AUR AI Reviewer

Review Results

Version #2614 of discord_arch_electron · commit c1c2e8bdbe1b · status Reviewed

Risk 0/5 · Safe .SRCINFO
Result #4200

Comment

The change only bumps pkgver in .SRCINFO from 1.0.159 to 1.0.160. No build logic, sources, install scripts, permissions, or packaging metadata beyond the version number changed. On its face this is a routine version update with no security-relevant behavior introduced in the reviewed diff.

@@ -1,6 +1,6 @@
 pkgbase = discord_arch_electron
 	pkgdesc = Discord using system provided electron for increased security and performance
-	pkgver = 1.0.159
+	pkgver = 1.0.160
 	pkgrel = 1
 	epoch = 1
 	url = https://discord.com
Risk 0/5 · Safe .SRCINFO
Result #4201

Comment

This change is a routine version bump in .SRCINFO from Discord 1.0.159 to 1.0.160, with corresponding source URLs and checksums updated. The sources remain HTTPS and point to Discord-owned domains, and there are no new build-time commands, scripts, or packaging directives introduced in this diff. No obvious supply-chain or privilege-escalation risk is visible from the metadata-only change.

@@ -18,43 +18,43 @@ pkgbase = discord_arch_electron
 	provides = discord
 	conflicts = discord
 	options = !strip
-	source = https://dl.discordapp.net/apps/linux/1.0.159/discord-1.0.159.tar.gz
+	source = https://dl.discordapp.net/apps/linux/1.0.160/discord-1.0.160.tar.gz
 	source = LICENSE.html::https://discord.com/terms
 	source = OSS-LICENSES.html::https://discord.com/licenses
 	source = discord-launcher.sh
 	source = krisp-patcher.py
-	source = core-1.0.159.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.159/full.distro
-	source = discord_desktop_core-1.0.159.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.159/discord_desktop_core/1/full.distro
-	source = discord_zstd-1.0.159.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.159/discord_zstd/1/full.distro
-	source = discord_krisp-1.0.159.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.159/discord_krisp/1/full.distro
-	source = discord_rpc-1.0.159.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.159/discord_rpc/1/full.distro
-	source = discord_utils-1.0.159.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.159/discord_utils/1/full.distro
-	source = discord_voice-1.0.159.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.159/discord_voice/1/full.distro
-	source = discord_game_utils-1.0.159.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.159/discord_game_utils/1/full.distro
-	source = discord_erlpack-1.0.159.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.159/discord_erlpack/1/full.distro
-	source = discord_modules-1.0.159.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.159/discord_modules/1/full.distro
-	source = discord_spellcheck-1.0.159.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.159/discord_spellcheck/1/full.distro
-	source = discord_dispatch-1.0.159.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.159/discord_dispatch/1/full.distro
-	source = discord_cloudsync-1.0.159.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.159/discord_cloudsync/1/full.distro
-	source = discord_sysimg-1.0.159.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.159/discord_sysimg/1/full.distro
