comment

The change only bumps the VCS package version in .SRCINFO from 0.56.0.r1.g5b260fa to 0.56.2.r55.gcab296c. No sources, build steps, dependencies, install scripts, or permissions are altered, and there are no new integrity or execution red flags in the provided diff. This is a metadata-only update with negligible security risk.

@@ -1,6 +1,6 @@
 pkgbase = hyprland-git
 	pkgdesc = Hyprland is an independent, highly customizable, dynamic tiling Wayland compositor that doesn't sacrifice on its looks
-	pkgver = 0.56.0.r1.g5b260fa
+	pkgver = 0.56.2.r55.gcab296c
 	pkgrel = 1
 	url = https://github.com/hyprwm/Hyprland
 	arch = x86_64

Comment

The change only adds a runtime dependency on libcanberra in .SRCINFO. This is a standard system library dependency and does not introduce any build-time code execution, network access, privilege escalation, or packaging integrity concerns. No suspicious sources, scripts, or permissions changes are present in the reviewed hunk.

@@ -26,6 +26,7 @@ pkgbase = hyprland-git
 	depends = hyprutils-git
 	depends = hyprwire-git
 	depends = lcms2
+	depends = libcanberra
 	depends = libdisplay-info
 	depends = libdrm
 	depends = libglvnd

Comment

The change is limited to updating the virtual provide version from hyprland=0.56.0 to hyprland=0.56.2 in .SRCINFO. This is metadata only and does not introduce new sources, build steps, install scripts, permissions changes, or persistence mechanisms. No security-relevant behavior is affected by this diff.

@@ -68,7 +69,7 @@ pkgbase = hyprland-git
 	optdepends = hyprqt6engine-git: the recommended way to manage qt styles
 	optdepends = meson: to build and install plugins using hyprpm
 	optdepends = rtkit: real-time scheduling support
-	provides = hyprland=0.56.0
+	provides = hyprland=0.56.2
 	provides = wayland-compositor
 	conflicts = hyprland
 	backup = usr/share/xdg-desktop-portal/hyprland-portals.conf

Comment

The change only bumps the VCS-derived pkgver string in PKGBUILD from 0.56.0.r1.g5b260fa to 0.56.2.r55.gcab296c. No source URLs, build steps, dependencies, install scripts, permissions, or packaging logic changed. This is a metadata/version update only and does not introduce any new security-relevant behavior.

@@ -5,7 +5,7 @@
 
 _pkgname="hyprland"
 pkgname="$_pkgname-git"
-pkgver=0.56.0.r1.g5b260fa
+pkgver=0.56.2.r55.gcab296c
 pkgrel=1
 pkgdesc="Hyprland is an independent, highly customizable, dynamic tiling Wayland compositor that doesn't sacrifice on its looks"
 arch=('x86_64' 'aarch64')

Comment

The only functional change in the reviewed hunk is adding libcanberra to depends(). This is a normal runtime library dependency and does not introduce build-time code execution, network access, privilege changes, persistence, or packaging integrity issues. The accompanying pkgver bump is just the VCS version update and is not itself suspicious. No security concerns are evident from this diff.

@@ -26,6 +26,7 @@ depends=(
   hyprutils-git
   hyprwire-git
   lcms2
+  libcanberra
   libdisplay-info
   libdrm
   libglvnd