Review Results

Comment

The change only bumps the package version in .SRCINFO from 6.4.0-2 to 6.4.1-1. No new sources, scripts, dependencies, install hooks, or packaging logic are introduced in this diff, so there is no direct security impact visible in the reviewed hunk. Risk is low because .SRCINFO is metadata-only and this update appears to be a routine version/release refresh.

@@ -1,7 +1,7 @@
 pkgbase = swift-bin
 	pkgdesc = Binary builds of the Swift programming language
-	pkgver = 6.4.0
-	pkgrel = 2
+	pkgver = 6.4.1
+	pkgrel = 1
 	url = https://www.swift.org/
 	arch = x86_64
 	arch = aarch64

Comment

The change is a straightforward version bump in .SRCINFO from Swift 6.4.0 to 6.4.1 for both x86_64 and aarch64, with corresponding SHA-256 updates. The sources remain on the official HTTPS download.swift.org domain, there are no new sources, scripts, or packaging behaviors introduced, and no evidence of added execution or persistence mechanisms. Based on the provided diff hunk, this appears low risk.

@@ -14,9 +14,9 @@ pkgbase = swift-bin
 	provides = swift-language
 	replaces = swift-language-bin
 	options = !strip
-	source_x86_64 = https://download.swift.org/swift-6.4.0-release/ubi10/swift-6.4.0-RELEASE/swift-6.4.0-RELEASE-ubi10.tar.gz
-	sha256sums_x86_64 = 50863678e3bafd91fcbc94c0bb76610bab37c1ee01e335fc7d8616904e03e19a
-	source_aarch64 = https://download.swift.org/swift-6.4.0-release/ubi10-aarch64/swift-6.4.0-RELEASE/swift-6.4.0-RELEASE-ubi10-aarch64.tar.gz
-	sha256sums_aarch64 = 641931cd5fdd4d17e47b75b959ba21d67d0f5749cb7d14c854971b49e23bfbd2
+	source_x86_64 = https://download.swift.org/swift-6.4.1-release/ubi10/swift-6.4.1-RELEASE/swift-6.4.1-RELEASE-ubi10.tar.gz
+	sha256sums_x86_64 = 180ca7843cd092f2bcce230ab59c3b025159a41e81696e6543f349405f34d321
+	source_aarch64 = https://download.swift.org/swift-6.4.1-release/ubi10-aarch64/swift-6.4.1-RELEASE/swift-6.4.1-RELEASE-ubi10-aarch64.tar.gz
+	sha256sums_aarch64 = 632c82f08b48bebd7e66e5b43bb30f9c6dce51a3c1ac5c60c01aa08c9645cf5d
 
 pkgname = swift-bin

Comment

The change is a routine version bump for a binary package: it updates pkgver from 6.4.0 to 6.4.1 and refreshes the corresponding SHA-256 checksums for the official Swift download URLs on download.swift.org. The source URLs remain HTTPS and point to the upstream project, with no new build steps, scripts, privilege changes, or packaging logic introduced. No security red flags are evident in this diff alone.

@@ -4,8 +4,8 @@
 # Contributor: Frederic Bezies <fredbezies at gmail dot com>, youngunix <>
 
 pkgname=swift-bin
-pkgver=6.4.0
-pkgrel=2
+pkgver=6.4.1
+pkgrel=1
 pkgdesc="Binary builds of the Swift programming language"
 arch=('x86_64' 'aarch64')
 url="https://www.swift.org/"

Comment

The change only updates the SHA-256 checksums for the existing official Swift release tarballs from download.swift.org; the source URLs, package logic, and install behavior are unchanged. I see no added code execution, no new sources, and no packaging/persistence red flags in this diff. Risk is minimal and limited to the integrity metadata being refreshed for a new upstream artifact.

@@ -18,8 +18,8 @@ provides=('swift-language')
 replaces=('swift-language-bin')
 source_x86_64=("https://download.swift.org/swift-$pkgver-release/ubi10/swift-$pkgver-RELEASE/swift-$pkgver-RELEASE-ubi10.tar.gz")
 source_aarch64=("https://download.swift.org/swift-$pkgver-release/ubi10-aarch64/swift-$pkgver-RELEASE/swift-$pkgver-RELEASE-ubi10-aarch64.tar.gz")
-sha256sums_x86_64=('50863678e3bafd91fcbc94c0bb76610bab37c1ee01e335fc7d8616904e03e19a')
-sha256sums_aarch64=('641931cd5fdd4d17e47b75b959ba21d67d0f5749cb7d14c854971b49e23bfbd2')
+sha256sums_x86_64=('180ca7843cd092f2bcce230ab59c3b025159a41e81696e6543f349405f34d321')
+sha256sums_aarch64=('632c82f08b48bebd7e66e5b43bb30f9c6dce51a3c1ac5c60c01aa08c9645cf5d')
 
 package() {
   _swift_root="/usr/lib/swift/usr"