Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 156.0.4285.0 to 156.0.4301.0. No new sources, checksums, install scripts, dependencies, permissions, or build logic are introduced here. On its face this is a routine package update with no security-relevant red flags in the provided diff.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-dev-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 156.0.4285.0
+	pkgver = 156.0.4301.0
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change only updates the package version metadata, the Microsoft Edge .deb source URL, the provided virtual package version, and the corresponding SHA256 checksum in .SRCINFO. This is a routine upstream version bump with no new build logic, scripts, permissions, or packaging behavior changes visible in the reviewed diff. The source remains an HTTPS URL on Microsoft's package repository, and the checksum update preserves integrity verification. No security concerns are evident from this change alone.

@@ -22,14 +22,14 @@ pkgbase = microsoft-edge-dev-bin
 	optdepends = libunity: for download progress on KDE
 	optdepends = ttf-liberation: fix fonts for some PDFs - CRBug #369991
 	optdepends = xdg-utils
-	provides = microsoft-edge=156.0.4285.0
+	provides = microsoft-edge=156.0.4301.0
 	conflicts = microsoft-edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_156.0.4285.0-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_156.0.4301.0-1_amd64.deb
 	source = microsoft-edge-dev.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = ea911e1286a7165acaafd9dd85b38ec9533c1f8edd8a14b01ec4e1bdee24a2c0
+	sha256sums = 1a0d8213654ace3767705397b6b693db0d5c8bf221cb8500e8fcf9c7dd2c2fd2
 	sha256sums = 285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change only bumps pkgver in PKGBUILD from 156.0.4285.0 to 156.0.4301.0. No build logic, source URLs, checksums, install scripts, or permissions are modified. Based on the provided diff, there are no new security red flags or supply-chain concerns introduced by this version bump alone.

@@ -10,7 +10,7 @@ _channel=dev
 _pkgname=microsoft-edge-dev
 pkgname=microsoft-edge-dev-bin
 _pkgshortname=msedge-dev
-pkgver=156.0.4285.0
+pkgver=156.0.4301.0
 pkgrel=1
 _uprel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"

Comment

The change is a routine version bump for a binary package, updating the Microsoft-hosted .deb URL and its checksum. The source remains HTTPS on the official Microsoft package repository, and there are no new build steps, scripts, or packaging behaviors introduced by this diff. No obvious supply-chain or privilege-escalation concerns are present in the reviewed hunk.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
         "$_pkgname.sh"
         "Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('ea911e1286a7165acaafd9dd85b38ec9533c1f8edd8a14b01ec4e1bdee24a2c0'
+sha256sums=('1a0d8213654ace3767705397b6b693db0d5c8bf221cb8500e8fcf9c7dd2c2fd2'
             '285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')