Review Results

Comment

The change only bumps pkgver in .SRCINFO from 7.2.3.lqx4 to 7.2.4.lqx1. No source URLs, checksums, build steps, install scripts, or packaging logic changed, and there are no new integrity or execution red flags in the provided diff. This appears to be a routine metadata update with negligible security impact.

@@ -1,6 +1,6 @@
 pkgbase = linux-lqx
 	pkgdesc = Linux Liquorix
-	pkgver = 7.2.3.lqx4
+	pkgver = 7.2.4.lqx1
 	pkgrel = 1
 	url = https://liquorix.net/
 	arch = x86_64

Comment

The change only bumps the upstream liquorix-package tarball from 7.2-6 to 7.2-7 and updates its checksum in .SRCINFO. The source remains on the official GitHub repository over HTTPS, and there are no new build-time fetches, scripts, privilege changes, or other suspicious packaging metadata introduced by this diff. On its face this is a routine version refresh with integrity metadata updated accordingly.

@@ -23,12 +23,12 @@ pkgbase = linux-lqx
 	options = !strip
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.xz
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.sign
-	source = https://github.com/damentz/liquorix-package/archive/7.2-6.tar.gz
+	source = https://github.com/damentz/liquorix-package/archive/7.2-7.tar.gz
 	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
 	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	sha512sums = 47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1
 	sha512sums = SKIP
-	sha512sums = c2b24adbbc62daf98b5d9c91f00feaedf5c9719f359d067c494817eb345b9bce2356d67506548cca211d49e506446bec43cb7c9f05df3a4b32366c16e94aeafc
+	sha512sums = fe9979ed239dd8beaa8ab548536539e3ff32e84d00494fd219680bc9ade1489d5f580c1c65bfbbd85f6af5908271d4b23578ed9369ab898918999eb51002b6a5
 
 pkgname = linux-lqx
 	pkgdesc = The Linux Liquorix kernel and modules

Comment

The change is a routine version bump in PKGBUILD: it updates the Liquorix patch release number, package version, and the corresponding SHA-512 checksum for the new upstream tarball. No new sources, commands, permissions, install scripts, or packaging logic were introduced, and the source URLs remain HTTPS and pinned to a specific release archive. I do not see any security-relevant behavior change in this diff.

@@ -54,10 +54,10 @@ _htmldocs_enable=
 _major=7.2
 _srcname=linux-${_major}
 _lqxpatchname=liquorix-package
-_lqxpatchrel=6
+_lqxpatchrel=7
 _lqxpatchver=${_lqxpatchname}-${_major}-${_lqxpatchrel}
 pkgbase=linux-lqx
-pkgver=7.2.3.lqx4
+pkgver=7.2.4.lqx1
 pkgrel=1
 pkgdesc='Linux Liquorix'
 url='https://liquorix.net/'

Comment

The change only updates the Liquorix patch release/version metadata and the corresponding SHA-512 checksum for the new upstream tarball. There are no new build steps, no added network fetches, no privilege-related changes, and no modifications to install scripts or packaging logic. The source URLs remain HTTPS and pinned to explicit release artifacts. Risk is therefore minimal.

@@ -106,7 +106,7 @@ validpgpkeys=(
 )
 sha512sums=('47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1'
             'SKIP'
-            'c2b24adbbc62daf98b5d9c91f00feaedf5c9719f359d067c494817eb345b9bce2356d67506548cca211d49e506446bec43cb7c9f05df3a4b32366c16e94aeafc')
+            'fe9979ed239dd8beaa8ab548536539e3ff32e84d00494fd219680bc9ade1489d5f580c1c65bfbbd85f6af5908271d4b23578ed9369ab898918999eb51002b6a5')