Review Results

Comment

The change is a straightforward version bump in .SRCINFO from Unity Hub 3.20.0 to 3.21.0, with the source URL and checksum updated accordingly. The source remains HTTPS and points to Unity's official download host, and there are no new build-time commands, extra sources, or packaging-script changes in this diff. Based on the provided hunk alone, I don't see an integrity or persistence concern introduced here.

@@ -1,7 +1,7 @@
 pkgbase = unityhub
 	pkgdesc = The Unity Hub is a standalone application that streamlines the way you find, download, and manage your Unity Projects and installations.
-	pkgver = 3.20.0
-	pkgrel = 2
+	pkgver = 3.21.0
+	pkgrel = 1
 	url = https://unity.com/
 	install = unityhub.install
 	arch = x86_64

Comment

The change is a straightforward upstream version bump for the Unity Hub Debian package from 3.20.0 to 3.21.0, with the corresponding SHA-256 checksum updated. The source remains the official Unity download host over HTTPS, there are no new build-time commands, no added scripts, and no changes to package metadata that would suggest privilege escalation, persistence, or integrity bypass. Based on the provided diff hunk, this appears low risk.

@@ -23,10 +23,10 @@ pkgbase = unityhub
 	depends = cpio
 	conflicts = unityhub-beta
 	options = !strip
-	source = unityhub-3.20.0.deb::https://hub.unity3d.com/linux/repos/deb/pool/main/u/unity/unityhub_amd64/unityhub_3.20.0_amd64.deb
+	source = unityhub-3.21.0.deb::https://hub.unity3d.com/linux/repos/deb/pool/main/u/unity/unityhub_amd64/unityhub_3.21.0_amd64.deb
 	source = license.txt
 	source = services-config.json
-	sha256sums = 22303da6cd88026011016dd8fe2de01cbb41d630650a7448123e616680999d54
+	sha256sums = b90d3e38ecfac7b3cc5954b298cc8beec915250a4cb0038bb50781ee1fce0e25
 	sha256sums = 6f50dbc9b2fbe70693aefcbcdb4d7be249ab8dcadf6f7f41458681989ead7a0e
 	sha256sums = 557964a3528219723750a7eabeb2e31a2d3e1b2c4a4b2e201b32d4035200562e
 

Comment

The change is a straightforward version bump from Unity Hub 3.20.0 to 3.21.0 with the corresponding source checksum update and no other build logic, install scripts, or packaging behavior changes. I do not see any new network fetches, privilege escalation, persistence mechanisms, or suspicious metadata changes in this diff. Risk is low because the review scope is limited to the PKGBUILD version/checksum update only.

@@ -5,8 +5,8 @@
 # Contributor: Léo <aur@salut-c-leo.fr>
 
 pkgname=unityhub
-pkgver=3.20.0
-pkgrel=2
+pkgver=3.21.0
+pkgrel=1
 pkgdesc="The Unity Hub is a standalone application that streamlines the way you find, download, and manage your Unity Projects and installations."
 url="https://unity.com/"
 arch=('x86_64')

Comment

The change is a straightforward version bump from 3.20.0-2 to 3.21.0-1 with an updated SHA-256 for the main source archive. No new sources, no build-script changes, no added network access, and no install/unit/persistence artifacts are introduced in this diff. Based on the provided hunk alone, there are no security red flags.

@@ -18,7 +18,7 @@ source=(
   'services-config.json'
 )
 sha256sums=(
-  '22303da6cd88026011016dd8fe2de01cbb41d630650a7448123e616680999d54'
+  'b90d3e38ecfac7b3cc5954b298cc8beec915250a4cb0038bb50781ee1fce0e25'
   '6f50dbc9b2fbe70693aefcbcdb4d7be249ab8dcadf6f7f41458681989ead7a0e'
   '557964a3528219723750a7eabeb2e31a2d3e1b2c4a4b2e201b32d4035200562e'
 )