Review Results

Comment

The change only bumps pkgver in .SRCINFO from 109 to 110. No build logic, sources, install scripts, or packaging metadata affecting execution or integrity changed in the reviewed hunk. This is a routine version update with no security-relevant indicators in the provided diff.

@@ -1,6 +1,6 @@
 pkgbase = gnome-shell-extension-dash-to-dock
 	pkgdesc = Move the dash out of the overview transforming it in a dock
-	pkgver = 109
+	pkgver = 110
 	pkgrel = 1
 	epoch = 1
 	url = https://micheleg.github.io/dash-to-dock/

Comment

The change only updates the pinned upstream git commit in .SRCINFO for the source repository, while keeping the official HTTPS GitHub URL and checksum-skipping VCS source pattern unchanged. There are no new build steps, scripts, binaries, or privilege-related artifacts introduced by this diff. From the provided hunk alone, this is a routine version pin update with no obvious security red flags.

@@ -10,7 +10,7 @@ pkgbase = gnome-shell-extension-dash-to-dock
 	makedepends = git
 	makedepends = sassc
 	depends = gnome-shell
-	source = git+https://github.com/micheleg/dash-to-dock.git#commit=36529d37c0eb805b04dfd647e5295860771b23ea
+	source = git+https://github.com/micheleg/dash-to-dock.git#commit=2dfae3474d6984b566ef0c3dab1524a675bbba48
 	sha256sums = SKIP
 
 pkgname = gnome-shell-extension-dash-to-dock

Comment

Low risk change. The PKGBUILD only bumps pkgver from 109 to 110 and updates the pinned upstream git commit hash used in the existing HTTPS source URL. There are no new sources, no build-script changes, no added install hooks, and no evidence of network access or privilege escalation beyond the already-present VCS fetch. The package remains pinned to a specific commit rather than a floating branch, so integrity posture is unchanged aside from tracking a newer upstream revision.

@@ -6,7 +6,7 @@
 
 pkgname=gnome-shell-extension-dash-to-dock
 _pkgname=dash-to-dock
-pkgver=109
+pkgver=110
 pkgrel=1
 epoch=1
 pkgdesc="Move the dash out of the overview transforming it in a dock"

Comment

The change is a routine version bump in PKGBUILD: pkgver increments from 109 to 110 and the pinned git commit is updated to a new upstream commit. The source remains an HTTPS GitHub URL pinned to an explicit commit, with no new build steps, no added scripts, no extra sources, and no packaging/permission changes. Based on the diff provided, there are no security red flags.

@@ -15,7 +15,7 @@ url="https://micheleg.github.io/dash-to-dock/"
 license=('GPL-2.0-or-later')
 depends=('gnome-shell')
 makedepends=('gettext' 'git' 'sassc')
-_commit=36529d37c0eb805b04dfd647e5295860771b23ea
+_commit=2dfae3474d6984b566ef0c3dab1524a675bbba48
 source=("git+https://github.com/micheleg/dash-to-dock.git#commit=$_commit")
 sha256sums=('SKIP')