Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 150.0.4078.105 to 151.0.4129.59. No build logic, source URLs, checksums, install scripts, or packaging permissions are changed here. On its face this is a routine upstream version update with no direct security red flags in the provided diff. I did not see evidence in the reviewed hunk of added network fetches, privilege escalation, persistence mechanisms, or integrity regressions.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 150.0.4078.105
+	pkgver = 151.0.4129.59
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change only updates the pinned Microsoft Edge .deb source URL and its corresponding SHA256 in .SRCINFO. The source remains HTTPS on the official Microsoft package host, and there are no new build-time commands, scripts, or privilege/persistence mechanisms introduced by this metadata-only update. I do not see a security issue in the diff itself.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_150.0.4078.105-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_151.0.4129.59-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 7114192e2c7e8c12aeecb604b2732355e925716035729ebf8a0afe6895cdc01b
+	sha256sums = 5e443a1c2385950faaf60ae21aac85cfd117bc05f7e40c965720c40d7d4c75af
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

This change is a routine version bump for the Microsoft Edge binary package, with the source URL still pinned to the official Microsoft package repository over HTTPS and the checksum updated accordingly. No new build steps, scripts, patches, privilege changes, or additional sources were introduced. The diff is limited to pkgver and the corresponding SHA256 for the upstream .deb, so there is no evident security regression in this change alone.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=150.0.4078.105
+pkgver=151.0.4129.59
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change is a routine version bump for a binary package, with the only substantive modification being the expected SHA256 update for the Microsoft-hosted .deb source. The source remains HTTPS and points to the vendor’s official package repository; no new sources, scripts, install hooks, or build-time network behavior were introduced by this diff. Based on the provided hunk, there are no new security red flags.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('7114192e2c7e8c12aeecb604b2732355e925716035729ebf8a0afe6895cdc01b'
+sha256sums=('5e443a1c2385950faaf60ae21aac85cfd117bc05f7e40c965720c40d7d4c75af'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')