Review Results

Comment

The change only bumps pkgver in .SRCINFO from 155.0.4268.0 to 155.0.4273.0. No new sources, build steps, install scripts, permissions, or metadata changes are introduced in the reviewed hunk. On its face this is a routine version update with no security-relevant red flags in the diff provided.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-dev-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 155.0.4268.0
+	pkgver = 155.0.4273.0
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change is a routine version bump in .SRCINFO: it updates the Microsoft Edge Dev binary package version, the corresponding official Microsoft download URL, and the checksum. The source remains HTTPS on the vendor’s package host, there are no new sources, scripts, install hooks, or packaging behavior changes in this diff, and the provided checksum update preserves integrity verification. No obvious security red flags are introduced by this metadata-only update.

@@ -22,14 +22,14 @@ pkgbase = microsoft-edge-dev-bin
 	optdepends = libunity: for download progress on KDE
 	optdepends = ttf-liberation: fix fonts for some PDFs - CRBug #369991
 	optdepends = xdg-utils
-	provides = microsoft-edge=155.0.4268.0
+	provides = microsoft-edge=155.0.4273.0
 	conflicts = microsoft-edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_155.0.4268.0-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_155.0.4273.0-1_amd64.deb
 	source = microsoft-edge-dev.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = bb6daec6efa7c6a62107afa407c0d0c6a0ce30fcad7948d84e39e44965a35f72
+	sha256sums = bcc9217575b91019e708ead4435f9c7d25360dce46e4aa068806fcdb85c05188
 	sha256sums = 285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change is a routine version bump in PKGBUILD from 155.0.4268.0 to 155.0.4273.0 with no accompanying changes to sources, checksums, build logic, install scripts, or permissions. Based on the provided diff, there are no new security red flags such as added network fetches, script execution, privilege changes, or suspicious metadata changes.

@@ -10,7 +10,7 @@ _channel=dev
 _pkgname=microsoft-edge-dev
 pkgname=microsoft-edge-dev-bin
 _pkgshortname=msedge-dev
-pkgver=155.0.4268.0
+pkgver=155.0.4273.0
 pkgrel=1
 _uprel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"

Comment

The change is a routine version bump for a binary package: it updates pkgver and the SHA256 for the Microsoft-hosted .deb source to match the new release. The source remains an HTTPS URL on Microsoft's official package repository, and no build/install logic, scripts, permissions, or additional sources were introduced. I don't see any new supply-chain or persistence risk in this diff beyond the inherent trust in the upstream binary package, which is unchanged by this patch.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
         "$_pkgname.sh"
         "Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('bb6daec6efa7c6a62107afa407c0d0c6a0ce30fcad7948d84e39e44965a35f72'
+sha256sums=('bcc9217575b91019e708ead4435f9c7d25360dce46e4aa068806fcdb85c05188'
             '285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')