Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 4.4205 to 4.4214. No sources, checksums, build steps, dependencies, install scripts, or permissions are altered, so there is no new security-relevant behavior introduced by this diff alone. This appears to be a routine package update metadata change.

@@ -1,6 +1,6 @@
 pkgbase = sublime-text-dev
 	pkgdesc = Sophisticated text editor for code, html and prose - dev build
-	pkgver = 4.4205
+	pkgver = 4.4214
 	pkgrel = 1
 	url = https://www.sublimetext.com/dev
 	install = sublime-text-dev.install

Comment

The change only updates the upstream Sublime Text binary tarball URLs and their SHA-512 checksums from build 4205 to 4214 for x86_64 and aarch64. The sources remain HTTPS on the official Sublime Text download domain, and there are no new build-time commands, scripts, or packaging logic changes in this diff. No additional integrity or persistence concerns are introduced by this metadata-only version bump.

@@ -13,9 +13,9 @@ pkgbase = sublime-text-dev
 	conflicts = sublime-text
 	source = sublime-text-dev.sh
 	sha512sums = ac56e9b7dddaebb3d222795cfc644109c93cc3f79695b8f9ee56022c74fe04a1134dd54cab07c74ff1f96b783cb3dbc026c16095552f1d2dd83115ea274dc2e9
-	source_x86_64 = sublime_text_dev_4_4205_1_x64.tar.xz::https://download.sublimetext.com/sublime_text_build_4205_x64.tar.xz
-	sha512sums_x86_64 = ba7288d08d094a8745d30a191ba5f2b3f6d9d0fbc2a15ec3936bc13c4ebd9dba6aaf152660f3c209173b40ac56a221c9de607f0e2b93021c9129f1f8b97857a0
-	source_aarch64 = sublime_text_dev_4_4205_1_arm64.tar.xz::https://download.sublimetext.com/sublime_text_build_4205_arm64.tar.xz
-	sha512sums_aarch64 = 8556d613694f844b6721c4dfd3da556075b1b38cabfdc1839912d70ad1b5686357c0f4f526a5c87464ed376f784e95c646bd2e706018561d0157933cd317ccb8
+	source_x86_64 = sublime_text_dev_4_4214_1_x64.tar.xz::https://download.sublimetext.com/sublime_text_build_4214_x64.tar.xz
+	sha512sums_x86_64 = 11afd925fc08c5e8ceed9c8054bbdde21f8907010b198fb76f831cb6168fec53ade3a8066d487534b310a9cad0fb13562b639a1283c72221501ca25513a12541
+	source_aarch64 = sublime_text_dev_4_4214_1_arm64.tar.xz::https://download.sublimetext.com/sublime_text_build_4214_arm64.tar.xz
+	sha512sums_aarch64 = 748adab937257176364a23b662a43668c7e0e8a4a367a8ba63665452dde750773793684cb76ed742ff28077e75bbf705cc02f6ddf534a5116f774197d8c1d347
 
 pkgname = sublime-text-dev

Comment

The change only bumps the Sublime Text dev build version and updates the corresponding upstream SHA-512 checksums for the x86_64 and aarch64 release tarballs. The source URLs remain HTTPS and point to the official Sublime Text download host, with no new build steps, scripts, or packaging logic introduced. No security-relevant behavior changes are present in this diff.

@@ -3,7 +3,7 @@
 # Contributor: realitygaps <realitygaps at yahoo dot com>
 
 pkgname=sublime-text-dev
-pkgver=4.4205
+pkgver=4.4214
 pkgrel=1
 pkgdesc='Sophisticated text editor for code, html and prose - dev build'
 arch=('x86_64' 'aarch64')

Comment

The change only updates the pinned SHA-512 checksums for the upstream x86_64 and aarch64 tarballs. Source URLs remain HTTPS and point to the official Sublime Text download host, with no new build steps, scripts, or packaging logic introduced. I don’t see any added execution, persistence, privilege escalation, or integrity red flags in this diff. Risk is low and limited to normal upstream artifact refresh.

@@ -19,8 +19,8 @@ source_x86_64=("${pkgname//-/_}_${pkgver/./_}_${pkgrel}_x64.tar.xz::https://down
 source_aarch64=("${pkgname//-/_}_${pkgver/./_}_${pkgrel}_arm64.tar.xz::https://download.sublimetext.com/sublime_text_build_${pkgver:2}_arm64.tar.xz")
 
 sha512sums=('ac56e9b7dddaebb3d222795cfc644109c93cc3f79695b8f9ee56022c74fe04a1134dd54cab07c74ff1f96b783cb3dbc026c16095552f1d2dd83115ea274dc2e9')
-sha512sums_x86_64=('ba7288d08d094a8745d30a191ba5f2b3f6d9d0fbc2a15ec3936bc13c4ebd9dba6aaf152660f3c209173b40ac56a221c9de607f0e2b93021c9129f1f8b97857a0')
-sha512sums_aarch64=('8556d613694f844b6721c4dfd3da556075b1b38cabfdc1839912d70ad1b5686357c0f4f526a5c87464ed376f784e95c646bd2e706018561d0157933cd317ccb8')
+sha512sums_x86_64=('11afd925fc08c5e8ceed9c8054bbdde21f8907010b198fb76f831cb6168fec53ade3a8066d487534b310a9cad0fb13562b639a1283c72221501ca25513a12541')
+sha512sums_aarch64=('748adab937257176364a23b662a43668c7e0e8a4a367a8ba63665452dde750773793684cb76ed742ff28077e75bbf705cc02f6ddf534a5116f774197d8c1d347')
 
 prepare() {
 	sed -i -e "s|@ST_PATH@|/opt/sublime_text|g" "${pkgname}.sh"