Review Results

Comment

The change only bumps the VCS-derived pkgver in .SRCINFO from 0.56.2.r55.gcab296c to 0.56.2.r128.g86c24e2. No sources, build steps, dependencies, install scripts, or packaging behavior changed, and there are no integrity or persistence red flags in this diff. This is a routine metadata update for a git package.

@@ -1,6 +1,6 @@
 pkgbase = hyprland-git
 	pkgdesc = Hyprland is an independent, highly customizable, dynamic tiling Wayland compositor that doesn't sacrifice on its looks
-	pkgver = 0.56.2.r55.gcab296c
+	pkgver = 0.56.2.r128.g86c24e2
 	pkgrel = 1
 	url = https://github.com/hyprwm/Hyprland
 	arch = x86_64

Comment

The change only updates .SRCINFO metadata: it removes hyprwayland-scanner-git from makedepends and adds it to optdepends, while bumping pkgver. This does not introduce any new build-time code execution, network fetches, privilege changes, or packaging/install-script behavior. The dependency move may affect plugin-building convenience, but it is not a security issue in itself for the reviewed diff.

@@ -10,7 +10,6 @@ pkgbase = hyprland-git
 	makedepends = git
 	makedepends = glaze
 	makedepends = hyprland-protocols-git
-	makedepends = hyprwayland-scanner-git
 	makedepends = ninja
 	makedepends = xorgproto
 	depends = aquamarine-git

Comment

The change only adds an optdepends entry for `hyprwayland-scanner-git` to support building/installing plugins via hyprpm. This is metadata-only, does not alter build steps, install scripts, or shipped binaries, and introduces no new execution or persistence behavior. No security red flags are evident from this diff alone.

@@ -66,6 +65,7 @@ pkgbase = hyprland-git
 	optdepends = cmake: to build and install plugins using hyprpm
 	optdepends = cpio: to build and install plugins using hyprpm
 	optdepends = glaze: to build and install plugins using hyprpm
+	optdepends = hyprwayland-scanner-git: to build and install plugins using hyprpm
 	optdepends = hyprqt6engine-git: the recommended way to manage qt styles
 	optdepends = meson: to build and install plugins using hyprpm
 	optdepends = rtkit: real-time scheduling support

Comment

The change only bumps the VCS-derived pkgver string in PKGBUILD from one commit snapshot to a newer commit snapshot. No source URLs, build steps, dependencies, install scripts, permissions, or packaging logic changed. This is a metadata-only update with no security-relevant behavior introduced in the diff provided.

@@ -5,7 +5,7 @@
 
 _pkgname="hyprland"
 pkgname="$_pkgname-git"
-pkgver=0.56.2.r55.gcab296c
+pkgver=0.56.2.r128.g86c24e2
 pkgrel=1
 pkgdesc="Hyprland is an independent, highly customizable, dynamic tiling Wayland compositor that doesn't sacrifice on its looks"
 arch=('x86_64' 'aarch64')

Comment

The change only moves hyprwayland-scanner-git from makedepends to optdepends, while leaving the package build itself otherwise unchanged. This does not introduce any new code execution, network access, privilege escalation, or integrity risk in the PKGBUILD. It may affect plugin-building convenience, but that is not a security issue for the package build/install path reviewed here.

@@ -69,7 +69,6 @@ makedepends=(
   git
   glaze
   hyprland-protocols-git
-  hyprwayland-scanner-git
   ninja
   #patch
   #pkgconf

Comment

The change only adds an optional dependency entry for `hyprwayland-scanner-git` in `optdepends`. This does not alter build steps, install scripts, sources, permissions, or package contents, and it does not introduce any new execution or persistence mechanism. The dependency name appears consistent with the existing Hyprland ecosystem packages and is only informational for plugin-building support. No security concern is evident from this diff alone.

@@ -79,6 +78,7 @@ optdepends=(
   'cmake: to build and install plugins using hyprpm'
   'cpio: to build and install plugins using hyprpm'
   'glaze: to build and install plugins using hyprpm'
+  'hyprwayland-scanner-git: to build and install plugins using hyprpm'
   'hyprqt6engine-git: the recommended way to manage qt styles'
   'meson: to build and install plugins using hyprpm'
   'rtkit: real-time scheduling support'