AUR AI Reviewer

Review Results

Version #2138 of discord_arch_electron · commit 2b154fc07b16 · status Reviewed

Risk 0/5 · Safe .SRCINFO
Result #2110

Comment

The change only bumps pkgver in .SRCINFO from 1.0.153 to 1.0.154. No source URLs, build logic, install scripts, permissions, or packaging metadata beyond the version number are altered. On its face this is a routine version update with no security-relevant behavior change in the reviewed diff.

@@ -1,6 +1,6 @@
 pkgbase = discord_arch_electron
 	pkgdesc = Discord using system provided electron for increased security and performance
-	pkgver = 1.0.153
+	pkgver = 1.0.154
 	pkgrel = 1
 	epoch = 1
 	url = https://discord.com
Risk 0/5 · Safe .SRCINFO
Result #2111

Comment

This change is a routine version bump in .SRCINFO from Discord 1.0.153 to 1.0.154, updating the upstream tarball and bundled component URLs plus their SHA-512 checksums. The sources remain HTTPS and point to Discord-controlled domains, and there are no new build steps, scripts, or privilege-related artifacts introduced by this diff. I do not see any supply-chain red flags in the change itself beyond the inherent trust in the upstream binary distribution already present in the package.

@@ -18,39 +18,39 @@ pkgbase = discord_arch_electron
 	provides = discord
 	conflicts = discord
 	options = !strip
-	source = https://dl.discordapp.net/apps/linux/1.0.153/discord-1.0.153.tar.gz
+	source = https://dl.discordapp.net/apps/linux/1.0.154/discord-1.0.154.tar.gz
 	source = LICENSE.html::https://discord.com/terms
 	source = OSS-LICENSES.html::https://discord.com/licenses
 	source = discord-launcher.sh
 	source = krisp-patcher.py
-	source = core-1.0.153.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.153/full.distro
-	source = discord_desktop_core-1.0.153.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.153/discord_desktop_core/1/full.distro
-	source = discord_zstd-1.0.153.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.153/discord_zstd/1/full.distro
-	source = discord_krisp-1.0.153.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.153/discord_krisp/1/full.distro
-	source = discord_rpc-1.0.153.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.153/discord_rpc/1/full.distro
-	source = discord_utils-1.0.153.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.153/discord_utils/1/full.distro
-	source = discord_voice-1.0.153.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.153/discord_voice/1/full.distro
-	source = discord_game_utils-1.0.153.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.153/discord_game_utils/1/full.distro
-	source = discord_erlpack-1.0.153.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.153/discord_erlpack/1/full.distro
-	source = discord_modules-1.0.153.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.153/discord_modules/1/full.distro
-	source = discord_spellcheck-1.0.153.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.153/discord_spellcheck/1/full.distro
-	source = discord_dispatch-1.0.153.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.153/discord_dispatch/1/full.distro
-	sha512sums = 7e9d2c92eeb088ce2264b665bbc4b91475332d79c8901dcb7a8284680e5ec754ca0eaede14006bf5c4abbd48543c804f8925f30614a2132540c6ac8350639a55
+	source = core-1.0.154.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.154/full.distro
+	source = discord_desktop_core-1.0.154.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.154/discord_desktop_core/1/full.distro
+	source = discord_zstd-1.0.154.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.154/discord_zstd/1/full.distro
+	source = discord_krisp-1.0.154.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.154/discord_krisp/1/full.distro
+	source = discord_rpc-1.0.154.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.154/discord_rpc/1/full.distro
+	source = discord_utils-1.0.154.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.154/discord_utils/1/full.distro
+	source = discord_voice-1.0.154.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.154/discord_voice/1/full.distro
+	source = discord_game_utils-1.0.154.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.154/discord_game_utils/1/full.distro
+	source = discord_erlpack-1.0.154.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.154/discord_erlpack/1/full.distro
