Review Results

Comment

The only change in this .SRCINFO hunk is a pkgver bump from 155.0.8048.0 to 156.0.8063.3. No sources, checksums, install scripts, dependencies, or build logic are modified in the provided diff, so there is no direct security signal here. This appears to be a routine version update in metadata only.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome-dev
 	pkgdesc = The popular web browser by Google (Dev Channel)
-	pkgver = 155.0.8048.0
+	pkgver = 156.0.8063.3
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome-dev.install

Comment

The change only updates the pinned upstream Google Chrome Dev .deb URLs and their SHA-512 checksums in .SRCINFO for x86_64 and aarch64. The sources remain HTTPS on the official dl.google.com domain, and there is no evidence of added build-time execution, new scripts, or integrity bypasses in this hunk. This is a routine version bump with no obvious security red flags in the provided diff.

@@ -26,9 +26,9 @@ pkgbase = google-chrome-dev
 	source = google-chrome-unstable.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = 445eb36a588f49af018ded3d852b63e0523ffac20c25be721f3ef4663591256849432bebb3d9f352e4f53cbe1fb77fa67cf8911c9161f826490a21adbdcc81f4
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_155.0.8048.0-1_amd64.deb
-	sha512sums_x86_64 = 055a17347a006a17656674a2043bd29740b93219f59640bcf2f7682d997f56d6945c4b25f789a2a438d5be5fdce10bc405db765b074b6645ee8c551b5c3bc38c
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_155.0.8048.0-1_arm64.deb
-	sha512sums_aarch64 = a22f629602dee21a329919b44466b5af96aa19b8dd841fc2088b8891e5b53082bd029227400015673a5bbcdf5330b2e04f2ded0d8b4e9f7b720d261335da97bd
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_156.0.8063.3-1_amd64.deb
+	sha512sums_x86_64 = ad57ea1064036ccea7a3087a1ef4898913a13f3a88f7651e2cde5e6f9b85e63e00e92c71c14ebbb93e5bbcb0d6255c98df6e31ef540e7965326808bd0769a2a9
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_156.0.8063.3-1_arm64.deb
+	sha512sums_aarch64 = 42d5cb16a9638090ab23bf51678618527f06262327320fa3e1eabd96a94c8708962e8a85a9c30b7a2bd1e1adc10ed1227a62faed6d82b6129db8cfd2edc1adfb
 
 pkgname = google-chrome-dev

Comment

This change only bumps pkgver in PKGBUILD from 155.0.8048.0 to 156.0.8063.3. No source URLs, build logic, install scripts, permissions, or packaging behavior changed in the provided hunk. On its face this is a routine version update with no security-relevant red flags in the diff reviewed.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-unstable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome-dev
-pkgver=155.0.8048.0
+pkgver=156.0.8063.3
 pkgrel=1
 pkgdesc="The popular web browser by Google (Dev Channel)"
 arch=(

Comment

The change only updates the architecture-specific SHA-512 checksums for the Google Chrome .deb downloads while keeping the HTTPS source URLs unchanged. There are no new build steps, no added network fetches beyond the declared sources, and no packaging/script changes that would introduce execution or persistence risks. This looks like a routine integrity hash refresh for upstream artifacts.

@@ -42,8 +42,8 @@ source=(
 )
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             '445eb36a588f49af018ded3d852b63e0523ffac20c25be721f3ef4663591256849432bebb3d9f352e4f53cbe1fb77fa67cf8911c9161f826490a21adbdcc81f4')
-sha512sums_x86_64=('055a17347a006a17656674a2043bd29740b93219f59640bcf2f7682d997f56d6945c4b25f789a2a438d5be5fdce10bc405db765b074b6645ee8c551b5c3bc38c')
-sha512sums_aarch64=('a22f629602dee21a329919b44466b5af96aa19b8dd841fc2088b8891e5b53082bd029227400015673a5bbcdf5330b2e04f2ded0d8b4e9f7b720d261335da97bd')
+sha512sums_x86_64=('ad57ea1064036ccea7a3087a1ef4898913a13f3a88f7651e2cde5e6f9b85e63e00e92c71c14ebbb93e5bbcb0d6255c98df6e31ef540e7965326808bd0769a2a9')
+sha512sums_aarch64=('42d5cb16a9638090ab23bf51678618527f06262327320fa3e1eabd96a94c8708962e8a85a9c30b7a2bd1e1adc10ed1227a62faed6d82b6129db8cfd2edc1adfb')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")