Review Results

Comment

The change only bumps pkgver in .SRCINFO from 152.0.4191.62 to 152.0.4191.66. No source URLs, checksums, build logic, install scripts, or permissions are altered in this diff, so there is no new security-relevant behavior to assess from the provided change alone. This appears to be a routine version metadata update for a binary package.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 152.0.4191.62
+	pkgver = 152.0.4191.66
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change only updates the pinned Microsoft Edge .deb source URL and its corresponding SHA-256 checksum in .SRCINFO, moving from one official packages.microsoft.com release to a newer one. The source remains HTTPS, on the vendor's official repository, and there are no new build-time commands, scripts, or packaging behavior changes indicated by this diff. No security red flags are introduced by this metadata-only version bump.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_152.0.4191.62-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_152.0.4191.66-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 4b352cb0d81b151c10719519a1415efd92570a1c9d57f055e5e5d80f6c99ba0d
+	sha256sums = 186c19f9d6079d174efbb4ef331ccc1e11d139b6f7a8ea3b0db75f9b17e25f0d
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change only bumps pkgver from 152.0.4191.62 to 152.0.4191.66 in the PKGBUILD metadata. No source URLs, checksums, build logic, install scripts, permissions, or package relationships are altered in the provided diff. This is a routine version update with no security-relevant red flags visible in the reviewed hunk.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=152.0.4191.62
+pkgver=152.0.4191.66
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change only updates the pinned Microsoft Edge package version and its corresponding SHA-256 checksum in PKGBUILD. The source remains the official Microsoft HTTPS repository, there are no new build-time commands, no added scripts, and no changes to install/persistence behavior. This is a routine upstream version bump with integrity metadata updated accordingly, so I see no security issue in the diff provided.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('4b352cb0d81b151c10719519a1415efd92570a1c9d57f055e5e5d80f6c99ba0d'
+sha256sums=('186c19f9d6079d174efbb4ef331ccc1e11d139b6f7a8ea3b0db75f9b17e25f0d'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')