Review Results

Comment

The change only bumps pkgver in .SRCINFO from 154.0.4258.37 to 154.0.4258.48. No build logic, sources, checksums, install scripts, or permissions are altered in the reviewed diff, so there is no new security concern visible here. This is a routine version metadata update for a binary package.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 154.0.4258.37
+	pkgver = 154.0.4258.48
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change is a routine version bump of the Microsoft Edge binary package source from 154.0.4258.37-1 to 154.0.4258.48-1, with the corresponding SHA-256 checksum updated. The source remains an HTTPS URL on Microsoft's official package repository, and no build scripts, install scripts, permissions, or packaging logic were changed. I do not see any new supply-chain, persistence, or privilege-escalation risk introduced by this .SRCINFO-only update.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_154.0.4258.37-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_154.0.4258.48-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = c6fa2974733991321b46c4064b785cdec5a14d8cddd182bc5fda057e37e7603d
+	sha256sums = b9a0ba47f0233b4e3266e61630b25114067fa25361df63182c88aaa8a422b98e
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change only bumps pkgver in PKGBUILD from 154.0.4258.37 to 154.0.4258.48. No build logic, sources, install scripts, permissions, or packaging behavior changed. This is a routine version update with no security-relevant red flags in the provided diff.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=154.0.4258.37
+pkgver=154.0.4258.48
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change only updates the pinned upstream Microsoft Edge .deb version and its corresponding SHA-256 checksum in PKGBUILD. This is a routine integrity update for a binary package, with no new sources, scripts, build logic, privilege changes, or packaging behavior introduced. Based on the diff shown, there are no additional security red flags beyond the inherent trust in the upstream Microsoft-hosted binary.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('c6fa2974733991321b46c4064b785cdec5a14d8cddd182bc5fda057e37e7603d'
+sha256sums=('b9a0ba47f0233b4e3266e61630b25114067fa25361df63182c88aaa8a422b98e'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')