Review Results

Comment

The change is limited to a version bump in .SRCINFO from 2.22.3-2 to 2.22.4-1. No source URLs, checksums, build steps, install scripts, or packaging logic were modified in the reviewed hunk, so there is no direct security signal here. This is a routine metadata update with low risk.

@@ -1,7 +1,7 @@
 pkgbase = heroic-games-launcher-bin
 	pkgdesc = An Open Source Launcher for GOG, Epic Games and Amazon Games
-	pkgver = 2.22.3
-	pkgrel = 2
+	pkgver = 2.22.4
+	pkgrel = 1
 	url = https://heroicgameslauncher.com/
 	arch = x86_64
 	license = GPL-3.0-only

Comment

The change is a straightforward version bump in .SRCINFO from Heroic 2.22.3 to 2.22.4, updating the release URL and matching SHA-256 checksum. The source remains an HTTPS GitHub release asset from the upstream project, with no new build-time execution, no added scripts, and no packaging/persistence changes. Based on the provided diff alone, this does not introduce a security concern.

@@ -22,8 +22,8 @@ pkgbase = heroic-games-launcher-bin
 	optdepends = rsync: Move games using rsync instead of mv
 	provides = heroic-games-launcher
 	conflicts = heroic-games-launcher
-	noextract = Heroic-2.22.3-linux-x64.pacman
-	source = https://github.com/Heroic-Games-Launcher/HeroicGamesLauncher/releases/download/v2.22.3/Heroic-2.22.3-linux-x64.pacman
-	sha256sums = ed17ce083a71dd7e49a89218052ab475edd5a654cedf443853f6baacbb0a00e9
+	noextract = Heroic-2.22.4-linux-x64.pacman
+	source = https://github.com/Heroic-Games-Launcher/HeroicGamesLauncher/releases/download/v2.22.4/Heroic-2.22.4-linux-x64.pacman
+	sha256sums = a5a798ee49bb4a20d3d163f46f39382389974cf4f818b49aa715e1b74d2a0eb0
 
 pkgname = heroic-games-launcher-bin

Comment

The change is a straightforward version bump in PKGBUILD from 2.22.3-2 to 2.22.4-1 with an updated source checksum. No new sources, build steps, install scripts, or packaging logic were introduced in the reviewed hunk, and there are no signs of network fetches, privilege escalation, or persistence mechanisms. Risk is low and limited to the usual trust in the upstream release artifact referenced by the existing PKGBUILD.

@@ -1,9 +1,9 @@
 # Maintainer: flaviofearn <heroicgameslauncher@protonmail.com>
 # Maintainer: CommandMC <kate@commandmc.de>
 
-pkgver=2.22.3
-pkgrel=2
-sha256sums=('ed17ce083a71dd7e49a89218052ab475edd5a654cedf443853f6baacbb0a00e9')
+pkgver=2.22.4
+pkgrel=1
+sha256sums=('a5a798ee49bb4a20d3d163f46f39382389974cf4f818b49aa715e1b74d2a0eb0')
 
 pkgname=heroic-games-launcher-bin
 pkgdesc="An Open Source Launcher for GOG, Epic Games and Amazon Games"