-	sha512sums = e83b4d229ba63c4f044ff983b45cc97de7ed36fc901b331adbd4dc9c369bcc313ba6f86d06fa4c06c54eefd08372db34878b61c206f6a777362d1573276d5c09
+	source = core-1.0.160.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.160/full.distro
+	source = discord_desktop_core-1.0.160.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.160/discord_desktop_core/1/full.distro
+	source = discord_zstd-1.0.160.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.160/discord_zstd/1/full.distro
+	source = discord_krisp-1.0.160.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.160/discord_krisp/1/full.distro
+	source = discord_rpc-1.0.160.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.160/discord_rpc/1/full.distro
+	source = discord_utils-1.0.160.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.160/discord_utils/1/full.distro
+	source = discord_voice-1.0.160.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.160/discord_voice/1/full.distro
+	source = discord_game_utils-1.0.160.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.160/discord_game_utils/1/full.distro
+	source = discord_erlpack-1.0.160.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.160/discord_erlpack/1/full.distro
+	source = discord_modules-1.0.160.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.160/discord_modules/1/full.distro
+	source = discord_spellcheck-1.0.160.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.160/discord_spellcheck/1/full.distro
+	source = discord_dispatch-1.0.160.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.160/discord_dispatch/1/full.distro
+	source = discord_cloudsync-1.0.160.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.160/discord_cloudsync/1/full.distro
+	source = discord_sysimg-1.0.160.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.160/discord_sysimg/1/full.distro
+	sha512sums = cc6e7ab2f5d6cb11a624fe72ecdf115ce1479234673056126624ad905f203490e7aeb259dd75bd2f949b30d902ef50f89aec10dc83c3518a0498a4900ca138a5
 	sha512sums = SKIP
 	sha512sums = SKIP
 	sha512sums = d5373e2b2e9754bdcdbcda81fc1392ce6605939651839868823f3c3e0bf16f6fba2fb73bc1a0ff230eebd743d1463f2e8b2295503248f14845b3a56e57385bd1
 	sha512sums = 85da93530b2b92faad58cc84d0f7ddaea6b22fbec413e806c1981eb6369a301ec995eee6bfbe6b828e2cd0baf6168e578bbde456f2450a13199994ff9a1e7cd0
-	sha512sums = 4c83350f4db5e5b4b6f44aac2c449152be65a1481bf3973765aeb15cffc0b18e0718d610174c68eec9ab789ca59663ca8ba23c056296d8d9895ebd69e1fbc4a8
-	sha512sums = 2317991821271cccd5ffd3650431f9cc59e7bd640fc682b87c9cee7f4dad944ab4e033075aaff421a15d4dc6994fe059155832a0fe56ef42731eb456694b5b07
-	sha512sums = 04d706a2fc3d8dd0a1354bbd8e5e41fc41104f11e7244bc5755577234819856fa81bdb1a74e3a621c61ccc7490c217b4a373c8b997525dce200b05f205ff46a3
-	sha512sums = 510761d9b25997c1e71d0f823066790924e845e5f294c650b5d038a3b761c29fb9910dae6bcf562c73cb3fef2dc1ec4c73f512f426bb146164dc6c8b9a8f702c
-	sha512sums = 5826f81904b7b8d5be06f98254d353f2e21fc3bf51b08673a92619153a62f02f90ebca633229670785b18e6e20ca680e384ecd856bff055619a6a433d3ac85c8
-	sha512sums = 26e1c4c5dc82423cb5b5ab3b4597c8d8d24a9bdc6543771524a178a0deab1f34d0602525c6f30eb29c4ebfbd9f2a9a369ad3427e609388bcf187b868b559f235
