Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 1.32.15 to 1.32.16. No sources, checksums, build steps, install scripts, permissions, or dependencies are altered in the reviewed diff, so there is no new security concern visible here. Based on the provided hunk alone, this is low risk.

@@ -1,6 +1,6 @@
 pkgbase = gallery-dl
 	pkgdesc = Command-line program to download image-galleries and collections from several image hosting sites
-	pkgver = 1.32.15
+	pkgver = 1.32.16
 	pkgrel = 1
 	url = https://codeberg.org/mikf/gallery-dl
 	arch = any

Comment

The change is a straightforward upstream version bump in .SRCINFO from v1.32.15 to v1.32.16, with the corresponding source checksum updated. The source remains an HTTPS Codeberg git tag with signed tag verification and the same PGP key pinning, and there are no new build steps, scripts, binaries, or privilege-related changes in this diff. No security red flags are introduced by this metadata-only update.

@@ -27,8 +27,8 @@ pkgbase = gallery-dl
 	optdepends = python-psycopg: PostgreSQL support
 	optdepends = python-truststore: Support using system certificates
 	optdepends = python-jinja: Jinja template support
-	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.15?signed
+	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.16?signed
 	validpgpkeys = 3E09F5908333DD83DBDCE7375680CA389D365A88
-	sha512sums = c4c40bfd561585c5078fb79da6c590212c8d4de066cd5d43f6cb8befa3691ba404955fffc7e22d88948c48054cb9eceded92df1161fb77d9e46dc859f8b85c56
+	sha512sums = 7041fac19a8e90dea8ed7acdd5e98adbef9c6affb2f877081d2a06de8dc3290366e243f105d370e6ec23bec44b65fc527aa2e47a8ea2ba33c006092de18efd43
 
 pkgname = gallery-dl

Comment

The change is a simple version bump in PKGBUILD from 1.32.15 to 1.32.16 with no other modifications. Based on the provided diff, there are no new sources, build steps, install scripts, permissions changes, or other security-relevant alterations to review. This appears low risk.

@@ -2,7 +2,7 @@
 # Contributor: LLL2yu <lll2yu@protonmail.com>
 
 pkgname=gallery-dl
-pkgver=1.32.15
+pkgver=1.32.16
 pkgrel=1
 pkgdesc='Command-line program to download image-galleries and collections from several image hosting sites'
 arch=(any)

Comment

The change is a straightforward version bump in PKGBUILD from 1.32.15 to 1.32.16 with the corresponding source checksum update. The source remains a pinned, signed git tag over HTTPS, and there are no new build steps, network fetches, privilege changes, or packaging-script changes introduced by this diff. Based on the provided hunk, there are no security red flags.

@@ -29,7 +29,7 @@ optdepends=(
 )
 source=(git+"${url}".git#tag=v"${pkgver}"?signed)
 validpgpkeys=(3E09F5908333DD83DBDCE7375680CA389D365A88) #Mike Fährmann
-sha512sums=('c4c40bfd561585c5078fb79da6c590212c8d4de066cd5d43f6cb8befa3691ba404955fffc7e22d88948c48054cb9eceded92df1161fb77d9e46dc859f8b85c56')
+sha512sums=('7041fac19a8e90dea8ed7acdd5e98adbef9c6affb2f877081d2a06de8dc3290366e243f105d370e6ec23bec44b65fc527aa2e47a8ea2ba33c006092de18efd43')
 
 prepare() {
     # Clean out old wheels etc.