Review Results

Comment

The change is a straightforward version bump in .SRCINFO from 8.2.4133.43 to 8.3.4157.3 with no accompanying changes to sources, checksums, install scripts, or packaging logic in the provided diff hunk. On its face this does not introduce any new security-relevant behavior; it only updates metadata to track a newer upstream snapshot release. No red flags are visible in the reviewed hunk.

@@ -1,8 +1,8 @@
 # Generated by makepkg 7.1.0
-# Wed Sep  2 11:11:35 UTC 2026
+# Wed Sep  9 11:11:46 UTC 2026
 pkgbase = vivaldi-snapshot
 	pkgdesc = An advanced browser made with the power user in mind. Snapshot
-	pkgver = 8.2.4133.43
+	pkgver = 8.3.4157.3
 	pkgrel = 1
 	url = https://vivaldi.com
 	arch = x86_64

Comment

The change only updates the upstream Vivaldi snapshot RPM version and its corresponding SHA-512 checksum in .SRCINFO. The source remains an HTTPS download from the official Vivaldi domain, and there are no new build-time commands, scripts, or privilege-related changes introduced by this diff. No security red flags are evident in the provided hunk.

@@ -36,9 +36,9 @@ pkgbase = vivaldi-snapshot
 	optdepends = upower: Battery Status API support
 	options = !strip
 	options = !zipman
-	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.2.4133.43-1.x86_64.rpm
+	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.3.4157.3-1.x86_64.rpm
 	source = 0001-add-support-for-user-flags.patch
-	sha512sums = 17067efdf02dee0df002e1ef89ac54059d9024c51db38357e3e3796571444eea97aa36c0891804d591b7962ec513f01a114ff890964867df79d0b3d68a8e53a1
+	sha512sums = e7eedc809607f81829e7e3e19c3de2ae098554b7f238be6ee2033c9a083e14b3a51133ccc53a79c54dadbedea450389305dc64d0ae0fc8067795699dd1e5e87b
 	sha512sums = 6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726
 
 pkgname = vivaldi-snapshot

Comment

The change is a routine version bump in PKGBUILD: it updates the upstream Vivaldi Snapshot RPM version and corresponding checksum, while keeping the same official HTTPS download source and the existing patch. I do not see any new build-time network fetches, privilege escalation, persistence mechanisms, or suspicious metadata changes in this diff. Risk is low because the only security-relevant aspect is trusting the new upstream release artifact, which is expected for a package update.

@@ -2,8 +2,8 @@
 # Contributor: TZ86
 
 pkgname=vivaldi-snapshot
-_rpmversion=8.2.4133.43-1
-pkgver=8.2.4133.43
+_rpmversion=8.3.4157.3-1
+pkgver=8.3.4157.3
 pkgrel=1
 pkgdesc='An advanced browser made with the power user in mind. Snapshot'
 url="https://vivaldi.com"

Comment

The change is a routine upstream version bump for a binary RPM source, with the corresponding SHA-512 checksum updated. The source remains an HTTPS download from the official Vivaldi snapshot domain, and no new build steps, scripts, permissions changes, or additional sources were introduced. I do not see any security-relevant regression in this diff.

@@ -42,7 +42,7 @@ optdepends=(
 )
 source=("https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-${_rpmversion}.x86_64.rpm"
         '0001-add-support-for-user-flags.patch')
-sha512sums=('17067efdf02dee0df002e1ef89ac54059d9024c51db38357e3e3796571444eea97aa36c0891804d591b7962ec513f01a114ff890964867df79d0b3d68a8e53a1'
+sha512sums=('e7eedc809607f81829e7e3e19c3de2ae098554b7f238be6ee2033c9a083e14b3a51133ccc53a79c54dadbedea450389305dc64d0ae0fc8067795699dd1e5e87b'
             '6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726')
 
 package() {