Review Results

Comment

The only change in this .SRCINFO diff is a pkgrel bump from 1 to 2. No sources, checksums, build steps, dependencies, install scripts, or packaging behavior changed. This is a metadata-only revision with no security-relevant impact visible in the provided diff.

@@ -1,7 +1,7 @@
 pkgbase = rider
 	pkgdesc = A cross-platform .NET IDE by JetBrains.
 	pkgver = 2026.2.3.1
-	pkgrel = 1
+	pkgrel = 2
 	epoch = 1
 	url = https://www.jetbrains.com/rider/
 	arch = x86_64

Comment

The change only switches the JetBrains Rider binary download host from `download-cf.jetbrains.com` to `download.jetbrains.com` for x86_64 and aarch64 sources. Both are HTTPS, the filenames and checksums are unchanged, and there is no new build-time execution or packaging behavior. This is a low-risk mirror/host update with no obvious security impact in the diff reviewed.

@@ -15,9 +15,9 @@ pkgbase = rider
 	options = staticlibs
 	source = jetbrains-rider.desktop
 	sha256sums = 4d5438fd52380ccd09deef98cb82707f296ebb27a3faed2fceb1b68eba335ec8
-	source_x86_64 = https://download-cf.jetbrains.com/rider/JetBrains.Rider-2026.2.3.1.tar.gz
+	source_x86_64 = https://download.jetbrains.com/rider/JetBrains.Rider-2026.2.3.1.tar.gz
 	sha256sums_x86_64 = fa4b09a5f7cf4b6635b093adc7313991778a8dc74f25614a2b8976b04dee5d4e
-	source_aarch64 = https://download-cf.jetbrains.com/rider/JetBrains.Rider-2026.2.3.1-aarch64.tar.gz
+	source_aarch64 = https://download.jetbrains.com/rider/JetBrains.Rider-2026.2.3.1-aarch64.tar.gz
 	sha256sums_aarch64 = 8239c1e7c0352a9fb79dcbf68fb9550d64b215606a635ed88981291d92995a61
 
 pkgname = rider

Comment

The only change in this hunk is a pkgrel bump from 1 to 2. No source URLs, build steps, install scripts, permissions, or package metadata affecting security were changed. Based on the provided diff, this is a no-op packaging revision with no apparent security impact.

@@ -2,7 +2,7 @@
 
 pkgname=rider
 pkgver='2026.2.3.1'
-pkgrel=1
+pkgrel=2
 epoch=1
 pkgdesc='A cross-platform .NET IDE by JetBrains.'
 arch=('x86_64' 'aarch64')

Comment

The change only switches JetBrains Rider source URLs from the old `download-cf.jetbrains.com` host to `download.jetbrains.com` for x86_64 and aarch64. Both are HTTPS, the sources remain official JetBrains release tarballs, and the pinned SHA-256 checksums are unchanged. No build logic, install scripts, permissions, or additional sources were introduced. This looks like a benign mirror/host update with no security impact.

@@ -17,9 +17,9 @@ _pkgdir="JetBrains Rider-${pkgver}"
 _srcfile="JetBrains.Rider-${pkgver}"
 source=('jetbrains-rider.desktop')
 sha256sums=('4d5438fd52380ccd09deef98cb82707f296ebb27a3faed2fceb1b68eba335ec8')
-source_x86_64=("https://download-cf.jetbrains.com/rider/${_srcfile}.tar.gz")
+source_x86_64=("https://download.jetbrains.com/rider/${_srcfile}.tar.gz")
 sha256sums_x86_64=('fa4b09a5f7cf4b6635b093adc7313991778a8dc74f25614a2b8976b04dee5d4e')
-source_aarch64=("https://download-cf.jetbrains.com/rider/${_srcfile}-aarch64.tar.gz")
+source_aarch64=("https://download.jetbrains.com/rider/${_srcfile}-aarch64.tar.gz")
 sha256sums_aarch64=('8239c1e7c0352a9fb79dcbf68fb9550d64b215606a635ed88981291d92995a61')
 
 package() {