Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 151.0.7922.173 to 152.0.7977.75. No sources, checksums, install scripts, permissions, dependencies, or build logic are modified here, so there is no direct security signal in the diff itself. Based on this change alone, the risk is low.

@@ -1,6 +1,6 @@
 pkgbase = ungoogled-chromium-bin
 	pkgdesc = A lightweight approach to removing Google web service dependency
-	pkgver = 151.0.7922.173
+	pkgver = 152.0.7977.75
 	pkgrel = 1
 	url = https://github.com/ungoogled-software/ungoogled-chromium
 	arch = x86_64

Comment

The change is a straightforward version bump in .SRCINFO for an ungoogled-chromium binary package. The source remains an HTTPS GitHub release asset from the expected upstream project, and the checksum is updated accordingly. No new sources, scripts, install hooks, privilege changes, or packaging behavior are introduced by this diff. Risk is low and limited to the usual trust in a prebuilt binary release, which is unchanged by this metadata-only update.

@@ -62,11 +62,11 @@ pkgbase = ungoogled-chromium-bin
 	optdepends = qt6-base: Qt support
 	optdepends = org.freedesktop.secrets: password storage backend on GNOME, KDE and Xfce
 	optdepends = upower: Battery Status API support
-	provides = chromium=151.0.7922.173
-	provides = chromedriver=151.0.7922.173
+	provides = chromium=152.0.7977.75
+	provides = chromedriver=152.0.7977.75
 	conflicts = chromium
 	conflicts = chromedriver
-	source = https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/151.0.7922.173-1/ungoogled-chromium-151.0.7922.173-1-x86_64.pkg.tar.zst
-	sha256sums = f23eb52de5329e49869e498329ca89c6d92b192cd018bd0c5547bac4a2b87dab
+	source = https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/152.0.7977.75-1/ungoogled-chromium-152.0.7977.75-1-x86_64.pkg.tar.zst
+	sha256sums = 81f529216c5689e07ef9bb441ce47a154f808fd66fb11e5e1fc1368e380b6f6d
 
 pkgname = ungoogled-chromium-bin

Comment

The change is a routine version bump for a binary package: it updates pkgver and the corresponding source checksum to a new upstream release artifact hosted on the project’s GitHub releases page over HTTPS. I do not see any new build-time code execution, privilege escalation, install-script behavior, or suspicious source changes in this diff. The package still installs a prebuilt upstream .pkg.tar.zst, but that was already the package’s design and is unchanged here. No additional red flags are introduced by this specific version bump.

@@ -1,7 +1,7 @@
 # Maintainer: networkException <git@nwex.de>
 
 pkgname=ungoogled-chromium-bin
-pkgver=151.0.7922.173
+pkgver=152.0.7977.75
 pkgrel=1
 pkgdesc="A lightweight approach to removing Google web service dependency"
 arch=('x86_64')

Comment

The change only bumps pkgver and updates the SHA-256 for a prebuilt release artifact fetched over HTTPS from the project’s GitHub releases page. There are no new build steps, no added scripts, no network access beyond the declared source, and no changes to install-time behavior, dependencies, conflicts, or permissions. From the diff provided, this is a routine version/hash refresh with no evident security regression.

@@ -54,7 +54,7 @@ optdepends=('pipewire: WebRTC desktop sharing under Wayland'
 provides=("chromium=$pkgver" "chromedriver=$pkgver")
 conflicts=('chromium' 'chromedriver')
 source=(https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/$pkgver-$pkgrel/ungoogled-chromium-$pkgver-$pkgrel-x86_64.pkg.tar.zst)
-sha256sums=('f23eb52de5329e49869e498329ca89c6d92b192cd018bd0c5547bac4a2b87dab')
+sha256sums=('81f529216c5689e07ef9bb441ce47a154f808fd66fb11e5e1fc1368e380b6f6d')
 
 declare -gA _system_libs=(
     [brotli]=brotli