Review Results

Comment

This change only bumps the package version in .SRCINFO from 153.0.8010.12 to 154.0.8037.0. No build logic, sources, checksums, install scripts, or permissions are modified in the provided diff hunk. On its face this is a routine metadata update with no direct security impact. I did not see evidence in the reviewed hunk of suspicious sources, execution, persistence, or integrity bypass.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome-beta
 	pkgdesc = The popular web browser by Google (Beta Channel)
-	pkgver = 153.0.8010.12
+	pkgver = 154.0.8037.0
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome-beta.install

Comment

The change only updates .SRCINFO to point at newer official Google Chrome Beta .deb artifacts on dl.google.com and refreshes their SHA-512 checksums. There are no new build steps, scripts, privilege changes, or additional sources introduced in this diff. The source remains HTTPS and on the expected upstream domain, and the package still appears to be a straightforward repackaging of vendor binaries. No security issue is evident from this metadata-only update.

@@ -26,9 +26,9 @@ pkgbase = google-chrome-beta
 	source = google-chrome-beta.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = 17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_153.0.8010.12-1_amd64.deb
-	sha512sums_x86_64 = ed46c678afdcc913abf0bd11373a62367e5d736a093a5be94e3caf5d9bee0b35ecf3b6c37f7b04fcc5d1119bcb3d33a707136a8a8a39bacd3dafb5e38bf2cfc8
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_153.0.8010.12-1_arm64.deb
-	sha512sums_aarch64 = 0086800121ce3affddd53894ce20bede0e44465dee0bdbbdd3fb9faa6e95aaa01fc3ae384641d5e77415be769146c62c989e253936c616bbdf1db51932d47a6f
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_154.0.8037.0-1_amd64.deb
+	sha512sums_x86_64 = 3e2fe6b769830df941250376c56affb96512b71128aa850e48a8d61dac6ac728dde05b32a9823ba5ed538430804d2779a4c77cef70e7bf37307472b66991d2b2
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_154.0.8037.0-1_arm64.deb
+	sha512sums_aarch64 = a330eb87625647d5fa9ffdbf1a59d72e729992e3d36198e2aa1760da55ab37519efea0f82f67f918fea3668682018b8cf3621e2bbbb6ada1efcfc4e907003ef9
 
 pkgname = google-chrome-beta

Comment

This change only bumps pkgver in PKGBUILD from 153.0.8010.12 to 154.0.8037.0. No new sources, scripts, install hooks, permissions changes, or build logic are introduced in the provided diff hunk. On its face this is a routine version update with no security red flags in the reviewed change.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-beta" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome-beta
-pkgver=153.0.8010.12
+pkgver=154.0.8037.0
 pkgrel=1
 pkgdesc="The popular web browser by Google (Beta Channel)"
 arch=(

Comment

The change only updates the SHA-512 checksums for the architecture-specific Google Chrome beta .deb sources. The source URLs remain HTTPS and point to the official Google download host, with no new build-time code execution, no added scripts, and no packaging logic changes. This is a routine integrity hash refresh and does not introduce an obvious security issue in the reviewed hunk.

@@ -42,8 +42,8 @@ source=(
 )
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             '17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03')
-sha512sums_x86_64=('ed46c678afdcc913abf0bd11373a62367e5d736a093a5be94e3caf5d9bee0b35ecf3b6c37f7b04fcc5d1119bcb3d33a707136a8a8a39bacd3dafb5e38bf2cfc8')
-sha512sums_aarch64=('0086800121ce3affddd53894ce20bede0e44465dee0bdbbdd3fb9faa6e95aaa01fc3ae384641d5e77415be769146c62c989e253936c616bbdf1db51932d47a6f')
+sha512sums_x86_64=('3e2fe6b769830df941250376c56affb96512b71128aa850e48a8d61dac6ac728dde05b32a9823ba5ed538430804d2779a4c77cef70e7bf37307472b66991d2b2')
+sha512sums_aarch64=('a330eb87625647d5fa9ffdbf1a59d72e729992e3d36198e2aa1760da55ab37519efea0f82f67f918fea3668682018b8cf3621e2bbbb6ada1efcfc4e907003ef9')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")