Review Results

Comment

The change only bumps pkgver in .SRCINFO from 154.0.8037.57 to 154.0.8037.92. No build logic, sources, checksums, install scripts, or packaging metadata beyond the version string changed. On its face this is a routine upstream version update with no added security red flags in the reviewed hunk.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome
 	pkgdesc = The popular web browser by Google (Stable Channel)
-	pkgver = 154.0.8037.57
+	pkgver = 154.0.8037.92
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome.install

Comment

The change only updates the pinned upstream Google Chrome .deb URLs and their SHA-512 checksums for x86_64 and aarch64 from 154.0.8037.57-1 to 154.0.8037.92-1. The sources remain HTTPS on the official dl.google.com domain, and the integrity hashes are updated accordingly. No build logic, install scripts, permissions, or persistence mechanisms are affected by this .SRCINFO-only change.

@@ -25,9 +25,9 @@ pkgbase = google-chrome
 	source = google-chrome-stable.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_154.0.8037.57-1_amd64.deb
-	sha512sums_x86_64 = 503bfdac8639dddeb44c339b37a295383a5a766e47204b26f4e3e11b550937a1e1c1b0c41d63c3bcbbcf26795d53a2b731385065c9245fb5509f33e59cff6864
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_154.0.8037.57-1_arm64.deb
-	sha512sums_aarch64 = b409cd701801d0e1c204c4eede536d9439a481db5b5ab6e475016f8845cfc3d47ae656412fac6e0988072d05037f3a94a4059ac2b0534b6f283471b8778bf6c3
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_154.0.8037.92-1_amd64.deb
+	sha512sums_x86_64 = 528f474f27254d188c9bc837b863f559d37ff1037b16053387075c0d0d3314c5506312112fa19c36c9d2c321fb83b8b38f77a6703ab1920a8e1d751c9c900101
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_154.0.8037.92-1_arm64.deb
+	sha512sums_aarch64 = 2f5fc99557158172f001bbef10c031be6be7f25564bb7655289956d05468f89c42972608987de47ccd3e2ec1d4db6ed1f5ac6f734a914150252de46c202d3b6a
 
 pkgname = google-chrome

Comment

The change is a simple version bump in PKGBUILD from 154.0.8037.57 to 154.0.8037.92 with no accompanying logic changes. Based on the provided diff, there are no new sources, build steps, install scripts, permissions changes, or other security-relevant modifications. This appears to be a routine upstream version update with no evident supply-chain or persistence risk in the reviewed hunk.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-stable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome
-pkgver=154.0.8037.57
+pkgver=154.0.8037.92
 pkgrel=1
 pkgdesc="The popular web browser by Google (Stable Channel)"
 arch=(

Comment

The change only updates SHA-512 checksums for the architecture-specific Google Chrome .deb sources. The source URLs remain HTTPS and point to the official Google download host, with no new build-time execution, no added scripts, and no packaging logic changes. This is a routine integrity update to match upstream artifacts, with no obvious security regression in the diff provided.

@@ -39,8 +39,8 @@ source=('eula_text.html'
         "google-chrome-$_channel.sh")
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             'de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94')
-sha512sums_x86_64=('503bfdac8639dddeb44c339b37a295383a5a766e47204b26f4e3e11b550937a1e1c1b0c41d63c3bcbbcf26795d53a2b731385065c9245fb5509f33e59cff6864')
-sha512sums_aarch64=('b409cd701801d0e1c204c4eede536d9439a481db5b5ab6e475016f8845cfc3d47ae656412fac6e0988072d05037f3a94a4059ac2b0534b6f283471b8778bf6c3')
+sha512sums_x86_64=('528f474f27254d188c9bc837b863f559d37ff1037b16053387075c0d0d3314c5506312112fa19c36c9d2c321fb83b8b38f77a6703ab1920a8e1d751c9c900101')
+sha512sums_aarch64=('2f5fc99557158172f001bbef10c031be6be7f25564bb7655289956d05468f89c42972608987de47ccd3e2ec1d4db6ed1f5ac6f734a914150252de46c202d3b6a')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")