-	sha512sums = 0f17e48fcef921c2a743dba4ab60e4a8ebf6c7616fc9b029920094ba10ee48e4c04ed36dbab9f988ea7d43430432ec748597e24e96d8ec362675556f0cd12398
-	sha512sums = 417e5fdbf7341588abf135578e7f30bd4f08d97bc96bb3e64a8fee43ff908eaac11de5d78b85ad03366334833fe022db1fde914c655e4af816f24d41fd0de54c
-	sha512sums = c5c77f907b86de877b3e03e8fe35031528e7b2f03554c84e2bff97d8e8d26b6a86611a0e393407bb1242aedbe4898f1d2c8233861bd07fa0ae2f0606c0c8feb7
-	sha512sums = d047589d7aef003c8d83cd0c787e467c971640a3743e0ecdf6c534d73f6eb3040b0b7127bfec63a0a41318b0516fb367d9287bfc0c4596d3565303f5f58c146e
-	sha512sums = 0233a43bab269947d4f5a1c9d616348641a65ccccf7ffac3f389ed8f9fe39eea44673589b7ab3d4ccfc20df77169fa8108fda5ab612dc085e1f71577ad3ad5e6
-	sha512sums = bddb9c5aa2a42fd5f20f6a673547b0d236e8414c0307bf843a29c05292cfd43daf1c811f3fe560e9f81356a0d5460f9616487f12edaf29a3df3b002abfd52e6a
-	sha512sums = 26149d214a0504b094a7de7730d5bbc3acd126180dca30723c50f66790e2a00ad480cf867f9c5d9fb9d3115638c9d09948ec5fb3de6fe725a06061a071aa6782
-	sha512sums = 0a36002c47d1e15a3fd449132ca9a5464033ae5d8b63bcea7febca8967dc52502cacd7849d698868fcddf5909f752e2e0949259be2d1be4152705dafc90ed252
+	sha512sums = bc20f2cf21fbc721eb4fe5928f08046ade622b1826b5228c7d116a409093af8646a538a86698e2b4f4d54732e8fe7c4ad605edc61abf1d028ecbbd58686077ed
+	sha512sums = 9ce231bad5becf60aba3c6cb19b2b1c9eb32057d71c6e3215acc97be5d3dd05429035fc9f0e19ebfc04ff9ebfcba6dbaf07bcad4e23a82ce10d4ed3101236469
+	sha512sums = 6ca005c0a9c4b4bfcd77fb5d147544f252bf479ee164a2d554a6805c4744136c7227fb086821f84672288159d67fbb3a9bdfc69a592c488ad2336c52f54885ca
+	sha512sums = 4d253c9dd524fa9ad49f1dc03bd6ed07de920610eda3864d42081b722c5b6966fab556fcafe3e12175159252d68e481b1388a70eb156e7e2e8aaacd5a4d009e1
+	sha512sums = 4aff0bf3264cacfb638a129be5206416e9ce986201e6defcf0d862b4d8c4b975b3d0cebefc3c333e49841b893d58e878cedc9452f4bea7cfdf8c718fcac1b6e2
+	sha512sums = 858755f94d19f379c46fa4e7781d45e1de6e6d25b5fc949206a33d2bdddb0ee2b4fff2408f6b6b85a2b12283e46a77fd1f2623797ff3cb210faba9c8a5ddb4a4
+	sha512sums = 97fa6e00228cb9acec1492a3a7830201befac96df23ecdfa0e9c8b2528348b4abe893fc918f21db970212872a12703913bd84b2f8a763d27850da73fc65d1532
+	sha512sums = 0f2331d04260d09cc7b7f9dd2dd86aff3827a5e08f69a2405b51e22a210706748e563a653fb062d391cb841e9d9de97794a1e1c3b3cfce2a8b2bd959d0780c43
+	sha512sums = 5e5786debabeb8420afb8fbfc4c269110c94fa1d5ad6192ef6cc4c9ac5ca842b1e3e6706a19f06848093d03a45a5584b2369127b655f5765c02dbbc570094927
+	sha512sums = c19e670a3de8837f12214acd52f85cee9a61d3a6dfb75195d690a1556395387b044ecaa631787b46c2caa46bf58a4a1d15074184f560c36c40d10f54208185eb
+	sha512sums = 02c6e368553a36933b7f411e3e126c0e88c4cfce215d2588b44d7f9daa946c82231b40ae3e4a76cf7357dfb63efaa6c734994c3eb2084f2709db57bf56fc6305
+	sha512sums = 5bd97ac9c4ca81dcc2cc6846008289e35222c7218d8a27eb7f3be392bc6da30f09b4dcac001331377fe74cb296f9c1bb3cf69a4c6218eec5d811db6396c43aac
+	sha512sums = e9ae5f2e8a161fff1e75cc7a783089a08c26dee0d27dbabef6236cd2e78062086e85484311a837afcf20fa52467656f3819a7947ad1510b17608561b33aacdbd
+	sha512sums = 50a991478dcc3d19949ee3be2f5bcf0a9eb198464f408efe1c5347802362b08fbda65417b1a95df096047278fe2612b53c6d2937eaaa7254155ec02ecf03e9a5
 
