AUR AI Reviewer

Review Results

Version #2419 of discord_arch_electron · commit 83649bc49b7c · status Reviewed

Risk 0/5 · Safe .SRCINFO
Result #3276

Comment

The change is limited to bumping pkgver in .SRCINFO from 1.0.156 to 1.0.157. No build logic, sources, install scripts, or packaging behavior changed in the provided diff. On its face this is a metadata-only version update with no security-relevant red flags in the reviewed hunk.

@@ -1,6 +1,6 @@
 pkgbase = discord_arch_electron
 	pkgdesc = Discord using system provided electron for increased security and performance
-	pkgver = 1.0.156
+	pkgver = 1.0.157
 	pkgrel = 1
 	epoch = 1
 	url = https://discord.com
Risk 0/5 · Safe .SRCINFO
Result #3277

Comment

The change is a routine version bump in .SRCINFO: it updates Discord upstream tarball URLs and corresponding SHA-512 checksums from 1.0.156 to 1.0.157, and swaps one bundled component name (discord_arborium -> discord_sysimg) to match the new upstream release. All sources remain HTTPS and point to Discord-owned domains, with no new build-time code execution, no added install scripts, and no packaging logic changes in this diff. The security impact is limited to trusting the new upstream release artifacts, which is expected for a version update.

