Review Results

Comment

The change is a straightforward version bump in .SRCINFO from 154.0b4 to 154.0b8 with no other metadata changes. There are no new sources, scripts, dependencies, install actions, or packaging flags introduced in this diff. On its face this is low risk and consistent with a routine upstream beta update.

@@ -1,6 +1,6 @@
 pkgbase = firefox-beta-bin
 	pkgdesc = Standalone web browser from mozilla.org - Beta
-	pkgver = 154.0b4
+	pkgver = 154.0b8
 	pkgrel = 1
 	url = https://www.mozilla.org/en-US/firefox/channel/#beta
 	install = firefox-beta-bin.install

Comment

The change is a straightforward version bump in .SRCINFO for the Firefox beta binary package: it updates the provided virtual package version, the official Mozilla archive source URL, and the corresponding SHA-256 checksum. The source remains HTTPS and points to Mozilla's archive, with no new scripts, patches, binaries, or build-time execution introduced. No security-relevant red flags are evident in this diff alone.

@@ -21,13 +21,13 @@ pkgbase = firefox-beta-bin
 	optdepends = networkmanager: Location detection via available WiFi networks
 	optdepends = pulseaudio: Sound
 	optdepends = upower: Battery API
-	provides = firefox=154.0b4
+	provides = firefox=154.0b8
 	conflicts = firefox-beta
-	source = https://archive.mozilla.org/pub/firefox/releases/154.0b4/linux-x86_64/en-US/firefox-154.0b4.tar.xz
+	source = https://archive.mozilla.org/pub/firefox/releases/154.0b8/linux-x86_64/en-US/firefox-154.0b8.tar.xz
 	source = firefox-beta.sh
 	source = firefox-beta-bin.desktop
 	source = policies.json
-	sha256sums = e2038478dea478cbea75296647e488840e1d46328c12208d1b764b203d5c2b1d
+	sha256sums = fb62f644ff2bccd22830395ec8bd5cb59e10083e7a62fc6e3dd328543cc2a3c0
 	sha256sums = 4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b
 	sha256sums = 210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761
 	sha256sums = e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c

Comment

Low risk change. The diff only bumps Firefox Beta from 154.0b4 to 154.0b8 and updates the corresponding Mozilla archive URL and checksum. Source remains HTTPS from the official Mozilla archive, with no new build-time execution, no added scripts, and no packaging/persistence changes. The only security-relevant question is whether the new tarball checksum matches the intended upstream release, but within this diff there is no indication of tampering or malicious behavior.

@@ -3,7 +3,7 @@
 
 pkgname=firefox-beta-bin
 _pkgname=firefox-beta
-pkgver=154.0b4
+pkgver=154.0b8
 _major=${pkgver/rc*}
 _build=${pkgver/*rc}
 pkgrel=1

Comment

The change is a straightforward version bump of the Firefox beta binary tarball from 154.0b4 to 154.0b8 with the corresponding SHA-256 checksum update. The source remains the official Mozilla archive over HTTPS, there are no new build-time commands, no added scripts, and no packaging/persistence changes in this diff. Based on the reviewed hunk, this is low risk.

@@ -22,11 +22,11 @@ optdepends=('ffmpeg: H264/AAC/MP3 decoding'
 provides=("firefox=$pkgver")
 conflicts=('firefox-beta')
 install=$pkgname.install
-source=("https://archive.mozilla.org/pub/firefox/releases/154.0b4/linux-x86_64/en-US/firefox-154.0b4.tar.xz"
+source=("https://archive.mozilla.org/pub/firefox/releases/154.0b8/linux-x86_64/en-US/firefox-154.0b8.tar.xz"
         "$_pkgname.sh"
         "$pkgname.desktop"
         "policies.json")
-sha256sums=('e2038478dea478cbea75296647e488840e1d46328c12208d1b764b203d5c2b1d'
+sha256sums=('fb62f644ff2bccd22830395ec8bd5cb59e10083e7a62fc6e3dd328543cc2a3c0'
             '4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b'
             '210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761'
             'e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c')