Review Results

Comment

The change is a simple version bump in .SRCINFO from 1.96.60 to 1.96.61 with no other metadata changes. There are no signs of added sources, build steps, install scripts, permissions changes, or other supply-chain risk in the provided diff hunk. On its face this is low risk and consistent with a routine package update.

@@ -1,6 +1,6 @@
 pkgbase = brave-bin
 	pkgdesc = Web browser that blocks ads and trackers by default (binary release)
-	pkgver = 1.96.60
+	pkgver = 1.96.61
 	pkgrel = 1
 	epoch = 1
 	url = https://brave.com

Comment

The change is a straightforward version bump in .SRCINFO for the prebuilt Brave binary package: updated provides/noextract filenames, release URLs, and checksums from 1.96.60 to 1.96.61. The sources remain official GitHub release assets over HTTPS, and there are no new build-time commands, scripts, or privilege/persistence mechanisms introduced by this metadata-only update. No security concerns are evident from the diff alone.

@@ -17,19 +17,19 @@ pkgbase = brave-bin
 	optdepends = cups: Printer support
 	optdepends = libgnome-keyring: Enable GNOME keyring support
 	optdepends = libnotify: Native notification support
-	provides = brave=1.96.60
+	provides = brave=1.96.61
 	provides = brave-browser
 	conflicts = brave
-	noextract = brave-bin-1.96.60-x86_64.zip
-	noextract = brave-bin-1.96.60-aarch64.zip
+	noextract = brave-bin-1.96.61-x86_64.zip
+	noextract = brave-bin-1.96.61-aarch64.zip
 	options = !strip
 	source = brave-bin.sh
 	source = brave-browser.desktop
 	sha256sums = 75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00
 	sha256sums = c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a
-	source_x86_64 = brave-bin-1.96.60-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.96.60/brave-browser-1.96.60-linux-amd64.zip
-	sha256sums_x86_64 = c3d073309ff6ef7d02b4b5cf40ac43e6544f5c4966fbb1673cf55fbdd12fea55
-	source_aarch64 = brave-bin-1.96.60-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.96.60/brave-browser-1.96.60-linux-arm64.zip
-	sha256sums_aarch64 = fc25ee62d7de63eb1ce5793cfe3b2aca24f84c979069fd1a4dcf6fabcce72750
+	source_x86_64 = brave-bin-1.96.61-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.96.61/brave-browser-1.96.61-linux-amd64.zip
+	sha256sums_x86_64 = c68cf179603470e8001a949294fe98b593f0749ca95f42687d855081b1c394a4
+	source_aarch64 = brave-bin-1.96.61-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.96.61/brave-browser-1.96.61-linux-arm64.zip
+	sha256sums_aarch64 = 33a1513379505642e4df0dda36a1dd78f735ee351631cffd4a4ac90b1cec0cd5
 
 pkgname = brave-bin

Comment

The change is a version bump in PKGBUILD from 1.96.60 to 1.96.61 with no other modifications shown. On its face this is a routine upstream release update and does not introduce new build steps, sources, install scripts, or packaging behavior. No security red flags are visible in the provided diff hunk.

@@ -10,7 +10,7 @@
 # Contributor: Giusy Digital <kurmikon at libero dot it>
 
 pkgname=brave-bin
-pkgver=1.96.60
+pkgver=1.96.61
 pkgrel=1
 epoch=1
 pkgdesc='Web browser that blocks ads and trackers by default (binary release)'

Comment

The change is a routine version bump for a binary package, with only the expected SHA-256 checksum updates for the upstream x86_64 and aarch64 release archives. The source URLs remain on the official Brave GitHub release host over HTTPS, there are no new build-time commands, no install script or service changes, and no signs of added persistence or privilege escalation. Risk is low because the only security-relevant effect is trusting a new upstream binary release, which is normal for a -bin package and is still integrity-checked by updated hashes.

@@ -35,8 +35,8 @@ source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://github.com/brave/brave
 noextract=(${pkgname}-${pkgver}-x86_64.zip ${pkgname}-${pkgver}-aarch64.zip)
 sha256sums=('75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00'
             'c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a')
-sha256sums_x86_64=('c3d073309ff6ef7d02b4b5cf40ac43e6544f5c4966fbb1673cf55fbdd12fea55')
-sha256sums_aarch64=('fc25ee62d7de63eb1ce5793cfe3b2aca24f84c979069fd1a4dcf6fabcce72750')
+sha256sums_x86_64=('c68cf179603470e8001a949294fe98b593f0749ca95f42687d855081b1c394a4')
+sha256sums_aarch64=('33a1513379505642e4df0dda36a1dd78f735ee351631cffd4a4ac90b1cec0cd5')
 
 prepare() {
 	mkdir -p brave