Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 1.32.12 to 1.32.13. No sources, checksums, build steps, install scripts, permissions, or dependencies are altered here, so there is no new security risk visible in this diff. Any risk would depend on the upstream release contents, which are not part of this change.

@@ -1,6 +1,6 @@
 pkgbase = gallery-dl
 	pkgdesc = Command-line program to download image-galleries and collections from several image hosting sites
-	pkgver = 1.32.12
+	pkgver = 1.32.13
 	pkgrel = 1
 	url = https://codeberg.org/mikf/gallery-dl
 	arch = any

Comment

The change is a straightforward version bump in .SRCINFO from gallery-dl v1.32.12 to v1.32.13, with the corresponding sha512 checksum updated. The source remains an HTTPS git tag on the official upstream Codeberg repository and is still pinned to a specific tag with signed-tag verification enabled. No new sources, scripts, install hooks, or packaging behavior are introduced by this diff. Based on the provided hunk, there are no security red flags.

@@ -27,8 +27,8 @@ pkgbase = gallery-dl
 	optdepends = python-psycopg: PostgreSQL support
 	optdepends = python-truststore: Support using system certificates
 	optdepends = python-jinja: Jinja template support
-	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.12?signed
+	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.13?signed
 	validpgpkeys = 3E09F5908333DD83DBDCE7375680CA389D365A88
-	sha512sums = 6f3714f7d13cf1718a81b8749db602e87ab80fc381b47446fefa7372addd4395da5876ad444f4008e4be55c54e0e37da356a0fead54984b3f0b4b078f48653c3
+	sha512sums = bec0429c757f793fbd5077ed396279a9f86f869ec2bda05bc411e940be3661fecfcc179a645d3a621c51ac1914714e8e874860073b40b1e4f13d92cbaec4776c
 
 pkgname = gallery-dl

Comment

The change is a routine version bump from 1.32.12 to 1.32.13 with the corresponding source checksum update. The source remains the upstream git tag over HTTPS and is still pinned to a signed tag, with no new build steps, scripts, patches, or packaging logic introduced. I found no integrity or execution red flags in this diff.

@@ -2,7 +2,7 @@
 # Contributor: LLL2yu <lll2yu@protonmail.com>
 
 pkgname=gallery-dl
-pkgver=1.32.12
+pkgver=1.32.13
 pkgrel=1
 pkgdesc='Command-line program to download image-galleries and collections from several image hosting sites'
 arch=(any)

Comment

The change is a routine version bump from gallery-dl 1.32.12 to 1.32.13 with the corresponding sha512 checksum update. The source remains pinned to an upstream signed git tag over HTTPS, and there are no new build steps, network fetches, install scripts, or privilege-related changes in the diff. No security red flags are introduced by this patch.

@@ -29,7 +29,7 @@ optdepends=(
 )
 source=(git+"${url}".git#tag=v"${pkgver}"?signed)
 validpgpkeys=(3E09F5908333DD83DBDCE7375680CA389D365A88) #Mike Fährmann
-sha512sums=('6f3714f7d13cf1718a81b8749db602e87ab80fc381b47446fefa7372addd4395da5876ad444f4008e4be55c54e0e37da356a0fead54984b3f0b4b078f48653c3')
+sha512sums=('bec0429c757f793fbd5077ed396279a9f86f869ec2bda05bc411e940be3661fecfcc179a645d3a621c51ac1914714e8e874860073b40b1e4f13d92cbaec4776c')
 
 prepare() {
     # Clean out old wheels etc.