Review Results

Comment

The change is a straightforward version bump in .SRCINFO, updating the upstream GitHub release tarball and its checksum. The source URL remains HTTPS and points to the project’s official repository, with no new build-time commands, scripts, or packaging behavior introduced in this diff. No integrity or persistence red flags are present in the reviewed hunk.

@@ -1,6 +1,6 @@
 pkgbase = teams-for-linux
 	pkgdesc = Unofficial Microsoft Teams client for Linux using Electron.
-	pkgver = 2.17.0
+	pkgver = 2.18.1
 	pkgrel = 1
 	url = https://github.com/IsmaelMartinez/teams-for-linux
 	arch = aarch64

Comment

The change is a straightforward version bump in .SRCINFO from 2.17.0 to 2.18.1, with the corresponding source URL and checksum updated. The source remains an HTTPS GitHub release tarball from the upstream project, and there are no new build steps, scripts, patches, or privilege-related artifacts introduced in this diff. Based on the provided change alone, I see no security red flags.

@@ -15,9 +15,9 @@ pkgbase = teams-for-linux
 	depends = libxss
 	depends = nss
 	optdepends = libfido2: WebAuthn with FIDO2 devices
-	source = teams-for-linux-2.17.0.tar.gz::https://github.com/IsmaelMartinez/teams-for-linux/archive/v2.17.0.tar.gz
+	source = teams-for-linux-2.18.1.tar.gz::https://github.com/IsmaelMartinez/teams-for-linux/archive/v2.18.1.tar.gz
 	source = teams-for-linux.desktop
-	sha256sums = 6e2bd12a61a15c1fea796b3b0b0fde043c9476f530ecfcca0de467920b3b2644
+	sha256sums = 8208fa54d28017260e1e70d9a80ae5c4f2751b22f3e21442322ecaf4eaf48a2f
 	sha256sums = e67c98084736f797c575970935dd773b5c348ea3d9522bc5db733a92361fc05e
 
 pkgname = teams-for-linux

Comment

The change is a straightforward version bump in PKGBUILD from 2.17.0 to 2.18.1, with the source tarball checksum updated accordingly. The source remains the upstream GitHub release archive over HTTPS, and there are no new build steps, scripts, network fetches, privilege changes, or packaging behavior changes in the diff provided. Based on this hunk alone, I do not see a security issue.

@@ -3,7 +3,7 @@
 # Contributor: Ivelin Velkov <ivelin dot velkov at gmail dot com>
 
 pkgname=teams-for-linux
-pkgver=2.17.0
+pkgver=2.18.1
 pkgrel=1
 pkgdesc="Unofficial Microsoft Teams client for Linux using Electron."
 arch=("aarch64" "armv7h" "i686" "x86_64")

Comment

The change is a straightforward version bump in PKGBUILD from 2.17.0 to 2.18.1 with the corresponding source tarball checksum updated. The source remains the official GitHub release archive over HTTPS, there are no new build steps, no added scripts, no network fetches outside source=(), and no packaging/persistence red flags in the diff provided. Based on the reviewed hunk alone, this appears low risk.

@@ -16,7 +16,7 @@ source=(
   "${pkgname}-${pkgver}.tar.gz::https://github.com/IsmaelMartinez/${pkgname}/archive/v${pkgver}.tar.gz"
   "${pkgname}.desktop"
 )
-sha256sums=('6e2bd12a61a15c1fea796b3b0b0fde043c9476f530ecfcca0de467920b3b2644'
+sha256sums=('8208fa54d28017260e1e70d9a80ae5c4f2751b22f3e21442322ecaf4eaf48a2f'
             'e67c98084736f797c575970935dd773b5c348ea3d9522bc5db733a92361fc05e')
 
 build() {