Review Results

Comment

The change is a routine version bump in .SRCINFO for vivaldi-snapshot, updating the upstream RPM URL and its checksum to the new snapshot release. The source remains HTTPS on the official Vivaldi download domain, there are no new build-time commands, no added scripts, and no packaging metadata changes that suggest privilege escalation, persistence, or supply-chain red flags. Based on the provided diff alone, this looks low risk.

@@ -1,8 +1,8 @@
 # Generated by makepkg 7.1.0
-# Tue Sep 29 12:11:59 UTC 2026
+# Thu Oct  8 09:13:07 UTC 2026
 pkgbase = vivaldi-snapshot
 	pkgdesc = An advanced browser made with the power user in mind. Snapshot
-	pkgver = 8.3.4175.3
+	pkgver = 8.3.4185.3
 	pkgrel = 1
 	url = https://vivaldi.com
 	arch = x86_64

Comment

The change is a routine version bump in .SRCINFO for the Vivaldi snapshot RPM source, with the corresponding SHA-512 updated. The source remains an HTTPS URL on the official Vivaldi download domain, and there are no new build steps, scripts, or privilege-related changes in this diff. No obvious supply-chain or persistence red flags are introduced by this metadata-only update.

@@ -36,9 +36,9 @@ pkgbase = vivaldi-snapshot
 	optdepends = upower: Battery Status API support
 	options = !strip
 	options = !zipman
-	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.3.4175.3-1.x86_64.rpm
+	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.3.4185.3-1.x86_64.rpm
 	source = 0001-add-support-for-user-flags.patch
-	sha512sums = e6051dba118f75081ffbcbfc20cfaf8ac54a100bb695fb110f3ba602dab4b1cec6d57c99322cab6269c0822a7f1390c7c4caec6e9ef994df684d892827d29220
+	sha512sums = ecb7a523099a9397f5eca0241d9d5ede3d39852db11030c7649d2b9fa3cb31b3a8e9a16ab3a352cf2ea9fcf3b4fced072a95d3e8233875b74c34dab1b17a29be
 	sha512sums = 6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726
 
 pkgname = vivaldi-snapshot

Comment

The change is a straightforward version bump in PKGBUILD: only _rpmversion/pkgver are updated from 8.3.4175.3 to 8.3.4185.3. No new sources, no build logic changes, no install scripts, and no packaging/persistence/network red flags are introduced by this diff. Based on the provided hunk alone, this is low risk.

@@ -2,8 +2,8 @@
 # Contributor: TZ86
 
 pkgname=vivaldi-snapshot
-_rpmversion=8.3.4175.3-1
-pkgver=8.3.4175.3
+_rpmversion=8.3.4185.3-1
+pkgver=8.3.4185.3
 pkgrel=1
 pkgdesc='An advanced browser made with the power user in mind. Snapshot'
 url="https://vivaldi.com"

Comment

The change is a routine version bump in PKGBUILD: it updates the upstream Vivaldi snapshot RPM version and the corresponding SHA-512 checksum for the new release. The source remains the official HTTPS Vivaldi download URL, and there are no new build steps, scripts, patches, or privilege-related changes introduced by this diff. No security red flags are evident in the provided hunk.

@@ -42,7 +42,7 @@ optdepends=(
 )
 source=("https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-${_rpmversion}.x86_64.rpm"
         '0001-add-support-for-user-flags.patch')
-sha512sums=('e6051dba118f75081ffbcbfc20cfaf8ac54a100bb695fb110f3ba602dab4b1cec6d57c99322cab6269c0822a7f1390c7c4caec6e9ef994df684d892827d29220'
+sha512sums=('ecb7a523099a9397f5eca0241d9d5ede3d39852db11030c7649d2b9fa3cb31b3a8e9a16ab3a352cf2ea9fcf3b4fced072a95d3e8233875b74c34dab1b17a29be'
             '6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726')
 
 package() {