Review Results

Comment

The only change in this diff is a version bump in .SRCINFO from 159.0b2 to 159.0b3. No sources, checksums, build steps, install scripts, or packaging metadata affecting execution or integrity were modified. On its face this is a routine upstream version update with no security-relevant red flags in the provided hunk.

@@ -1,6 +1,6 @@
 pkgbase = firefox-beta-bin
 	pkgdesc = Standalone web browser from mozilla.org - Beta
-	pkgver = 159.0b2
+	pkgver = 159.0b3
 	pkgrel = 1
 	url = https://www.mozilla.org/en-US/firefox/channel/#beta
 	install = firefox-beta-bin.install

Comment

The change is a routine version bump in .SRCINFO for firefox-beta-bin: it updates the upstream Mozilla tarball URL, the provided virtual package version, and the corresponding checksum. The source remains HTTPS on the official Mozilla archive, and there are no new scripts, build steps, or privilege-related artifacts introduced by this diff. No security concerns are evident from this metadata-only update.

@@ -21,13 +21,13 @@ pkgbase = firefox-beta-bin
 	optdepends = networkmanager: Location detection via available WiFi networks
 	optdepends = pulseaudio: Sound
 	optdepends = upower: Battery API
-	provides = firefox=159.0b2
+	provides = firefox=159.0b3
 	conflicts = firefox-beta
-	source = https://archive.mozilla.org/pub/firefox/releases/159.0b2/linux-x86_64/en-US/firefox-159.0b2.tar.xz
+	source = https://archive.mozilla.org/pub/firefox/releases/159.0b3/linux-x86_64/en-US/firefox-159.0b3.tar.xz
 	source = firefox-beta.sh
 	source = firefox-beta-bin.desktop
 	source = policies.json
-	sha256sums = 332e4260fdc080994039721672c961c09362916464272de471b00bfdac4850c3
+	sha256sums = a8dbab6a800f09129098a3392c3815b82ab3b88c6d93ffbae33ec3bf8510933e
 	sha256sums = 4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b
 	sha256sums = 210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761
 	sha256sums = e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c

Comment

The change is a simple version bump in PKGBUILD from 159.0b2 to 159.0b3 with no other modifications shown. There are no new sources, build steps, install scripts, permissions changes, or packaging logic changes in the provided diff, so I do not see a security impact from this change alone.

@@ -3,7 +3,7 @@
 
 pkgname=firefox-beta-bin
 _pkgname=firefox-beta
-pkgver=159.0b2
+pkgver=159.0b3
 _major=${pkgver/rc*}
 _build=${pkgver/*rc}
 pkgrel=1

Comment

The change is a routine upstream version bump for the Firefox beta binary package: it updates the official Mozilla HTTPS tarball URL from 159.0b2 to 159.0b3 and refreshes the corresponding SHA-256 checksum. No build logic, install script, permissions, or additional sources were altered, and the source remains pinned to an official release archive with integrity verification. I do not see any security-relevant regression in this diff.

@@ -22,11 +22,11 @@ optdepends=('ffmpeg: H264/AAC/MP3 decoding'
 provides=("firefox=$pkgver")
 conflicts=('firefox-beta')
 install=$pkgname.install
-source=("https://archive.mozilla.org/pub/firefox/releases/159.0b2/linux-x86_64/en-US/firefox-159.0b2.tar.xz"
+source=("https://archive.mozilla.org/pub/firefox/releases/159.0b3/linux-x86_64/en-US/firefox-159.0b3.tar.xz"
         "$_pkgname.sh"
         "$pkgname.desktop"
         "policies.json")
-sha256sums=('332e4260fdc080994039721672c961c09362916464272de471b00bfdac4850c3'
+sha256sums=('a8dbab6a800f09129098a3392c3815b82ab3b88c6d93ffbae33ec3bf8510933e'
             '4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b'
             '210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761'
             'e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c')