Review Results

Comment

The only change in this .SRCINFO diff is a version bump from 154.0.8025.0 to 155.0.8040.2. No sources, checksums, install scripts, dependencies, or build logic are modified here, so there is no direct security concern in the reviewed hunk. This is a routine metadata update and does not by itself introduce supply-chain or privilege-escalation risk.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome-dev
 	pkgdesc = The popular web browser by Google (Dev Channel)
-	pkgver = 154.0.8025.0
+	pkgver = 155.0.8040.2
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome-dev.install

Comment

The change only updates the pinned upstream Google Chrome Dev .deb URLs and their SHA-512 checksums in .SRCINFO from version 154.0.8025.0-1 to 155.0.8040.2-1 for x86_64 and aarch64. The sources remain HTTPS on dl.google.com, there are no new build-time commands, no added scripts, and no packaging/persistence changes. This is a routine version bump with integrity metadata updated accordingly, so I see no security issue in the diff itself.

@@ -26,9 +26,9 @@ pkgbase = google-chrome-dev
 	source = google-chrome-unstable.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = 445eb36a588f49af018ded3d852b63e0523ffac20c25be721f3ef4663591256849432bebb3d9f352e4f53cbe1fb77fa67cf8911c9161f826490a21adbdcc81f4
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_154.0.8025.0-1_amd64.deb
-	sha512sums_x86_64 = 09820e8888050128c4bf45468e075d1b469853adc2a10101b783c87304fa0d9f57c6df5ad85c6435baaec4b12cc21e2f86c30cb7c5200c549794f459a3aa12cf
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_154.0.8025.0-1_arm64.deb
-	sha512sums_aarch64 = 54ed1d23125690ac53015fb6be46099cdf29bf7febdae07643129876336190c40d427565f372df4b6b454cf4ea96d177dcd2cb1c5d8fa60e89c3e8f2c7d3f16f
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_155.0.8040.2-1_amd64.deb
+	sha512sums_x86_64 = e51b3fd0459eb3e0f0abc8471dc2f84a2df4d959576f6b3599443cacc97cf4f69fd0990b8990bd449901cc4cf0bd7e5f12447407a37beca2f70b830d51017ba2
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_155.0.8040.2-1_arm64.deb
+	sha512sums_aarch64 = 3d257accd0bace2511034a334467737d07a9f4474556d45b7fea05c59eac9f241a19904359c860fe1dc9a7b6b07d64c027e488c21da09b301487f63c6eca5c79
 
 pkgname = google-chrome-dev

Comment

This change only bumps pkgver in PKGBUILD from 154.0.8025.0 to 155.0.8040.2. No build logic, sources, checksums, install scripts, or packaging behavior changed in the provided diff. I see no new security-relevant risk introduced by this version bump alone.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-unstable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome-dev
-pkgver=154.0.8025.0
+pkgver=155.0.8040.2
 pkgrel=1
 pkgdesc="The popular web browser by Google (Dev Channel)"
 arch=(

Comment

The change only updates the SHA-512 checksums for the architecture-specific Google Chrome .deb sources while keeping the source URLs on HTTPS and pinned to the upstream Google download location. There are no new build-time commands, no added network fetches beyond the existing source array, and no packaging/install-script changes in this hunk. Security impact is limited to integrity metadata refresh for a versioned upstream binary package.

@@ -42,8 +42,8 @@ source=(
 )
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             '445eb36a588f49af018ded3d852b63e0523ffac20c25be721f3ef4663591256849432bebb3d9f352e4f53cbe1fb77fa67cf8911c9161f826490a21adbdcc81f4')
-sha512sums_x86_64=('09820e8888050128c4bf45468e075d1b469853adc2a10101b783c87304fa0d9f57c6df5ad85c6435baaec4b12cc21e2f86c30cb7c5200c549794f459a3aa12cf')
-sha512sums_aarch64=('54ed1d23125690ac53015fb6be46099cdf29bf7febdae07643129876336190c40d427565f372df4b6b454cf4ea96d177dcd2cb1c5d8fa60e89c3e8f2c7d3f16f')
+sha512sums_x86_64=('e51b3fd0459eb3e0f0abc8471dc2f84a2df4d959576f6b3599443cacc97cf4f69fd0990b8990bd449901cc4cf0bd7e5f12447407a37beca2f70b830d51017ba2')
+sha512sums_aarch64=('3d257accd0bace2511034a334467737d07a9f4474556d45b7fea05c59eac9f241a19904359c860fe1dc9a7b6b07d64c027e488c21da09b301487f63c6eca5c79')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")