Review Results

Comment

The change is a straightforward version bump in .SRCINFO for a binary package: pkgver/provides/source URL and checksum are updated consistently. The source remains an HTTPS GitHub release artifact from the project’s own repository, and there are no new scripts, build steps, privileges, or persistence mechanisms introduced in this diff. No security red flags are evident from the metadata-only update.

@@ -1,6 +1,6 @@
 pkgbase = ungoogled-chromium-bin
 	pkgdesc = A lightweight approach to removing Google web service dependency
-	pkgver = 150.0.7871.186
+	pkgver = 151.0.7922.137
 	pkgrel = 1
 	url = https://github.com/ungoogled-software/ungoogled-chromium
 	arch = x86_64

Comment

The change is a straightforward version bump in .SRCINFO for a binary package: updated provides entries, source URL, and checksum to the new upstream GitHub release artifact. The source remains HTTPS on the official project release path, is pinned to an exact release file, and there are no new build steps, scripts, or privilege-related changes in this diff. No security red flags are introduced by the metadata update itself.

@@ -62,11 +62,11 @@ pkgbase = ungoogled-chromium-bin
 	optdepends = qt6-base: Qt support
 	optdepends = org.freedesktop.secrets: password storage backend on GNOME, KDE and Xfce
 	optdepends = upower: Battery Status API support
-	provides = chromium=150.0.7871.186
-	provides = chromedriver=150.0.7871.186
+	provides = chromium=151.0.7922.137
+	provides = chromedriver=151.0.7922.137
 	conflicts = chromium
 	conflicts = chromedriver
-	source = https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/150.0.7871.186-1/ungoogled-chromium-150.0.7871.186-1-x86_64.pkg.tar.zst
-	sha256sums = 6dff50efad4c3320949d7d7c1ef25adb99891f6c1134dc74866a2822499e8742
+	source = https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/151.0.7922.137-1/ungoogled-chromium-151.0.7922.137-1-x86_64.pkg.tar.zst
+	sha256sums = 8347f39b2eb69955bbff249cb8d894c4383fd8f06ffd8cfd506c9e80c0dd12cc
 
 pkgname = ungoogled-chromium-bin

Comment

This change is a routine version bump of a binary package: the source URL remains on the official GitHub release page for the upstream Arch Linux packaging repo, and the checksum is updated accordingly. There are no new build steps, no added scripts, no network fetches outside the declared source, and no changes to install/persistence behavior. The only risk is the inherent trust in a prebuilt binary release, but that was already present before this diff and is not introduced by the version update itself.

@@ -1,7 +1,7 @@
 # Maintainer: networkException <git@nwex.de>
 
 pkgname=ungoogled-chromium-bin
-pkgver=150.0.7871.186
+pkgver=151.0.7922.137
 pkgrel=1
 pkgdesc="A lightweight approach to removing Google web service dependency"
 arch=('x86_64')

Comment

The change only bumps the package version and updates the SHA-256 for a single prebuilt release artifact fetched over HTTPS from the project’s GitHub releases page. There are no new build steps, no added network fetches beyond the declared source, no script changes, and no privilege/persistence mechanisms introduced. The main risk remains the inherent trust in a prebuilt binary package, but this diff does not add any new security red flags beyond that baseline.

@@ -54,7 +54,7 @@ optdepends=('pipewire: WebRTC desktop sharing under Wayland'
 provides=("chromium=$pkgver" "chromedriver=$pkgver")
 conflicts=('chromium' 'chromedriver')
 source=(https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/$pkgver-$pkgrel/ungoogled-chromium-$pkgver-$pkgrel-x86_64.pkg.tar.zst)
-sha256sums=('6dff50efad4c3320949d7d7c1ef25adb99891f6c1134dc74866a2822499e8742')
+sha256sums=('8347f39b2eb69955bbff249cb8d894c4383fd8f06ffd8cfd506c9e80c0dd12cc')
 
 declare -gA _system_libs=(
     [brotli]=brotli