Review Results

Comment

The change is a straightforward version bump in .SRCINFO from 1.32.11 to 1.32.12, with the source tag and checksum updated accordingly. The source remains pinned to an HTTPS Codeberg tag and still uses signed tag verification plus a valid PGP key, so there is no new supply-chain or execution risk visible in this diff. No install scripts, build logic, or packaging behavior changed.

@@ -1,6 +1,6 @@
 pkgbase = gallery-dl
 	pkgdesc = Command-line program to download image-galleries and collections from several image hosting sites
-	pkgver = 1.32.11
+	pkgver = 1.32.12
 	pkgrel = 1
 	url = https://codeberg.org/mikf/gallery-dl
 	arch = any

Comment

The change is a straightforward version bump in .SRCINFO from gallery-dl v1.32.11 to v1.32.12, with the corresponding sha512 checksum updated. The source remains the official Codeberg repository over HTTPS and is still pinned to a signed tag, with the same PGP key listed. No new sources, scripts, install hooks, permissions changes, or packaging behavior are introduced in this diff. Based on the provided hunk alone, this is low risk.

@@ -27,8 +27,8 @@ pkgbase = gallery-dl
 	optdepends = python-psycopg: PostgreSQL support
 	optdepends = python-truststore: Support using system certificates
 	optdepends = python-jinja: Jinja template support
-	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.11?signed
+	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.12?signed
 	validpgpkeys = 3E09F5908333DD83DBDCE7375680CA389D365A88
-	sha512sums = a059683666fa577f2caf475fc387cce2559dc03d0a5fe4fa81df2560e039a4af319fd7ae5ffab8b3e940ee581805a49e961d48d2f1c98d2981bd42004910b7a1
+	sha512sums = 6f3714f7d13cf1718a81b8749db602e87ab80fc381b47446fefa7372addd4395da5876ad444f4008e4be55c54e0e37da356a0fead54984b3f0b4b078f48653c3
 
 pkgname = gallery-dl

Comment

The change is a routine version bump from 1.32.11 to 1.32.12 with the corresponding source checksum update. The source remains pinned to a signed upstream tag over HTTPS, and there are no new build steps, scripts, dependencies, or packaging changes introducing execution, persistence, or integrity risks. No security issues are evident in this diff.

@@ -2,7 +2,7 @@
 # Contributor: LLL2yu <lll2yu@protonmail.com>
 
 pkgname=gallery-dl
-pkgver=1.32.11
+pkgver=1.32.12
 pkgrel=1
 pkgdesc='Command-line program to download image-galleries and collections from several image hosting sites'
 arch=(any)

Comment

The change is a routine version bump from 1.32.11 to 1.32.12 with the corresponding source checksum update. The source remains pinned to an upstream signed git tag over HTTPS, and there are no new build-time downloads, scripts, privilege changes, or packaging behavior changes in the diff. No security concerns are evident from this hunk.

@@ -29,7 +29,7 @@ optdepends=(
 )
 source=(git+"${url}".git#tag=v"${pkgver}"?signed)
 validpgpkeys=(3E09F5908333DD83DBDCE7375680CA389D365A88) #Mike Fährmann
-sha512sums=('a059683666fa577f2caf475fc387cce2559dc03d0a5fe4fa81df2560e039a4af319fd7ae5ffab8b3e940ee581805a49e961d48d2f1c98d2981bd42004910b7a1')
+sha512sums=('6f3714f7d13cf1718a81b8749db602e87ab80fc381b47446fefa7372addd4395da5876ad444f4008e4be55c54e0e37da356a0fead54984b3f0b4b078f48653c3')
 
 prepare() {
     # Clean out old wheels etc.