Review Results

Comment

The change only bumps pkgver in .SRCINFO from 6.1.2 to 6.1.3. No source URLs, checksums, build steps, install scripts, or packaging behavior are altered in the reviewed diff. On its face this is a routine version metadata update with no security impact visible in the provided hunk.

@@ -1,6 +1,6 @@
 pkgbase = bitwig-studio
 	pkgdesc = Digital audio workstation for music production, remixing and live performance
-	pkgver = 6.1.2
+	pkgver = 6.1.3
 	pkgrel = 1
 	url = https://www.bitwig.com/
 	arch = x86_64

Comment

The change is a straightforward upstream version bump in .SRCINFO: it updates the Bitwig Studio .deb source URL from 6.1.2 to 6.1.3 and replaces the corresponding SHA-256 checksum. The source remains HTTPS and points to the official Bitwig download host, with no added build-time commands, scripts, patches, or privilege-related changes in this diff. Based on the provided hunk alone, there are no new supply-chain or persistence red flags.

@@ -18,7 +18,7 @@ pkgbase = bitwig-studio
 	conflicts = bitwig-studio-legacy
 	conflicts = bitwig-8-track
 	options = !strip
-	source = bitwig-studio-6.1.2.deb::https://www.bitwig.com/dl/Bitwig%20Studio/6.1.2/installer_linux/
-	sha256sums = 7ff17d0e2eaea28a5a9d6bf9651466464a95a5144a8d1a712eaf3f59d365a207
+	source = bitwig-studio-6.1.3.deb::https://www.bitwig.com/dl/Bitwig%20Studio/6.1.3/installer_linux/
+	sha256sums = 3eab28947d7983ac22bfb86760ae9771a481150fdac44958106be0979a93a099
 
 pkgname = bitwig-studio

Comment

The change is a routine version bump from 6.1.2 to 6.1.3 with a corresponding checksum update for the upstream HTTPS download URL. No new sources, scripts, build steps, privilege changes, or packaging behavior were introduced in this diff. The package still fetches from the official Bitwig domain over HTTPS and remains pinned by an explicit checksum, so there is no added supply-chain risk visible in this change.

@@ -2,8 +2,8 @@
 # Upstream: Bitwig GmbH <support@bitwig.com>
 
 pkgname='bitwig-studio'
-pkgver='6.1.2'
-_pkgver='6.1.2'
+pkgver='6.1.3'
+_pkgver='6.1.3'
 pkgrel='1'
 pkgdesc='Digital audio workstation for music production, remixing and live performance'
 arch=('x86_64')

Comment

The change is a straightforward version bump from Bitwig Studio 6.1.2 to 6.1.3 with the corresponding SHA-256 checksum update for the upstream HTTPS download URL. No new sources, scripts, patches, build-time network fetches, privilege changes, or packaging logic changes were introduced. The only security-relevant aspect is that the package still relies on a vendor-hosted .deb blob, but that was already true before this change and is not worsened by the diff.

@@ -16,7 +16,7 @@ replaces=()
 conflicts=('bitwig-studio-legacy' 'bitwig-8-track')
 options=(!strip)
 source=("bitwig-studio-${_pkgver}.deb::https://www.bitwig.com/dl/Bitwig%20Studio/${_pkgver}/installer_linux/")
-sha256sums=('7ff17d0e2eaea28a5a9d6bf9651466464a95a5144a8d1a712eaf3f59d365a207')
+sha256sums=('3eab28947d7983ac22bfb86760ae9771a481150fdac44958106be0979a93a099')
 
 package() {
   # Unpack package contents