Review Results

Comment

The change only bumps the package version in .SRCINFO from 1.97.57 to 1.97.59. No sources, checksums, build steps, install scripts, permissions, or package metadata beyond the version number are altered in the provided diff. This is a routine upstream version update with no security-relevant red flags visible in the reviewed hunk.

@@ -1,6 +1,6 @@
 pkgbase = brave-bin
 	pkgdesc = Web browser that blocks ads and trackers by default (binary release)
-	pkgver = 1.97.57
+	pkgver = 1.97.59
 	pkgrel = 1
 	epoch = 1
 	url = https://brave.com

Comment

The change is a straightforward version bump in .SRCINFO for the Brave binary package: updated provides/noextract/source URLs and checksums from 1.97.57 to 1.97.59. The sources remain official HTTPS GitHub release assets from the upstream Brave repository, with no new scripts, patches, install hooks, or build logic introduced in this diff. No integrity or privilege-escalation concerns are evident from the provided hunk alone.

@@ -17,19 +17,19 @@ pkgbase = brave-bin
 	optdepends = cups: Printer support
 	optdepends = libgnome-keyring: Enable GNOME keyring support
 	optdepends = libnotify: Native notification support
-	provides = brave=1.97.57
+	provides = brave=1.97.59
 	provides = brave-browser
 	conflicts = brave
-	noextract = brave-bin-1.97.57-x86_64.zip
-	noextract = brave-bin-1.97.57-aarch64.zip
+	noextract = brave-bin-1.97.59-x86_64.zip
+	noextract = brave-bin-1.97.59-aarch64.zip
 	options = !strip
 	source = brave-bin.sh
 	source = brave-browser.desktop
 	sha256sums = 75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00
 	sha256sums = c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a
-	source_x86_64 = brave-bin-1.97.57-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.97.57/brave-browser-1.97.57-linux-amd64.zip
-	sha256sums_x86_64 = 8a08822ca82528b30c6f553988ec7214e6999ef362f6eff148d386f0053f903c
-	source_aarch64 = brave-bin-1.97.57-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.97.57/brave-browser-1.97.57-linux-arm64.zip
-	sha256sums_aarch64 = 96d040fa02ac6c9872b3864c08849779c72be4d4859e76ebfe6aedfc186922c8
+	source_x86_64 = brave-bin-1.97.59-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.97.59/brave-browser-1.97.59-linux-amd64.zip
+	sha256sums_x86_64 = 32979198ff09c4c656b0b060d929a44cdd6af167b2a141a77c2b7f36fd59e661
+	source_aarch64 = brave-bin-1.97.59-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.97.59/brave-browser-1.97.59-linux-arm64.zip
+	sha256sums_aarch64 = c772ebb7ed5f091e115cebbc21e866ec84e2d7d0c5d24dc455c5cdba95dc7fd6
 
 pkgname = brave-bin

Comment

The change is a simple version bump in PKGBUILD from 1.97.57 to 1.97.59 with no other modifications. No new sources, build steps, install scripts, permissions, or packaging logic were introduced in the reviewed diff, so there is no evidence of added security risk in this change itself.

@@ -10,7 +10,7 @@
 # Contributor: Giusy Digital <kurmikon at libero dot it>
 
 pkgname=brave-bin
-pkgver=1.97.57
+pkgver=1.97.59
 pkgrel=1
 epoch=1
 pkgdesc='Web browser that blocks ads and trackers by default (binary release)'

Comment

The change is a routine version bump for a binary package, updating the pinned checksums for the new Brave release artifacts on GitHub. The source URLs remain HTTPS and point to the official upstream repository, there are no new build-time network fetches, scripts, or packaging changes, and the diff does not introduce any persistence, privilege escalation, or integrity regressions beyond trusting the new upstream binaries as intended for a -bin package. No suspicious metadata or install logic is added in this hunk.

@@ -35,8 +35,8 @@ source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://github.com/brave/brave
 noextract=(${pkgname}-${pkgver}-x86_64.zip ${pkgname}-${pkgver}-aarch64.zip)
 sha256sums=('75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00'
             'c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a')
-sha256sums_x86_64=('8a08822ca82528b30c6f553988ec7214e6999ef362f6eff148d386f0053f903c')
-sha256sums_aarch64=('96d040fa02ac6c9872b3864c08849779c72be4d4859e76ebfe6aedfc186922c8')
+sha256sums_x86_64=('32979198ff09c4c656b0b060d929a44cdd6af167b2a141a77c2b7f36fd59e661')
+sha256sums_aarch64=('c772ebb7ed5f091e115cebbc21e866ec84e2d7d0c5d24dc455c5cdba95dc7fd6')
 
 prepare() {
 	mkdir -p brave