Review Results

Comment

The change only bumps pkgver in .SRCINFO from 4.52.162 to 4.52.171. No source URLs, build logic, install scripts, permissions, or packaging metadata beyond the version string are altered in the provided diff. On its face this is a routine version update with no security-relevant red flags in the reviewed hunk.

@@ -1,6 +1,6 @@
 pkgbase = slack-desktop
 	pkgdesc = Slack Desktop (Beta) for Linux
-	pkgver = 4.52.162
+	pkgver = 4.52.171
 	pkgrel = 1
 	url = https://slack.com/downloads
 	arch = x86_64

Comment

The change only updates the Slack Electron package version in .SRCINFO: the upstream HTTPS download URL, noextract filename, and the corresponding BLAKE2 checksum for the .deb. This is a routine version bump with no new sources, no build-script changes, and no added post-install or privilege-related behavior. The remaining patch checksum is unchanged, and there are no signs of supply-chain red flags in this diff hunk alone.

@@ -12,11 +12,11 @@ pkgbase = slack-desktop
 	depends = xdg-utils
 	optdepends = libappindicator-gtk3: Systray indicator support
 	optdepends = org.freedesktop.secrets: Keyring password store support
-	noextract = slack-desktop-4.52.162-amd64.deb
+	noextract = slack-desktop-4.52.171-amd64.deb
 	options = !debug
-	source = https://downloads.slack-edge.com/desktop-releases/linux/x64/4.52.162/slack-desktop-4.52.162-amd64.deb
+	source = https://downloads.slack-edge.com/desktop-releases/linux/x64/4.52.171/slack-desktop-4.52.171-amd64.deb
 	source = slack-desktop.patch
-	b2sums = 58be09bb5f84f9d3520d630137d7cf3a1a68180cb72486701c9f9e7dadcc23de524f41615c12ac7689066ebe03c84f81cab859cc9b9b0731147343541055872a
+	b2sums = a9d2430aa3e2a69c862d6bdb3ac3a3f795a09b29675aeefc456c10270b3f73a8f37669fe3dc3d6f1c2d823804b94e69ca3239001d90a051984690e1555f3d63f
 	b2sums = 103447636acd7ac2789d7d89008483a2077d862a51a64427a66c51e64dc9eac588de187f13df2778ccb7b24110a36c259b33c0074ff69c9bab3f89283a1efaf1
 
 pkgname = slack-desktop

Comment

The change is a straightforward version bump in PKGBUILD from 4.52.162 to 4.52.171, with the source URL and checksum updated accordingly. The source remains an HTTPS download from Slack’s official desktop release host, and there are no new build steps, scripts, privilege changes, or suspicious packaging directives introduced in this diff. Based on the provided hunk, this appears low risk.

@@ -3,7 +3,7 @@
 # Contributor: Kyle Manna <kyle(at)kylemanna(dot)com>
 
 pkgname=slack-desktop
-pkgver=4.52.162
+pkgver=4.52.171
 pkgrel=1
 pkgdesc="Slack Desktop (Beta) for Linux"
 arch=('x86_64')

Comment

The change only bumps slack-desktop from 4.52.162 to 4.52.171 and updates the corresponding B2 checksum for the official Slack Edge HTTPS .deb source. No new sources, scripts, install hooks, or packaging logic were introduced, and the package still appears to fetch a pinned upstream release artifact rather than a floating branch. Based on the diff provided, there are no obvious security red flags in this change itself.

@@ -16,7 +16,7 @@ options=('!debug')
 source=("https://downloads.slack-edge.com/desktop-releases/linux/x64/${pkgver}/${pkgname}-${pkgver}-amd64.deb"
         "${pkgname}.patch")
 noextract=("${pkgname}-${pkgver}-amd64.deb")
-b2sums=('58be09bb5f84f9d3520d630137d7cf3a1a68180cb72486701c9f9e7dadcc23de524f41615c12ac7689066ebe03c84f81cab859cc9b9b0731147343541055872a'
+b2sums=('a9d2430aa3e2a69c862d6bdb3ac3a3f795a09b29675aeefc456c10270b3f73a8f37669fe3dc3d6f1c2d823804b94e69ca3239001d90a051984690e1555f3d63f'
         '103447636acd7ac2789d7d89008483a2077d862a51a64427a66c51e64dc9eac588de187f13df2778ccb7b24110a36c259b33c0074ff69c9bab3f89283a1efaf1')
 
 package() {