Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 17.11.0 to 17.12.1. No source URLs, checksums, build steps, install scripts, or packaging metadata were altered in the provided diff, so there is no direct security signal here. Based on this hunk alone, the change appears low risk.

@@ -1,6 +1,6 @@
 pkgbase = ocrmypdf
 	pkgdesc = A tool to add an OCR text layer to scanned PDF files, allowing them to be searched
-	pkgver = 17.11.0
+	pkgver = 17.12.1
 	pkgrel = 1
 	url = https://github.com/ocrmypdf/OCRmyPDF
 	install = ocrmypdf.install

Comment

The change only tightens the declared dependency floor for python-pikepdf from >=10.0.0 to >=10.2 in .SRCINFO. This is a metadata-only update with no code, script, or packaging behavior changes, and it does not introduce any new sources, commands, privileges, or persistence mechanisms. No security concern is evident from this diff alone.

@@ -17,7 +17,7 @@ pkgbase = ocrmypdf
 	depends = ghostscript
 	depends = unpaper
 	depends = pngquant
-	depends = python-pikepdf>=10.0.0
+	depends = python-pikepdf>=10.2
 	depends = python-reportlab
 	depends = python-pdfminer
 	depends = python-tqdm

Comment

The change is a straightforward version bump in .SRCINFO from ocrmypdf 17.11.0 to 17.12.1 plus one added optional dependency entry. The source remains an HTTPS PyPI tarball with a pinned SHA256, and there are no signs here of build-time code execution, new external fetches, privilege escalation, or packaging changes beyond metadata. The added optdepends line is informational only and does not affect installed code paths. Based on this diff alone, I see no security concern.

@@ -30,7 +30,8 @@ pkgbase = ocrmypdf
 	depends = python-uharfbuzz
 	depends = python-fpdf2
 	optdepends = jbig2enc: Better compression algorithm; results in smaller PDF files
-	source = https://files.pythonhosted.org/packages/source/o/ocrmypdf/ocrmypdf-17.11.0.tar.gz
-	sha256sums = 8e41cbba23bba9ce20bc557576211e1829d1beaef00183bacd227b4b9482af87
+	optdepends = python-pillow-heif: HEIF/HEIC image support
+	source = https://files.pythonhosted.org/packages/source/o/ocrmypdf/ocrmypdf-17.12.1.tar.gz
+	sha256sums = aca73a23a80cf2f46a4c15040b0035203dbf74054b7a0c3a7ee93b05abc555a6
 
 pkgname = ocrmypdf

Comment

The change is a routine version bump in PKGBUILD: updated pkgver, dependency minimum for python-pikepdf, added an optional HEIF/HEIC image-support dependency, and refreshed the source checksum. The source remains an HTTPS tarball from files.pythonhosted.org, there are no new build-time downloads, no shell execution, no install-script changes, and no privilege/persistence mechanisms introduced. I did not find any security-relevant red flags in this diff.

@@ -5,19 +5,19 @@
 # Contributor: Daniel Reuter <daniel.robin.reuter@googlemail.com>
 
 pkgname=ocrmypdf
-pkgver=17.11.0
+pkgver=17.12.1
 pkgrel=1
 pkgdesc="A tool to add an OCR text layer to scanned PDF files, allowing them to be searched"
 url="https://github.com/ocrmypdf/OCRmyPDF"
 arch=('any')
 license=(MPL2)
 # NOTICE: The number of dependencies we rely on is *very high*. If the program does not run after an upgrade, make sure all your deps are upgraded, especially AUR deps!
-depends=('python>=3.9' 'img2pdf' 'python-pillow' 'tesseract' 'ghostscript' 'unpaper' 'pngquant' 'python-pikepdf>=10.0.0' 'python-reportlab' 'python-pdfminer' 'python-tqdm' 'python-pluggy' 'python-rich' 'python-importlib_resources' 'python-packaging' 'python-deprecation' 'python-pydantic' 'python-uharfbuzz' 'python-fpdf2')
+depends=('python>=3.9' 'img2pdf' 'python-pillow' 'tesseract' 'ghostscript' 'unpaper' 'pngquant' 'python-pikepdf>=10.2' 'python-reportlab' 'python-pdfminer' 'python-tqdm' 'python-pluggy' 'python-rich' 'python-importlib_resources' 'python-packaging' 'python-deprecation' 'python-pydantic' 'python-uharfbuzz' 'python-fpdf2')
 
 makedepends=('python-hatch-vcs' 'python-build' 'python-installer' 'python-wheel')
-optdepends=('jbig2enc: Better compression algorithm; results in smaller PDF files')
+optdepends=('jbig2enc: Better compression algorithm; results in smaller PDF files' 'python-pillow-heif: HEIF/HEIC image support')
 source=("https://files.pythonhosted.org/packages/source/${pkgname::1}/$pkgname/$pkgname-$pkgver.tar.gz")
-sha256sums=('8e41cbba23bba9ce20bc557576211e1829d1beaef00183bacd227b4b9482af87')
+sha256sums=('aca73a23a80cf2f46a4c15040b0035203dbf74054b7a0c3a7ee93b05abc555a6')
 install="${pkgname}.install"
 
 build() {