Review Results

Comment

The change is a simple version bump in .SRCINFO from 7.1.5 to 7.1.6. No build logic, sources, install scripts, or permissions are altered in the provided diff. The only minor concern visible in the surrounding metadata is that the project URL uses HTTP rather than HTTPS, but this pre-exists the change and is not introduced here. Based on the reviewed hunk alone, there is no evidence of malicious behavior or integrity risk.

@@ -1,6 +1,6 @@
 pkgbase = linux-xanmod
 	pkgdesc = Linux Xanmod - Stable Mainline [MAIN]
-	pkgver = 7.1.5
+	pkgver = 7.1.6
 	pkgrel = 1
 	url = http://www.xanmod.org/
 	arch = x86_64

Comment

The change only updates the XanMod patch source from 7.1.5 to 7.1.6 and refreshes its SHA-256 checksum in .SRCINFO. The source remains an HTTPS download from the same upstream SourceForge project, with no new hosts, scripts, or build-time execution paths introduced. This is a routine version bump in metadata and does not by itself indicate a supply-chain or privilege-risk issue.

@@ -20,13 +20,13 @@ pkgbase = linux-xanmod
 	options = !strip
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.tar.xz
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.1.tar.sign
-	source = patch-7.1.5-xanmod1.xz::https://sourceforge.net/projects/xanmod/files/releases/main/7.1.5-xanmod1/patch-7.1.5-xanmod1.xz/download
+	source = patch-7.1.6-xanmod1.xz::https://sourceforge.net/projects/xanmod/files/releases/main/7.1.6-xanmod1/patch-7.1.6-xanmod1.xz/download
 	source = choose-gcc-optimization.sh
 	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
 	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	sha256sums = 691f44797fbe790dc8a321604c927087526ad27b6d649925d60f8eed0a2564a0
 	sha256sums = SKIP
-	sha256sums = 72f1fd755581ae24793c1d6a1721ea902172bebb89d2014977076595f6e059dc
+	sha256sums = 3e6c408c2985c86a45cea6347dd11a3649c46108bf833da3c8c9b3ba5693cb2a
 	sha256sums = f4acc1760990c54348a029315d1505ccb7c7270cd70a9aeb728bffcced51e767
 
 pkgname = linux-xanmod

Comment

The change only bumps pkgver from 7.1.5 to 7.1.6 in PKGBUILD metadata. No source URLs, build steps, install scripts, permissions, or packaging logic were altered, and there are no new integrity or execution risks visible in this diff. This is a routine version update with no security impact apparent from the provided hunk.

@@ -73,7 +73,7 @@ fi
 
 pkgbase=linux-xanmod
 _major=7.1
-pkgver=${_major}.5
+pkgver=${_major}.6
 _branch=7.x
 xanmod=1
 _revision=

Comment

The change only updates the package version from 7.1.5 to 7.1.6 and refreshes one source checksum in PKGBUILD. There are no new sources, no build-script changes, no added network access, and no install/persistence mechanisms introduced by this diff. This looks like a routine upstream version bump with integrity metadata updated accordingly.

@@ -120,7 +120,7 @@ done
 
 sha256sums=('691f44797fbe790dc8a321604c927087526ad27b6d649925d60f8eed0a2564a0'
             'SKIP'
-            '72f1fd755581ae24793c1d6a1721ea902172bebb89d2014977076595f6e059dc'
+            '3e6c408c2985c86a45cea6347dd11a3649c46108bf833da3c8c9b3ba5693cb2a'
             'f4acc1760990c54348a029315d1505ccb7c7270cd70a9aeb728bffcced51e767')
 
 export KBUILD_BUILD_HOST=${KBUILD_BUILD_HOST:-archlinux}