+	source = discord_modules-1.0.154.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.154/discord_modules/1/full.distro
+	source = discord_spellcheck-1.0.154.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.154/discord_spellcheck/1/full.distro
+	source = discord_dispatch-1.0.154.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.154/discord_dispatch/1/full.distro
+	sha512sums = e8d84b6e99e7f8e9fb2094881d343f3c88beea3554570e3391fce78232e112be13f35e56951f92da758308a1d15d03a3a62a65191ac74098a369e1d0b03ac998
 	sha512sums = SKIP
 	sha512sums = SKIP
 	sha512sums = d5373e2b2e9754bdcdbcda81fc1392ce6605939651839868823f3c3e0bf16f6fba2fb73bc1a0ff230eebd743d1463f2e8b2295503248f14845b3a56e57385bd1
 	sha512sums = 85da93530b2b92faad58cc84d0f7ddaea6b22fbec413e806c1981eb6369a301ec995eee6bfbe6b828e2cd0baf6168e578bbde456f2450a13199994ff9a1e7cd0
-	sha512sums = f0361b667a29a2868ebb346c76b91e2be138375428521ab2e3df64e947cf239600acb3baae355bf72d3ff6a40f229c9216202c3a98846d273d3da7c3387f0a8d
-	sha512sums = 798dd9e8c224c7891db660da06f55e9f6ce0697843befa635ee8cf7c133da38ffb1682f645072f25ed02e7d311355c26088097e9a0d3da60d4dda4c71f0b0447
-	sha512sums = 4d083dbd969177af93c39255dcc31c5064f24cb28d0f5d5e298b5ccd2e65ec167ef123dbbc30d79cd373dbc488b09346c0310e73f8504573a2173b956c058b42
-	sha512sums = 2b8de3a2f83b9d290b6fea841371c4be1dbf76cf51d8316ad79e86d8de5710c8a62dad5367c831e005bdbfb85d9a03cb5d902e4ffd6e969d2e9bef456621e82a
-	sha512sums = beb71f8fd2f03864f3d53e2e142e2f3d0f3f3aa54f95ef0a486e28a0bed1134789811f3243a55dfb72c5063d36ee30c9e617acb61d442bfb8c693615503d50ba
-	sha512sums = c4235fe1b0a3072386094bcd30abee81188fbbb1ed92640e67daacd4c521aa483b13193e9b57e1b1cf0fdbf9d16f9c63bba1ec4a7c4214e423632c49141c158f
-	sha512sums = d5f8365dbfa29778ee44a181a0c04c757a27ba4b644bb1d9b8c1a27e20d9b6d1709dce978c3491d95b11c789054d0d9857956f894d7af517585b3e52c61e2a66
-	sha512sums = 18cdde31f24c79eb73cd26dd08d6926062595da3e2f0bc65b60c32506725fcae1f416e84e5905e10a9494d81491e74fd0718a96902c09d6d9ca638577a89b94e
-	sha512sums = 20861bfdd2566f65cdfa0ddea559e2f33d592612256772c9d28b515ef5c0f144227689ca0f5bc31a3c9f744426d9cb475fb697552037931e0a7a6ca233b818c6
-	sha512sums = 144b39d1ddee0bf99aa63eb0b3cafd72d009f8da917ffc1cf90bf752262decce682400af7893b4506f021fa19a69d0bae3465127d1f7c67be337d644601d3313
-	sha512sums = 5f8dd07c2e6982582f673bee94e3e8717167eb996768d0ee611eb4a1c9d8e2bd077ff91c414da8b14c754e8a5107232d334a0cecb11fb9daa7f5d902f8b11b63
-	sha512sums = 96a32259debac11c590e9e3e139d6e04e356fd6fcf2e7631ab379f7fc09d247d881d773246a411839802608245efbd3bb2a4c94b89df1af9eacffa5cbb39751a
+	sha512sums = e2428972ea2d93de6b49773606d2168c5b185fdd47dcc272578c4dc8d786b5b7013e5ac66d14d9e9c26631301d2de0c1ee7564162b9cc2dfe5fbaebc2eb56a02
+	sha512sums = 6c66898bf08c8d482432a4a018b749c23bede5fc3f81b2d4bd392465cfa2f1036b04be8fca8f1cfd4179893a2a126d36bc27a439d0e4265888708ce6c375f223
+	sha512sums = f2172daaab92665c9cab4d8aae9bce54c4a29b3cd11caa2a1fb0dfaa3c228943b49da7a7e0b2fdde36e17f0b9fd11aa19c3637aa47baa98de283c38a19dbc957
+	sha512sums = 5b5813e1a1f620945f89d7e2009be7d95b23f833d573fc8d232502ff06f634e4a25b4b969162f05416130728b71ae7b59ad7f3d80933e287891ac15f9af632ed
+	sha512sums = ec37798e43b2737c516508ed17b683d54b635f84d2dafce87b0283081e49cf285b0500d0b4373ea9c53f5689f74b553aac852eff19ebed666e151f31fdcd6c48
+	sha512sums = 2018f433557b33107bf7bb26d92c3d283727b979968393a280082ba542325625a3331247025c6cd0609c1b28b75326015386049530c2dec64d024cedac0de2a9
+	sha512sums = ec8a315c432e815e24d54ad9d83bb5b238aad23308af764646e90d7334e1d77fcd2aaff7036ea1e0ae8c8fe4b1404e7f3fc27baaa4cd3a8061dc9118012e45e1
+	sha512sums = cb2bf555df79450ff46908a71cd92e27c2c52d015e80c3cebbe59bf61a40fa3fabaffb227759d0d6fc8cf267e686a5a2e3dee162aa3b78d68f7090d0a4c2982e
+	sha512sums = 66006ffa68f48a69f3d9afcd796d28a30b94c507f52b3450722c47de2f5c5bea0217f69d7a637337a29ab878ff0466cbcb6f43c73f103e87c5846e6d3aebb1c5
+	sha512sums = 507150269df5103d29e3c65531de8178f0f59d35a4b6ad27bdbf4f9bcd8034169d2c5a92f6ccb28999be9ae7c4dd786f7a3e6de6fc6ee257386c6cc5ded623fa
+	sha512sums = 82dff6dc4af0443a07c7a0449a4e4b1f5ce4b4a59deb45266f1b7f8eb04de75b641925e7ddca193f6056912e093c7b71937fed5d156f8c306d82ba1aae61d1d9
+	sha512sums = de90b6c9b6e07fbcccceb5a325af9c4951e8a61f609166329b922cc881d4c397c2ef2ec050811b61a6ef93dd94232efa9291afa8bb0f4aee6ddc91afb1d8c5a1
 