 pkgname = discord_arch_electron
Risk 0/5 · Safe PKGBUILD
Result #4202

Comment

The change is a simple version bump in PKGBUILD from 1.0.159 to 1.0.160 with no other modifications. There are no new sources, build steps, install scripts, permissions changes, or packaging logic introduced in the provided diff hunk. Based on this diff alone, I do not see a security issue.

@@ -9,7 +9,7 @@
 _pkgname=discord
 _electron=electron
 pkgname=${_pkgname}_arch_electron
-pkgver=1.0.159
+pkgver=1.0.160
 pkgrel=1
 epoch=1
 pkgdesc="Discord using system provided ${_electron} for increased security and performance"
Risk 1/5 · Low PKGBUILD
Result #4203

Comment

The change only updates sha512 checksums for existing upstream Discord tarballs; the source URLs remain HTTPS and unchanged, and there are no new build steps, scripts, or packaging behaviors introduced. I don’t see any evidence of added code execution, persistence, privilege escalation, or integrity weakening beyond the normal trust shift that comes with a versioned upstream release refresh. Risk is low because this is a checksum-only maintenance update, though the package still depends on opaque upstream binaries as before.

@@ -48,25 +48,25 @@ source=("https://dl.discordapp.net/apps/linux/${pkgver}/${_pkgname}-${pkgver}.ta
         "discord_dispatch-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_dispatch/1/full.distro"
         "discord_cloudsync-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_cloudsync/1/full.distro"
         "discord_sysimg-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_sysimg/1/full.distro")
-sha512sums=('e83b4d229ba63c4f044ff983b45cc97de7ed36fc901b331adbd4dc9c369bcc313ba6f86d06fa4c06c54eefd08372db34878b61c206f6a777362d1573276d5c09'
+sha512sums=('cc6e7ab2f5d6cb11a624fe72ecdf115ce1479234673056126624ad905f203490e7aeb259dd75bd2f949b30d902ef50f89aec10dc83c3518a0498a4900ca138a5'
             '2590151db4404a9ecbae2c45269c74f5ea26479967de5bc0b221a9143f4efeeeda9e335c23cf1f982680ab4fd895dcf3fd5731bd230908b3b2568eee0ec223ec'
             '5cccf397a772fed0db9b19253e496e78af27810227325ce681de985e2e0fbbdb195873d9642574ad3ae7bfcf4699bfdaa16933ca50c13cb98a1ff53c86c6de05'
             'd5373e2b2e9754bdcdbcda81fc1392ce6605939651839868823f3c3e0bf16f6fba2fb73bc1a0ff230eebd743d1463f2e8b2295503248f14845b3a56e57385bd1'
             '85da93530b2b92faad58cc84d0f7ddaea6b22fbec413e806c1981eb6369a301ec995eee6bfbe6b828e2cd0baf6168e578bbde456f2450a13199994ff9a1e7cd0'
-            '4c83350f4db5e5b4b6f44aac2c449152be65a1481bf3973765aeb15cffc0b18e0718d610174c68eec9ab789ca59663ca8ba23c056296d8d9895ebd69e1fbc4a8'
-            '2317991821271cccd5ffd3650431f9cc59e7bd640fc682b87c9cee7f4dad944ab4e033075aaff421a15d4dc6994fe059155832a0fe56ef42731eb456694b5b07'
-            '04d706a2fc3d8dd0a1354bbd8e5e41fc41104f11e7244bc5755577234819856fa81bdb1a74e3a621c61ccc7490c217b4a373c8b997525dce200b05f205ff46a3'
-            '510761d9b25997c1e71d0f823066790924e845e5f294c650b5d038a3b761c29fb9910dae6bcf562c73cb3fef2dc1ec4c73f512f426bb146164dc6c8b9a8f702c'
-            '5826f81904b7b8d5be06f98254d353f2e21fc3bf51b08673a92619153a62f02f90ebca633229670785b18e6e20ca680e384ecd856bff055619a6a433d3ac85c8'
-            '26e1c4c5dc82423cb5b5ab3b4597c8d8d24a9bdc6543771524a178a0deab1f34d0602525c6f30eb29c4ebfbd9f2a9a369ad3427e609388bcf187b868b559f235'
