Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 151.0.4129.86 to 151.0.4129.93. No source URLs, checksums, install scripts, permissions, or packaging logic are altered here, and there are no new red flags introduced by this metadata-only update. Based on the provided diff alone, this is low risk.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 151.0.4129.86
+	pkgver = 151.0.4129.93
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change is a straightforward upstream version bump for the Microsoft Edge binary package, updating the .deb URL and its corresponding SHA-256 checksum. The source remains HTTPS on the official Microsoft packages domain, there are no new build-time commands, no added scripts, and no changes to install hooks or permissions. I did not find any new supply-chain or privilege-escalation concerns in this diff.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_151.0.4129.86-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_151.0.4129.93-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 26b02cb1c6465756df94b9ef34191b614f3df627ba21b7b00b641f44cc1d8343
+	sha256sums = 09e3819fcd01e526cf4c26dab8a028679ced0cfd73ce89418c773c47ca366ebf
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

This change only bumps pkgver from 151.0.4129.86 to 151.0.4129.93 in the PKGBUILD for the Microsoft Edge stable binary package. No source URLs, checksums, build steps, install scripts, permissions, or packaging logic are altered, and there are no new integrity or execution red flags in the provided diff. Based on the reviewed hunk alone, this is a routine version update with no evident security impact.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=151.0.4129.86
+pkgver=151.0.4129.93
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change is a routine version bump for a binary package from Microsoft’s official HTTPS repository, with only the expected SHA256 checksum updated to match the new .deb. No new sources, scripts, build steps, privilege changes, or packaging behavior were introduced in this diff. Risk is low because the package remains a prebuilt vendor binary, but this specific change does not add additional security concerns beyond the usual trust in the upstream binary source.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('26b02cb1c6465756df94b9ef34191b614f3df627ba21b7b00b641f44cc1d8343'
+sha256sums=('09e3819fcd01e526cf4c26dab8a028679ced0cfd73ce89418c773c47ca366ebf'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')