Review Results

Comment

The only change in this diff is a pkgver bump in .SRCINFO from 152.0.7977.64 to 152.0.7977.75. .SRCINFO is metadata generated from the PKGBUILD and does not itself introduce build logic, network access, privilege changes, or packaging behavior. No suspicious sources, scripts, or permissions are affected by this change. Based on the provided hunk alone, this is a routine version update with no security impact evident.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome
 	pkgdesc = The popular web browser by Google (Stable Channel)
-	pkgver = 152.0.7977.64
+	pkgver = 152.0.7977.75
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome.install

Comment

The change is a straightforward version bump of the prebuilt Google Chrome .deb sources from 152.0.7977.64-1 to 152.0.7977.75-1 for x86_64 and aarch64, with matching checksum updates. The source remains the official dl.google.com HTTPS endpoint, and there are no new scripts, patches, build steps, or packaging behaviors introduced in this diff. No additional supply-chain or privilege-escalation concerns are evident from this .SRCINFO-only change.

@@ -25,9 +25,9 @@ pkgbase = google-chrome
 	source = google-chrome-stable.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_152.0.7977.64-1_amd64.deb
-	sha512sums_x86_64 = 8401cc4a4f11714bcef72c6139d53dc2ff68f97257339f34bc8c117f55c72bdacb47b8c2feb38ef79c4d5747f76fecd1a3dfe154e8d67fa247f842e9a2718eeb
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_152.0.7977.64-1_arm64.deb
-	sha512sums_aarch64 = c47e78be540368a86521f4a5c64471b9c914af9c624f653d518d4efa0557438735b7e037b2e451e86a7c14e2feca7efc514a450a94653233edbf6afdd693f6da
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_152.0.7977.75-1_amd64.deb
+	sha512sums_x86_64 = 2984589503cb7ef44d4dc96a474bd4cebda14eeefa3917b9170bc8029e4952272f2cb4b000bd16a0dfbb956d13b7a07a6681d9ba74a30b86f5805e4541cd646d
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_152.0.7977.75-1_arm64.deb
+	sha512sums_aarch64 = 19b3f00cfa61a3f66b826c96e9d0f1efcbb4e749a1d955ae4cf2f990554131b7e717453aef65390a39004ab333366492ea2b036612ab950082336c87085d1fb3
 
 pkgname = google-chrome

Comment

The change is a simple version bump in PKGBUILD from 152.0.7977.64 to 152.0.7977.75 with no other logic changes. Based on the provided diff hunk, there are no new sources, build steps, install scripts, permissions changes, or other security-relevant modifications. This appears to be a routine upstream version update with no evident supply-chain or privilege-escalation risk in the reviewed change.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-stable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome
-pkgver=152.0.7977.64
+pkgver=152.0.7977.75
 pkgrel=1
 pkgdesc="The popular web browser by Google (Stable Channel)"
 arch=(

Comment

The change is a routine version bump in PKGBUILD: pkgver is updated and the architecture-specific SHA-512 checksums are refreshed to match the new upstream Google Chrome .deb artifacts. The source URLs remain HTTPS and still point to the official Google download host, with no new build-time network access, scripts, or packaging logic changes. I do not see any added persistence, privilege escalation, or integrity red flags in this diff alone.

@@ -39,8 +39,8 @@ source=('eula_text.html'
         "google-chrome-$_channel.sh")
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             'de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94')
-sha512sums_x86_64=('8401cc4a4f11714bcef72c6139d53dc2ff68f97257339f34bc8c117f55c72bdacb47b8c2feb38ef79c4d5747f76fecd1a3dfe154e8d67fa247f842e9a2718eeb')
-sha512sums_aarch64=('c47e78be540368a86521f4a5c64471b9c914af9c624f653d518d4efa0557438735b7e037b2e451e86a7c14e2feca7efc514a450a94653233edbf6afdd693f6da')
+sha512sums_x86_64=('2984589503cb7ef44d4dc96a474bd4cebda14eeefa3917b9170bc8029e4952272f2cb4b000bd16a0dfbb956d13b7a07a6681d9ba74a30b86f5805e4541cd646d')
+sha512sums_aarch64=('19b3f00cfa61a3f66b826c96e9d0f1efcbb4e749a1d955ae4cf2f990554131b7e717453aef65390a39004ab333366492ea2b036612ab950082336c87085d1fb3')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")