Review Results

Comment

The change is a simple version bump in .SRCINFO from 151.0.4129.59 to 151.0.4129.72. No new sources, scripts, dependencies, install actions, or packaging behavior are introduced by this diff. On its face this is low risk; any security concerns would depend on the upstream Microsoft Edge binary itself, which is outside the scope of this metadata-only change.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 151.0.4129.59
+	pkgver = 151.0.4129.72
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change is a routine version bump in .SRCINFO for the Microsoft Edge binary package, updating the upstream .deb URL and its checksum. The source remains an HTTPS download from Microsoft's official package repository, with no new sources, scripts, or build logic introduced. Based on the provided diff alone, there are no signs of supply-chain red flags, privilege escalation, or persistence mechanisms.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_151.0.4129.59-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_151.0.4129.72-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 5e443a1c2385950faaf60ae21aac85cfd117bc05f7e40c965720c40d7d4c75af
+	sha256sums = babd5ea470a86c84615e23a7d5aaf4e1be6811b3af1229bc234d78bdc6b4f55a
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

This is a routine version bump for a binary package: the upstream Microsoft Edge .deb URL is still HTTPS and points to the official Microsoft package repository, and the only substantive change is the pkgver plus the corresponding source checksum. No new build steps, scripts, privileges, or persistence mechanisms were introduced in the diff. Risk is low, though as with any -bin package the trust boundary remains the upstream prebuilt binary itself.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=151.0.4129.59
+pkgver=151.0.4129.72
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change is a routine version bump for a binary package, updating the Microsoft Edge .deb URL and its SHA256 checksum. The source remains HTTPS on the official Microsoft package repository, and there are no new build-time commands, install-script changes, privilege escalation, persistence mechanisms, or additional sources introduced by this diff. Risk is low; the only trust consideration is the usual one for a prebuilt upstream binary package, which is unchanged by this update.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('5e443a1c2385950faaf60ae21aac85cfd117bc05f7e40c965720c40d7d4c75af'
+sha256sums=('babd5ea470a86c84615e23a7d5aaf4e1be6811b3af1229bc234d78bdc6b4f55a'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')