Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 152.0.7977.75 to 153.0.8010.47. No source URLs, checksums, install scripts, permissions, or build logic are changed here, and there is no evidence in the provided diff of added network access, privilege escalation, or persistence mechanisms. On its face this is a routine upstream version update with low security risk.

@@ -1,6 +1,6 @@
 pkgbase = ungoogled-chromium-bin
 	pkgdesc = A lightweight approach to removing Google web service dependency
-	pkgver = 152.0.7977.75
+	pkgver = 153.0.8010.47
 	pkgrel = 1
 	url = https://github.com/ungoogled-software/ungoogled-chromium
 	arch = x86_64

Comment

The change is a straightforward version bump in .SRCINFO: it updates the provided chromium/chromedriver versions and switches the binary package source URL and checksum to the new upstream GitHub release asset. The source remains HTTPS and points to the project’s official release repository, with a matching pinned checksum. No new scripts, build steps, privileges, or persistence mechanisms are introduced in this diff. Security risk appears minimal.

@@ -62,11 +62,11 @@ pkgbase = ungoogled-chromium-bin
 	optdepends = qt6-base: Qt support
 	optdepends = org.freedesktop.secrets: password storage backend on GNOME, KDE and Xfce
 	optdepends = upower: Battery Status API support
-	provides = chromium=152.0.7977.75
-	provides = chromedriver=152.0.7977.75
+	provides = chromium=153.0.8010.47
+	provides = chromedriver=153.0.8010.47
 	conflicts = chromium
 	conflicts = chromedriver
-	source = https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/152.0.7977.75-1/ungoogled-chromium-152.0.7977.75-1-x86_64.pkg.tar.zst
-	sha256sums = 81f529216c5689e07ef9bb441ce47a154f808fd66fb11e5e1fc1368e380b6f6d
+	source = https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/153.0.8010.47-1/ungoogled-chromium-153.0.8010.47-1-x86_64.pkg.tar.zst
+	sha256sums = 4c521f515b04276e987fe117a325bbe16324ce89525754f42bf901d0e8f8c660
 
 pkgname = ungoogled-chromium-bin

Comment

The change only bumps pkgver in PKGBUILD from 152.0.7977.75 to 153.0.8010.47. No source URLs, checksums, build logic, install scripts, permissions, or other packaging behavior changed in the provided diff. On its face this is a routine version update with no new security red flags visible in the reviewed hunk.

@@ -1,7 +1,7 @@
 # Maintainer: networkException <git@nwex.de>
 
 pkgname=ungoogled-chromium-bin
-pkgver=152.0.7977.75
+pkgver=153.0.8010.47
 pkgrel=1
 pkgdesc="A lightweight approach to removing Google web service dependency"
 arch=('x86_64')

Comment

The change is a straightforward version bump of a binary package plus an updated SHA-256 checksum for the new upstream release artifact. The source remains an HTTPS GitHub release URL, there are no new build steps, no added scripts, and no changes to package install behavior or privileges. I did not see any integrity red flags in the diff itself beyond the inherent trust in the upstream prebuilt package, which is unchanged from before.

@@ -54,7 +54,7 @@ optdepends=('pipewire: WebRTC desktop sharing under Wayland'
 provides=("chromium=$pkgver" "chromedriver=$pkgver")
 conflicts=('chromium' 'chromedriver')
 source=(https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/$pkgver-$pkgrel/ungoogled-chromium-$pkgver-$pkgrel-x86_64.pkg.tar.zst)
-sha256sums=('81f529216c5689e07ef9bb441ce47a154f808fd66fb11e5e1fc1368e380b6f6d')
+sha256sums=('4c521f515b04276e987fe117a325bbe16324ce89525754f42bf901d0e8f8c660')
 
 declare -gA _system_libs=(
     [brotli]=brotli