Review Results

Comment

This change only bumps the package version in .SRCINFO from 151.0.7922.169 to 151.0.7922.173. No sources, checksums, build logic, install scripts, or permissions are modified, and there are no new integrity or execution red flags in the provided diff. On its face this is a routine version update with no security impact visible from the change shown.

@@ -1,6 +1,6 @@
 pkgbase = ungoogled-chromium-bin
 	pkgdesc = A lightweight approach to removing Google web service dependency
-	pkgver = 151.0.7922.169
+	pkgver = 151.0.7922.173
 	pkgrel = 1
 	url = https://github.com/ungoogled-software/ungoogled-chromium
 	arch = x86_64

Comment

The change is a straightforward version bump in .SRCINFO for a binary package: the provided version, download URL, and checksum are updated consistently from 151.0.7922.169 to 151.0.7922.173. The source remains an HTTPS GitHub release asset from the expected upstream project, with a pinned release artifact and matching sha256 checksum. No new build steps, scripts, privileges, or additional sources are introduced in this diff. Security risk appears minimal.

@@ -62,11 +62,11 @@ pkgbase = ungoogled-chromium-bin
 	optdepends = qt6-base: Qt support
 	optdepends = org.freedesktop.secrets: password storage backend on GNOME, KDE and Xfce
 	optdepends = upower: Battery Status API support
-	provides = chromium=151.0.7922.169
-	provides = chromedriver=151.0.7922.169
+	provides = chromium=151.0.7922.173
+	provides = chromedriver=151.0.7922.173
 	conflicts = chromium
 	conflicts = chromedriver
-	source = https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/151.0.7922.169-1/ungoogled-chromium-151.0.7922.169-1-x86_64.pkg.tar.zst
-	sha256sums = c0a30148e99ac7ed304f4bfdd8c3ecdd08879b121041cc8c1ed5399dc833ef5e
+	source = https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/151.0.7922.173-1/ungoogled-chromium-151.0.7922.173-1-x86_64.pkg.tar.zst
+	sha256sums = f23eb52de5329e49869e498329ca89c6d92b192cd018bd0c5547bac4a2b87dab
 
 pkgname = ungoogled-chromium-bin

Comment

The change only bumps pkgver from 151.0.7922.169 to 151.0.7922.173 in PKGBUILD. No source URLs, checksums, build logic, install scripts, permissions, or package metadata beyond the version string were altered in the provided diff. On its face this is a routine upstream version update with no new security red flags in the reviewed hunk.

@@ -1,7 +1,7 @@
 # Maintainer: networkException <git@nwex.de>
 
 pkgname=ungoogled-chromium-bin
-pkgver=151.0.7922.169
+pkgver=151.0.7922.173
 pkgrel=1
 pkgdesc="A lightweight approach to removing Google web service dependency"
 arch=('x86_64')

Comment

Risk score 1/5. The change only bumps the packaged upstream release version and updates the SHA-256 checksum for the prebuilt release artifact downloaded over HTTPS from the project’s GitHub releases page. There are no new build steps, scripts, privilege changes, or additional sources. The main residual risk is the inherent trust in a prebuilt binary package, but this diff itself does not introduce a new security issue.

@@ -54,7 +54,7 @@ optdepends=('pipewire: WebRTC desktop sharing under Wayland'
 provides=("chromium=$pkgver" "chromedriver=$pkgver")
 conflicts=('chromium' 'chromedriver')
 source=(https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/$pkgver-$pkgrel/ungoogled-chromium-$pkgver-$pkgrel-x86_64.pkg.tar.zst)
-sha256sums=('c0a30148e99ac7ed304f4bfdd8c3ecdd08879b121041cc8c1ed5399dc833ef5e')
+sha256sums=('f23eb52de5329e49869e498329ca89c6d92b192cd018bd0c5547bac4a2b87dab')
 
 declare -gA _system_libs=(
     [brotli]=brotli