Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 1.94.121 to 1.95.101. No sources, checksums, install scripts, build commands, permissions, or package metadata affecting trust boundaries were changed in the provided diff. On its face this is a routine upstream version update with no security red flags visible in the reviewed hunk.

@@ -1,6 +1,6 @@
 pkgbase = brave-bin
 	pkgdesc = Web browser that blocks ads and trackers by default (binary release)
-	pkgver = 1.94.121
+	pkgver = 1.95.101
 	pkgrel = 1
 	epoch = 1
 	url = https://brave.com

Comment

The change is a straightforward version bump in .SRCINFO for the Brave binary package: updated provides/noextract/source URLs and checksums for the new upstream release. The sources remain HTTPS GitHub release assets, there are no new build-time commands, no install-script or unit changes, and no suspicious metadata beyond the expected package version update. No security issues are evident from this diff alone.

@@ -17,19 +17,19 @@ pkgbase = brave-bin
 	optdepends = cups: Printer support
 	optdepends = libgnome-keyring: Enable GNOME keyring support
 	optdepends = libnotify: Native notification support
-	provides = brave=1.94.121
+	provides = brave=1.95.101
 	provides = brave-browser
 	conflicts = brave
-	noextract = brave-bin-1.94.121-x86_64.zip
-	noextract = brave-bin-1.94.121-aarch64.zip
+	noextract = brave-bin-1.95.101-x86_64.zip
+	noextract = brave-bin-1.95.101-aarch64.zip
 	options = !strip
 	source = brave-bin.sh
 	source = brave-browser.desktop
 	sha256sums = 75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00
 	sha256sums = c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a
-	source_x86_64 = brave-bin-1.94.121-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.94.121/brave-browser-1.94.121-linux-amd64.zip
-	sha256sums_x86_64 = 33a0c940037d97844c1848907b81de4418b98d07287f46220d07d88543b8a4b5
-	source_aarch64 = brave-bin-1.94.121-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.94.121/brave-browser-1.94.121-linux-arm64.zip
-	sha256sums_aarch64 = 23be774849966e7de35429bde652cb0e583237d803fb8f596422419fdea1be8d
+	source_x86_64 = brave-bin-1.95.101-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.95.101/brave-browser-1.95.101-linux-amd64.zip
+	sha256sums_x86_64 = d30e9e1206074c0f24ad0eca1ca44b9a3abcde05a837074ec9045c8e599b6733
+	source_aarch64 = brave-bin-1.95.101-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.95.101/brave-browser-1.95.101-linux-arm64.zip
+	sha256sums_aarch64 = 324df5dd35fea33f09410af9ea6cf7775ace25af90e745a1da06c462e938b60a
 
 pkgname = brave-bin

Comment

The change only bumps brave-bin from 1.94.121 to 1.95.101 and updates the corresponding upstream release checksums for the x86_64 and aarch64 ZIP artifacts. The source URLs remain HTTPS and point to the official Brave GitHub release assets, with no new build-time code execution, install-script changes, or packaging logic changes. This is a routine version update with no security red flags in the provided diff.

@@ -10,7 +10,7 @@
 # Contributor: Giusy Digital <kurmikon at libero dot it>
 
 pkgname=brave-bin
-pkgver=1.94.121
+pkgver=1.95.101
 pkgrel=1
 epoch=1
 pkgdesc='Web browser that blocks ads and trackers by default (binary release)'

Comment

The change is a routine version bump of a binary package plus updated SHA-256 checksums for the upstream release archives. The sources remain HTTPS GitHub release URLs, there are no new build-time downloads, scripts, patches, privilege changes, or packaging logic changes in the diff. The only security-relevant effect is that integrity verification now matches the new upstream artifacts. No red flags are introduced by this hunk.

@@ -35,8 +35,8 @@ source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://github.com/brave/brave
 noextract=(${pkgname}-${pkgver}-x86_64.zip ${pkgname}-${pkgver}-aarch64.zip)
 sha256sums=('75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00'
             'c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a')
-sha256sums_x86_64=('33a0c940037d97844c1848907b81de4418b98d07287f46220d07d88543b8a4b5')
-sha256sums_aarch64=('23be774849966e7de35429bde652cb0e583237d803fb8f596422419fdea1be8d')
+sha256sums_x86_64=('d30e9e1206074c0f24ad0eca1ca44b9a3abcde05a837074ec9045c8e599b6733')
+sha256sums_aarch64=('324df5dd35fea33f09410af9ea6cf7775ace25af90e745a1da06c462e938b60a')
 
 prepare() {
 	mkdir -p brave