Review Results

Comment

The change only bumps pkgver in .SRCINFO from 4.52.171 to 4.52.178. No source URLs, checksums, build steps, install scripts, or packaging metadata were altered in the reviewed hunk. This is a routine version update with no security-relevant red flags visible in the provided diff.

@@ -1,6 +1,6 @@
 pkgbase = slack-desktop
 	pkgdesc = Slack Desktop (Beta) for Linux
-	pkgver = 4.52.171
+	pkgver = 4.52.178
 	pkgrel = 1
 	url = https://slack.com/downloads
 	arch = x86_64

Comment

The change is a straightforward version bump of the Slack desktop binary package from 4.52.171 to 4.52.178, updating the upstream HTTPS download URL, noextract entry, and the corresponding checksum. I do not see any new sources, build-time network fetches, privilege escalation, install-script changes, or packaging behavior changes in this diff. The package still relies on an upstream prebuilt .deb, but that was already the case and is not newly introduced here.

@@ -12,11 +12,11 @@ pkgbase = slack-desktop
 	depends = xdg-utils
 	optdepends = libappindicator-gtk3: Systray indicator support
 	optdepends = org.freedesktop.secrets: Keyring password store support
-	noextract = slack-desktop-4.52.171-amd64.deb
+	noextract = slack-desktop-4.52.178-amd64.deb
 	options = !debug
-	source = https://downloads.slack-edge.com/desktop-releases/linux/x64/4.52.171/slack-desktop-4.52.171-amd64.deb
+	source = https://downloads.slack-edge.com/desktop-releases/linux/x64/4.52.178/slack-desktop-4.52.178-amd64.deb
 	source = slack-desktop.patch
-	b2sums = a9d2430aa3e2a69c862d6bdb3ac3a3f795a09b29675aeefc456c10270b3f73a8f37669fe3dc3d6f1c2d823804b94e69ca3239001d90a051984690e1555f3d63f
+	b2sums = eb686bf7cd361e595ba6508dcc8938165304fd72c02e37d028b6662ad5117a1a9cfeeed576761da5b64fec1709c8a393ebf5746c2df157392659a41bb43fad16
 	b2sums = 103447636acd7ac2789d7d89008483a2077d862a51a64427a66c51e64dc9eac588de187f13df2778ccb7b24110a36c259b33c0074ff69c9bab3f89283a1efaf1
 
 pkgname = slack-desktop

Comment

The change is a routine version bump in PKGBUILD from 4.52.171 to 4.52.178, with the corresponding source checksum updated. The source remains an HTTPS download from Slack’s official desktop release host, and there are no new build steps, scripts, privilege changes, or additional sources introduced in this diff. Based on the provided hunk, this appears low risk.

@@ -3,7 +3,7 @@
 # Contributor: Kyle Manna <kyle(at)kylemanna(dot)com>
 
 pkgname=slack-desktop
-pkgver=4.52.171
+pkgver=4.52.178
 pkgrel=1
 pkgdesc="Slack Desktop (Beta) for Linux"
 arch=('x86_64')

Comment

The change only updates the b2sum for the upstream Slack .deb download while keeping the source URL pinned to HTTPS on the official Slack download host. There are no new build steps, no network fetches outside source=(), no privilege escalation, and no packaging/script changes. This looks like a routine integrity hash refresh for a new upstream release artifact, with no obvious security red flags in the provided hunk.

@@ -16,7 +16,7 @@ options=('!debug')
 source=("https://downloads.slack-edge.com/desktop-releases/linux/x64/${pkgver}/${pkgname}-${pkgver}-amd64.deb"
         "${pkgname}.patch")
 noextract=("${pkgname}-${pkgver}-amd64.deb")
-b2sums=('a9d2430aa3e2a69c862d6bdb3ac3a3f795a09b29675aeefc456c10270b3f73a8f37669fe3dc3d6f1c2d823804b94e69ca3239001d90a051984690e1555f3d63f'
+b2sums=('eb686bf7cd361e595ba6508dcc8938165304fd72c02e37d028b6662ad5117a1a9cfeeed576761da5b64fec1709c8a393ebf5746c2df157392659a41bb43fad16'
         '103447636acd7ac2789d7d89008483a2077d862a51a64427a66c51e64dc9eac588de187f13df2778ccb7b24110a36c259b33c0074ff69c9bab3f89283a1efaf1')
 
 package() {