Review Results

Comment

The only change in this .SRCINFO hunk is a pkgver bump for the VCS package alacritty-git, from 0.18.0.2481.g2f03c302 to 0.18.0.2494.g29dc5537. This is a routine version update with no evidence of added sources, build-script changes, install hooks, permissions changes, or other security-relevant modifications in the provided diff. Based on this hunk alone, I see no supply-chain or privilege-escalation concern.

@@ -1,6 +1,6 @@
 pkgbase = alacritty-git
 	pkgdesc = A cross-platform, GPU-accelerated terminal emulator
-	pkgver = 0.18.0.2481.g2f03c302
+	pkgver = 0.18.0.2494.g29dc5537
 	pkgrel = 1
 	epoch = 1
 	url = https://github.com/alacritty/alacritty

Comment

The change only bumps pkgver in PKGBUILD from one git snapshot to a newer git snapshot. No build logic, sources, install scripts, permissions, or dependencies changed in the reviewed hunk. Based on the provided diff alone, there are no security red flags.

@@ -1,6 +1,6 @@
 pkgname='alacritty-git'
 _pkgname="alacritty"
-pkgver=0.18.0.2481.g2f03c302
+pkgver=0.18.0.2494.g29dc5537
 pkgrel=1
 epoch=1
 arch=('x86_64' 'i686' 'aarch64')

Comment

The change is a one-character shell quoting fix in pkgver(): it changes `cut -d\- -f1` to `cut -d- -f1`, which only affects how the version string is parsed from Cargo.toml. This does not introduce new commands, network access, privilege changes, or packaging behavior. No security impact is apparent from this diff.

@@ -17,7 +17,7 @@ sha256sums=('SKIP')
 
 pkgver() {
 	cd $_pkgname/alacritty
-	echo "$(grep '^version =' Cargo.toml|head -n1|cut -d\" -f2|cut -d\- -f1).$(git rev-list --count HEAD).g$(git rev-parse --short HEAD)"
+	echo "$(grep '^version =' Cargo.toml|head -n1|cut -d\" -f2|cut -d- -f1).$(git rev-list --count HEAD).g$(git rev-parse --short HEAD)"
 }
 
 build(){

Comment

The change is a one-line packaging fix that installs the generated man page into the correct section directory (man7 instead of man5). It does not alter sources, build steps, network access, privileges, or installed executables. No security-relevant behavior is introduced by this diff.

@@ -40,7 +40,7 @@ package_alacritty-git() {
 	scdoc < extra/man/alacritty.5.scd | gzip -c | tee "$pkgdir/usr/share/man/man5/alacritty.5.gz" > /dev/null
 	scdoc < extra/man/alacritty-msg.1.scd | gzip -c | tee "$pkgdir/usr/share/man/man1/alacritty-msg.1.gz" > /dev/null
 	scdoc < extra/man/alacritty-bindings.5.scd | gzip -c | tee "$pkgdir/usr/share/man/man5/alacritty-bindings.5.gz" > /dev/null
-	scdoc < extra/man/alacritty-escapes.7.scd | gzip -c | tee "$pkgdir/usr/share/man/man5/alacritty-escapes.7.gz" > /dev/null
+	scdoc < extra/man/alacritty-escapes.7.scd | gzip -c | tee "$pkgdir/usr/share/man/man7/alacritty-escapes.7.gz" > /dev/null
 
 	install -D -m755 "target/release/alacritty" "$pkgdir/usr/bin/alacritty"
 	install -D -m644 "extra/linux/org.alacritty.Alacritty.appdata.xml" "$pkgdir/usr/share/appdata/org.alacritty.Alacritty.appdata.xml"