Review Results

Comment

The change only bumps pkgver in .SRCINFO from 7.2.6.lqx1 to 7.2.7.lqx1. No sources, checksums, build steps, install scripts, permissions, or package metadata affecting execution were changed. Based on the provided diff hunk, there are no security-relevant concerns.

@@ -1,6 +1,6 @@
 pkgbase = linux-lqx
 	pkgdesc = Linux Liquorix
-	pkgver = 7.2.6.lqx1
+	pkgver = 7.2.7.lqx1
 	pkgrel = 1
 	url = https://liquorix.net/
 	arch = x86_64

Comment

The change only bumps the upstream liquorix-package tarball from 7.2-11 to 7.2-12 and updates the corresponding checksum in .SRCINFO. The source remains an HTTPS GitHub archive from the same upstream project, with no new sources, no build-script changes, no added network fetches, and no packaging/persistence red flags visible in this diff. This appears to be a routine version refresh with no security impact evident from the provided hunk.

@@ -23,12 +23,12 @@ pkgbase = linux-lqx
 	options = !strip
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.xz
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.sign
-	source = https://github.com/damentz/liquorix-package/archive/7.2-11.tar.gz
+	source = https://github.com/damentz/liquorix-package/archive/7.2-12.tar.gz
 	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
 	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	sha512sums = 47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1
 	sha512sums = SKIP
-	sha512sums = 19de0cdaecea2c04667daf0d0c705f2566f3ffe08fd68b23758e71c45093f28a41a9d1d610adc785c4144f6b091291c33abed5f3f285d6f20cce1d2716525d56
+	sha512sums = f35c762fc8d04d6a6ac1fa3064c5c8f02c7a6c76cc435d2b734fe19320413d2bffc63a2ce05270da200435d2b261b747f91c2435f704819a464057bc8457e33d
 
 pkgname = linux-lqx
 	pkgdesc = The Linux Liquorix kernel and modules

Comment

The change is a straightforward version bump in PKGBUILD metadata: _lqxpatchrel 11->12 and pkgver 7.2.6.lqx1->7.2.7.lqx1. No new sources, no build logic changes, no install scripts, and no packaging/permission changes are introduced in the reviewed hunk. Based on this diff alone, there are no security red flags.

@@ -54,10 +54,10 @@ _htmldocs_enable=
 _major=7.2
 _srcname=linux-${_major}
 _lqxpatchname=liquorix-package
-_lqxpatchrel=11
+_lqxpatchrel=12
 _lqxpatchver=${_lqxpatchname}-${_major}-${_lqxpatchrel}
 pkgbase=linux-lqx
-pkgver=7.2.6.lqx1
+pkgver=7.2.7.lqx1
 pkgrel=1
 pkgdesc='Linux Liquorix'
 url='https://liquorix.net/'

Comment

The change is a routine upstream version bump in PKGBUILD metadata: pkgver and patch release increment, plus an updated sha512 checksum for the new source tarball/patch. There are no new sources, no build-script logic changes, no network or privilege-related additions, and no suspicious install/unit files involved in this diff. Risk is minimal and limited to the usual trust in the updated upstream release artifact, which is already covered by checksum verification.

@@ -106,7 +106,7 @@ validpgpkeys=(
 )
 sha512sums=('47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1'
             'SKIP'
-            '19de0cdaecea2c04667daf0d0c705f2566f3ffe08fd68b23758e71c45093f28a41a9d1d610adc785c4144f6b091291c33abed5f3f285d6f20cce1d2716525d56')
+            'f35c762fc8d04d6a6ac1fa3064c5c8f02c7a6c76cc435d2b734fe19320413d2bffc63a2ce05270da200435d2b261b747f91c2435f704819a464057bc8457e33d')