Review Results

Comment

The change only bumps pkgver in .SRCINFO from 151.0.4129.78 to 151.0.4129.86. No build logic, sources, checksums, install scripts, or packaging metadata beyond the version string changed. On its face this is a routine upstream version update with no added security red flags in the provided diff.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 151.0.4129.78
+	pkgver = 151.0.4129.86
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change only updates the pinned Microsoft Edge .deb source URL and its corresponding SHA-256 checksum in .SRCINFO, moving to a newer upstream release. The source remains HTTPS on the official Microsoft package repository, and there are no new build steps, scripts, or privilege-related artifacts introduced by this diff. Based on the provided hunk alone, this is a routine version bump with no evident security regression.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_151.0.4129.78-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_151.0.4129.86-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 38161c8c49dc88f1dc1c9797d78a63064611e1490b8c2ca290afa0677027ef8b
+	sha256sums = 26b02cb1c6465756df94b9ef34191b614f3df627ba21b7b00b641f44cc1d8343
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change is a simple version bump in PKGBUILD from 151.0.4129.78 to 151.0.4129.86 with no accompanying logic changes. I do not see any new sources, build steps, install scripts, permissions changes, or other supply-chain red flags in the provided diff. On its face this is a routine upstream release update and appears low risk.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=151.0.4129.78
+pkgver=151.0.4129.86
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change is a routine version bump for a binary package, updating the Microsoft Edge .deb URL and its SHA256 checksum. The source remains an HTTPS download from Microsoft's official package repository, with no new build steps, scripts, or privilege-related changes introduced. I don't see any added supply-chain red flags in this diff beyond the inherent trust in the upstream binary package.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('38161c8c49dc88f1dc1c9797d78a63064611e1490b8c2ca290afa0677027ef8b'
+sha256sums=('26b02cb1c6465756df94b9ef34191b614f3df627ba21b7b00b641f44cc1d8343'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')