Review Results

Comment

The change is a routine version bump in .SRCINFO: it updates pkgver and the corresponding upstream RPM source URL and checksum. The source remains HTTPS on the official Vivaldi download domain, and there are no new scripts, build steps, or privilege-related artifacts introduced in this diff. No security issues are evident from the provided change alone.

@@ -1,8 +1,8 @@
 # Generated by makepkg 7.1.0
-# Fri Aug 14 09:24:20 UTC 2026
+# Fri Aug 21 11:14:07 UTC 2026
 pkgbase = vivaldi-snapshot
 	pkgdesc = An advanced browser made with the power user in mind. Snapshot
-	pkgver = 8.2.4133.3
+	pkgver = 8.2.4133.24
 	pkgrel = 1
 	url = https://vivaldi.com
 	arch = x86_64

Comment

The change is a routine upstream version bump in .SRCINFO: it updates the Vivaldi snapshot RPM URL from 8.2.4133.3-1 to 8.2.4133.24-1 and refreshes the corresponding sha512 checksum. The source remains the official HTTPS Vivaldi download host, there are no new sources, scripts, or packaging behavior changes, and no signs of added persistence or privilege escalation. Risk is minimal.

@@ -36,9 +36,9 @@ pkgbase = vivaldi-snapshot
 	optdepends = upower: Battery Status API support
 	options = !strip
 	options = !zipman
-	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.2.4133.3-1.x86_64.rpm
+	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.2.4133.24-1.x86_64.rpm
 	source = 0001-add-support-for-user-flags.patch
-	sha512sums = 69f21aa68818eca7e444c2632c19084475263f536969bbd3384feca085f613562268791149d7a7dc1b9ac0893bdbafa2387e9123a2dcb75c03c14effde8296e8
+	sha512sums = 02961519ba4c0e63704e82d15c0d1e9dfaeb4283ab63d0e1fafe4f2e7629ef4be70c360eb6f50abde9dc831f79c0896cc415397865b0afb338515af36cd70f2f
 	sha512sums = a9bdab0fb0f394af17d1b126bae2d0cdc55e63eaa6eaf36eb994735047d3d7bc5000d75ab930f74b76b283c5addefbd4e4e63c5e4f2908bd53c270e73641c19d
 
 pkgname = vivaldi-snapshot

Comment

The change only bumps the upstream Vivaldi snapshot version from 8.2.4133.3 to 8.2.4133.24 in PKGBUILD. No new sources, scripts, patches, install hooks, permissions changes, or build logic are introduced by this diff. Based on the provided hunk alone, there are no obvious supply-chain or privilege-related concerns.

@@ -2,8 +2,8 @@
 # Contributor: TZ86
 
 pkgname=vivaldi-snapshot
-_rpmversion=8.2.4133.3-1
-pkgver=8.2.4133.3
+_rpmversion=8.2.4133.24-1
+pkgver=8.2.4133.24
 pkgrel=1
 pkgdesc='An advanced browser made with the power user in mind. Snapshot'
 url="https://vivaldi.com"

Comment

The change is limited to bumping the Vivaldi snapshot version and updating the corresponding SHA-512 checksum for the upstream RPM source. The source remains an HTTPS download from the official Vivaldi domain, with no new build steps, scripts, patches, or privilege-related changes introduced. I do not see any supply-chain red flags in this diff beyond the normal trust placed in the upstream binary RPM already present in the package.

@@ -42,7 +42,7 @@ optdepends=(
 )
 source=("https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-${_rpmversion}.x86_64.rpm"
         '0001-add-support-for-user-flags.patch')
-sha512sums=('69f21aa68818eca7e444c2632c19084475263f536969bbd3384feca085f613562268791149d7a7dc1b9ac0893bdbafa2387e9123a2dcb75c03c14effde8296e8'
+sha512sums=('02961519ba4c0e63704e82d15c0d1e9dfaeb4283ab63d0e1fafe4f2e7629ef4be70c360eb6f50abde9dc831f79c0896cc415397865b0afb338515af36cd70f2f'
             'a9bdab0fb0f394af17d1b126bae2d0cdc55e63eaa6eaf36eb994735047d3d7bc5000d75ab930f74b76b283c5addefbd4e4e63c5e4f2908bd53c270e73641c19d')
 
 package() {