Review Results

Comment

The diff only updates the generated .SRCINFO metadata to reflect a new upstream snapshot version (8.3.4171.3 -> 8.3.4175.3) and timestamp. No build logic, sources, checksums, install scripts, or packaging behavior changed in the reviewed hunk. On its face this is a routine version bump with no security-relevant red flags in the provided change.

@@ -1,8 +1,8 @@
 # Generated by makepkg 7.1.0
-# Fri Sep 25 13:11:52 UTC 2026
+# Tue Sep 29 12:11:59 UTC 2026
 pkgbase = vivaldi-snapshot
 	pkgdesc = An advanced browser made with the power user in mind. Snapshot
-	pkgver = 8.3.4171.3
+	pkgver = 8.3.4175.3
 	pkgrel = 1
 	url = https://vivaldi.com
 	arch = x86_64

Comment

The change is a routine upstream snapshot bump in .SRCINFO: it updates the Vivaldi RPM download URL from one official HTTPS snapshot release to a newer one and refreshes the corresponding sha512 checksum. No new sources, no build-script changes, no added post-install actions, and no suspicious hosts or protocols are introduced. The package still points to the official Vivaldi download domain, so this diff does not raise a security concern on its own.

@@ -36,9 +36,9 @@ pkgbase = vivaldi-snapshot
 	optdepends = upower: Battery Status API support
 	options = !strip
 	options = !zipman
-	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.3.4171.3-1.x86_64.rpm
+	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.3.4175.3-1.x86_64.rpm
 	source = 0001-add-support-for-user-flags.patch
-	sha512sums = 1c3f7e3ad0cf6ce762ad3cbb58d1496eb644f5b78d48ef43b4280e7aecfb0b9710d647ad2f2c0ea510ced329cf6cdc8b457fe2a1f05d923f3d5c4278977db873
+	sha512sums = e6051dba118f75081ffbcbfc20cfaf8ac54a100bb695fb110f3ba602dab4b1cec6d57c99322cab6269c0822a7f1390c7c4caec6e9ef994df684d892827d29220
 	sha512sums = 6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726
 
 pkgname = vivaldi-snapshot

Comment

The change is a routine version bump in PKGBUILD: it updates the upstream Vivaldi snapshot RPM version and the corresponding SHA-512 checksum for the official HTTPS download URL. No new sources, scripts, build steps, privilege changes, or packaging logic were introduced. The only security-relevant question is whether the new checksum matches the intended upstream artifact, but within this diff there is no sign of tampering or suspicious behavior.

@@ -2,8 +2,8 @@
 # Contributor: TZ86
 
 pkgname=vivaldi-snapshot
-_rpmversion=8.3.4171.3-1
-pkgver=8.3.4171.3
+_rpmversion=8.3.4175.3-1
+pkgver=8.3.4175.3
 pkgrel=1
 pkgdesc='An advanced browser made with the power user in mind. Snapshot'
 url="https://vivaldi.com"

Comment

The change is a routine upstream version bump for the prebuilt Vivaldi snapshot RPM and a corresponding checksum update. The source remains an HTTPS download from the official Vivaldi domain, there are no new build-time fetches, scripts, privilege changes, or packaging logic changes, and the only other source is the existing local patch. No security-relevant behavior is introduced by this diff alone.

@@ -42,7 +42,7 @@ optdepends=(
 )
 source=("https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-${_rpmversion}.x86_64.rpm"
         '0001-add-support-for-user-flags.patch')
-sha512sums=('1c3f7e3ad0cf6ce762ad3cbb58d1496eb644f5b78d48ef43b4280e7aecfb0b9710d647ad2f2c0ea510ced329cf6cdc8b457fe2a1f05d923f3d5c4278977db873'
+sha512sums=('e6051dba118f75081ffbcbfc20cfaf8ac54a100bb695fb110f3ba602dab4b1cec6d57c99322cab6269c0822a7f1390c7c4caec6e9ef994df684d892827d29220'
             '6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726')
 
 package() {