Review Results

Comment

Risk score 0. The change is a routine version bump in .SRCINFO for the Microsoft Edge binary package, updating the upstream .deb URL and its checksum. The source remains HTTPS on the official Microsoft package repository, and there are no new build-time commands, scripts, privileges, or packaging behaviors introduced by this metadata-only change.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 152.0.4191.66
+	pkgver = 153.0.4234.32
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change only updates the pinned Microsoft Edge .deb source URL and its corresponding sha256 checksum in .SRCINFO, moving from one official Microsoft packages.microsoft.com release to a newer version. The source remains HTTPS and on the vendor’s official repository, with no new build-time execution, no added sources, and no packaging-script changes. This is a routine version bump with no evident security red flags in the diff provided.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_152.0.4191.66-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_153.0.4234.32-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 186c19f9d6079d174efbb4ef331ccc1e11d139b6f7a8ea3b0db75f9b17e25f0d
+	sha256sums = 1e7ed943dc84d22036f906691406d2530753df1b4923277234ea1006713b97d1
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change only bumps pkgver in PKGBUILD from 152.0.4191.66 to 153.0.4234.32. No build logic, source URLs, checksums, install scripts, permissions, or packaging behavior changed in the provided diff. This is a routine version update with no security-relevant red flags visible in the reviewed hunk.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=152.0.4191.66
+pkgver=153.0.4234.32
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change only updates the pinned Microsoft Edge package version and its corresponding SHA-256 checksum in PKGBUILD. The source remains an HTTPS download from Microsoft’s official package repository, there are no new build steps, scripts, or privilege-related changes, and no additional sources were introduced. This is a routine upstream version bump with integrity metadata updated accordingly, so I see no security issue in the diff itself.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('186c19f9d6079d174efbb4ef331ccc1e11d139b6f7a8ea3b0db75f9b17e25f0d'
+sha256sums=('1e7ed943dc84d22036f906691406d2530753df1b4923277234ea1006713b97d1'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')