Review Results

Comment

The change is a routine version bump in .SRCINFO for microsoft-edge-stable-bin, updating the package version and the Microsoft-hosted .deb URL plus its checksum. The source remains HTTPS on the official Microsoft package repository, and there are no new build-time commands, scripts, or privilege-related changes in this diff. No security red flags are introduced by this metadata-only update.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 153.0.4234.48
+	pkgver = 154.0.4258.37
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change only updates the pinned Microsoft Edge .deb source URL to a newer upstream release and refreshes its SHA256 checksum. The source remains HTTPS on the official Microsoft packages repository, and there are no new build-time commands, scripts, or packaging behaviors introduced in this .SRCINFO diff. No integrity or persistence red flags are evident from this change alone.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_153.0.4234.48-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_154.0.4258.37-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 255359428f05f71cd63692a6265c0e2a745fff08ae0e4261f9cfed51d808102f
+	sha256sums = c6fa2974733991321b46c4064b785cdec5a14d8cddd182bc5fda057e37e7603d
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change only bumps pkgver in PKGBUILD from 153.0.4234.48 to 154.0.4258.37. No build logic, sources, checksums, install scripts, or permissions are altered in the provided diff, so there is no new security concern visible in this change alone. The package remains a prebuilt browser binary package, but that risk is unchanged by this version bump.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=153.0.4234.48
+pkgver=154.0.4258.37
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change is a routine version bump for a binary package, updating the Microsoft Edge .deb URL and its SHA256 checksum. The source remains HTTPS and points to the official Microsoft package repository, with no new build steps, scripts, or privilege-related changes introduced. I do not see any supply-chain red flags in this diff alone.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('255359428f05f71cd63692a6265c0e2a745fff08ae0e4261f9cfed51d808102f'
+sha256sums=('c6fa2974733991321b46c4064b785cdec5a14d8cddd182bc5fda057e37e7603d'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')