Review Results

Comment

The change only bumps pkgver in .SRCINFO from 153.0.8010.5 to 153.0.8010.12. No build logic, sources, install scripts, permissions, or package metadata beyond the version number changed. On its face this is a routine upstream version update with no security-relevant red flags in the provided diff.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome-beta
 	pkgdesc = The popular web browser by Google (Beta Channel)
-	pkgver = 153.0.8010.5
+	pkgver = 153.0.8010.12
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome-beta.install

Comment

The change only updates the pinned upstream Google Chrome beta binary package URLs and their SHA-512 checksums in .SRCINFO from 153.0.8010.5-1 to 153.0.8010.12-1 for x86_64 and aarch64. The sources remain HTTPS on the official dl.google.com domain, and there is no new build-time code, script, or privilege-related behavior introduced by this metadata-only update. Risk is low; the main trust assumption is still the prebuilt upstream .deb, but that was already present before this change.

@@ -26,9 +26,9 @@ pkgbase = google-chrome-beta
 	source = google-chrome-beta.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = 17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_153.0.8010.5-1_amd64.deb
-	sha512sums_x86_64 = 5bc8d9c2c20230c5e6d7a83d7df1880a0282b8b5ebb55f3fdf41269171b50283862c6ebdb88224c4f36bce9b6ab9e3bbc902a211944a4f9aec7a83203b24374e
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_153.0.8010.5-1_arm64.deb
-	sha512sums_aarch64 = 42539cfdeaa25cea98d123c50cdc603252040a7c7b6fff2674107065a2587ee5a4d6b524322b64246e034b059ddbee68dd51e785e8b51b7350457daeec9d8314
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_153.0.8010.12-1_amd64.deb
+	sha512sums_x86_64 = ed46c678afdcc913abf0bd11373a62367e5d736a093a5be94e3caf5d9bee0b35ecf3b6c37f7b04fcc5d1119bcb3d33a707136a8a8a39bacd3dafb5e38bf2cfc8
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_153.0.8010.12-1_arm64.deb
+	sha512sums_aarch64 = 0086800121ce3affddd53894ce20bede0e44465dee0bdbbdd3fb9faa6e95aaa01fc3ae384641d5e77415be769146c62c989e253936c616bbdf1db51932d47a6f
 
 pkgname = google-chrome-beta

Comment

This change only bumps pkgver from 153.0.8010.5 to 153.0.8010.12 in PKGBUILD. No source URLs, build logic, install scripts, permissions, or packaging behavior changed, and there are no new integrity or execution red flags in the provided diff. Risk is minimal and limited to a routine version update.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-beta" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome-beta
-pkgver=153.0.8010.5
+pkgver=153.0.8010.12
 pkgrel=1
 pkgdesc="The popular web browser by Google (Beta Channel)"
 arch=(

Comment

This change only bumps google-chrome-beta from 153.0.8010.5 to 153.0.8010.12 and updates the corresponding SHA-512 checksums for the official Google-hosted .deb artifacts on x86_64 and aarch64. The source URLs remain HTTPS and point to dl.google.com, there are no new build-time downloads, scripts, patches, privilege changes, or packaging logic changes. Security impact is limited to the normal risk of consuming a new upstream browser release, with no evidence of added supply-chain or persistence issues in this diff.

@@ -42,8 +42,8 @@ source=(
 )
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             '17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03')
-sha512sums_x86_64=('5bc8d9c2c20230c5e6d7a83d7df1880a0282b8b5ebb55f3fdf41269171b50283862c6ebdb88224c4f36bce9b6ab9e3bbc902a211944a4f9aec7a83203b24374e')
-sha512sums_aarch64=('42539cfdeaa25cea98d123c50cdc603252040a7c7b6fff2674107065a2587ee5a4d6b524322b64246e034b059ddbee68dd51e785e8b51b7350457daeec9d8314')
+sha512sums_x86_64=('ed46c678afdcc913abf0bd11373a62367e5d736a093a5be94e3caf5d9bee0b35ecf3b6c37f7b04fcc5d1119bcb3d33a707136a8a8a39bacd3dafb5e38bf2cfc8')
+sha512sums_aarch64=('0086800121ce3affddd53894ce20bede0e44465dee0bdbbdd3fb9faa6e95aaa01fc3ae384641d5e77415be769146c62c989e253936c616bbdf1db51932d47a6f')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")