Review Results

Comment

The change only bumps pkgver in .SRCINFO from 2026.2.1 to 2026.2.2. No build logic, sources, checksums, install scripts, or packaging behavior changed in the reviewed diff. The remaining metadata issue (an HTTP URL) predates this change and is outside the scope of the single-line update being reviewed.

@@ -1,6 +1,6 @@
 pkgbase = clion
 	pkgdesc = Cross-platform IDE for C and C++ from JetBrains.
-	pkgver = 2026.2.1
+	pkgver = 2026.2.2
 	pkgrel = 1
 	epoch = 1
 	url = http://www.jetbrains.com/clion

Comment

The change is a straightforward version bump in .SRCINFO for CLion from 2026.2.1 to 2026.2.2, updating the corresponding upstream JetBrains download URLs and checksums for x86_64 and aarch64. The sources remain HTTPS on the official JetBrains domain, there are no new build-time commands, scripts, or privilege-related artifacts introduced, and no suspicious metadata changes beyond the expected noextract/checksum updates. Based on the provided diff, this looks low risk.

@@ -8,15 +8,15 @@ pkgbase = clion
 	arch = aarch64
 	license = custom
 	makedepends = rsync
-	noextract = CLion-2026.2.1.tar.gz
-	noextract = CLion-2026.2.1-aarch64.tar.gz
+	noextract = CLion-2026.2.2.tar.gz
+	noextract = CLion-2026.2.2-aarch64.tar.gz
 	options = !strip
 	source = jetbrains-clion.desktop
 	sha256sums = a7a3f9891f5d8e7e5650afe00819909413fa2ed911393dd0648fba91233974a2
-	source_x86_64 = https://download-cf.jetbrains.com/cpp/CLion-2026.2.1.tar.gz
-	sha256sums_x86_64 = 09c3310bc37abce1678df118d742fe1b0eeaef23f3b7ca6aaffff5db0993fbb1
-	source_aarch64 = https://download-cf.jetbrains.com/cpp/CLion-2026.2.1-aarch64.tar.gz
-	sha256sums_aarch64 = e0135cd9c991161a877085f5f653c7320a7d035b8de8ba08e11b09e1a80d4ec1
+	source_x86_64 = https://download-cf.jetbrains.com/cpp/CLion-2026.2.2.tar.gz
+	sha256sums_x86_64 = 4e0ab3b0710a23c8b6cba8c72301a52282365edd7506db61b4586abc21ea6dfe
+	source_aarch64 = https://download-cf.jetbrains.com/cpp/CLion-2026.2.2-aarch64.tar.gz
+	sha256sums_aarch64 = 2fe65958061fcb3f99a411ce941547af513b9a573c780863cfacae32202713a0
 
 pkgname = clion
 	depends = libdbusmenu-glib

Comment

The change is a simple version bump in PKGBUILD from 2026.2.1 to 2026.2.2 with no other modifications shown. There are no new sources, build steps, install scripts, permissions changes, or packaging logic changes in the provided diff hunk, so this does not introduce an obvious security regression on its own.

@@ -9,7 +9,7 @@ pkgbase=clion
 pkgname=(clion clion-jre clion-cmake clion-gdb clion-lldb)
 _pkgname=clion
 _dlname=CLion
-pkgver=2026.2.1
+pkgver=2026.2.2
 pkgrel=1
 epoch=1
 pkgdesc="Cross-platform IDE for C and C++ from JetBrains."

Comment

The change only bumps CLion from 2026.2.1 to 2026.2.2 and updates the corresponding SHA-256 checksums for the official JetBrains HTTPS release tarballs on x86_64 and aarch64. No new sources, scripts, build steps, privilege changes, or packaging logic were introduced. This looks like a routine version/checksum refresh with low security risk.

@@ -22,8 +22,8 @@ source=("jetbrains-${pkgbase}.desktop")
 source_x86_64=("https://download-cf.jetbrains.com/cpp/${_dlname}-${pkgver}.tar.gz")
 source_aarch64=("https://download-cf.jetbrains.com/cpp/${_dlname}-${pkgver}-aarch64.tar.gz")
 sha256sums=('a7a3f9891f5d8e7e5650afe00819909413fa2ed911393dd0648fba91233974a2')
-sha256sums_x86_64=('09c3310bc37abce1678df118d742fe1b0eeaef23f3b7ca6aaffff5db0993fbb1')
-sha256sums_aarch64=('e0135cd9c991161a877085f5f653c7320a7d035b8de8ba08e11b09e1a80d4ec1')
+sha256sums_x86_64=('4e0ab3b0710a23c8b6cba8c72301a52282365edd7506db61b4586abc21ea6dfe')
+sha256sums_aarch64=('2fe65958061fcb3f99a411ce941547af513b9a573c780863cfacae32202713a0')
 noextract=("${_dlname}-${pkgver}.tar.gz"
            "${_dlname}-${pkgver}-aarch64.tar.gz")