@@ -18,43 +18,43 @@ pkgbase = discord_arch_electron
 	provides = discord
 	conflicts = discord
 	options = !strip
-	source = https://dl.discordapp.net/apps/linux/1.0.156/discord-1.0.156.tar.gz
+	source = https://dl.discordapp.net/apps/linux/1.0.157/discord-1.0.157.tar.gz
 	source = LICENSE.html::https://discord.com/terms
 	source = OSS-LICENSES.html::https://discord.com/licenses
 	source = discord-launcher.sh
 	source = krisp-patcher.py
-	source = core-1.0.156.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.156/full.distro
-	source = discord_desktop_core-1.0.156.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.156/discord_desktop_core/1/full.distro
-	source = discord_zstd-1.0.156.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.156/discord_zstd/1/full.distro
-	source = discord_krisp-1.0.156.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.156/discord_krisp/1/full.distro
-	source = discord_rpc-1.0.156.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.156/discord_rpc/1/full.distro
-	source = discord_utils-1.0.156.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.156/discord_utils/1/full.distro
-	source = discord_voice-1.0.156.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.156/discord_voice/1/full.distro
-	source = discord_game_utils-1.0.156.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.156/discord_game_utils/1/full.distro
-	source = discord_erlpack-1.0.156.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.156/discord_erlpack/1/full.distro
-	source = discord_modules-1.0.156.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.156/discord_modules/1/full.distro
-	source = discord_spellcheck-1.0.156.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.156/discord_spellcheck/1/full.distro
-	source = discord_dispatch-1.0.156.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.156/discord_dispatch/1/full.distro
-	source = discord_cloudsync-1.0.156.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.156/discord_cloudsync/1/full.distro
-	source = discord_arborium-1.0.156.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.156/discord_arborium/1/full.distro
-	sha512sums = 2e4d8999c81a82ee50ef2b39585b1b1f293a522ee5d751d38839c6a38e1e833117b70fab565f53959710e923562354b2193c769c75a1edad7e2f82c87adcf4bc
+	source = core-1.0.157.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.157/full.distro
+	source = discord_desktop_core-1.0.157.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.157/discord_desktop_core/1/full.distro
+	source = discord_zstd-1.0.157.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.157/discord_zstd/1/full.distro
+	source = discord_krisp-1.0.157.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.157/discord_krisp/1/full.distro
+	source = discord_rpc-1.0.157.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.157/discord_rpc/1/full.distro
+	source = discord_utils-1.0.157.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.157/discord_utils/1/full.distro
+	source = discord_voice-1.0.157.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.157/discord_voice/1/full.distro
+	source = discord_game_utils-1.0.157.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.157/discord_game_utils/1/full.distro
+	source = discord_erlpack-1.0.157.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.157/discord_erlpack/1/full.distro
+	source = discord_modules-1.0.157.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.157/discord_modules/1/full.distro
+	source = discord_spellcheck-1.0.157.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.157/discord_spellcheck/1/full.distro
+	source = discord_dispatch-1.0.157.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.157/discord_dispatch/1/full.distro
+	source = discord_cloudsync-1.0.157.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.157/discord_cloudsync/1/full.distro
+	source = discord_sysimg-1.0.157.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.157/discord_sysimg/1/full.distro
+	sha512sums = dc96d21e010b2929068c58d41e8a22954bbb4c70e4bb9c09b9b54c6398c5d1c1fc895b32fa848b861cf3751a7be6a90e7a898c93c4be57295d3f3e43d9261fa6
 	sha512sums = SKIP
 	sha512sums = SKIP
 	sha512sums = d5373e2b2e9754bdcdbcda81fc1392ce6605939651839868823f3c3e0bf16f6fba2fb73bc1a0ff230eebd743d1463f2e8b2295503248f14845b3a56e57385bd1
