Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 158.0b2 to 158.0b4. No sources, checksums, install scripts, dependencies, or packaging logic changed, and there are no new integrity or execution red flags visible in the provided diff. This appears to be a routine upstream beta version update with minimal security risk.

@@ -1,6 +1,6 @@
 pkgbase = firefox-beta-bin
 	pkgdesc = Standalone web browser from mozilla.org - Beta
-	pkgver = 158.0b2
+	pkgver = 158.0b4
 	pkgrel = 1
 	url = https://www.mozilla.org/en-US/firefox/channel/#beta
 	install = firefox-beta-bin.install

Comment

The change is a straightforward version bump in .SRCINFO for firefox-beta-bin: it updates the upstream Mozilla archive URL, the provided virtual package version, and the corresponding source checksum. The source remains on the official HTTPS Mozilla archive, there are no new sources, scripts, or packaging behaviors introduced, and no signs of privilege escalation or persistence mechanisms in this diff. Risk is low.

@@ -21,13 +21,13 @@ pkgbase = firefox-beta-bin
 	optdepends = networkmanager: Location detection via available WiFi networks
 	optdepends = pulseaudio: Sound
 	optdepends = upower: Battery API
-	provides = firefox=158.0b2
+	provides = firefox=158.0b4
 	conflicts = firefox-beta
-	source = https://archive.mozilla.org/pub/firefox/releases/158.0b2/linux-x86_64/en-US/firefox-158.0b2.tar.xz
+	source = https://archive.mozilla.org/pub/firefox/releases/158.0b4/linux-x86_64/en-US/firefox-158.0b4.tar.xz
 	source = firefox-beta.sh
 	source = firefox-beta-bin.desktop
 	source = policies.json
-	sha256sums = f54e03752721e1a9700faa9a7655b9584520476e8632d5527ee56490b991d941
+	sha256sums = e0deab5e83c3576b82821305469bfa2863589f79567ff8b3b27e840face9088e
 	sha256sums = 4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b
 	sha256sums = 210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761
 	sha256sums = e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c

Comment

The change only bumps pkgver from 158.0b2 to 158.0b4 in PKGBUILD. No source URLs, checksums, build steps, install scripts, permissions, or packaging logic are altered. This is a routine version update with no security-relevant behavior visible in the provided diff.

@@ -3,7 +3,7 @@
 
 pkgname=firefox-beta-bin
 _pkgname=firefox-beta
-pkgver=158.0b2
+pkgver=158.0b4
 _major=${pkgver/rc*}
 _build=${pkgver/*rc}
 pkgrel=1

Comment

The change is a straightforward upstream version bump for the Firefox beta binary package, updating the tarball URL from 158.0b2 to 158.0b4 and its corresponding SHA-256 checksum. The source remains the official Mozilla archive over HTTPS, there are no new build-time downloads, scripts, patches, privilege changes, or packaging behavior changes in this hunk. No security red flags are introduced by this diff alone.

@@ -22,11 +22,11 @@ optdepends=('ffmpeg: H264/AAC/MP3 decoding'
 provides=("firefox=$pkgver")
 conflicts=('firefox-beta')
 install=$pkgname.install
-source=("https://archive.mozilla.org/pub/firefox/releases/158.0b2/linux-x86_64/en-US/firefox-158.0b2.tar.xz"
+source=("https://archive.mozilla.org/pub/firefox/releases/158.0b4/linux-x86_64/en-US/firefox-158.0b4.tar.xz"
         "$_pkgname.sh"
         "$pkgname.desktop"
         "policies.json")
-sha256sums=('f54e03752721e1a9700faa9a7655b9584520476e8632d5527ee56490b991d941'
+sha256sums=('e0deab5e83c3576b82821305469bfa2863589f79567ff8b3b27e840face9088e'
             '4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b'
             '210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761'
             'e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c')