Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 155.0.8059.79 to 155.0.8059.84. No sources, checksums, build steps, install scripts, permissions, or metadata affecting trust boundaries changed in the reviewed diff. On its face this is a routine upstream version update with no security red flags in the provided hunk.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome
 	pkgdesc = The popular web browser by Google (Stable Channel)
-	pkgver = 155.0.8059.79
+	pkgver = 155.0.8059.84
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome.install

Comment

The change only updates the pinned upstream Google Chrome .deb URLs and their SHA-512 checksums for x86_64 and aarch64 from 155.0.8059.79-1 to 155.0.8059.84-1. The sources remain HTTPS on the official dl.google.com domain, and the integrity hashes are updated accordingly. No new build-time execution, install-script behavior, or packaging policy changes are introduced in this .SRCINFO diff.

@@ -25,9 +25,9 @@ pkgbase = google-chrome
 	source = google-chrome-stable.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_155.0.8059.79-1_amd64.deb
-	sha512sums_x86_64 = dd2cca7444e08b905c69255f39f78dca698224ea9aad733777a1434c3cd9964dae7df299405a88a5e1b3a85e71b7cb1a4f84ad3881439d89e6f2596ede28f71c
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_155.0.8059.79-1_arm64.deb
-	sha512sums_aarch64 = 2c28bb7245f8c4cc90bae32ac1c125c082afa62e0ac7a475896a090b2ac1f75b6a5fb95e9911fb82a306e97b8404400588a320e55181b0f51326de0f08e435bf
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_155.0.8059.84-1_amd64.deb
+	sha512sums_x86_64 = a6053e73706dc23023ed09ccbddb7119df6910211f354fd3aa49dd7509698a9a09e2e1adaf208eb572de533931102a4ea82824d423ef8ac98f96a798df78e612
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_155.0.8059.84-1_arm64.deb
+	sha512sums_aarch64 = 1de8b3c382d2ddd8e4d1df8aab308adcabcd627fa331a469a50af8715739fd29cd79a908a38a06da0400b5ea260e0903eba2f63f7132f3e55c5f820da8eab17c
 
 pkgname = google-chrome

Comment

The only change in this diff is a pkgver bump from 155.0.8059.79 to 155.0.8059.84 in PKGBUILD. No build logic, sources, checksums, install scripts, permissions, or package metadata beyond the version string changed. This is a routine upstream version update with no security-relevant red flags visible in the provided hunk.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-stable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome
-pkgver=155.0.8059.79
+pkgver=155.0.8059.84
 pkgrel=1
 pkgdesc="The popular web browser by Google (Stable Channel)"
 arch=(

Comment

The change only bumps pkgver and updates the corresponding SHA-512 checksums for the architecture-specific upstream .deb downloads. The source URLs remain HTTPS and point to Google's official Chrome repository, with no new scripts, build steps, or packaging logic introduced. I do not see any added supply-chain, persistence, or privilege-escalation risk in this diff.

@@ -39,8 +39,8 @@ source=('eula_text.html'
         "google-chrome-$_channel.sh")
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             'de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94')
-sha512sums_x86_64=('dd2cca7444e08b905c69255f39f78dca698224ea9aad733777a1434c3cd9964dae7df299405a88a5e1b3a85e71b7cb1a4f84ad3881439d89e6f2596ede28f71c')
-sha512sums_aarch64=('2c28bb7245f8c4cc90bae32ac1c125c082afa62e0ac7a475896a090b2ac1f75b6a5fb95e9911fb82a306e97b8404400588a320e55181b0f51326de0f08e435bf')
+sha512sums_x86_64=('a6053e73706dc23023ed09ccbddb7119df6910211f354fd3aa49dd7509698a9a09e2e1adaf208eb572de533931102a4ea82824d423ef8ac98f96a798df78e612')
+sha512sums_aarch64=('1de8b3c382d2ddd8e4d1df8aab308adcabcd627fa331a469a50af8715739fd29cd79a908a38a06da0400b5ea260e0903eba2f63f7132f3e55c5f820da8eab17c')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")