Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 2.18.1 to 2.20.0. No source URLs, checksums, build steps, install scripts, permissions, or package metadata that would affect security are changed here. Based on the provided diff alone, this is low risk.

@@ -1,6 +1,6 @@
 pkgbase = teams-for-linux
 	pkgdesc = Unofficial Microsoft Teams client for Linux using Electron.
-	pkgver = 2.18.1
+	pkgver = 2.20.0
 	pkgrel = 1
 	url = https://github.com/IsmaelMartinez/teams-for-linux
 	arch = aarch64

Comment

The change is a straightforward version bump in .SRCINFO from teams-for-linux 2.18.1 to 2.20.0 with the corresponding source checksum update. The source remains the official GitHub release archive over HTTPS, and there are no new sources, scripts, install hooks, or packaging behavior changes in this diff. Based on the provided hunk alone, I see no security-relevant red flags.

@@ -15,9 +15,9 @@ pkgbase = teams-for-linux
 	depends = libxss
 	depends = nss
 	optdepends = libfido2: WebAuthn with FIDO2 devices
-	source = teams-for-linux-2.18.1.tar.gz::https://github.com/IsmaelMartinez/teams-for-linux/archive/v2.18.1.tar.gz
+	source = teams-for-linux-2.20.0.tar.gz::https://github.com/IsmaelMartinez/teams-for-linux/archive/v2.20.0.tar.gz
 	source = teams-for-linux.desktop
-	sha256sums = 8208fa54d28017260e1e70d9a80ae5c4f2751b22f3e21442322ecaf4eaf48a2f
+	sha256sums = 9b9aef93327aeb2f152b6ff3eccb9ad37bee59c57ae9e7245436944b478b1b2b
 	sha256sums = e67c98084736f797c575970935dd773b5c348ea3d9522bc5db733a92361fc05e
 
 pkgname = teams-for-linux

Comment

The change is a routine version bump in PKGBUILD from 2.18.1 to 2.20.0, with the source tarball checksum updated accordingly. The source remains an HTTPS GitHub release/archive URL pinned to the version tag, and there are no new build steps, network fetches, privilege changes, or packaging red flags in the provided diff hunk. Based on this diff alone, I see no security issue.

@@ -3,7 +3,7 @@
 # Contributor: Ivelin Velkov <ivelin dot velkov at gmail dot com>
 
 pkgname=teams-for-linux
-pkgver=2.18.1
+pkgver=2.20.0
 pkgrel=1
 pkgdesc="Unofficial Microsoft Teams client for Linux using Electron."
 arch=("aarch64" "armv7h" "i686" "x86_64")

Comment

The change only updates the upstream release version and the corresponding source checksum in PKGBUILD. The source is still fetched over HTTPS from the official GitHub release archive, with no new build-time network access, scripts, patches, or packaging changes introduced. No additional integrity or privilege-related concerns are evident from this diff.

@@ -16,7 +16,7 @@ source=(
   "${pkgname}-${pkgver}.tar.gz::https://github.com/IsmaelMartinez/${pkgname}/archive/v${pkgver}.tar.gz"
   "${pkgname}.desktop"
 )
-sha256sums=('8208fa54d28017260e1e70d9a80ae5c4f2751b22f3e21442322ecaf4eaf48a2f'
+sha256sums=('9b9aef93327aeb2f152b6ff3eccb9ad37bee59c57ae9e7245436944b478b1b2b'
             'e67c98084736f797c575970935dd773b5c348ea3d9522bc5db733a92361fc05e')
 
 build() {