Review Results

Comment

The change only bumps pkgver in .SRCINFO from 153.0.8010.47 to 153.0.8010.52. No build logic, sources, checksums, install scripts, or packaging metadata beyond the version number changed. This is a routine upstream version update with no security-relevant red flags in the provided diff.

@@ -1,6 +1,6 @@
 pkgbase = ungoogled-chromium-bin
 	pkgdesc = A lightweight approach to removing Google web service dependency
-	pkgver = 153.0.8010.47
+	pkgver = 153.0.8010.52
 	pkgrel = 1
 	url = https://github.com/ungoogled-software/ungoogled-chromium
 	arch = x86_64

Comment

The change is a straightforward version bump in .SRCINFO for a binary package: it updates the provided chromium/chromedriver versions and the GitHub release URL plus checksum to the new upstream release artifact. The source remains HTTPS on the official ungoogled-software GitHub release page, and there are no new build-time commands, scripts, or privilege-related changes in this diff. No obvious supply-chain or persistence red flags are introduced by this metadata-only update.

@@ -62,11 +62,11 @@ pkgbase = ungoogled-chromium-bin
 	optdepends = qt6-base: Qt support
 	optdepends = org.freedesktop.secrets: password storage backend on GNOME, KDE and Xfce
 	optdepends = upower: Battery Status API support
-	provides = chromium=153.0.8010.47
-	provides = chromedriver=153.0.8010.47
+	provides = chromium=153.0.8010.52
+	provides = chromedriver=153.0.8010.52
 	conflicts = chromium
 	conflicts = chromedriver
-	source = https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/153.0.8010.47-1/ungoogled-chromium-153.0.8010.47-1-x86_64.pkg.tar.zst
-	sha256sums = 4c521f515b04276e987fe117a325bbe16324ce89525754f42bf901d0e8f8c660
+	source = https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/153.0.8010.52-1/ungoogled-chromium-153.0.8010.52-1-x86_64.pkg.tar.zst
+	sha256sums = 514a32e2596ebbd6f9e4c7b5bfc348093f8e5a603610ddd9e42631747e3d16f2
 
 pkgname = ungoogled-chromium-bin

Comment

The change only bumps pkgver from 153.0.8010.47 to 153.0.8010.52 in PKGBUILD. No source URLs, build logic, install scripts, permissions, or packaging behavior are modified in the provided diff. On its face this is a routine version update with no security-relevant red flags in the reviewed hunk.

@@ -1,7 +1,7 @@
 # Maintainer: networkException <git@nwex.de>
 
 pkgname=ungoogled-chromium-bin
-pkgver=153.0.8010.47
+pkgver=153.0.8010.52
 pkgrel=1
 pkgdesc="A lightweight approach to removing Google web service dependency"
 arch=('x86_64')

Comment

The change is a routine version bump of a binary package from 153.0.8010.47 to 153.0.8010.52 with a corresponding SHA-256 update for the prebuilt release artifact. The source remains an HTTPS GitHub release URL under the project’s expected upstream, and there are no new build steps, scripts, patches, or privilege-related changes in the diff. Risk is low; the main trust boundary is the upstream binary release itself, which is unchanged by this PKGBUILD edit.

@@ -54,7 +54,7 @@ optdepends=('pipewire: WebRTC desktop sharing under Wayland'
 provides=("chromium=$pkgver" "chromedriver=$pkgver")
 conflicts=('chromium' 'chromedriver')
 source=(https://github.com/ungoogled-software/ungoogled-chromium-archlinux/releases/download/$pkgver-$pkgrel/ungoogled-chromium-$pkgver-$pkgrel-x86_64.pkg.tar.zst)
-sha256sums=('4c521f515b04276e987fe117a325bbe16324ce89525754f42bf901d0e8f8c660')
+sha256sums=('514a32e2596ebbd6f9e4c7b5bfc348093f8e5a603610ddd9e42631747e3d16f2')
 
 declare -gA _system_libs=(
     [brotli]=brotli