Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 3.6.4.86641 to 3.7.0.87111. No sources, checksums, install scripts, build commands, or packaging metadata are altered here, so there is no direct security signal in the diff itself. Based on this hunk alone, the change appears low risk.

@@ -1,6 +1,6 @@
 pkgbase = jetbrains-toolbox
 	pkgdesc = Manage all your JetBrains Projects and Tools
-	pkgver = 3.6.4.86641
+	pkgver = 3.7.0.87111
 	pkgrel = 1
 	url = https://www.jetbrains.com/toolbox/
 	arch = x86_64

Comment

The change is a straightforward version bump in .SRCINFO from JetBrains Toolbox 3.6.4 to 3.7.0, with the corresponding b2sums updated. The source remains the official HTTPS JetBrains download URL, and there are no new sources, scripts, install hooks, or packaging logic changes in the provided diff. Based on this hunk alone, I do not see a security issue.

@@ -16,11 +16,11 @@ pkgbase = jetbrains-toolbox
 	optdepends = xdg-utils: open URLs
 	options = !strip
 	options = !debug
-	source = https://download.jetbrains.com/toolbox/jetbrains-toolbox-3.6.4.86641.tar.gz
+	source = https://download.jetbrains.com/toolbox/jetbrains-toolbox-3.7.0.87111.tar.gz
 	source = jetbrains-toolbox.desktop
 	source = icon.svg
 	source = LICENSE
-	b2sums = 833cb22a2cad4f59ae7c5512cd8e93457ec1821b2882d16b7920370988f9559b94bac894f2e8fc20f63015a15fd41c069bdf8a7c9f59a3b4e405a34aaf98b2fc
+	b2sums = 7e4806fa5133da4cda490b2c4e753a90f27e33f24f81558264dc21f5062bb15ce64dac7035cea88c215939136aadf916e458f31d9834d029b061cd2d1568d336
 	b2sums = 29b6d4be91d9276bce9e5413fb877db82de414198e343ff3f7aa5d03f65cf42c80f78ec3b43f601394fecc6a31712d1c475f3fdec71e51be5732ec7b1eb8dca9
 	b2sums = 4b10487746fcb7f328cbdc8b17432f82618c5695baee4ef30e23ff3c4d4b6096daf2fcdfb4c1e2e179e2e61f68bbd88104e5df5a2e6e969aad0a68a75cfff496
 	b2sums = dadaf0e67b598aa7a7a4bf8644943a7ee8ebf4412abb17cd307f5989e36caf9d0db529a0e717a9df5d9537b10c4b13e814b955ada6f0d445913c812b63804e77

Comment

The change only bumps pkgver in PKGBUILD from 3.6.4.86641 to 3.7.0.87111. No source URLs, checksums, build logic, install scripts, permissions, or package metadata beyond the version string are altered in the provided diff. Based on this hunk alone there are no security red flags.

@@ -1,7 +1,7 @@
 # Maintainer: Frederik Schwan <freswa at archlinux dot org>
 
 pkgname=jetbrains-toolbox
-pkgver=3.6.4.86641
+pkgver=3.7.0.87111
 pkgrel=1
 pkgdesc='Manage all your JetBrains Projects and Tools'
 arch=('x86_64' 'i686')

Comment

The change is a straightforward upstream version bump for jetbrains-toolbox from 3.6.4.86641 to 3.7.0.87111, with the corresponding BLAKE2 checksum updated for the tarball. The source remains the official HTTPS JetBrains download URL, and there are no new build steps, scripts, patches, or privilege/persistence mechanisms introduced in this diff. No security red flags are evident in the reviewed hunk.

@@ -22,7 +22,7 @@ source=("https://download.jetbrains.com/toolbox/${pkgname}-${pkgver}.tar.gz"
         jetbrains-toolbox.desktop
         icon.svg
         LICENSE)
-b2sums=('833cb22a2cad4f59ae7c5512cd8e93457ec1821b2882d16b7920370988f9559b94bac894f2e8fc20f63015a15fd41c069bdf8a7c9f59a3b4e405a34aaf98b2fc'
+b2sums=('7e4806fa5133da4cda490b2c4e753a90f27e33f24f81558264dc21f5062bb15ce64dac7035cea88c215939136aadf916e458f31d9834d029b061cd2d1568d336'
         '29b6d4be91d9276bce9e5413fb877db82de414198e343ff3f7aa5d03f65cf42c80f78ec3b43f601394fecc6a31712d1c475f3fdec71e51be5732ec7b1eb8dca9'
         '4b10487746fcb7f328cbdc8b17432f82618c5695baee4ef30e23ff3c4d4b6096daf2fcdfb4c1e2e179e2e61f68bbd88104e5df5a2e6e969aad0a68a75cfff496'
         'dadaf0e67b598aa7a7a4bf8644943a7ee8ebf4412abb17cd307f5989e36caf9d0db529a0e717a9df5d9537b10c4b13e814b955ada6f0d445913c812b63804e77')