Review Results

Comment

The only change in this .SRCINFO diff is a version bump from 1.95.101 to 1.95.102. No sources, checksums, install scripts, build logic, permissions, or package metadata were altered in the provided hunk. On its face this is a routine upstream version update with no visible security red flags in the reviewed change.

@@ -1,6 +1,6 @@
 pkgbase = brave-bin
 	pkgdesc = Web browser that blocks ads and trackers by default (binary release)
-	pkgver = 1.95.101
+	pkgver = 1.95.102
 	pkgrel = 1
 	epoch = 1
 	url = https://brave.com

Comment

The change is a straightforward version bump in .SRCINFO for the Brave binary package: updated provides/noextract filenames, release URLs, and SHA256 checksums for the new upstream release. The sources remain HTTPS GitHub release assets, there are no new build-time commands, no install-script changes, and no added persistence or privilege-related behavior. Based on the provided diff alone, this looks like a routine metadata update with no security red flags.

@@ -17,19 +17,19 @@ pkgbase = brave-bin
 	optdepends = cups: Printer support
 	optdepends = libgnome-keyring: Enable GNOME keyring support
 	optdepends = libnotify: Native notification support
-	provides = brave=1.95.101
+	provides = brave=1.95.102
 	provides = brave-browser
 	conflicts = brave
-	noextract = brave-bin-1.95.101-x86_64.zip
-	noextract = brave-bin-1.95.101-aarch64.zip
+	noextract = brave-bin-1.95.102-x86_64.zip
+	noextract = brave-bin-1.95.102-aarch64.zip
 	options = !strip
 	source = brave-bin.sh
 	source = brave-browser.desktop
 	sha256sums = 75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00
 	sha256sums = c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a
-	source_x86_64 = brave-bin-1.95.101-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.95.101/brave-browser-1.95.101-linux-amd64.zip
-	sha256sums_x86_64 = d30e9e1206074c0f24ad0eca1ca44b9a3abcde05a837074ec9045c8e599b6733
-	source_aarch64 = brave-bin-1.95.101-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.95.101/brave-browser-1.95.101-linux-arm64.zip
-	sha256sums_aarch64 = 324df5dd35fea33f09410af9ea6cf7775ace25af90e745a1da06c462e938b60a
+	source_x86_64 = brave-bin-1.95.102-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.95.102/brave-browser-1.95.102-linux-amd64.zip
+	sha256sums_x86_64 = c5be7c420d3f256d63335464d8f689f5d4868791ff59db136dacaa70492ab53f
+	source_aarch64 = brave-bin-1.95.102-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.95.102/brave-browser-1.95.102-linux-arm64.zip
+	sha256sums_aarch64 = f58f081779a8b13f2a7c5e75f71a7a24fc465023b2e8274b727b48193b6462eb
 
 pkgname = brave-bin

Comment

The change only bumps brave-bin from 1.95.101 to 1.95.102 and updates the expected SHA-256 checksums for the upstream GitHub release archives. The source URLs remain HTTPS and pinned to a specific versioned release asset, with no new build steps, scripts, or packaging behavior introduced. I do not see any new supply-chain, persistence, or privilege-escalation risk in this diff.

@@ -10,7 +10,7 @@
 # Contributor: Giusy Digital <kurmikon at libero dot it>
 
 pkgname=brave-bin
-pkgver=1.95.101
+pkgver=1.95.102
 pkgrel=1
 epoch=1
 pkgdesc='Web browser that blocks ads and trackers by default (binary release)'

Comment

The change only updates the Brave binary package version and refreshes the SHA-256 checksums for the upstream release archives. No build logic, install scripts, permissions, dependencies, or source URLs were altered. The sources remain HTTPS GitHub release artifacts from the official Brave repository, and the package still uses pinned release URLs. I do not see any new supply-chain, persistence, or privilege-escalation risk introduced by this diff.

@@ -35,8 +35,8 @@ source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://github.com/brave/brave
 noextract=(${pkgname}-${pkgver}-x86_64.zip ${pkgname}-${pkgver}-aarch64.zip)
 sha256sums=('75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00'
             'c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a')
-sha256sums_x86_64=('d30e9e1206074c0f24ad0eca1ca44b9a3abcde05a837074ec9045c8e599b6733')
-sha256sums_aarch64=('324df5dd35fea33f09410af9ea6cf7775ace25af90e745a1da06c462e938b60a')
+sha256sums_x86_64=('c5be7c420d3f256d63335464d8f689f5d4868791ff59db136dacaa70492ab53f')
+sha256sums_aarch64=('f58f081779a8b13f2a7c5e75f71a7a24fc465023b2e8274b727b48193b6462eb')
 
 prepare() {
 	mkdir -p brave