Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 1.95.102 to 1.95.104. No build logic, sources, checksums, install scripts, or packaging metadata affecting execution/persistence were changed in the reviewed diff. On its face this is a routine upstream version update with no security red flags in the provided hunk.

@@ -1,6 +1,6 @@
 pkgbase = brave-bin
 	pkgdesc = Web browser that blocks ads and trackers by default (binary release)
-	pkgver = 1.95.102
+	pkgver = 1.95.104
 	pkgrel = 1
 	epoch = 1
 	url = https://brave.com

Comment

The change is a routine version bump in .SRCINFO for brave-bin: it updates the provided version, noextract filenames, and GitHub release URLs/checksums from 1.95.102 to 1.95.104. The sources remain HTTPS and point to the official Brave release artifacts, with no new build-time code execution, install-script changes, or packaging red flags visible in this diff. No security issue is evident from this metadata-only update.

@@ -17,19 +17,19 @@ pkgbase = brave-bin
 	optdepends = cups: Printer support
 	optdepends = libgnome-keyring: Enable GNOME keyring support
 	optdepends = libnotify: Native notification support
-	provides = brave=1.95.102
+	provides = brave=1.95.104
 	provides = brave-browser
 	conflicts = brave
-	noextract = brave-bin-1.95.102-x86_64.zip
-	noextract = brave-bin-1.95.102-aarch64.zip
+	noextract = brave-bin-1.95.104-x86_64.zip
+	noextract = brave-bin-1.95.104-aarch64.zip
 	options = !strip
 	source = brave-bin.sh
 	source = brave-browser.desktop
 	sha256sums = 75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00
 	sha256sums = c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a
-	source_x86_64 = brave-bin-1.95.102-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.95.102/brave-browser-1.95.102-linux-amd64.zip
-	sha256sums_x86_64 = c5be7c420d3f256d63335464d8f689f5d4868791ff59db136dacaa70492ab53f
-	source_aarch64 = brave-bin-1.95.102-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.95.102/brave-browser-1.95.102-linux-arm64.zip
-	sha256sums_aarch64 = f58f081779a8b13f2a7c5e75f71a7a24fc465023b2e8274b727b48193b6462eb
+	source_x86_64 = brave-bin-1.95.104-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.95.104/brave-browser-1.95.104-linux-amd64.zip
+	sha256sums_x86_64 = 1d2a6fc3e32ad7b62bb2aeae6d1ba4ba01acbec12a8a7a8310ea6ae1293816cc
+	source_aarch64 = brave-bin-1.95.104-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.95.104/brave-browser-1.95.104-linux-arm64.zip
+	sha256sums_aarch64 = 9f2dab1cd328cdaa88302be319bd269d59a8a84c8dfc6ccaa71287b8c0629ac2
 
 pkgname = brave-bin

Comment

The change only bumps pkgver from 1.95.102 to 1.95.104 in PKGBUILD. No build logic, sources, checksums, install scripts, or permissions are altered in the provided diff hunk. On its face this is a routine version update with no new security red flags visible in the reviewed change.

@@ -10,7 +10,7 @@
 # Contributor: Giusy Digital <kurmikon at libero dot it>
 
 pkgname=brave-bin
-pkgver=1.95.102
+pkgver=1.95.104
 pkgrel=1
 epoch=1
 pkgdesc='Web browser that blocks ads and trackers by default (binary release)'

Comment

This change only bumps brave-bin from 1.95.102 to 1.95.104 and updates the corresponding SHA-256 checksums for the upstream release archives. The source URLs remain HTTPS GitHub release links, there are no new build-time commands, no install-script changes, and no evidence of added persistence, privilege escalation, or network-fetch behavior beyond the declared sources. Based on the diff shown, this is a routine version/checksum refresh with low security risk.

@@ -35,8 +35,8 @@ source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://github.com/brave/brave
 noextract=(${pkgname}-${pkgver}-x86_64.zip ${pkgname}-${pkgver}-aarch64.zip)
 sha256sums=('75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00'
             'c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a')
-sha256sums_x86_64=('c5be7c420d3f256d63335464d8f689f5d4868791ff59db136dacaa70492ab53f')
-sha256sums_aarch64=('f58f081779a8b13f2a7c5e75f71a7a24fc465023b2e8274b727b48193b6462eb')
+sha256sums_x86_64=('1d2a6fc3e32ad7b62bb2aeae6d1ba4ba01acbec12a8a7a8310ea6ae1293816cc')
+sha256sums_aarch64=('9f2dab1cd328cdaa88302be319bd269d59a8a84c8dfc6ccaa71287b8c0629ac2')
 
 prepare() {
 	mkdir -p brave