 pkgname = discord_arch_electron
Risk 0/5 · Safe PKGBUILD
Result #2112

Comment

The change is a simple version bump in PKGBUILD from 1.0.153 to 1.0.154 with no modification to sources, build steps, install scripts, permissions, or package metadata beyond pkgver. Based on the provided diff, there are no new security red flags such as added network fetches, privilege escalation, persistence mechanisms, or suspicious dependencies. Risk is minimal.

@@ -9,7 +9,7 @@
 _pkgname=discord
 _electron=electron
 pkgname=${_pkgname}_arch_electron
-pkgver=1.0.153
+pkgver=1.0.154
 pkgrel=1
 epoch=1
 pkgdesc="Discord using system provided ${_electron} for increased security and performance"
Risk 0/5 · Safe PKGBUILD
Result #2113

Comment

The change only updates sha512 checksums for existing upstream Discord tarballs and bundled distro components. I did not find any modification to source URLs, build logic, install scripts, permissions, or package metadata that would introduce code execution, persistence, or privilege escalation. The risk is limited to integrity verification of the same declared sources; the new hashes appear to be a routine upstream version refresh rather than a suspicious source swap.

@@ -46,23 +46,23 @@ source=("https://dl.discordapp.net/apps/linux/${pkgver}/${_pkgname}-${pkgver}.ta
         "discord_modules-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_modules/1/full.distro"
         "discord_spellcheck-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_spellcheck/1/full.distro"
         "discord_dispatch-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_dispatch/1/full.distro")
-sha512sums=('7e9d2c92eeb088ce2264b665bbc4b91475332d79c8901dcb7a8284680e5ec754ca0eaede14006bf5c4abbd48543c804f8925f30614a2132540c6ac8350639a55'
+sha512sums=('e8d84b6e99e7f8e9fb2094881d343f3c88beea3554570e3391fce78232e112be13f35e56951f92da758308a1d15d03a3a62a65191ac74098a369e1d0b03ac998'
             '2590151db4404a9ecbae2c45269c74f5ea26479967de5bc0b221a9143f4efeeeda9e335c23cf1f982680ab4fd895dcf3fd5731bd230908b3b2568eee0ec223ec'
             '5cccf397a772fed0db9b19253e496e78af27810227325ce681de985e2e0fbbdb195873d9642574ad3ae7bfcf4699bfdaa16933ca50c13cb98a1ff53c86c6de05'
             'd5373e2b2e9754bdcdbcda81fc1392ce6605939651839868823f3c3e0bf16f6fba2fb73bc1a0ff230eebd743d1463f2e8b2295503248f14845b3a56e57385bd1'
             '85da93530b2b92faad58cc84d0f7ddaea6b22fbec413e806c1981eb6369a301ec995eee6bfbe6b828e2cd0baf6168e578bbde456f2450a13199994ff9a1e7cd0'
-            'f0361b667a29a2868ebb346c76b91e2be138375428521ab2e3df64e947cf239600acb3baae355bf72d3ff6a40f229c9216202c3a98846d273d3da7c3387f0a8d'
-            '798dd9e8c224c7891db660da06f55e9f6ce0697843befa635ee8cf7c133da38ffb1682f645072f25ed02e7d311355c26088097e9a0d3da60d4dda4c71f0b0447'
-            '4d083dbd969177af93c39255dcc31c5064f24cb28d0f5d5e298b5ccd2e65ec167ef123dbbc30d79cd373dbc488b09346c0310e73f8504573a2173b956c058b42'
-            '2b8de3a2f83b9d290b6fea841371c4be1dbf76cf51d8316ad79e86d8de5710c8a62dad5367c831e005bdbfb85d9a03cb5d902e4ffd6e969d2e9bef456621e82a'