 	sha512sums = 85da93530b2b92faad58cc84d0f7ddaea6b22fbec413e806c1981eb6369a301ec995eee6bfbe6b828e2cd0baf6168e578bbde456f2450a13199994ff9a1e7cd0
-	sha512sums = 0445d14932e27cf19f7f0a146c95f380201833ade15839a9cc2e9208051f2e6aebe7a589651691043600efc9682078ac7cb999bf69749d1cc14bb628b0a71e55
-	sha512sums = 821cadf85277c536e144bdb8f35c8cd22fc8a37bee4b1e15f3ff23f51154af0c2ec9f727f33ded802b312bdada5d72cfd0a3add0dcc85a87d773b3c1f66ef1ba
-	sha512sums = c5d4f88d0c1494e2864a11082ec740102dbc01e011f1a7a6b6ba70245214df2bf51bcbb565a73c084ca369732f0ed80fae9c372abf4f7563f553b883de260c61
-	sha512sums = ec756773321c855c5a3249bbbabddb4fa8c00801045c1b70e9fb72565271d3e9c2e0f06480de56c1de4e2671fbba2d293fb0331c909526cb86e086195e7137b9
-	sha512sums = c9e16b77166d7f23ec127459f982d43b6678cd0a8c14ec4ed3875c13fab137b55aa429df8ad9cb6acc2f3491d716be54656e3dd135f894a9ed7950990da8cbcd
-	sha512sums = 714ac5970ab9a9578e345ac3e170104b1cc659fa3bc63fe20944248fac65bb191228a1058847055ef1a22b1ab1c48212904dede5b5d57e2e7182489ad197ac9d
-	sha512sums = 6ca180e8a9e0bdfb791226c4bd3e46db86b281e489b180d7298378071a767c265ffd8280a8f84adaa26941bc508183ff42335822f59fb39fb36601b0045d208c
-	sha512sums = 81722a341adf7a77f9d0722b4621d14020e9c53ea7acb6fc01eb8ccd188c2815c4a608f68720d786630e91c7a9949f5a8691eb69778a537ca3e072a704059c80
-	sha512sums = 0a0f629ab5ef98c997cac920f6d0b7fe4e24a412a4ea986820731dda6a9d402dd4028a08b92fc97d9bd1c2a3bc8389e94ffbab286e3c8ee414d816fb199d450d
-	sha512sums = 8f9c1595e072f5cd0cf1922f8a7a4d2e1321530db95d1e3a38471f681c6de13c0fe2353e6620015e3b4558ac6dcfb317acbee364cf0536f41ea6bcd28e8602cc
-	sha512sums = b02ebf7f5ac5cf043f8669cc9086a3c96dff9324bf07282995a78432ea4be5a50c5dc96e945a9962a5d8eea3657133b7cfb67c2afb74af84ebdcfa2d2499a629
-	sha512sums = 3ca5acdcf98fbab2277d8aa4dc57e39245d27dd28cf6199213dbb94ece356a1181c5632f7917eb9f8a44a43cefc63035594882ef2407c8ca4acd087d745eb39b
-	sha512sums = c4c36eb655b0949b5a31ec353bb597298b40709b3e9a579dc43b006622483a18856ccba806fd4543d11be041b96726b50b1761bc4604f8e7dbb5f22b7ef6f3c2
-	sha512sums = 3fb4db969c87c7178951fefacce5ae53a42e545fd2979a3056bd9662765dd3e31fe5961e32e42146e5ae2ebb12a9ccdcf9a32cf5ad2efb51f8362a05eb16e9dc
+	sha512sums = ee49bca40ca1d2489536ba1c8169c6af8e0475c320be11c6ce5f9fc6fd59ad1fc675911c39bc7c9484a2ca79873c9b5ea08988668dd77db6732d6e90a858a76c
+	sha512sums = 3001d91cf81a46fbf827cda0fb9fd36a89551e08269f9e34d1d57cbbccf18eec8e1f434e3e94fb4a270027903485f4c8fbd434380ce37f9aa284ef270e0cc78e
+	sha512sums = aef19ce9c59a0cd965d022b26efa14c675d8d9f566155537db46e846234645129896076e62f69afaa89e4e53fe6eb0e3489fa1e83295c15839b2c94e385a0dde
+	sha512sums = a91e3240ef308fb081a68f87f8689f09a7ab8b295f1a6db05dbea3030c29b23863c2a9955249f971dc7703c365e5b6fccbdf6b9f3e5edb6f8aaec246da7794fa
+	sha512sums = 495d450183b6039fa38c0427b1dc4acdf8d925157621e41e03d265e3ccaa40278aec15decc8b43ab4a96e176338b1e9628ad99ea8d7d70abf8aef1edaf4005e8
+	sha512sums = 997446283554df96d4a09bceff705c86606170425421ae3f7d6a21be271b971971e39ea631b2a3bb6caf9bf372a628ba6b92820db466d4b25ae94ae7c526c91f
+	sha512sums = e954cfd4199490d779de622ea7721fe7b4c63ce879f662ac2ba0cd3c1cbbe68380ee8bc3dd4a0f3a405ec24ff0e7be5fad56126a44af0f13b1c6ac1af869ffae
+	sha512sums = b89aeb60f86d31483e9d23e43f2b4376e7725d3c2284eacfc9298f821a3afa2718f01bc60a12c0a154f2424536632109336c81074766a377172289ed56f0f1a6
+	sha512sums = df4ccd0c13dbe5a088ed22b8431f5a49a60dce22950a6d3a3c17eead40c8e9ef02e795aaee7a548e9e5e63c5bce5f25f01faaffd92428b169393fe19cb872d39
+	sha512sums = aef89cb3f2741c5749a63ebed0fc8194cbbedef651fe2f393fe789a123c5682ad678ebca50eca7a2c21e724714c561e6af74598481d4197d5ea48f7cfa2ee650
+	sha512sums = 4fa0c362e87456a2f34d822ddec99c86a61df3599b1d1c53a12f965143e4c8d517e367f4f5405703f14e8d3ce9f29d7f93e8bf036d517711a6ab7f1a1c021df6
+	sha512sums = 03402851bcd373c038a2c063dc33d25372f6bb04e7198c47ae8343f80e3947dd89f79d467a83760b9d54b6e463d782526ccc0018a11d57ced94907a8d989abd5
+	sha512sums = c2e02ac28992e82bd3e68da00424a21f21bfbb6094d26347e25aa0756ad9c40fc4fef885f172e3a2c0b9e101ceb56757d5bcf4624cccab4cadcbd83fe4597bf0
+	sha512sums = 59058457fc18912bf7f4d7c3bfadd89f748304f430a4d745fd70d723fab6bc5c56a8e11ea527ff6684688846bc17cf1f892d9b785f7dabd034581f25e99e84c7
 
