Review Results

Comment

The only change in this diff is a version bump in .SRCINFO from 1.96.61 to 1.97.56. No build logic, sources, checksums, install scripts, or packaging metadata beyond the version number changed, so there is no evidence of a security issue in the reviewed hunk. This is a routine upstream release update and, by itself, does not introduce new attack surface or integrity concerns.

@@ -1,6 +1,6 @@
 pkgbase = brave-bin
 	pkgdesc = Web browser that blocks ads and trackers by default (binary release)
-	pkgver = 1.96.61
+	pkgver = 1.97.56
 	pkgrel = 1
 	epoch = 1
 	url = https://brave.com

Comment

The change is a routine version bump in .SRCINFO for the Brave binary package: it updates the provided version, noextract filenames, and upstream GitHub release URLs/checksums for x86_64 and aarch64. The sources remain HTTPS on the official Brave GitHub releases, there are no new build-time commands, no added scripts, and no packaging/persistence changes. I don’t see any security-relevant regression in this metadata-only update.

@@ -17,19 +17,19 @@ pkgbase = brave-bin
 	optdepends = cups: Printer support
 	optdepends = libgnome-keyring: Enable GNOME keyring support
 	optdepends = libnotify: Native notification support
-	provides = brave=1.96.61
+	provides = brave=1.97.56
 	provides = brave-browser
 	conflicts = brave
-	noextract = brave-bin-1.96.61-x86_64.zip
-	noextract = brave-bin-1.96.61-aarch64.zip
+	noextract = brave-bin-1.97.56-x86_64.zip
+	noextract = brave-bin-1.97.56-aarch64.zip
 	options = !strip
 	source = brave-bin.sh
 	source = brave-browser.desktop
 	sha256sums = 75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00
 	sha256sums = c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a
-	source_x86_64 = brave-bin-1.96.61-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.96.61/brave-browser-1.96.61-linux-amd64.zip
-	sha256sums_x86_64 = c68cf179603470e8001a949294fe98b593f0749ca95f42687d855081b1c394a4
-	source_aarch64 = brave-bin-1.96.61-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.96.61/brave-browser-1.96.61-linux-arm64.zip
-	sha256sums_aarch64 = 33a1513379505642e4df0dda36a1dd78f735ee351631cffd4a4ac90b1cec0cd5
+	source_x86_64 = brave-bin-1.97.56-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.97.56/brave-browser-1.97.56-linux-amd64.zip
+	sha256sums_x86_64 = 8acac76eae35942e30cc63e05adc772f632ad87be8a5ffb3d8a6e280380584ec
+	source_aarch64 = brave-bin-1.97.56-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.97.56/brave-browser-1.97.56-linux-arm64.zip
+	sha256sums_aarch64 = f18823bfe8bf626a7412a2cc142ba851f991665ca31af8d750f80dbb8371f984
 
 pkgname = brave-bin

Comment

The change only bumps pkgver from 1.96.61 to 1.97.56 in PKGBUILD. No source URLs, checksums, build steps, install scripts, or packaging logic were modified in the provided diff hunk, so there is no new supply-chain, persistence, or privilege-escalation risk evident from this change alone.

@@ -10,7 +10,7 @@
 # Contributor: Giusy Digital <kurmikon at libero dot it>
 
 pkgname=brave-bin
-pkgver=1.96.61
+pkgver=1.97.56
 pkgrel=1
 epoch=1
 pkgdesc='Web browser that blocks ads and trackers by default (binary release)'

Comment

The change only updates the pinned SHA-256 checksums for the upstream Brave release archives on GitHub; no build logic, install scripts, permissions, or network behavior changed. The sources remain HTTPS GitHub release ZIPs and are still verified via noextract + checksum pinning. I don’t see any new supply-chain red flags in this diff hunk.

@@ -35,8 +35,8 @@ source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://github.com/brave/brave
 noextract=(${pkgname}-${pkgver}-x86_64.zip ${pkgname}-${pkgver}-aarch64.zip)
 sha256sums=('75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00'
             'c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a')
-sha256sums_x86_64=('c68cf179603470e8001a949294fe98b593f0749ca95f42687d855081b1c394a4')
-sha256sums_aarch64=('33a1513379505642e4df0dda36a1dd78f735ee351631cffd4a4ac90b1cec0cd5')
+sha256sums_x86_64=('8acac76eae35942e30cc63e05adc772f632ad87be8a5ffb3d8a6e280380584ec')
+sha256sums_aarch64=('f18823bfe8bf626a7412a2cc142ba851f991665ca31af8d750f80dbb8371f984')
 
 prepare() {
 	mkdir -p brave