Review Results

Comment

The change is a routine version bump in .SRCINFO for a binary package: pkgver/provides/source/sha256sums are updated to the new Microsoft Edge Dev release. The source remains an HTTPS download from Microsoft's official Edge repository, with the checksum updated accordingly. No new scripts, build logic, privileges, or persistence mechanisms are introduced in this diff. Risk is low because the package still relies on an upstream prebuilt .deb, but this specific metadata-only update does not add any new security concern beyond the existing trust in the vendor binary.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-dev-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 153.0.4210.0
+	pkgver = 155.0.4268.0
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The .SRCINFO change is a routine version bump for microsoft-edge-dev-bin: it updates the provided virtual package version, the Microsoft-hosted .deb source URL, and the corresponding SHA-256 checksum. The source remains HTTPS on the official Microsoft package repository, there are no new build-time commands, no added scripts, and no packaging/persistence changes in this diff. Based on the provided hunk alone, I do not see a security issue.

@@ -22,14 +22,14 @@ pkgbase = microsoft-edge-dev-bin
 	optdepends = libunity: for download progress on KDE
 	optdepends = ttf-liberation: fix fonts for some PDFs - CRBug #369991
 	optdepends = xdg-utils
-	provides = microsoft-edge=153.0.4210.0
+	provides = microsoft-edge=155.0.4268.0
 	conflicts = microsoft-edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_153.0.4210.0-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_155.0.4268.0-1_amd64.deb
 	source = microsoft-edge-dev.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = a8764bf68c7c766f1065f545f9c436d357817b2f641bdb6ee58a855e26217f05
+	sha256sums = bb6daec6efa7c6a62107afa407c0d0c6a0ce30fcad7948d84e39e44965a35f72
 	sha256sums = 285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change only bumps pkgver in PKGBUILD from 153.0.4210.0 to 155.0.4268.0. No build logic, sources, checksums, install scripts, permissions, or system integration changes are present in the provided diff hunk. On its face this is a routine version update with no new security red flags in the reviewed change.

@@ -10,7 +10,7 @@ _channel=dev
 _pkgname=microsoft-edge-dev
 pkgname=microsoft-edge-dev-bin
 _pkgshortname=msedge-dev
-pkgver=153.0.4210.0
+pkgver=155.0.4268.0
 pkgrel=1
 _uprel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"

Comment

The change only updates the packaged Microsoft Edge Dev version and the corresponding SHA-256 checksum for the upstream .deb source. No new sources, scripts, build steps, permissions, or install-time behavior were introduced. The package still fetches the binary from Microsoft’s official repository over HTTPS, and the diff does not alter the existing suid sandbox, launcher script, or file removal logic. Low risk.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
         "$_pkgname.sh"
         "Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('a8764bf68c7c766f1065f545f9c436d357817b2f641bdb6ee58a855e26217f05'
+sha256sums=('bb6daec6efa7c6a62107afa407c0d0c6a0ce30fcad7948d84e39e44965a35f72'
             '285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')