 pkgname = discord_arch_electron
Risk 0/5 · Safe PKGBUILD
Result #3278

Comment

The change is a version bump in PKGBUILD from 1.0.156 to 1.0.157 with no other modifications in the provided diff hunk. On its face this does not introduce new build steps, network fetches, privilege changes, or packaging behavior changes. Based only on the reviewed hunk, there is no evident security regression.

@@ -9,7 +9,7 @@
 _pkgname=discord
 _electron=electron
 pkgname=${_pkgname}_arch_electron
-pkgver=1.0.156
+pkgver=1.0.157
 pkgrel=1
 epoch=1
 pkgdesc="Discord using system provided ${_electron} for increased security and performance"
Risk 0/5 · Safe PKGBUILD
Result #3279

Comment

The change replaces one Discord upstream component source (discord_arborium) with a different upstream component (discord_sysimg) and updates the corresponding checksums. The new source URLs are still HTTPS and remain on Discord-controlled domains, with no evidence of build-time network fetches, shell execution, privilege escalation, or packaging outside $pkgdir. This looks like a routine upstream component swap rather than a supply-chain red flag. I did not find any malicious install scripts, systemd units, or other artifacts implicated by this diff.

@@ -47,26 +47,26 @@ source=("https://dl.discordapp.net/apps/linux/${pkgver}/${_pkgname}-${pkgver}.ta
         "discord_spellcheck-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_spellcheck/1/full.distro"
         "discord_dispatch-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_dispatch/1/full.distro"
         "discord_cloudsync-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_cloudsync/1/full.distro"
-        "discord_arborium-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_arborium/1/full.distro")
-sha512sums=('2e4d8999c81a82ee50ef2b39585b1b1f293a522ee5d751d38839c6a38e1e833117b70fab565f53959710e923562354b2193c769c75a1edad7e2f82c87adcf4bc'
+        "discord_sysimg-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_sysimg/1/full.distro")
+sha512sums=('dc96d21e010b2929068c58d41e8a22954bbb4c70e4bb9c09b9b54c6398c5d1c1fc895b32fa848b861cf3751a7be6a90e7a898c93c4be57295d3f3e43d9261fa6'
             '2590151db4404a9ecbae2c45269c74f5ea26479967de5bc0b221a9143f4efeeeda9e335c23cf1f982680ab4fd895dcf3fd5731bd230908b3b2568eee0ec223ec'
             '5cccf397a772fed0db9b19253e496e78af27810227325ce681de985e2e0fbbdb195873d9642574ad3ae7bfcf4699bfdaa16933ca50c13cb98a1ff53c86c6de05'
             'd5373e2b2e9754bdcdbcda81fc1392ce6605939651839868823f3c3e0bf16f6fba2fb73bc1a0ff230eebd743d1463f2e8b2295503248f14845b3a56e57385bd1'
             '85da93530b2b92faad58cc84d0f7ddaea6b22fbec413e806c1981eb6369a301ec995eee6bfbe6b828e2cd0baf6168e578bbde456f2450a13199994ff9a1e7cd0'
-            '0445d14932e27cf19f7f0a146c95f380201833ade15839a9cc2e9208051f2e6aebe7a589651691043600efc9682078ac7cb999bf69749d1cc14bb628b0a71e55'
-            '821cadf85277c536e144bdb8f35c8cd22fc8a37bee4b1e15f3ff23f51154af0c2ec9f727f33ded802b312bdada5d72cfd0a3add0dcc85a87d773b3c1f66ef1ba'
-            'c5d4f88d0c1494e2864a11082ec740102dbc01e011f1a7a6b6ba70245214df2bf51bcbb565a73c084ca369732f0ed80fae9c372abf4f7563f553b883de260c61'
-            'ec756773321c855c5a3249bbbabddb4fa8c00801045c1b70e9fb72565271d3e9c2e0f06480de56c1de4e2671fbba2d293fb0331c909526cb86e086195e7137b9'
-            'c9e16b77166d7f23ec127459f982d43b6678cd0a8c14ec4ed3875c13fab137b55aa429df8ad9cb6acc2f3491d716be54656e3dd135f894a9ed7950990da8cbcd'
