Review Results

Comment

The change is a straightforward version bump in .SRCINFO for google-cloud-cli, updating the package version and corresponding upstream tarball URLs/checksums for x86_64 and aarch64. The sources remain HTTPS on the official Google Cloud CLI download domain, and there are no new scripts, patches, binaries, or packaging behavior changes in this diff. No security red flags are introduced by this metadata-only update.

@@ -1,6 +1,6 @@
 pkgbase = google-cloud-cli
 	pkgdesc = A core set of command-line tools for the Google Cloud Platform. Includes only gcloud core (with beta and alpha commands), gcloud-crc32c and man pages
-	pkgver = 581.0.0
+	pkgver = 582.0.0
 	pkgrel = 1
 	url = https://cloud.google.com/cli/
 	arch = x86_64

Comment

The change is a straightforward version bump in .SRCINFO from 581.0.0 to 582.0.0, updating the Google-hosted release tarball URLs and their SHA256 checksums for x86_64 and aarch64. The sources remain HTTPS on the official dl.google.com domain, there are no new build-time fetches, scripts, or privilege-related changes, and no suspicious metadata changes are introduced in this diff. Based on the provided hunk alone, this appears low risk.

@@ -17,10 +17,10 @@ pkgbase = google-cloud-cli
 	source = google-cloud-cli.install
 	sha256sums = 6e88b535c020b0f28c986fdb66918f8c07e4d337e813b77ec2068068f03457f8
 	sha256sums = 6ac95bcc5afa06e9c1e3bd402ecbe1a2092b963d70a8f314215dd4be27e16fc6
-	source_x86_64 = google-cloud-cli-581.0.0.orig_x86_64.tar.gz::https://dl.google.com/dl/cloudsdk/release/downloads/for_packagers/linux/google-cloud-cli_581.0.0.orig_amd64.tar.gz
-	sha256sums_x86_64 = 2d4031627b6a509f6e1c8b1c42bcaee0e9c4e32ea0b153e81e1dc85bc77afe54
-	source_aarch64 = google-cloud-cli-581.0.0.orig_aarch64.tar.gz::https://dl.google.com/dl/cloudsdk/release/downloads/for_packagers/linux/google-cloud-cli_581.0.0.orig_aarch64.tar.gz
-	sha256sums_aarch64 = 3eb0012479ddd99ac55fb485cc1cc89bc68ac3e446b99b17faf83968a413e4a6
+	source_x86_64 = google-cloud-cli-582.0.0.orig_x86_64.tar.gz::https://dl.google.com/dl/cloudsdk/release/downloads/for_packagers/linux/google-cloud-cli_582.0.0.orig_amd64.tar.gz
+	sha256sums_x86_64 = 728630fdcfeb9da4a1998e6ec97a89bb2a3623c0a47761d0ea47b8afe338dfd0
+	source_aarch64 = google-cloud-cli-582.0.0.orig_aarch64.tar.gz::https://dl.google.com/dl/cloudsdk/release/downloads/for_packagers/linux/google-cloud-cli_582.0.0.orig_aarch64.tar.gz
+	sha256sums_aarch64 = 7b086147ea6ef34046dac4e066e1e3fced29838a7eeba626e0e38831b4b5d58b
 
 pkgname = google-cloud-cli
 	install = google-cloud-cli.install

Comment

This is a routine version bump of google-cloud-cli from 581.0.0 to 582.0.0 with updated SHA-256 checksums for the architecture-specific upstream tarballs. The source URLs remain HTTPS and point to Google’s official download host, there are no new build-time network fetches, no added scripts or patches, and no packaging/persistence changes in the diff. Based on the provided hunk, I don’t see any security-relevant regression.

@@ -64,7 +64,7 @@ pkgname=(
 #   'google-cloud-cli-component-kubectl'
 #   'google-cloud-cli-component-gsutil'
 # )
-pkgver=581.0.0
+pkgver=582.0.0
 pkgrel=1
 pkgdesc="A core set of command-line tools for the Google Cloud Platform. Includes only gcloud core (with beta and alpha commands), gcloud-crc32c and man pages"
 url="https://cloud.google.com/cli/"

Comment

The change is a routine version bump from 581.0.0 to 582.0.0 with corresponding checksum updates for the upstream Google-hosted tarballs. No new sources, scripts, build steps, privilege changes, or packaging logic were introduced. The diff is limited to integrity hashes, so there is no evident security regression in this change itself.

@@ -86,8 +86,8 @@ source_aarch64=("$pkgbase-$pkgver.orig_aarch64.tar.gz::https://dl.google.com/dl/
 
 sha256sums=('6e88b535c020b0f28c986fdb66918f8c07e4d337e813b77ec2068068f03457f8'
             '6ac95bcc5afa06e9c1e3bd402ecbe1a2092b963d70a8f314215dd4be27e16fc6')
-sha256sums_x86_64=('2d4031627b6a509f6e1c8b1c42bcaee0e9c4e32ea0b153e81e1dc85bc77afe54')
-sha256sums_aarch64=('3eb0012479ddd99ac55fb485cc1cc89bc68ac3e446b99b17faf83968a413e4a6')
+sha256sums_x86_64=('728630fdcfeb9da4a1998e6ec97a89bb2a3623c0a47761d0ea47b8afe338dfd0')
+sha256sums_aarch64=('7b086147ea6ef34046dac4e066e1e3fced29838a7eeba626e0e38831b4b5d58b')
 
 prepare() {
   cd "$_extracted_name"