Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 2.20.1 to 2.24.0. No sources, checksums, install scripts, permissions, dependencies, or build logic are modified here, so there is no direct security impact visible in this diff. I did not find any red flags in the provided change alone.

@@ -1,6 +1,6 @@
 pkgbase = teams-for-linux
 	pkgdesc = Unofficial Microsoft Teams client for Linux using Electron.
-	pkgver = 2.20.1
+	pkgver = 2.24.0
 	pkgrel = 1
 	url = https://github.com/IsmaelMartinez/teams-for-linux
 	arch = aarch64

Comment

The change is a straightforward upstream version bump in .SRCINFO from v2.20.1 to v2.24.0 with the corresponding checksum update. The source remains an HTTPS GitHub release tarball from the same official upstream project, with no new sources, scripts, build steps, or packaging metadata changes that would introduce execution, persistence, or integrity risks. Based on the provided diff alone, this appears low risk.

@@ -15,9 +15,9 @@ pkgbase = teams-for-linux
 	depends = libxss
 	depends = nss
 	optdepends = libfido2: WebAuthn with FIDO2 devices
-	source = teams-for-linux-2.20.1.tar.gz::https://github.com/IsmaelMartinez/teams-for-linux/archive/v2.20.1.tar.gz
+	source = teams-for-linux-2.24.0.tar.gz::https://github.com/IsmaelMartinez/teams-for-linux/archive/v2.24.0.tar.gz
 	source = teams-for-linux.desktop
-	sha256sums = c285237f3f80666b134e2787c24a53206f97033ef5e5a3f3b099c96392901898
+	sha256sums = a17824b6524e04bbc7c32c4f7703c713aa01848dcaea2545d4c6b15a72538cf6
 	sha256sums = e67c98084736f797c575970935dd773b5c348ea3d9522bc5db733a92361fc05e
 
 pkgname = teams-for-linux

Comment

The change is a routine version bump in PKGBUILD from 2.20.1 to 2.24.0 with the corresponding source tarball checksum update. The source remains the official upstream GitHub archive over HTTPS, there are no new build steps, no added scripts, and no changes to dependencies, install hooks, or packaging behavior. Based on the provided diff, this is low risk.

@@ -3,7 +3,7 @@
 # Contributor: Ivelin Velkov <ivelin dot velkov at gmail dot com>
 
 pkgname=teams-for-linux
-pkgver=2.20.1
+pkgver=2.24.0
 pkgrel=1
 pkgdesc="Unofficial Microsoft Teams client for Linux using Electron."
 arch=("aarch64" "armv7h" "i686" "x86_64")

Comment

The change is a straightforward version bump in PKGBUILD from 2.20.1 to 2.24.0 with the corresponding source tarball checksum updated. The source remains an HTTPS GitHub release/archive URL for the upstream project, and there are no new build steps, scripts, network fetches, privilege changes, or packaging behavior changes in the diff. Based on the provided hunk, this does not introduce an obvious security issue.

@@ -16,7 +16,7 @@ source=(
   "${pkgname}-${pkgver}.tar.gz::https://github.com/IsmaelMartinez/${pkgname}/archive/v${pkgver}.tar.gz"
   "${pkgname}.desktop"
 )
-sha256sums=('c285237f3f80666b134e2787c24a53206f97033ef5e5a3f3b099c96392901898'
+sha256sums=('a17824b6524e04bbc7c32c4f7703c713aa01848dcaea2545d4c6b15a72538cf6'
             'e67c98084736f797c575970935dd773b5c348ea3d9522bc5db733a92361fc05e')
 
 build() {