Review Results

Comment

The change only bumps pkgver in .SRCINFO from 5.1.2 to 5.1.3. No build logic, sources, checksums, dependencies, install scripts, or other packaging metadata changed in the provided diff hunk. On its face this is a routine version update with no security-relevant red flags in the reviewed change.

@@ -1,6 +1,6 @@
 pkgbase = sabnzbd
 	pkgdesc = A web-interface based binary newsgrabber with NZB file support
-	pkgver = 5.1.2
+	pkgver = 5.1.3
 	pkgrel = 1
 	url = http://www.sabnzbd.org
 	install = sabnzbd.install

Comment

The change is a straightforward upstream version bump in .SRCINFO from SABnzbd 5.1.2 to 5.1.3 with the corresponding source checksum update. The source remains an HTTPS GitHub release tarball, and no new sources, scripts, install hooks, or packaging behavior are introduced by this diff. Based on the provided hunk alone, there are no security red flags.

@@ -48,12 +48,12 @@ pkgbase = sabnzbd
 	optdepends = python-orjson: ~2x faster than ujson, requires rust
 	optdepends = par2cmdline-turbo: a faster par2cmdline fork
 	backup = var/lib/sabnzbd/sabnzbd.ini
-	source = https://github.com/sabnzbd/sabnzbd/releases/download/5.1.2/SABnzbd-5.1.2-src.tar.gz
+	source = https://github.com/sabnzbd/sabnzbd/releases/download/5.1.3/SABnzbd-5.1.3-src.tar.gz
 	source = sabnzbd.service
 	source = sabnzbd@.service
 	source = sabnzbd.sysusers
 	source = sabnzbd.tmpfiles
-	sha256sums = bdf1ed947d810b5ac01a2b43b7f39cd11ca6eb6a93b577244a3c021d018d63e4
+	sha256sums = 12a01e30ce166297a375ffc3a761f98bf7d93260e040391497f643f8a3525fed
 	sha256sums = 5dc8b69f1cc88fa8a37e16585e6c61243745e3ac21c8d331f98a7012a86d6e7a
 	sha256sums = fcc4e5a9ff4bc28cf4dd9fdb28f1ebd440669e630d8677a1afbef97349ac7466
 	sha256sums = 525f294372963fde09db08b0368c80078a16d4cefcb34f8179706336709afdf7

Comment

The change is a simple version bump from 5.1.2 to 5.1.3 in PKGBUILD with no accompanying changes to sources, build logic, dependencies, or install scripts in the provided diff. On its face this does not introduce any new security risk. The only minor note is that the package URL remains HTTP rather than HTTPS, but that is pre-existing and unchanged by this commit.

@@ -1,7 +1,7 @@
 # Maintainer: Donald Webster <fryfrog@gmail.com>
 
 pkgname=sabnzbd
-pkgver=5.1.2
+pkgver=5.1.3
 pkgrel=1
 pkgdesc='A web-interface based binary newsgrabber with NZB file support'
 url='http://www.sabnzbd.org'

Comment

The change is a routine version bump from 5.1.2 to 5.1.3 with an updated source checksum. The source remains an HTTPS GitHub release tarball, and there are no new build steps, scripts, or packaging behaviors introduced by this diff. No integrity or execution red flags are present in the reviewed hunk.

@@ -66,7 +66,7 @@ source=(
   'sabnzbd.tmpfiles'
 )
         
-sha256sums=('bdf1ed947d810b5ac01a2b43b7f39cd11ca6eb6a93b577244a3c021d018d63e4'
+sha256sums=('12a01e30ce166297a375ffc3a761f98bf7d93260e040391497f643f8a3525fed'
             '5dc8b69f1cc88fa8a37e16585e6c61243745e3ac21c8d331f98a7012a86d6e7a'
             'fcc4e5a9ff4bc28cf4dd9fdb28f1ebd440669e630d8677a1afbef97349ac7466'
             '525f294372963fde09db08b0368c80078a16d4cefcb34f8179706336709afdf7'