Review Results

Comment

The change is a simple version bump in .SRCINFO from 3.1.0a5 to 3.1.0a6 with no accompanying changes to sources, build logic, install scripts, or package metadata beyond the version number. There are no new integrity, execution, persistence, or privilege-escalation concerns visible in this diff. Risk is minimal.

@@ -1,6 +1,6 @@
 pkgbase = gns3-gui
 	pkgdesc = GNS3 network simulator. Graphical user interface package.
-	pkgver = 3.1.0a5
+	pkgver = 3.1.0a6
 	pkgrel = 1
 	url = https://github.com/GNS3/gns3-gui
 	arch = any

Comment

The change is a routine upstream version bump in .SRCINFO from v3.1.0a5 to v3.1.0a6 with corresponding checksum updates. The source remains an HTTPS GitHub release tarball, there are no new sources, no build-script changes, and no signs of added execution, persistence, or integrity bypass in this diff. Based on the provided hunk alone, this looks low risk.

@@ -22,11 +22,11 @@ pkgbase = gns3-gui
 	optdepends = python-sentry_sdk: Python SDK for Sentry.io
 	optdepends = xterm: Default terminal emulator for CLI management of virtual instances
 	optdepends = wireshark-qt: Live packet capture
-	source = gns3-gui-3.1.0a5.tar.gz::https://github.com/GNS3/gns3-gui/archive/v3.1.0a5.tar.gz
+	source = gns3-gui-3.1.0a6.tar.gz::https://github.com/GNS3/gns3-gui/archive/v3.1.0a6.tar.gz
 	source = gns3.desktop
 	source = fix_requirements_for_Arch.patch
-	sha256sums = 4baa32d83a15854560ce5533c94cde66b8804f886c5c9062683ea1361b368700
+	sha256sums = 6a38969d9dd555de6d913d32f90da96315c4b734c17a2108919dd622e21ba24d
 	sha256sums = 51e6db5b47e6af3d008d85e8c597755369fafb75ddb2af9e79a441f943f4c166
-	sha256sums = 062eab7da12b2c6743a6833b3b249b0132837db7ac109dbc1a48b8e7c9aee854
+	sha256sums = 8d93b512acceba80e172e18f4b30e34c915ca79b12a23699605683c0212318a4
 
 pkgname = gns3-gui

Comment

This change only bumps pkgver from 3.1.0a5 to 3.1.0a6 in PKGBUILD. No source URLs, checksums, build steps, install scripts, permissions, or package metadata beyond the version string are altered in the provided diff. On its face this is a routine version update with no security-relevant behavior change.

@@ -3,7 +3,7 @@
 # Contributor: korjjj <korjjj+aur[at]gmail[dot]com>
 
 pkgname=gns3-gui
-pkgver=3.1.0a5
+pkgver=3.1.0a6
 pkgrel=1
 pkgdesc='GNS3 network simulator. Graphical user interface package.'
 arch=(any)

Comment

The change is a routine version bump from 3.1.0a5 to 3.1.0a6 with corresponding checksum updates for the upstream tarball and local patch. I reviewed the referenced patch as well: it only relaxes Python dependency version pins (jsonschema, sentry-sdk, QDarkStyle) to match Arch’s newer packages and does not add any new build-time downloads, shell execution, privilege escalation, or persistence mechanisms. No suspicious sources or packaging behavior were introduced in this diff.

@@ -34,9 +34,9 @@ optdepends=(
 source=("$pkgname-$pkgver.tar.gz::$url/archive/v$pkgver.tar.gz"
         gns3.desktop
         fix_requirements_for_Arch.patch)
-sha256sums=('4baa32d83a15854560ce5533c94cde66b8804f886c5c9062683ea1361b368700'
+sha256sums=('6a38969d9dd555de6d913d32f90da96315c4b734c17a2108919dd622e21ba24d'
             '51e6db5b47e6af3d008d85e8c597755369fafb75ddb2af9e79a441f943f4c166'
-            '062eab7da12b2c6743a6833b3b249b0132837db7ac109dbc1a48b8e7c9aee854')
+            '8d93b512acceba80e172e18f4b30e34c915ca79b12a23699605683c0212318a4')
 
 prepare() {
     cd "$pkgname-$pkgver"

Comment

The patch only updates the filename/version header in a requirements-file patch from 3.1.0a5 to 3.1.0a6. The provided hunk shows no executable code, no new dependencies, no network behavior, and no packaging/install-script changes. Based on the reviewed change alone, there is no evident security impact.

@@ -1,5 +1,5 @@
---- a/gns3-gui-3.1.0a5/requirements.txt	2026-08-19 18:06:13.000000000 +0200
-+++ b/gns3-gui-3.1.0a5/requirements.txt	2026-08-21 18:34:55.289914345 +0200
+--- a/gns3-gui-3.1.0a6/requirements.txt	2026-09-27 19:18:25.000000000 +0200
++++ b/gns3-gui-3.1.0a6/requirements.txt	2026-10-03 17:46:05.062073864 +0200
 @@ -1,7 +1,6 @@
 -jsonschema==4.25.1; python_version == '3.9'  # version 4.25.1 is the last to support Python 3.9
 -jsonschema>=4.26.0,<4.27; python_version >= '3.10'