Review Results

Comment

The change is a routine version bump in .SRCINFO from 1.93.136 to 1.93.137 with no accompanying changes to sources, checksums, install scripts, or packaging logic. On its face this does not introduce any new attack surface or packaging risk beyond the normal trust in the upstream Brave binary release already implied by brave-bin.

@@ -1,6 +1,6 @@
 pkgbase = brave-bin
 	pkgdesc = Web browser that blocks ads and trackers by default (binary release)
-	pkgver = 1.93.136
+	pkgver = 1.93.137
 	pkgrel = 1
 	epoch = 1
 	url = https://brave.com

Comment

The change is a routine version bump in .SRCINFO for the Brave binary package: it updates the provided version, noextract filenames, source URLs, and checksums from 1.93.136 to 1.93.137. The sources remain HTTPS GitHub release assets from the official upstream project, and there are no new scripts, build steps, permissions changes, or install-time behaviors introduced by this diff. No security issues are evident in the reviewed hunk.

@@ -17,19 +17,19 @@ pkgbase = brave-bin
 	optdepends = cups: Printer support
 	optdepends = libgnome-keyring: Enable GNOME keyring support
 	optdepends = libnotify: Native notification support
-	provides = brave=1.93.136
+	provides = brave=1.93.137
 	provides = brave-browser
 	conflicts = brave
-	noextract = brave-bin-1.93.136-x86_64.zip
-	noextract = brave-bin-1.93.136-aarch64.zip
+	noextract = brave-bin-1.93.137-x86_64.zip
+	noextract = brave-bin-1.93.137-aarch64.zip
 	options = !strip
 	source = brave-bin.sh
 	source = brave-browser.desktop
 	sha256sums = 75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00
 	sha256sums = c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a
-	source_x86_64 = brave-bin-1.93.136-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.93.136/brave-browser-1.93.136-linux-amd64.zip
-	sha256sums_x86_64 = b13917ac00c7065c40698f330bcd9ee6cc73e3f7669978eb11c620300ce0204b
-	source_aarch64 = brave-bin-1.93.136-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.93.136/brave-browser-1.93.136-linux-arm64.zip
-	sha256sums_aarch64 = 1b4677e600199f1cdfed4fe6b60c832de8174392fb46b9f860b60e2dd1fa7caa
+	source_x86_64 = brave-bin-1.93.137-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.93.137/brave-browser-1.93.137-linux-amd64.zip
+	sha256sums_x86_64 = 9661795c4b961ac1697fe4fa8cadf958b9c30e39e4c8db8f3bb747679c86c2ef
+	source_aarch64 = brave-bin-1.93.137-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.93.137/brave-browser-1.93.137-linux-arm64.zip
+	sha256sums_aarch64 = bc16f5ed247670f268f502bd4624cee311381a262e8ebf65f7a187123f3b6dd8
 
 pkgname = brave-bin

Comment

The change is a routine version bump for a binary package, updating pkgver and the per-architecture SHA-256 checksums to match the new upstream Brave release. The source URLs remain HTTPS GitHub release assets, there are no new build steps, scripts, or privilege/network changes, and no suspicious packaging metadata was introduced. Based on the provided diff, this is low risk.

@@ -10,7 +10,7 @@
 # Contributor: Giusy Digital <kurmikon at libero dot it>
 
 pkgname=brave-bin
-pkgver=1.93.136
+pkgver=1.93.137
 pkgrel=1
 epoch=1
 pkgdesc='Web browser that blocks ads and trackers by default (binary release)'

Comment

The change only updates the pinned SHA-256 checksums for the prebuilt Brave ZIP artifacts on x86_64 and aarch64. The source URLs remain HTTPS GitHub release URLs, there are no new build-time downloads, scripts, or packaging logic changes, and no evidence of added persistence or privilege escalation. This is a routine integrity update to match upstream release contents.

@@ -35,8 +35,8 @@ source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://github.com/brave/brave
 noextract=(${pkgname}-${pkgver}-x86_64.zip ${pkgname}-${pkgver}-aarch64.zip)
 sha256sums=('75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00'
             'c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a')
-sha256sums_x86_64=('b13917ac00c7065c40698f330bcd9ee6cc73e3f7669978eb11c620300ce0204b')
-sha256sums_aarch64=('1b4677e600199f1cdfed4fe6b60c832de8174392fb46b9f860b60e2dd1fa7caa')
+sha256sums_x86_64=('9661795c4b961ac1697fe4fa8cadf958b9c30e39e4c8db8f3bb747679c86c2ef')
+sha256sums_aarch64=('bc16f5ed247670f268f502bd4624cee311381a262e8ebf65f7a187123f3b6dd8')
 
 prepare() {
 	mkdir -p brave