-            'beb71f8fd2f03864f3d53e2e142e2f3d0f3f3aa54f95ef0a486e28a0bed1134789811f3243a55dfb72c5063d36ee30c9e617acb61d442bfb8c693615503d50ba'
-            'c4235fe1b0a3072386094bcd30abee81188fbbb1ed92640e67daacd4c521aa483b13193e9b57e1b1cf0fdbf9d16f9c63bba1ec4a7c4214e423632c49141c158f'
-            'd5f8365dbfa29778ee44a181a0c04c757a27ba4b644bb1d9b8c1a27e20d9b6d1709dce978c3491d95b11c789054d0d9857956f894d7af517585b3e52c61e2a66'
-            '18cdde31f24c79eb73cd26dd08d6926062595da3e2f0bc65b60c32506725fcae1f416e84e5905e10a9494d81491e74fd0718a96902c09d6d9ca638577a89b94e'
-            '20861bfdd2566f65cdfa0ddea559e2f33d592612256772c9d28b515ef5c0f144227689ca0f5bc31a3c9f744426d9cb475fb697552037931e0a7a6ca233b818c6'
-            '144b39d1ddee0bf99aa63eb0b3cafd72d009f8da917ffc1cf90bf752262decce682400af7893b4506f021fa19a69d0bae3465127d1f7c67be337d644601d3313'
-            '5f8dd07c2e6982582f673bee94e3e8717167eb996768d0ee611eb4a1c9d8e2bd077ff91c414da8b14c754e8a5107232d334a0cecb11fb9daa7f5d902f8b11b63'
-            '96a32259debac11c590e9e3e139d6e04e356fd6fcf2e7631ab379f7fc09d247d881d773246a411839802608245efbd3bb2a4c94b89df1af9eacffa5cbb39751a')
+            'e2428972ea2d93de6b49773606d2168c5b185fdd47dcc272578c4dc8d786b5b7013e5ac66d14d9e9c26631301d2de0c1ee7564162b9cc2dfe5fbaebc2eb56a02'
+            '6c66898bf08c8d482432a4a018b749c23bede5fc3f81b2d4bd392465cfa2f1036b04be8fca8f1cfd4179893a2a126d36bc27a439d0e4265888708ce6c375f223'
+            'f2172daaab92665c9cab4d8aae9bce54c4a29b3cd11caa2a1fb0dfaa3c228943b49da7a7e0b2fdde36e17f0b9fd11aa19c3637aa47baa98de283c38a19dbc957'
+            '5b5813e1a1f620945f89d7e2009be7d95b23f833d573fc8d232502ff06f634e4a25b4b969162f05416130728b71ae7b59ad7f3d80933e287891ac15f9af632ed'
+            'ec37798e43b2737c516508ed17b683d54b635f84d2dafce87b0283081e49cf285b0500d0b4373ea9c53f5689f74b553aac852eff19ebed666e151f31fdcd6c48'
+            '2018f433557b33107bf7bb26d92c3d283727b979968393a280082ba542325625a3331247025c6cd0609c1b28b75326015386049530c2dec64d024cedac0de2a9'
+            'ec8a315c432e815e24d54ad9d83bb5b238aad23308af764646e90d7334e1d77fcd2aaff7036ea1e0ae8c8fe4b1404e7f3fc27baaa4cd3a8061dc9118012e45e1'
+            'cb2bf555df79450ff46908a71cd92e27c2c52d015e80c3cebbe59bf61a40fa3fabaffb227759d0d6fc8cf267e686a5a2e3dee162aa3b78d68f7090d0a4c2982e'
+            '66006ffa68f48a69f3d9afcd796d28a30b94c507f52b3450722c47de2f5c5bea0217f69d7a637337a29ab878ff0466cbcb6f43c73f103e87c5846e6d3aebb1c5'
+            '507150269df5103d29e3c65531de8178f0f59d35a4b6ad27bdbf4f9bcd8034169d2c5a92f6ccb28999be9ae7c4dd786f7a3e6de6fc6ee257386c6cc5ded623fa'
+            '82dff6dc4af0443a07c7a0449a4e4b1f5ce4b4a59deb45266f1b7f8eb04de75b641925e7ddca193f6056912e093c7b71937fed5d156f8c306d82ba1aae61d1d9'
+            'de90b6c9b6e07fbcccceb5a325af9c4951e8a61f609166329b922cc881d4c397c2ef2ec050811b61a6ef93dd94232efa9291afa8bb0f4aee6ddc91afb1d8c5a1')
 
 # Skip "LICENSE.html" and "OSS-LICENSES.html" files hashes as they are unstable
 # Since "updpkgsums"/"pkgctl version upgrade" overwrite the checksum array with