Review Results

Comment

The change only bumps pkgver in .SRCINFO from 152.0.4167.0 to 153.0.4210.0. No new sources, scripts, install actions, permissions, or packaging metadata were introduced in the provided diff hunk. On its face this is a routine version update with no direct security red flags in the reviewed change.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-dev-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 152.0.4167.0
+	pkgver = 153.0.4210.0
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change is a routine version bump in .SRCINFO for microsoft-edge-dev-bin: it updates the Microsoft Edge Dev .deb URL, the provided version, and the corresponding checksum. The source remains on the official Microsoft packages domain over HTTPS, and there are no new scripts, install hooks, or packaging behavior changes in this diff. No obvious supply-chain or privilege-escalation concerns are introduced by this metadata-only update.

@@ -22,14 +22,14 @@ pkgbase = microsoft-edge-dev-bin
 	optdepends = libunity: for download progress on KDE
 	optdepends = ttf-liberation: fix fonts for some PDFs - CRBug #369991
 	optdepends = xdg-utils
-	provides = microsoft-edge=152.0.4167.0
+	provides = microsoft-edge=153.0.4210.0
 	conflicts = microsoft-edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_152.0.4167.0-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_153.0.4210.0-1_amd64.deb
 	source = microsoft-edge-dev.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 35f5c653dfe1a99d35c7cb9296c7807935d50f62b469fed6a4ae6ffe40ecebe1
+	sha256sums = a8764bf68c7c766f1065f545f9c436d357817b2f641bdb6ee58a855e26217f05
 	sha256sums = 285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change only bumps pkgver in PKGBUILD from 152.0.4167.0 to 153.0.4210.0. No build logic, sources, install scripts, permissions, or packaging behavior changed in the provided diff. Based on this hunk alone, there are no new security concerns introduced.

@@ -10,7 +10,7 @@ _channel=dev
 _pkgname=microsoft-edge-dev
 pkgname=microsoft-edge-dev-bin
 _pkgshortname=msedge-dev
-pkgver=152.0.4167.0
+pkgver=153.0.4210.0
 pkgrel=1
 _uprel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"

Comment

The change only updates the packaged Microsoft Edge Dev version and its corresponding upstream .deb checksum. I did not find any new code paths, install-script changes, network-at-build behavior, or packaging permission changes in this diff. The source remains the official Microsoft packages repository over HTTPS, and the checksum update is consistent with a version bump. Risk is low, though the package still ships a setuid sandbox binary as part of the existing PKGBUILD, which is outside the scope of this specific change.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
         "$_pkgname.sh"
         "Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('35f5c653dfe1a99d35c7cb9296c7807935d50f62b469fed6a4ae6ffe40ecebe1'
+sha256sums=('a8764bf68c7c766f1065f545f9c436d357817b2f641bdb6ee58a855e26217f05'
             '285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')