Review Results

Comment

The only change in this .SRCINFO diff is a routine upstream version bump from 155.0.4283.60 to 155.0.4283.62. No sources, checksums, install scripts, build logic, or permissions changed, and there are no new red flags such as network fetches, persistence mechanisms, or privilege escalation. Based on the provided hunk alone, this is low risk.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 155.0.4283.60
+	pkgver = 155.0.4283.62
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change is a routine version bump of the Microsoft Edge binary package source from 155.0.4283.60-1 to 155.0.4283.62-1, with the corresponding SHA-256 updated. The source remains the official Microsoft package repository over HTTPS, and no new sources, scripts, or packaging behavior are introduced in this .SRCINFO-only change. No integrity or execution red flags are present in the diff provided.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_155.0.4283.60-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_155.0.4283.62-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 0ac9eeec6e670063ffc886654f27cd31b1f07ab7e7b71a3f8a94d28095a65a6c
+	sha256sums = 3e53834d9d6e505bc57e6bff44d92cfe8cf0bed9064e88efc5b0d8f1c75f70fa
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change is a routine version bump for a prebuilt Microsoft Edge package, updating the downloaded .deb URL and its SHA256 checksum. I did not find any new sources, build-time network fetches, install-script changes, or other suspicious packaging behavior in this diff. The package still pulls from Microsoft’s HTTPS repository and remains pinned to an explicit versioned artifact. No security-relevant regression is evident from this change alone.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=155.0.4283.60
+pkgver=155.0.4283.62
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change only updates the pinned upstream Microsoft Edge package version from 155.0.4283.60 to 155.0.4283.62 and refreshes the corresponding SHA256 checksum for the .deb source. No new sources, scripts, build steps, permissions, or install-time behavior are introduced. This is a routine integrity update with no evident security red flags in the diff provided.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('0ac9eeec6e670063ffc886654f27cd31b1f07ab7e7b71a3f8a94d28095a65a6c'
+sha256sums=('3e53834d9d6e505bc57e6bff44d92cfe8cf0bed9064e88efc5b0d8f1c75f70fa'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')