Review Results

Comment

This is a routine version bump in .SRCINFO for google-chrome-beta, updating the package version and the official Google-hosted Debian package URLs plus their SHA-512 checksums. The sources remain HTTPS on dl.google.com, there are no new build-time commands, no install-script changes, and no added persistence or privilege-related artifacts in the diff. Risk is low and limited to the normal trust inherent in shipping a prebuilt upstream browser binary.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome-beta
 	pkgdesc = The popular web browser by Google (Beta Channel)
-	pkgver = 155.0.8059.12
+	pkgver = 156.0.8078.4
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome-beta.install

Comment

The change only updates the pinned upstream Google Chrome Beta .deb URLs and their SHA-512 checksums for x86_64 and aarch64. The sources remain HTTPS on the official dl.google.com host, and there are no new build steps, scripts, or packaging behaviors introduced in this .SRCINFO-only diff. This looks like a routine version bump with integrity hashes updated accordingly, so I found no security issues in the reviewed hunk.

@@ -26,9 +26,9 @@ pkgbase = google-chrome-beta
 	source = google-chrome-beta.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = 17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_155.0.8059.12-1_amd64.deb
-	sha512sums_x86_64 = 63e39d2bed7cab9cee876dad071eb928e6509443cc8397232cc7d334047aba610235b25bdad241e14104e6a5ae457d01370dd67d445aac7bf1222ce341055ddc
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_155.0.8059.12-1_arm64.deb
-	sha512sums_aarch64 = e811af724fc4294df0488816490ea3e35a9124e7f113a7c03c511934e9ddcc49d39b2462699c568050dec010c8e0347cc601eea04be20057e8b59e5d10033dd1
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_156.0.8078.4-1_amd64.deb
+	sha512sums_x86_64 = 4f43eed048a4a648a42f9d28a7ab9e7db8a911be7066e13b0811ea941886abc1421390d5d66cfefbe915e373e67f979395679343ebaaef7b19dde84215ef87cd
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_156.0.8078.4-1_arm64.deb
+	sha512sums_aarch64 = 1dede01b45ff8f6bac8c7fd4db06866edfe93407859297d2e8f9557356e6845d8841a5b24e013153479d903be932bbb6e7ece9a8ad6e48ace3882037ef8f23f9
 
 pkgname = google-chrome-beta

Comment

The change only bumps pkgver in PKGBUILD from 155.0.8059.12 to 156.0.8078.4. No build logic, sources, install scripts, permissions, or dependencies are altered in the provided diff, so there is no new security concern introduced by this change itself. Remaining trust in the upstream Google Chrome beta binary/package is unchanged from the prior revision.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-beta" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome-beta
-pkgver=155.0.8059.12
+pkgver=156.0.8078.4
 pkgrel=1
 pkgdesc="The popular web browser by Google (Beta Channel)"
 arch=(

Comment

The change only updates the pinned SHA-512 checksums for the architecture-specific Google Chrome beta .deb downloads. The source URLs remain HTTPS and point to the official Google download host, with no new build steps, scripts, or privilege-related changes. I do not see any added supply-chain or execution risk in this diff beyond the normal trust in upstream binaries already present in the package.

@@ -42,8 +42,8 @@ source=(
 )
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             '17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03')
-sha512sums_x86_64=('63e39d2bed7cab9cee876dad071eb928e6509443cc8397232cc7d334047aba610235b25bdad241e14104e6a5ae457d01370dd67d445aac7bf1222ce341055ddc')
-sha512sums_aarch64=('e811af724fc4294df0488816490ea3e35a9124e7f113a7c03c511934e9ddcc49d39b2462699c568050dec010c8e0347cc601eea04be20057e8b59e5d10033dd1')
+sha512sums_x86_64=('4f43eed048a4a648a42f9d28a7ab9e7db8a911be7066e13b0811ea941886abc1421390d5d66cfefbe915e373e67f979395679343ebaaef7b19dde84215ef87cd')
+sha512sums_aarch64=('1dede01b45ff8f6bac8c7fd4db06866edfe93407859297d2e8f9557356e6845d8841a5b24e013153479d903be932bbb6e7ece9a8ad6e48ace3882037ef8f23f9')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")