Review Results

Comment

The only change in this .SRCINFO diff is a version bump from 151.0.4129.101 to 151.0.4129.107. No new sources, checksums, build steps, install scripts, permissions, or package metadata were introduced, so there is no evident security impact from the diff itself. This appears to be a routine upstream version update.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 151.0.4129.101
+	pkgver = 151.0.4129.107
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change is a routine upstream version bump for the Microsoft Edge binary package: it updates the .deb source URL from 151.0.4129.101-1 to 151.0.4129.107-1 and refreshes the corresponding SHA-256 checksum. The source remains on the official Microsoft HTTPS repository, there are no new sources, scripts, or packaging behavior changes in this diff, and no additional attack surface is introduced by the .SRCINFO update itself.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_151.0.4129.101-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_151.0.4129.107-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = bd7604025424914a61c06293cb6bf269141a29d8c54cf1997110bc96d3365d60
+	sha256sums = 1193e2de1588c14aff86704cb479f512955cfd6c5f2d5c2bb54ff536a77f624c
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change is a simple version bump in PKGBUILD from 151.0.4129.101 to 151.0.4129.107 with no other modifications. There are no new sources, build steps, install scripts, permissions changes, or other security-relevant alterations in the provided diff hunk. On its face this is low risk and consistent with a routine upstream release update.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=151.0.4129.101
+pkgver=151.0.4129.107
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change only updates the pinned Microsoft Edge package version and its corresponding SHA-256 checksum in PKGBUILD. The source remains an HTTPS URL on Microsoft's official package repository, with no new sources, scripts, build steps, or privilege/persistence changes introduced. Based on the diff provided, this is a routine upstream version bump with integrity metadata refresh and no obvious security red flags.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('bd7604025424914a61c06293cb6bf269141a29d8c54cf1997110bc96d3365d60'
+sha256sums=('1193e2de1588c14aff86704cb479f512955cfd6c5f2d5c2bb54ff536a77f624c'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')