Review Results

Comment

The only change in the provided .SRCINFO hunk is a version bump from 17.12.1 to 17.13.0. No sources, checksums, build steps, dependencies, install scripts, or packaging permissions were altered in the reviewed diff, so there is no direct security signal here. Based on this hunk alone, the change appears low risk.

@@ -1,6 +1,6 @@
 pkgbase = ocrmypdf
 	pkgdesc = A tool to add an OCR text layer to scanned PDF files, allowing them to be searched
-	pkgver = 17.12.1
+	pkgver = 17.13.0
 	pkgrel = 1
 	url = https://github.com/ocrmypdf/OCRmyPDF
 	install = ocrmypdf.install

Comment

The change is a routine upstream version bump in .SRCINFO: it updates the package version, the PyPI source tarball URL, the tarball checksum, and raises the python-pikepdf dependency floor from 10.2 to 10.15. The source remains HTTPS on the official PyPI host, there are no added build-time downloads, scripts, patches, or privilege/persistence mechanisms, and nothing in this diff suggests supply-chain tampering. The only security-relevant aspect is the dependency minimum increase, which is expected for compatibility and does not itself introduce risk in this metadata-only change.

@@ -17,7 +17,7 @@ pkgbase = ocrmypdf
 	depends = ghostscript
 	depends = unpaper
 	depends = pngquant
-	depends = python-pikepdf>=10.2
+	depends = python-pikepdf>=10.15
 	depends = python-reportlab
 	depends = python-pdfminer
 	depends = python-tqdm

Comment

The change is a straightforward version bump in .SRCINFO from ocrmypdf 17.12.1 to 17.13.0 with the corresponding PyPI tarball URL and SHA-256 checksum updated. The source remains HTTPS on the official Python package host, there are no new build steps, scripts, patches, or metadata changes that would introduce execution or persistence risks. Based on the provided diff hunk alone, this looks low risk.

@@ -31,7 +31,7 @@ pkgbase = ocrmypdf
 	depends = python-fpdf2
 	optdepends = jbig2enc: Better compression algorithm; results in smaller PDF files
 	optdepends = python-pillow-heif: HEIF/HEIC image support
-	source = https://files.pythonhosted.org/packages/source/o/ocrmypdf/ocrmypdf-17.12.1.tar.gz
-	sha256sums = aca73a23a80cf2f46a4c15040b0035203dbf74054b7a0c3a7ee93b05abc555a6
+	source = https://files.pythonhosted.org/packages/source/o/ocrmypdf/ocrmypdf-17.13.0.tar.gz
+	sha256sums = 151c35d810eb628fbc5cb9bbe80b834ecf094737efa0e7a2e9e1fac3c730ed49
 
 pkgname = ocrmypdf

Comment

The change is a straightforward version bump of a Python package release, with an updated source tarball checksum and a dependency floor increase for python-pikepdf to match upstream requirements. The source remains an HTTPS download from files.pythonhosted.org, there are no new build-time network fetches, no added scripts, and no packaging/install logic changes. I did not find any supply-chain red flags in this diff hunk.

@@ -5,19 +5,19 @@
 # Contributor: Daniel Reuter <daniel.robin.reuter@googlemail.com>
 
 pkgname=ocrmypdf
-pkgver=17.12.1
+pkgver=17.13.0
 pkgrel=1
 pkgdesc="A tool to add an OCR text layer to scanned PDF files, allowing them to be searched"
 url="https://github.com/ocrmypdf/OCRmyPDF"
 arch=('any')
 license=(MPL2)
 # NOTICE: The number of dependencies we rely on is *very high*. If the program does not run after an upgrade, make sure all your deps are upgraded, especially AUR deps!
-depends=('python>=3.9' 'img2pdf' 'python-pillow' 'tesseract' 'ghostscript' 'unpaper' 'pngquant' 'python-pikepdf>=10.2' 'python-reportlab' 'python-pdfminer' 'python-tqdm' 'python-pluggy' 'python-rich' 'python-importlib_resources' 'python-packaging' 'python-deprecation' 'python-pydantic' 'python-uharfbuzz' 'python-fpdf2')
+depends=('python>=3.9' 'img2pdf' 'python-pillow' 'tesseract' 'ghostscript' 'unpaper' 'pngquant' 'python-pikepdf>=10.15' 'python-reportlab' 'python-pdfminer' 'python-tqdm' 'python-pluggy' 'python-rich' 'python-importlib_resources' 'python-packaging' 'python-deprecation' 'python-pydantic' 'python-uharfbuzz' 'python-fpdf2')
 
 makedepends=('python-hatch-vcs' 'python-build' 'python-installer' 'python-wheel')
 optdepends=('jbig2enc: Better compression algorithm; results in smaller PDF files' 'python-pillow-heif: HEIF/HEIC image support')
 source=("https://files.pythonhosted.org/packages/source/${pkgname::1}/$pkgname/$pkgname-$pkgver.tar.gz")
-sha256sums=('aca73a23a80cf2f46a4c15040b0035203dbf74054b7a0c3a7ee93b05abc555a6')
+sha256sums=('151c35d810eb628fbc5cb9bbe80b834ecf094737efa0e7a2e9e1fac3c730ed49')
 install="${pkgname}.install"
 
 build() {