Review Results

Comment

The change is limited to .SRCINFO metadata updating the generated timestamp and pkgver from 8.3.4157.3 to 8.3.4161.3. No build logic, sources, checksums, install scripts, or packaging behavior changed in the reviewed diff. On its face this is a routine version bump with no security-relevant red flags in the provided hunk.

@@ -1,8 +1,8 @@
 # Generated by makepkg 7.1.0
-# Wed Sep  9 11:11:46 UTC 2026
+# Tue Sep 15 12:14:48 UTC 2026
 pkgbase = vivaldi-snapshot
 	pkgdesc = An advanced browser made with the power user in mind. Snapshot
-	pkgver = 8.3.4157.3
+	pkgver = 8.3.4161.3
 	pkgrel = 1
 	url = https://vivaldi.com
 	arch = x86_64

Comment

The change is a routine upstream snapshot bump in .SRCINFO: it updates the Vivaldi RPM source URL from 8.3.4157.3-1 to 8.3.4161.3-1 and refreshes the corresponding SHA-512 checksum. The source remains HTTPS on the official Vivaldi download domain, and no new build steps, scripts, privileges, or additional sources are introduced in this diff. Based on the provided hunk alone, there are no security red flags.

@@ -36,9 +36,9 @@ pkgbase = vivaldi-snapshot
 	optdepends = upower: Battery Status API support
 	options = !strip
 	options = !zipman
-	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.3.4157.3-1.x86_64.rpm
+	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.3.4161.3-1.x86_64.rpm
 	source = 0001-add-support-for-user-flags.patch
-	sha512sums = e7eedc809607f81829e7e3e19c3de2ae098554b7f238be6ee2033c9a083e14b3a51133ccc53a79c54dadbedea450389305dc64d0ae0fc8067795699dd1e5e87b
+	sha512sums = a74d6cafa49536349d40b9ffbf8471e11bd02fa45031abe33963f423d727fbb911f8f94892c45380c8d63186d31bb4505f8bc71e025ea18c196ffc28e0560bf9
 	sha512sums = 6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726
 
 pkgname = vivaldi-snapshot

Comment

The change is a straightforward version bump in PKGBUILD from 8.3.4157.3 to 8.3.4161.3, with no alteration to source URLs, checksums, build steps, install scripts, permissions, or package metadata beyond the version fields. I do not see any new supply-chain, persistence, or privilege-escalation risk introduced by this diff alone.

@@ -2,8 +2,8 @@
 # Contributor: TZ86
 
 pkgname=vivaldi-snapshot
-_rpmversion=8.3.4157.3-1
-pkgver=8.3.4157.3
+_rpmversion=8.3.4161.3-1
+pkgver=8.3.4161.3
 pkgrel=1
 pkgdesc='An advanced browser made with the power user in mind. Snapshot'
 url="https://vivaldi.com"

Comment

The change only updates the SHA-512 checksum for the upstream Vivaldi snapshot RPM source. The source URL remains HTTPS and points to the official Vivaldi download host, and no build logic, install scripts, or packaging behavior changed. This is a routine integrity update with no new execution or persistence risk visible in the diff.

@@ -42,7 +42,7 @@ optdepends=(
 )
 source=("https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-${_rpmversion}.x86_64.rpm"
         '0001-add-support-for-user-flags.patch')
-sha512sums=('e7eedc809607f81829e7e3e19c3de2ae098554b7f238be6ee2033c9a083e14b3a51133ccc53a79c54dadbedea450389305dc64d0ae0fc8067795699dd1e5e87b'
+sha512sums=('a74d6cafa49536349d40b9ffbf8471e11bd02fa45031abe33963f423d727fbb911f8f94892c45380c8d63186d31bb4505f8bc71e025ea18c196ffc28e0560bf9'
             '6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726')
 
 package() {