Review Results

Comment

The only change in this diff is a version bump in .SRCINFO from 3.7.0.87111 to 3.7.1.87197. No source URLs, checksums, build logic, install scripts, or packaging permissions were modified in the reviewed hunk, so there is no direct security signal here. Based on the provided diff alone, this appears low risk.

@@ -1,6 +1,6 @@
 pkgbase = jetbrains-toolbox
 	pkgdesc = Manage all your JetBrains Projects and Tools
-	pkgver = 3.7.0.87111
+	pkgver = 3.7.1.87197
 	pkgrel = 1
 	url = https://www.jetbrains.com/toolbox/
 	arch = x86_64

Comment

The change is a straightforward upstream version bump in .SRCINFO, updating the JetBrains Toolbox tarball URL and its corresponding B2 checksum. The source remains HTTPS on the official JetBrains download domain, there are no new build-time commands, scripts, or packaging changes, and no signs of added persistence or privilege escalation. Risk is low and limited to the usual trust in the upstream release artifact.

@@ -16,11 +16,11 @@ pkgbase = jetbrains-toolbox
 	optdepends = xdg-utils: open URLs
 	options = !strip
 	options = !debug
-	source = https://download.jetbrains.com/toolbox/jetbrains-toolbox-3.7.0.87111.tar.gz
+	source = https://download.jetbrains.com/toolbox/jetbrains-toolbox-3.7.1.87197.tar.gz
 	source = jetbrains-toolbox.desktop
 	source = icon.svg
 	source = LICENSE
-	b2sums = 7e4806fa5133da4cda490b2c4e753a90f27e33f24f81558264dc21f5062bb15ce64dac7035cea88c215939136aadf916e458f31d9834d029b061cd2d1568d336
+	b2sums = 9bbc5a5a2fc9fc183375d440d26ea9f48c7381180415d94fcc24d0db587bcd33608fe4506aa368abf620ae6f8edff59ff58307b08711acbc86fc75941d271751
 	b2sums = 29b6d4be91d9276bce9e5413fb877db82de414198e343ff3f7aa5d03f65cf42c80f78ec3b43f601394fecc6a31712d1c475f3fdec71e51be5732ec7b1eb8dca9
 	b2sums = 4b10487746fcb7f328cbdc8b17432f82618c5695baee4ef30e23ff3c4d4b6096daf2fcdfb4c1e2e179e2e61f68bbd88104e5df5a2e6e969aad0a68a75cfff496
 	b2sums = dadaf0e67b598aa7a7a4bf8644943a7ee8ebf4412abb17cd307f5989e36caf9d0db529a0e717a9df5d9537b10c4b13e814b955ada6f0d445913c812b63804e77

Comment

This change is a routine version bump of the upstream JetBrains Toolbox tarball plus the corresponding B2 checksum update. The source remains the official HTTPS JetBrains download URL, there are no new build steps, scripts, patches, or packaging changes, and no signs of privilege escalation, network fetches during build, or persistence mechanisms. Risk is minimal and limited to the usual trust in the upstream release artifact.

@@ -1,7 +1,7 @@
 # Maintainer: Frederik Schwan <freswa at archlinux dot org>
 
 pkgname=jetbrains-toolbox
-pkgver=3.7.0.87111
+pkgver=3.7.1.87197
 pkgrel=1
 pkgdesc='Manage all your JetBrains Projects and Tools'
 arch=('x86_64' 'i686')

Comment

The change is a routine version bump in PKGBUILD from 3.7.0.87111 to 3.7.1.87197 with an updated b2sum for the upstream tarball. The source remains the official JetBrains HTTPS download URL, and there are no added build steps, scripts, patches, privilege changes, or other suspicious packaging changes in the diff. Based on the provided hunk, this appears low risk.

@@ -22,7 +22,7 @@ source=("https://download.jetbrains.com/toolbox/${pkgname}-${pkgver}.tar.gz"
         jetbrains-toolbox.desktop
         icon.svg
         LICENSE)
-b2sums=('7e4806fa5133da4cda490b2c4e753a90f27e33f24f81558264dc21f5062bb15ce64dac7035cea88c215939136aadf916e458f31d9834d029b061cd2d1568d336'
+b2sums=('9bbc5a5a2fc9fc183375d440d26ea9f48c7381180415d94fcc24d0db587bcd33608fe4506aa368abf620ae6f8edff59ff58307b08711acbc86fc75941d271751'
         '29b6d4be91d9276bce9e5413fb877db82de414198e343ff3f7aa5d03f65cf42c80f78ec3b43f601394fecc6a31712d1c475f3fdec71e51be5732ec7b1eb8dca9'
         '4b10487746fcb7f328cbdc8b17432f82618c5695baee4ef30e23ff3c4d4b6096daf2fcdfb4c1e2e179e2e61f68bbd88104e5df5a2e6e969aad0a68a75cfff496'
         'dadaf0e67b598aa7a7a4bf8644943a7ee8ebf4412abb17cd307f5989e36caf9d0db529a0e717a9df5d9537b10c4b13e814b955ada6f0d445913c812b63804e77')