Review Results

Comment

The change only bumps the package version in .SRCINFO from 1.32.9 to 1.32.10. No source URLs, checksums, build steps, dependencies, install scripts, or packaging permissions are altered. Based on the provided diff hunk, there is no security-relevant change.

@@ -1,6 +1,6 @@
 pkgbase = gallery-dl
 	pkgdesc = Command-line program to download image-galleries and collections from several image hosting sites
-	pkgver = 1.32.9
+	pkgver = 1.32.10
 	pkgrel = 1
 	url = https://codeberg.org/mikf/gallery-dl
 	arch = any

Comment

The change is a straightforward version bump in .SRCINFO from v1.32.9 to v1.32.10, with the corresponding source checksum updated. The source remains an HTTPS git tag from the upstream Codeberg repository and is still marked signed with the same valid PGP key. No new sources, scripts, build steps, or packaging behavior are introduced in this diff, so there is no evident security impact from the metadata update alone.

@@ -27,8 +27,8 @@ pkgbase = gallery-dl
 	optdepends = python-psycopg: PostgreSQL support
 	optdepends = python-truststore: Support using system certificates
 	optdepends = python-jinja: Jinja template support
-	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.9?signed
+	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.10?signed
 	validpgpkeys = 3E09F5908333DD83DBDCE7375680CA389D365A88
-	sha512sums = 9899a2660b7847c0b640f4b6cc441dbecad64a6f7e4c441e8b6b68a13e37902de73f568e601863d795efc6a003d041a3e3e450f5bae3729ab37a07c604db5066
+	sha512sums = 8c2eb41a9cde705c65297741160fb7dd4cd395d5180a9a2c203ddb23bbc76ae17a9654bd6be5e4a68e25ce35fad2744d01f7c38c80b05c8e4140e0ac932c6f0b
 
 pkgname = gallery-dl

Comment

The change is a simple version bump in PKGBUILD from 1.32.9 to 1.32.10 with no other modifications shown in the provided hunk. There are no new sources, build steps, install scripts, permissions changes, or other security-relevant packaging changes in this diff. Based on the reviewed hunk alone, this appears low risk.

@@ -2,7 +2,7 @@
 # Contributor: LLL2yu <lll2yu@protonmail.com>
 
 pkgname=gallery-dl
-pkgver=1.32.9
+pkgver=1.32.10
 pkgrel=1
 pkgdesc='Command-line program to download image-galleries and collections from several image hosting sites'
 arch=(any)

Comment

The change is a routine version bump from 1.32.9 to 1.32.10 with the corresponding source checksum update. The source remains the upstream Git tag over HTTPS with signed tag verification and a pinned PGP key, and there are no new build-time downloads, scripts, privilege changes, or packaging behavior changes in the diff. No security-relevant red flags are introduced by this patch.

@@ -29,7 +29,7 @@ optdepends=(
 )
 source=(git+"${url}".git#tag=v"${pkgver}"?signed)
 validpgpkeys=(3E09F5908333DD83DBDCE7375680CA389D365A88) #Mike Fährmann
-sha512sums=('9899a2660b7847c0b640f4b6cc441dbecad64a6f7e4c441e8b6b68a13e37902de73f568e601863d795efc6a003d041a3e3e450f5bae3729ab37a07c604db5066')
+sha512sums=('8c2eb41a9cde705c65297741160fb7dd4cd395d5180a9a2c203ddb23bbc76ae17a9654bd6be5e4a68e25ce35fad2744d01f7c38c80b05c8e4140e0ac932c6f0b')
 
 prepare() {
     # Clean out old wheels etc.