Review Results

Comment

The change is a routine version bump in .SRCINFO for a binary package. The source remains an HTTPS Microsoft package URL, the package name/provides/conflicts are unchanged, and the checksum is updated accordingly. I don’t see any new build-time execution, privilege escalation, persistence mechanism, or integrity regression introduced by this metadata-only update.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-dev-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 156.0.4301.0
+	pkgver = 157.0.4329.0
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change is a routine version bump in .SRCINFO for a binary package: it updates the Microsoft Edge Dev .deb URL, the provided version, and the corresponding checksum. The source remains on the official Microsoft HTTPS repository, there are no new build-time commands, no install-script changes, and no added persistence or privilege-related artifacts. Risk is low and limited to the usual trust in the upstream binary release.

@@ -22,14 +22,14 @@ pkgbase = microsoft-edge-dev-bin
 	optdepends = libunity: for download progress on KDE
 	optdepends = ttf-liberation: fix fonts for some PDFs - CRBug #369991
 	optdepends = xdg-utils
-	provides = microsoft-edge=156.0.4301.0
+	provides = microsoft-edge=157.0.4329.0
 	conflicts = microsoft-edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_156.0.4301.0-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_157.0.4329.0-1_amd64.deb
 	source = microsoft-edge-dev.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 1a0d8213654ace3767705397b6b693db0d5c8bf221cb8500e8fcf9c7dd2c2fd2
+	sha256sums = da9c085c073f011976f870917a4c4dcbac0e79ed67673d75210a8836fd908be6
 	sha256sums = 285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change only bumps pkgver in PKGBUILD from 156.0.4301.0 to 157.0.4329.0. No build logic, source URLs, checksums, install scripts, permissions, or packaging behavior changed in the provided diff. Based on this hunk alone, there is no evidence of a security issue.

@@ -10,7 +10,7 @@ _channel=dev
 _pkgname=microsoft-edge-dev
 pkgname=microsoft-edge-dev-bin
 _pkgshortname=msedge-dev
-pkgver=156.0.4301.0
+pkgver=157.0.4329.0
 pkgrel=1
 _uprel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"

Comment

The change is a routine version bump for a prebuilt Microsoft Edge .deb and a corresponding checksum update. The source remains an HTTPS URL on Microsoft's package repository, there are no new build-time commands, no added scripts, and no packaging logic changes. I don't see any new integrity, persistence, or privilege-escalation concerns introduced by this diff alone.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
         "$_pkgname.sh"
         "Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('1a0d8213654ace3767705397b6b693db0d5c8bf221cb8500e8fcf9c7dd2c2fd2'
+sha256sums=('da9c085c073f011976f870917a4c4dcbac0e79ed67673d75210a8836fd908be6'
             '285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')