Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 151.0.7922.173 to 152.0.7977.64. No source URLs, checksums, install scripts, dependencies, or build logic are altered here, so there is no direct security signal in the diff itself. This is a routine metadata update and does not introduce an obvious supply-chain or privilege-escalation risk based on the provided change alone.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome
 	pkgdesc = The popular web browser by Google (Stable Channel)
-	pkgver = 151.0.7922.173
+	pkgver = 152.0.7977.64
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome.install

Comment

The change only updates the pinned upstream Google Chrome .deb source URLs and their SHA-512 checksums in .SRCINFO from version 151.0.7922.173-1 to 152.0.7977.64-1. The sources remain HTTPS from the official dl.google.com domain, and the package still relies on checksum verification for integrity. No new build-time code, scripts, privilege changes, or additional sources are introduced by this diff. This is a routine version bump with no obvious security red flags in the reviewed hunk.

@@ -25,9 +25,9 @@ pkgbase = google-chrome
 	source = google-chrome-stable.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_151.0.7922.173-1_amd64.deb
-	sha512sums_x86_64 = 1c099aacfc9cdb9bfae159a05076c3d06e6c13352aefb87d840daf8594ec2d445d20ba1ba53c5e349a87c07394ea1a58613209faa3fe5c5f5dabaf0cbe2d79b0
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_151.0.7922.173-1_arm64.deb
-	sha512sums_aarch64 = c473ec62ac10d1374295307baa24a7a014cef59cfb839da7a3bf3153f727cc7239ebb130cd7776bf50a7af587cf008b4ba82b0a486f02a5e960d0f156c3e57c8
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_152.0.7977.64-1_amd64.deb
+	sha512sums_x86_64 = 8401cc4a4f11714bcef72c6139d53dc2ff68f97257339f34bc8c117f55c72bdacb47b8c2feb38ef79c4d5747f76fecd1a3dfe154e8d67fa247f842e9a2718eeb
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_152.0.7977.64-1_arm64.deb
+	sha512sums_aarch64 = c47e78be540368a86521f4a5c64471b9c914af9c624f653d518d4efa0557438735b7e037b2e451e86a7c14e2feca7efc514a450a94653233edbf6afdd693f6da
 
 pkgname = google-chrome

Comment

The change is a routine version bump for the Google Chrome stable package, with corresponding checksum updates for the official HTTPS download URLs. No new sources, scripts, install hooks, privilege changes, or build-time network behavior were introduced by this diff. The package still fetches the upstream .deb from dl.google.com as before, and the diff does not add any suspicious execution or persistence mechanisms. Based on the provided hunk alone, this looks low risk.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-stable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome
-pkgver=151.0.7922.173
+pkgver=152.0.7977.64
 pkgrel=1
 pkgdesc="The popular web browser by Google (Stable Channel)"
 arch=(

Comment

The change only updates the pinned upstream Chrome version and the corresponding SHA-512 checksums for the x86_64 and aarch64 .deb sources. The download URLs remain HTTPS and still point to Google's official Chrome repository, with no new build-time code execution, install-script changes, or additional sources introduced. This is a routine version bump with integrity metadata refreshed accordingly.

@@ -39,8 +39,8 @@ source=('eula_text.html'
         "google-chrome-$_channel.sh")
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             'de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94')
-sha512sums_x86_64=('1c099aacfc9cdb9bfae159a05076c3d06e6c13352aefb87d840daf8594ec2d445d20ba1ba53c5e349a87c07394ea1a58613209faa3fe5c5f5dabaf0cbe2d79b0')
-sha512sums_aarch64=('c473ec62ac10d1374295307baa24a7a014cef59cfb839da7a3bf3153f727cc7239ebb130cd7776bf50a7af587cf008b4ba82b0a486f02a5e960d0f156c3e57c8')
+sha512sums_x86_64=('8401cc4a4f11714bcef72c6139d53dc2ff68f97257339f34bc8c117f55c72bdacb47b8c2feb38ef79c4d5747f76fecd1a3dfe154e8d67fa247f842e9a2718eeb')
+sha512sums_aarch64=('c47e78be540368a86521f4a5c64471b9c914af9c624f653d518d4efa0557438735b7e037b2e451e86a7c14e2feca7efc514a450a94653233edbf6afdd693f6da')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")