Review Results

Comment

The change only bumps pkgver in .SRCINFO from 154.0.8037.92 to 154.0.8037.97. No build logic, sources, checksums, install scripts, or permissions are altered, and there are no new red flags such as network fetches, privilege escalation, or persistence mechanisms. This is a routine metadata version update with minimal security impact.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome
 	pkgdesc = The popular web browser by Google (Stable Channel)
-	pkgver = 154.0.8037.92
+	pkgver = 154.0.8037.97
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome.install

Comment

The change only bumps the pinned upstream Google Chrome .deb URLs and their SHA-512 checksums for x86_64 and aarch64 from 154.0.8037.92-1 to 154.0.8037.97-1. The sources remain HTTPS on the official dl.google.com domain, and the update is integrity-pinned via updated checksums. No new build-time code, install-script behavior, or packaging logic is introduced in this .SRCINFO-only diff. Risk is low.

@@ -25,9 +25,9 @@ pkgbase = google-chrome
 	source = google-chrome-stable.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_154.0.8037.92-1_amd64.deb
-	sha512sums_x86_64 = 528f474f27254d188c9bc837b863f559d37ff1037b16053387075c0d0d3314c5506312112fa19c36c9d2c321fb83b8b38f77a6703ab1920a8e1d751c9c900101
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_154.0.8037.92-1_arm64.deb
-	sha512sums_aarch64 = 2f5fc99557158172f001bbef10c031be6be7f25564bb7655289956d05468f89c42972608987de47ccd3e2ec1d4db6ed1f5ac6f734a914150252de46c202d3b6a
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_154.0.8037.97-1_amd64.deb
+	sha512sums_x86_64 = 990f133f1091d0aea48cc0bfbcc8f303fee80d128a93f02f7910c0e0bb46c45ee96971879037cde100bb35899284fff4fe5b172ace9b9d5e6465d45f311d1ae0
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_154.0.8037.97-1_arm64.deb
+	sha512sums_aarch64 = 7955d74192d8364ba22b25cf1de1c7a7b58428a04a04ac095b773f838224b506dc4c74dca340d1a80b54f012a339c01fcba752b5c63a55a4ea6a9886fa36fd8e
 
 pkgname = google-chrome

Comment

The change is a straightforward version bump in PKGBUILD from 154.0.8037.92 to 154.0.8037.97 with no other modifications. There are no new sources, build steps, install scripts, permissions changes, or packaging logic changes in the provided diff hunk, so no additional supply-chain or persistence risk is introduced by this change itself.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-stable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome
-pkgver=154.0.8037.92
+pkgver=154.0.8037.97
 pkgrel=1
 pkgdesc="The popular web browser by Google (Stable Channel)"
 arch=(

Comment

The change only updates the pinned SHA-512 checksums for the architecture-specific Google Chrome .deb sources. Source URLs remain HTTPS and point to the official Google download host, with no new build-time execution, install-script, or packaging behavior changes. The security impact is limited to integrity verification of the downloaded upstream binaries; assuming the new checksums correspond to the intended upstream release, this is routine maintenance rather than a new risk.

@@ -39,8 +39,8 @@ source=('eula_text.html'
         "google-chrome-$_channel.sh")
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             'de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94')
-sha512sums_x86_64=('528f474f27254d188c9bc837b863f559d37ff1037b16053387075c0d0d3314c5506312112fa19c36c9d2c321fb83b8b38f77a6703ab1920a8e1d751c9c900101')
-sha512sums_aarch64=('2f5fc99557158172f001bbef10c031be6be7f25564bb7655289956d05468f89c42972608987de47ccd3e2ec1d4db6ed1f5ac6f734a914150252de46c202d3b6a')
+sha512sums_x86_64=('990f133f1091d0aea48cc0bfbcc8f303fee80d128a93f02f7910c0e0bb46c45ee96971879037cde100bb35899284fff4fe5b172ace9b9d5e6465d45f311d1ae0')
+sha512sums_aarch64=('7955d74192d8364ba22b25cf1de1c7a7b58428a04a04ac095b773f838224b506dc4c74dca340d1a80b54f012a339c01fcba752b5c63a55a4ea6a9886fa36fd8e')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")