Review Results

Comment

The change only bumps pkgver in .SRCINFO from 3.7.2.87231 to 3.8.0.87909. No source URLs, checksums, build steps, install scripts, or permissions are altered in the reviewed hunk, so there is no direct security impact visible here. This is a routine version metadata update.

@@ -1,6 +1,6 @@
 pkgbase = jetbrains-toolbox
 	pkgdesc = Manage all your JetBrains Projects and Tools
-	pkgver = 3.7.2.87231
+	pkgver = 3.8.0.87909
 	pkgrel = 1
 	url = https://www.jetbrains.com/toolbox/
 	arch = x86_64

Comment

The change is a straightforward version bump in .SRCINFO from JetBrains Toolbox 3.7.2 to 3.8.0 with an updated checksum for the upstream tarball. The source remains the official HTTPS JetBrains download URL, and there are no new sources, scripts, install hooks, or packaging behavior changes in this diff. Based on the provided hunk alone, I see no security red flags.

@@ -16,11 +16,11 @@ pkgbase = jetbrains-toolbox
 	optdepends = xdg-utils: open URLs
 	options = !strip
 	options = !debug
-	source = https://download.jetbrains.com/toolbox/jetbrains-toolbox-3.7.2.87231.tar.gz
+	source = https://download.jetbrains.com/toolbox/jetbrains-toolbox-3.8.0.87909.tar.gz
 	source = jetbrains-toolbox.desktop
 	source = icon.svg
 	source = LICENSE
-	b2sums = 616d1bab3e9fd9c5fc437b54c1a3daa4b4f870b36a4cc8f2e5dd5591292f9a65a93ec94d506d7355ed1169ea22029877c6e1da6580b022579656f5bde3159344
+	b2sums = e14cfa2e129922739ec0b08420233fce6f611786e4e7bb83ddc6d28dc54a9ea3a0ff314795176b9979d73447a6c5ad5bacd1dc7ade299ff588f9405800122e50
 	b2sums = 29b6d4be91d9276bce9e5413fb877db82de414198e343ff3f7aa5d03f65cf42c80f78ec3b43f601394fecc6a31712d1c475f3fdec71e51be5732ec7b1eb8dca9
 	b2sums = 4b10487746fcb7f328cbdc8b17432f82618c5695baee4ef30e23ff3c4d4b6096daf2fcdfb4c1e2e179e2e61f68bbd88104e5df5a2e6e969aad0a68a75cfff496
 	b2sums = dadaf0e67b598aa7a7a4bf8644943a7ee8ebf4412abb17cd307f5989e36caf9d0db529a0e717a9df5d9537b10c4b13e814b955ada6f0d445913c812b63804e77

Comment

The change is a straightforward version bump of the JetBrains Toolbox source tarball plus the corresponding B2 checksum update. The source remains an HTTPS download from the official JetBrains domain, and there are no added build steps, scripts, patches, or packaging logic changes that would introduce code execution, persistence, or privilege escalation concerns. Risk is low and limited to the usual trust in the upstream release artifact.

@@ -1,7 +1,7 @@
 # Maintainer: Frederik Schwan <freswa at archlinux dot org>
 
 pkgname=jetbrains-toolbox
-pkgver=3.7.2.87231
+pkgver=3.8.0.87909
 pkgrel=1
 pkgdesc='Manage all your JetBrains Projects and Tools'
 arch=('x86_64' 'i686')

Comment

The change is a routine version bump in PKGBUILD from 3.7.2.87231 to 3.8.0.87909 with an updated B2 checksum for the upstream tarball. The source remains the official JetBrains HTTPS download URL, and there are no new build steps, scripts, privilege changes, or additional sources introduced. Based on the diff provided, I do not see a security issue beyond the normal trust in the upstream release artifact.

@@ -22,7 +22,7 @@ source=("https://download.jetbrains.com/toolbox/${pkgname}-${pkgver}.tar.gz"
         jetbrains-toolbox.desktop
         icon.svg
         LICENSE)
-b2sums=('616d1bab3e9fd9c5fc437b54c1a3daa4b4f870b36a4cc8f2e5dd5591292f9a65a93ec94d506d7355ed1169ea22029877c6e1da6580b022579656f5bde3159344'
+b2sums=('e14cfa2e129922739ec0b08420233fce6f611786e4e7bb83ddc6d28dc54a9ea3a0ff314795176b9979d73447a6c5ad5bacd1dc7ade299ff588f9405800122e50'
         '29b6d4be91d9276bce9e5413fb877db82de414198e343ff3f7aa5d03f65cf42c80f78ec3b43f601394fecc6a31712d1c475f3fdec71e51be5732ec7b1eb8dca9'
         '4b10487746fcb7f328cbdc8b17432f82618c5695baee4ef30e23ff3c4d4b6096daf2fcdfb4c1e2e179e2e61f68bbd88104e5df5a2e6e969aad0a68a75cfff496'
         'dadaf0e67b598aa7a7a4bf8644943a7ee8ebf4412abb17cd307f5989e36caf9d0db529a0e717a9df5d9537b10c4b13e814b955ada6f0d445913c812b63804e77')