-            '714ac5970ab9a9578e345ac3e170104b1cc659fa3bc63fe20944248fac65bb191228a1058847055ef1a22b1ab1c48212904dede5b5d57e2e7182489ad197ac9d'
-            '6ca180e8a9e0bdfb791226c4bd3e46db86b281e489b180d7298378071a767c265ffd8280a8f84adaa26941bc508183ff42335822f59fb39fb36601b0045d208c'
-            '81722a341adf7a77f9d0722b4621d14020e9c53ea7acb6fc01eb8ccd188c2815c4a608f68720d786630e91c7a9949f5a8691eb69778a537ca3e072a704059c80'
-            '0a0f629ab5ef98c997cac920f6d0b7fe4e24a412a4ea986820731dda6a9d402dd4028a08b92fc97d9bd1c2a3bc8389e94ffbab286e3c8ee414d816fb199d450d'
-            '8f9c1595e072f5cd0cf1922f8a7a4d2e1321530db95d1e3a38471f681c6de13c0fe2353e6620015e3b4558ac6dcfb317acbee364cf0536f41ea6bcd28e8602cc'
-            'b02ebf7f5ac5cf043f8669cc9086a3c96dff9324bf07282995a78432ea4be5a50c5dc96e945a9962a5d8eea3657133b7cfb67c2afb74af84ebdcfa2d2499a629'
-            '3ca5acdcf98fbab2277d8aa4dc57e39245d27dd28cf6199213dbb94ece356a1181c5632f7917eb9f8a44a43cefc63035594882ef2407c8ca4acd087d745eb39b'
-            'c4c36eb655b0949b5a31ec353bb597298b40709b3e9a579dc43b006622483a18856ccba806fd4543d11be041b96726b50b1761bc4604f8e7dbb5f22b7ef6f3c2'
-            '3fb4db969c87c7178951fefacce5ae53a42e545fd2979a3056bd9662765dd3e31fe5961e32e42146e5ae2ebb12a9ccdcf9a32cf5ad2efb51f8362a05eb16e9dc')
+            'ee49bca40ca1d2489536ba1c8169c6af8e0475c320be11c6ce5f9fc6fd59ad1fc675911c39bc7c9484a2ca79873c9b5ea08988668dd77db6732d6e90a858a76c'
+            '3001d91cf81a46fbf827cda0fb9fd36a89551e08269f9e34d1d57cbbccf18eec8e1f434e3e94fb4a270027903485f4c8fbd434380ce37f9aa284ef270e0cc78e'
+            'aef19ce9c59a0cd965d022b26efa14c675d8d9f566155537db46e846234645129896076e62f69afaa89e4e53fe6eb0e3489fa1e83295c15839b2c94e385a0dde'
+            'a91e3240ef308fb081a68f87f8689f09a7ab8b295f1a6db05dbea3030c29b23863c2a9955249f971dc7703c365e5b6fccbdf6b9f3e5edb6f8aaec246da7794fa'
+            '495d450183b6039fa38c0427b1dc4acdf8d925157621e41e03d265e3ccaa40278aec15decc8b43ab4a96e176338b1e9628ad99ea8d7d70abf8aef1edaf4005e8'
+            '997446283554df96d4a09bceff705c86606170425421ae3f7d6a21be271b971971e39ea631b2a3bb6caf9bf372a628ba6b92820db466d4b25ae94ae7c526c91f'
+            'e954cfd4199490d779de622ea7721fe7b4c63ce879f662ac2ba0cd3c1cbbe68380ee8bc3dd4a0f3a405ec24ff0e7be5fad56126a44af0f13b1c6ac1af869ffae'
+            'b89aeb60f86d31483e9d23e43f2b4376e7725d3c2284eacfc9298f821a3afa2718f01bc60a12c0a154f2424536632109336c81074766a377172289ed56f0f1a6'
+            'df4ccd0c13dbe5a088ed22b8431f5a49a60dce22950a6d3a3c17eead40c8e9ef02e795aaee7a548e9e5e63c5bce5f25f01faaffd92428b169393fe19cb872d39'
+            'aef89cb3f2741c5749a63ebed0fc8194cbbedef651fe2f393fe789a123c5682ad678ebca50eca7a2c21e724714c561e6af74598481d4197d5ea48f7cfa2ee650'
+            '4fa0c362e87456a2f34d822ddec99c86a61df3599b1d1c53a12f965143e4c8d517e367f4f5405703f14e8d3ce9f29d7f93e8bf036d517711a6ab7f1a1c021df6'
+            '03402851bcd373c038a2c063dc33d25372f6bb04e7198c47ae8343f80e3947dd89f79d467a83760b9d54b6e463d782526ccc0018a11d57ced94907a8d989abd5'
+            'c2e02ac28992e82bd3e68da00424a21f21bfbb6094d26347e25aa0756ad9c40fc4fef885f172e3a2c0b9e101ceb56757d5bcf4624cccab4cadcbd83fe4597bf0'
+            '59058457fc18912bf7f4d7c3bfadd89f748304f430a4d745fd70d723fab6bc5c56a8e11ea527ff6684688846bc17cf1f892d9b785f7dabd034581f25e99e84c7')
 
 # Skip "LICENSE.html" and "OSS-LICENSES.html" files hashes as they are unstable
 # Since "updpkgsums"/"pkgctl version upgrade" overwrite the checksum array with