Review Results

Comment

The change only bumps pkgver in .SRCINFO from 152.0.4191.53 to 152.0.4191.62. No build logic, sources, checksums, install scripts, or permissions are altered in the provided diff hunk. On its face this is a routine version refresh with no new security-relevant behavior introduced by the change itself.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 152.0.4191.53
+	pkgver = 152.0.4191.62
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change is a routine version bump in .SRCINFO for the Microsoft Edge stable binary package, updating the upstream .deb URL and its checksum. The source remains on the official Microsoft packages repository over HTTPS, with no new build-time code, scripts, or packaging logic introduced by this diff. No additional integrity or execution red flags are present in the reviewed hunk.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_152.0.4191.53-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_152.0.4191.62-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = b3322445fbe6ce1e0bcff84ebbe0edea365e0eaf498b1ef6136dda52dea6e3a7
+	sha256sums = 4b352cb0d81b151c10719519a1415efd92570a1c9d57f055e5e5d80f6c99ba0d
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change only bumps pkgver from 152.0.4191.53 to 152.0.4191.62 in PKGBUILD. No source URLs, checksums, build logic, install scripts, permissions, or packaging behavior are altered in the provided diff. This is a routine version update with no security-relevant red flags visible in the reviewed hunk.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=152.0.4191.53
+pkgver=152.0.4191.62
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change only updates the SHA-256 checksum for the Microsoft Edge .deb source to match a new upstream release artifact. The source remains an HTTPS download from Microsoft's official package repository, and no build logic, install scripts, permissions, or additional sources are introduced. I do not see any new supply-chain, persistence, or privilege-escalation risk in this diff alone.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('b3322445fbe6ce1e0bcff84ebbe0edea365e0eaf498b1ef6136dda52dea6e3a7'
+sha256sums=('4b352cb0d81b151c10719519a1415efd92570a1c9d57f055e5e5d80f6c99ba0d'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')