Review Results

Comment

The change only bumps the package version in .SRCINFO from 1.32.13 to 1.32.14. No sources, checksums, build steps, install scripts, or packaging metadata affecting execution or privileges were changed in the provided diff. Based on this hunk alone, there is no security-relevant behavior introduced.

@@ -1,6 +1,6 @@
 pkgbase = gallery-dl
 	pkgdesc = Command-line program to download image-galleries and collections from several image hosting sites
-	pkgver = 1.32.13
+	pkgver = 1.32.14
 	pkgrel = 1
 	url = https://codeberg.org/mikf/gallery-dl
 	arch = any

Comment

The change is a straightforward upstream version bump in .SRCINFO from v1.32.13 to v1.32.14, with the corresponding sha512 checksum updated. The source remains an HTTPS tag-pinned git URL with signed tag verification and the same PGP key, and there are no new build steps, scripts, binaries, or packaging changes introduced by this diff. No security-relevant red flags are present in the reviewed hunk.

@@ -27,8 +27,8 @@ pkgbase = gallery-dl
 	optdepends = python-psycopg: PostgreSQL support
 	optdepends = python-truststore: Support using system certificates
 	optdepends = python-jinja: Jinja template support
-	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.13?signed
+	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.14?signed
 	validpgpkeys = 3E09F5908333DD83DBDCE7375680CA389D365A88
-	sha512sums = bec0429c757f793fbd5077ed396279a9f86f869ec2bda05bc411e940be3661fecfcc179a645d3a621c51ac1914714e8e874860073b40b1e4f13d92cbaec4776c
+	sha512sums = 666285e4e68900bc0463e6508423c3e4e318e9d38dff45f71e5d6c1401c7f99f6169617698c2f29f38458a141315697956415dab96d150a38d34345c7a8013e2
 
 pkgname = gallery-dl

Comment

This change only bumps pkgver from 1.32.13 to 1.32.14 in PKGBUILD. No source URLs, checksums, build steps, install scripts, permissions, or packaging logic were modified, so there is no new security-relevant behavior in the diff itself. Risk is minimal.

@@ -2,7 +2,7 @@
 # Contributor: LLL2yu <lll2yu@protonmail.com>
 
 pkgname=gallery-dl
-pkgver=1.32.13
+pkgver=1.32.14
 pkgrel=1
 pkgdesc='Command-line program to download image-galleries and collections from several image hosting sites'
 arch=(any)

Comment

The change is a routine version bump for a VCS-sourced package with signed tag verification and an updated checksum. No new sources, scripts, install hooks, privilege changes, or build-time network behavior were introduced. The diff is limited to pkgver and the corresponding sha512sums entry, so there is no evident security risk in this change.

@@ -29,7 +29,7 @@ optdepends=(
 )
 source=(git+"${url}".git#tag=v"${pkgver}"?signed)
 validpgpkeys=(3E09F5908333DD83DBDCE7375680CA389D365A88) #Mike Fährmann
-sha512sums=('bec0429c757f793fbd5077ed396279a9f86f869ec2bda05bc411e940be3661fecfcc179a645d3a621c51ac1914714e8e874860073b40b1e4f13d92cbaec4776c')
+sha512sums=('666285e4e68900bc0463e6508423c3e4e318e9d38dff45f71e5d6c1401c7f99f6169617698c2f29f38458a141315697956415dab96d150a38d34345c7a8013e2')
 
 prepare() {
     # Clean out old wheels etc.