-            '0f17e48fcef921c2a743dba4ab60e4a8ebf6c7616fc9b029920094ba10ee48e4c04ed36dbab9f988ea7d43430432ec748597e24e96d8ec362675556f0cd12398'
-            '417e5fdbf7341588abf135578e7f30bd4f08d97bc96bb3e64a8fee43ff908eaac11de5d78b85ad03366334833fe022db1fde914c655e4af816f24d41fd0de54c'
-            'c5c77f907b86de877b3e03e8fe35031528e7b2f03554c84e2bff97d8e8d26b6a86611a0e393407bb1242aedbe4898f1d2c8233861bd07fa0ae2f0606c0c8feb7'
-            'd047589d7aef003c8d83cd0c787e467c971640a3743e0ecdf6c534d73f6eb3040b0b7127bfec63a0a41318b0516fb367d9287bfc0c4596d3565303f5f58c146e'
-            '0233a43bab269947d4f5a1c9d616348641a65ccccf7ffac3f389ed8f9fe39eea44673589b7ab3d4ccfc20df77169fa8108fda5ab612dc085e1f71577ad3ad5e6'
-            'bddb9c5aa2a42fd5f20f6a673547b0d236e8414c0307bf843a29c05292cfd43daf1c811f3fe560e9f81356a0d5460f9616487f12edaf29a3df3b002abfd52e6a'
-            '26149d214a0504b094a7de7730d5bbc3acd126180dca30723c50f66790e2a00ad480cf867f9c5d9fb9d3115638c9d09948ec5fb3de6fe725a06061a071aa6782'
-            '0a36002c47d1e15a3fd449132ca9a5464033ae5d8b63bcea7febca8967dc52502cacd7849d698868fcddf5909f752e2e0949259be2d1be4152705dafc90ed252')
+            'bc20f2cf21fbc721eb4fe5928f08046ade622b1826b5228c7d116a409093af8646a538a86698e2b4f4d54732e8fe7c4ad605edc61abf1d028ecbbd58686077ed'
+            '9ce231bad5becf60aba3c6cb19b2b1c9eb32057d71c6e3215acc97be5d3dd05429035fc9f0e19ebfc04ff9ebfcba6dbaf07bcad4e23a82ce10d4ed3101236469'
+            '6ca005c0a9c4b4bfcd77fb5d147544f252bf479ee164a2d554a6805c4744136c7227fb086821f84672288159d67fbb3a9bdfc69a592c488ad2336c52f54885ca'
+            '4d253c9dd524fa9ad49f1dc03bd6ed07de920610eda3864d42081b722c5b6966fab556fcafe3e12175159252d68e481b1388a70eb156e7e2e8aaacd5a4d009e1'
+            '4aff0bf3264cacfb638a129be5206416e9ce986201e6defcf0d862b4d8c4b975b3d0cebefc3c333e49841b893d58e878cedc9452f4bea7cfdf8c718fcac1b6e2'
+            '858755f94d19f379c46fa4e7781d45e1de6e6d25b5fc949206a33d2bdddb0ee2b4fff2408f6b6b85a2b12283e46a77fd1f2623797ff3cb210faba9c8a5ddb4a4'
+            '97fa6e00228cb9acec1492a3a7830201befac96df23ecdfa0e9c8b2528348b4abe893fc918f21db970212872a12703913bd84b2f8a763d27850da73fc65d1532'
+            '0f2331d04260d09cc7b7f9dd2dd86aff3827a5e08f69a2405b51e22a210706748e563a653fb062d391cb841e9d9de97794a1e1c3b3cfce2a8b2bd959d0780c43'
+            '5e5786debabeb8420afb8fbfc4c269110c94fa1d5ad6192ef6cc4c9ac5ca842b1e3e6706a19f06848093d03a45a5584b2369127b655f5765c02dbbc570094927'
+            'c19e670a3de8837f12214acd52f85cee9a61d3a6dfb75195d690a1556395387b044ecaa631787b46c2caa46bf58a4a1d15074184f560c36c40d10f54208185eb'
+            '02c6e368553a36933b7f411e3e126c0e88c4cfce215d2588b44d7f9daa946c82231b40ae3e4a76cf7357dfb63efaa6c734994c3eb2084f2709db57bf56fc6305'
+            '5bd97ac9c4ca81dcc2cc6846008289e35222c7218d8a27eb7f3be392bc6da30f09b4dcac001331377fe74cb296f9c1bb3cf69a4c6218eec5d811db6396c43aac'
+            'e9ae5f2e8a161fff1e75cc7a783089a08c26dee0d27dbabef6236cd2e78062086e85484311a837afcf20fa52467656f3819a7947ad1510b17608561b33aacdbd'
+            '50a991478dcc3d19949ee3be2f5bcf0a9eb198464f408efe1c5347802362b08fbda65417b1a95df096047278fe2612b53c6d2937eaaa7254155ec02ecf03e9a5')
 
 # Skip "LICENSE.html" and "OSS-LICENSES.html" files hashes as they are unstable
 # Since "updpkgsums"/"pkgctl version upgrade" overwrite the checksum array with