Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 1.96.59 to 1.96.60. No build logic, sources, install scripts, permissions, or package metadata affecting trust boundaries changed. On its face this is a routine upstream version update with no security red flags in the provided diff.

@@ -1,6 +1,6 @@
 pkgbase = brave-bin
 	pkgdesc = Web browser that blocks ads and trackers by default (binary release)
-	pkgver = 1.96.59
+	pkgver = 1.96.60
 	pkgrel = 1
 	epoch = 1
 	url = https://brave.com

Comment

The change is a straightforward version bump in .SRCINFO for the Brave binary package: updated provides/noextract filenames, release URLs, and checksums from 1.96.59 to 1.96.60. The sources remain HTTPS GitHub release assets, there are no new build steps, scripts, or privilege-related changes, and no suspicious metadata was introduced in this diff. Security risk appears minimal.

@@ -17,19 +17,19 @@ pkgbase = brave-bin
 	optdepends = cups: Printer support
 	optdepends = libgnome-keyring: Enable GNOME keyring support
 	optdepends = libnotify: Native notification support
-	provides = brave=1.96.59
+	provides = brave=1.96.60
 	provides = brave-browser
 	conflicts = brave
-	noextract = brave-bin-1.96.59-x86_64.zip
-	noextract = brave-bin-1.96.59-aarch64.zip
+	noextract = brave-bin-1.96.60-x86_64.zip
+	noextract = brave-bin-1.96.60-aarch64.zip
 	options = !strip
 	source = brave-bin.sh
 	source = brave-browser.desktop
 	sha256sums = 75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00
 	sha256sums = c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a
-	source_x86_64 = brave-bin-1.96.59-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.96.59/brave-browser-1.96.59-linux-amd64.zip
-	sha256sums_x86_64 = ee36d0fb939ebdf1922d47d7b4cb8879507733b2a76605a31bfe9dede3297139
-	source_aarch64 = brave-bin-1.96.59-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.96.59/brave-browser-1.96.59-linux-arm64.zip
-	sha256sums_aarch64 = faa8a26f1e7c0c3b8632633503f82e571a798212d8e6fe9baba77f0c73509867
+	source_x86_64 = brave-bin-1.96.60-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.96.60/brave-browser-1.96.60-linux-amd64.zip
+	sha256sums_x86_64 = c3d073309ff6ef7d02b4b5cf40ac43e6544f5c4966fbb1673cf55fbdd12fea55
+	source_aarch64 = brave-bin-1.96.60-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.96.60/brave-browser-1.96.60-linux-arm64.zip
+	sha256sums_aarch64 = fc25ee62d7de63eb1ce5793cfe3b2aca24f84c979069fd1a4dcf6fabcce72750
 
 pkgname = brave-bin

Comment

The change is a simple version bump in PKGBUILD from 1.96.59 to 1.96.60 with no other modifications. Based on the provided diff, there are no new sources, build steps, install scripts, permissions changes, or other security-relevant alterations to review. This appears low risk and consistent with a routine upstream release update.

@@ -10,7 +10,7 @@
 # Contributor: Giusy Digital <kurmikon at libero dot it>
 
 pkgname=brave-bin
-pkgver=1.96.59
+pkgver=1.96.60
 pkgrel=1
 epoch=1
 pkgdesc='Web browser that blocks ads and trackers by default (binary release)'

Comment

The change only updates the package version and the expected SHA-256 checksums for the upstream Brave release archives. No build logic, install scripts, permissions, or source URLs were altered, and the sources still point to the official Brave GitHub release assets over HTTPS. This is a routine integrity update with no evident security regression in the diff provided.

@@ -35,8 +35,8 @@ source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://github.com/brave/brave
 noextract=(${pkgname}-${pkgver}-x86_64.zip ${pkgname}-${pkgver}-aarch64.zip)
 sha256sums=('75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00'
             'c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a')
-sha256sums_x86_64=('ee36d0fb939ebdf1922d47d7b4cb8879507733b2a76605a31bfe9dede3297139')
-sha256sums_aarch64=('faa8a26f1e7c0c3b8632633503f82e571a798212d8e6fe9baba77f0c73509867')
+sha256sums_x86_64=('c3d073309ff6ef7d02b4b5cf40ac43e6544f5c4966fbb1673cf55fbdd12fea55')
+sha256sums_aarch64=('fc25ee62d7de63eb1ce5793cfe3b2aca24f84c979069fd1a4dcf6fabcce72750')
 
 prepare() {
 	mkdir -p brave