Review Results

Comment

The change only bumps google-chrome to a newer upstream stable release and updates the corresponding Google-hosted .deb URLs and SHA-512 checksums in .SRCINFO. The sources remain HTTPS on the official dl.google.com domain, and there are no new build-time commands, scripts, or packaging logic changes in this diff. No obvious supply-chain or persistence concerns are introduced by this metadata-only version update.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome
 	pkgdesc = The popular web browser by Google (Stable Channel)
-	pkgver = 151.0.7922.137
+	pkgver = 151.0.7922.169
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome.install

Comment

The change only updates the pinned upstream Google Chrome binary package URLs and their corresponding SHA-512 checksums for x86_64 and aarch64. The sources remain HTTPS on the official dl.google.com domain, and the integrity hashes are updated consistently with the version bump. No new build-time code, scripts, or packaging behavior is introduced in this .SRCINFO-only diff.

@@ -25,9 +25,9 @@ pkgbase = google-chrome
 	source = google-chrome-stable.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_151.0.7922.137-1_amd64.deb
-	sha512sums_x86_64 = 1d6bb6aa793d3646605c0bb346e800d306f76ee8d30f5bcbe920a2d70ee90fbdb1203cd1552e26e21e243af8bbdc8d461c8ca49249b77a5f92533396606c1cd7
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_151.0.7922.137-1_arm64.deb
-	sha512sums_aarch64 = e7170ca340c3a66916606a09416156b6fcda1b0f1f19ef5fef7c31f5f10e7dae381b80dcc2bb89cbf60b715b22309912887386effc25a2c12d14e769db06052d
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_151.0.7922.169-1_amd64.deb
+	sha512sums_x86_64 = 172d8307490b8ef1590432b97d6a61dc83272ee91d3aa32854fe2985be6c566eaa45850612c6dddd0d90be1b41f57b0ec5e17b94c6decb0ad56039aff4a0d324
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_151.0.7922.169-1_arm64.deb
+	sha512sums_aarch64 = b20254ffdbd2db61895f4a19213f82dc1d7a0dbc9b088050d4cdc69d53dc1bc83aaa8f3c36ebb8638d00d265f16f2bea70e40544a5c9ad718661f6133a386089
 
 pkgname = google-chrome

Comment

The change is a simple version bump in PKGBUILD from 151.0.7922.137 to 151.0.7922.169 with no other recipe, source, checksum, install-script, or packaging logic changes shown. On its face this does not introduce new execution paths, network fetches, privilege changes, or persistence mechanisms. I see no security-relevant issue in the provided diff hunk.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-stable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome
-pkgver=151.0.7922.137
+pkgver=151.0.7922.169
 pkgrel=1
 pkgdesc="The popular web browser by Google (Stable Channel)"
 arch=(

Comment

The change only updates SHA-512 checksums for the architecture-specific Google Chrome .deb sources. The source URLs remain HTTPS and point to the official Google download host, with no new build-time execution, install-script changes, or packaging logic changes. This is a routine integrity update with no evident security regression in the diff provided.

@@ -39,8 +39,8 @@ source=('eula_text.html'
         "google-chrome-$_channel.sh")
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             'de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94')
-sha512sums_x86_64=('1d6bb6aa793d3646605c0bb346e800d306f76ee8d30f5bcbe920a2d70ee90fbdb1203cd1552e26e21e243af8bbdc8d461c8ca49249b77a5f92533396606c1cd7')
-sha512sums_aarch64=('e7170ca340c3a66916606a09416156b6fcda1b0f1f19ef5fef7c31f5f10e7dae381b80dcc2bb89cbf60b715b22309912887386effc25a2c12d14e769db06052d')
+sha512sums_x86_64=('172d8307490b8ef1590432b97d6a61dc83272ee91d3aa32854fe2985be6c566eaa45850612c6dddd0d90be1b41f57b0ec5e17b94c6decb0ad56039aff4a0d324')
+sha512sums_aarch64=('b20254ffdbd2db61895f4a19213f82dc1d7a0dbc9b088050d4cdc69d53dc1bc83aaa8f3c36ebb8638d00d265f16f2bea70e40544a5c9ad718661f6133a386089')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")