Review Results

Comment

The change only bumps pkgver in .SRCINFO from 2026.2.1 to 2026.2.2. No build logic, sources, checksums, install scripts, or packaging metadata beyond the version number changed, so there is no new security-relevant behavior introduced by this diff alone.

@@ -1,6 +1,6 @@
 pkgbase = pycharm
 	pkgdesc = The only Python IDE you need. Bundled with the official JetBrains Runtime (JBR)
-	pkgver = 2026.2.1
+	pkgver = 2026.2.2
 	pkgrel = 1
 	url = https://www.jetbrains.com/pycharm/
 	arch = x86_64

Comment

The change only bumps the upstream PyCharm release tarballs from 2026.2.1 to 2026.2.2 for x86_64 and aarch64, with matching updated SHA-256 checksums. The sources remain HTTPS on the official JetBrains download domain, and there are no new build-time commands, scripts, or packaging changes in this diff. No obvious supply-chain or persistence risk is introduced by this .SRCINFO-only version update.

@@ -37,9 +37,9 @@ pkgbase = pycharm
 	source = ltedit.desktop
 	sha256sums = 444611514a2e2e168d20ec866af0102fbdd0472af00925847471609578b187b7
 	sha256sums = 944d01526dcc0e6d4c321873bd42d2c7885973e929f3b363c31019f642af0101
-	source_x86_64 = https://download-cf.jetbrains.com/python/pycharm-2026.2.1.tar.gz
-	sha256sums_x86_64 = 9cff6f18ec28a3d51643bcf47f001bed194260185fa6f5693f5a6f83cebae868
-	source_aarch64 = https://download-cf.jetbrains.com/python/pycharm-2026.2.1-aarch64.tar.gz
-	sha256sums_aarch64 = d3de33f41005a808827b0d9e0a828d767eac2229fc5f8b84e12af2051950dbbd
+	source_x86_64 = https://download-cf.jetbrains.com/python/pycharm-2026.2.2.tar.gz
+	sha256sums_x86_64 = 60448e3fb4e6a700e3d2ad3583ea8de1505b3f436e6715329a5a35e31c34aced
+	source_aarch64 = https://download-cf.jetbrains.com/python/pycharm-2026.2.2-aarch64.tar.gz
+	sha256sums_aarch64 = 16ff89b445b91c44680031509efcb97a28ba3fd7b094a0dc47dcdd5daa3541e0
 
 pkgname = pycharm

Comment

The change is a simple version bump in PKGBUILD from 2026.2.1 to 2026.2.2 with no other modifications to sources, build steps, install scripts, permissions, or package metadata. On its face this does not introduce any new security risk; the review is limited to the provided diff hunk and there are no red flags in it.

@@ -5,7 +5,7 @@
 # Contributor: Juan Francisco Miranda <aurarchlinux.sleek355 at passfwd dot com>
 
 pkgname=pycharm
-pkgver=2026.2.1
+pkgver=2026.2.2
 pkgrel=1
 provides=("pycharm")
 replaces=("pycharm-professional")

Comment

The change only updates the upstream release version and the corresponding SHA-256 checksums for the x86_64 and aarch64 source archives. I did not see any new build steps, network fetches outside source=(), privilege escalation, install-script changes, or other packaging red flags in the reviewed hunk. This is a routine integrity update with no evident security impact beyond trusting the new upstream release artifact.

@@ -33,8 +33,8 @@ source_x86_64=("https://download-cf.jetbrains.com/python/${pkgname}-${pkgver}.ta
 source_aarch64=("https://download-cf.jetbrains.com/python/${pkgname}-${pkgver}-aarch64.tar.gz")
 sha256sums=('444611514a2e2e168d20ec866af0102fbdd0472af00925847471609578b187b7'
             '944d01526dcc0e6d4c321873bd42d2c7885973e929f3b363c31019f642af0101')
-sha256sums_x86_64=('9cff6f18ec28a3d51643bcf47f001bed194260185fa6f5693f5a6f83cebae868')
-sha256sums_aarch64=('d3de33f41005a808827b0d9e0a828d767eac2229fc5f8b84e12af2051950dbbd')
+sha256sums_x86_64=('60448e3fb4e6a700e3d2ad3583ea8de1505b3f436e6715329a5a35e31c34aced')
+sha256sums_aarch64=('16ff89b445b91c44680031509efcb97a28ba3fd7b094a0dc47dcdd5daa3541e0')
 makedepends=('python-setuptools' 'cython')
 optdepends=(
     'ipython: For enhanced interactive Python shell inside Pycharm'