Review Results

Comment

The only change in this .SRCINFO diff is a version bump from 2026.2.0.2 to 2026.2.1. No source URLs, checksums, build commands, install scripts, permissions, or dependency metadata changed in the provided hunk. On its face this is a routine package update with no security-relevant red flags visible in the reviewed diff.

@@ -1,6 +1,6 @@
 pkgbase = rider
 	pkgdesc = A cross-platform .NET IDE by JetBrains.
-	pkgver = 2026.2.0.2
+	pkgver = 2026.2.1
 	pkgrel = 1
 	epoch = 1
 	url = https://www.jetbrains.com/rider/

Comment

The change is a straightforward version bump in .SRCINFO for the Rider upstream tarballs, with HTTPS JetBrains download URLs and updated checksums. No new sources, scripts, install hooks, permissions changes, or other packaging red flags are introduced in this diff. Based on the provided hunk alone, this appears low risk.

@@ -15,9 +15,9 @@ pkgbase = rider
 	options = staticlibs
 	source = jetbrains-rider.desktop
 	sha256sums = 4d5438fd52380ccd09deef98cb82707f296ebb27a3faed2fceb1b68eba335ec8
-	source_x86_64 = https://download-cf.jetbrains.com/rider/JetBrains.Rider-2026.2.0.2.tar.gz
-	sha256sums_x86_64 = eb570cb1f9cd785184be96613889417db702ee560829b265b91b8631aa8390b1
-	source_aarch64 = https://download-cf.jetbrains.com/rider/JetBrains.Rider-2026.2.0.2-aarch64.tar.gz
-	sha256sums_aarch64 = 7737fc4c071f847b954726a02714be064f51be0a0ce55f473405b1b7008a2ac2
+	source_x86_64 = https://download-cf.jetbrains.com/rider/JetBrains.Rider-2026.2.1.tar.gz
+	sha256sums_x86_64 = f7a485d26b133daea3e6ebc1257dd4e55aacbf48ca8b4b47dffaef3e1905ebe2
+	source_aarch64 = https://download-cf.jetbrains.com/rider/JetBrains.Rider-2026.2.1-aarch64.tar.gz
+	sha256sums_aarch64 = 8ac97ca180c1a3d988bdccd608bf52989913e04725eb7a28b625563c8c39174f
 
 pkgname = rider

Comment

The change only bumps pkgver from 2026.2.0.2 to 2026.2.1 in PKGBUILD. No source URLs, checksums, build steps, install scripts, permissions, or other packaging logic were modified in the provided diff hunk. On its face this is a routine version update with no new security red flags in the reviewed change.

@@ -1,7 +1,7 @@
 # Maintainer: Tim Hellhake
 
 pkgname=rider
-pkgver='2026.2.0.2'
+pkgver='2026.2.1'
 pkgrel=1
 epoch=1
 pkgdesc='A cross-platform .NET IDE by JetBrains.'

Comment

The change only updates the SHA-256 checksums for the upstream Rider tarballs on x86_64 and aarch64. The download URLs remain HTTPS and still point to JetBrains’ official CDN, with no new build steps, scripts, or packaging behavior introduced. This is a routine integrity pin update and does not add suspicious execution or persistence mechanisms.

@@ -18,9 +18,9 @@ _srcfile="JetBrains.Rider-${pkgver}"
 source=('jetbrains-rider.desktop')
 sha256sums=('4d5438fd52380ccd09deef98cb82707f296ebb27a3faed2fceb1b68eba335ec8')
 source_x86_64=("https://download-cf.jetbrains.com/rider/${_srcfile}.tar.gz")
-sha256sums_x86_64=('eb570cb1f9cd785184be96613889417db702ee560829b265b91b8631aa8390b1')
+sha256sums_x86_64=('f7a485d26b133daea3e6ebc1257dd4e55aacbf48ca8b4b47dffaef3e1905ebe2')
 source_aarch64=("https://download-cf.jetbrains.com/rider/${_srcfile}-aarch64.tar.gz")
-sha256sums_aarch64=('7737fc4c071f847b954726a02714be064f51be0a0ce55f473405b1b7008a2ac2')
+sha256sums_aarch64=('8ac97ca180c1a3d988bdccd608bf52989913e04725eb7a28b625563c8c39174f')
 
 package() {
     install_base="/opt"