Review Results

Comment

The change is a straightforward version bump in .SRCINFO updating the kernel and headers dependency pins from 7.1.11 to 7.2.2. It does not introduce new sources, scripts, build steps, network fetches, privilege changes, or packaging behavior. The upstream tarball URL remains HTTPS and unchanged, and there are no signs of typosquatting or suspicious metadata beyond normal dependency alignment for a kernel module package. Low risk.

@@ -1,13 +1,13 @@
 pkgbase = zfs-linux
-	pkgver = 2.4.4_7.1.11.arch1.1
+	pkgver = 2.4.4_7.2.2.arch1.1
 	pkgrel = 1
 	url = https://openzfs.org/
 	arch = x86_64
 	license = CDDL
-	makedepends = linux-headers=7.1.11.arch1-1
+	makedepends = linux-headers=7.2.2.arch1-1
 	depends = kmod
 	depends = zfs-utils=2.4.4
-	depends = linux=7.1.11.arch1-1
+	depends = linux=7.2.2.arch1-1
 	source = https://github.com/openzfs/zfs/releases/download/zfs-2.4.4/zfs-2.4.4.tar.gz
 	sha256sums = 2a3c70d55a37cc71618a95a60e81ad66530201eb118d37741dc92efcf848c8b1
 

Comment

The change only bumps the pinned Arch kernel version strings from 7.1.11.arch1-1 to 7.2.2.arch1-1. No new sources, scripts, install hooks, permissions changes, or build-time network behavior are introduced by this diff. This appears to be a straightforward version pin update with no security-relevant red flags in the provided hunk.

@@ -21,8 +21,8 @@
 pkgbase="zfs-linux"
 pkgname=("zfs-linux" "zfs-linux-headers")
 _zfsver="2.4.4"
-_kernelver="7.1.11.arch1-1"
-_kernelver_full="7.1.11.arch1-1"
+_kernelver="7.2.2.arch1-1"
+_kernelver_full="7.2.2.arch1-1"
 _extramodules="${_kernelver_full/.arch/-arch}"
 
 pkgver="${_zfsver}_$(echo ${_kernelver} | sed s/-/./g)"