Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 4.51.180 to 4.51.191. No sources, checksums, build logic, install scripts, or packaging metadata were altered in the reviewed diff, so there is no new security concern visible here. This appears to be a routine upstream version update.

@@ -1,6 +1,6 @@
 pkgbase = slack-desktop
 	pkgdesc = Slack Desktop (Beta) for Linux
-	pkgver = 4.51.180
+	pkgver = 4.51.191
 	pkgrel = 1
 	url = https://slack.com/downloads
 	arch = x86_64

Comment

The change is a routine version bump in .SRCINFO for the Slack desktop binary package: it updates the pinned upstream .deb URL, matching noextract filename, and checksum to 4.51.191. The source remains on the official Slack downloads domain over HTTPS, and there are no new scripts, install hooks, privilege changes, or packaging behavior changes in this diff. Based on the provided hunk alone, this looks low risk.

@@ -12,11 +12,11 @@ pkgbase = slack-desktop
 	depends = xdg-utils
 	optdepends = libappindicator-gtk3: Systray indicator support
 	optdepends = org.freedesktop.secrets: Keyring password store support
-	noextract = slack-desktop-4.51.180-amd64.deb
+	noextract = slack-desktop-4.51.191-amd64.deb
 	options = !debug
-	source = https://downloads.slack-edge.com/desktop-releases/linux/x64/4.51.180/slack-desktop-4.51.180-amd64.deb
+	source = https://downloads.slack-edge.com/desktop-releases/linux/x64/4.51.191/slack-desktop-4.51.191-amd64.deb
 	source = slack-desktop.patch
-	b2sums = 2393045a2f0171e283f16c66cc5c9e13acbc6b40d0a0b39305f04ee28232c85847a985aa762a9063adf5d85241b2d480af5c5f0fcda1bc9b2789d292578eb92d
+	b2sums = d06a3a0880f776ccf702481bd0009da0ec60d250811ded0c7cc654678b0bcfe97c2d8e75f9e2d54938ff1b4d04d741a7afb4f19714e885de06ed6dbb116d8dcf
 	b2sums = 103447636acd7ac2789d7d89008483a2077d862a51a64427a66c51e64dc9eac588de187f13df2778ccb7b24110a36c259b33c0074ff69c9bab3f89283a1efaf1
 
 pkgname = slack-desktop

Comment

The change only bumps pkgver from 4.51.180 to 4.51.191 in PKGBUILD. No source URLs, checksums, build steps, install scripts, permissions, or package metadata beyond the version number are altered in the provided diff hunk. On its face this is a routine upstream version update with no visible security red flags in the reviewed change.

@@ -3,7 +3,7 @@
 # Contributor: Kyle Manna <kyle(at)kylemanna(dot)com>
 
 pkgname=slack-desktop
-pkgver=4.51.180
+pkgver=4.51.191
 pkgrel=1
 pkgdesc="Slack Desktop (Beta) for Linux"
 arch=('x86_64')

Comment

The change only updates the B2 checksum for the upstream Slack .deb source; the download URL remains HTTPS and pinned to an explicit versioned release path, and there are no new build-time commands, network fetches, privilege changes, or packaging logic changes in this hunk. This is a low-risk integrity metadata update, assuming the new checksum matches the intended upstream artifact.

@@ -16,7 +16,7 @@ options=('!debug')
 source=("https://downloads.slack-edge.com/desktop-releases/linux/x64/${pkgver}/${pkgname}-${pkgver}-amd64.deb"
         "${pkgname}.patch")
 noextract=("${pkgname}-${pkgver}-amd64.deb")
-b2sums=('2393045a2f0171e283f16c66cc5c9e13acbc6b40d0a0b39305f04ee28232c85847a985aa762a9063adf5d85241b2d480af5c5f0fcda1bc9b2789d292578eb92d'
+b2sums=('d06a3a0880f776ccf702481bd0009da0ec60d250811ded0c7cc654678b0bcfe97c2d8e75f9e2d54938ff1b4d04d741a7afb4f19714e885de06ed6dbb116d8dcf'
         '103447636acd7ac2789d7d89008483a2077d862a51a64427a66c51e64dc9eac588de187f13df2778ccb7b24110a36c259b33c0074ff69c9bab3f89283a1efaf1')
 
 package() {