Review Results

Comment

The only change in this .SRCINFO diff is a version bump from 1.32.16 to 1.32.17. No build logic, sources, checksums, install scripts, or packaging metadata were altered in the reviewed hunk, so there is no new security-relevant behavior to assess from this change alone.

@@ -1,6 +1,6 @@
 pkgbase = gallery-dl
 	pkgdesc = Command-line program to download image-galleries and collections from several image hosting sites
-	pkgver = 1.32.16
+	pkgver = 1.32.17
 	pkgrel = 1
 	url = https://codeberg.org/mikf/gallery-dl
 	arch = any

Comment

The change is a routine version bump in .SRCINFO from gallery-dl v1.32.16 to v1.32.17 with the corresponding updated source checksum. The source remains an HTTPS upstream Codeberg tag with the existing signed-tag/validpgpkeys setup, and there are no new build steps, scripts, or packaging changes in this diff. No security red flags are introduced by this metadata-only update.

@@ -27,8 +27,8 @@ pkgbase = gallery-dl
 	optdepends = python-psycopg: PostgreSQL support
 	optdepends = python-truststore: Support using system certificates
 	optdepends = python-jinja: Jinja template support
-	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.16?signed
+	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.17?signed
 	validpgpkeys = 3E09F5908333DD83DBDCE7375680CA389D365A88
-	sha512sums = 7041fac19a8e90dea8ed7acdd5e98adbef9c6affb2f877081d2a06de8dc3290366e243f105d370e6ec23bec44b65fc527aa2e47a8ea2ba33c006092de18efd43
+	sha512sums = 5d5b7d6e1a48d5e7446be9a44409fefbb325892fede43ae1ad5d3046113b1ec1696a26770b208e7f853bf974d604600253bc822acaa0b9f20a0f7b9b51d1c0b9
 
 pkgname = gallery-dl

Comment

The change is a simple version bump in PKGBUILD from 1.32.16 to 1.32.17 with no other modifications shown in the provided hunk. There are no new sources, build steps, install scripts, permissions changes, or other security-relevant alterations in this diff. Based on the reviewed change alone, this is low risk.

@@ -2,7 +2,7 @@
 # Contributor: LLL2yu <lll2yu@protonmail.com>
 
 pkgname=gallery-dl
-pkgver=1.32.16
+pkgver=1.32.17
 pkgrel=1
 pkgdesc='Command-line program to download image-galleries and collections from several image hosting sites'
 arch=(any)

Comment

The change only bumps the package version from 1.32.16 to 1.32.17 and updates the corresponding sha512 checksum for the signed upstream git tag source. No new sources, build steps, install scripts, or packaging logic were introduced, and the source remains pinned to a signed tag with a trusted PGP key. I do not see any security-relevant regression in this diff.

@@ -29,7 +29,7 @@ optdepends=(
 )
 source=(git+"${url}".git#tag=v"${pkgver}"?signed)
 validpgpkeys=(3E09F5908333DD83DBDCE7375680CA389D365A88) #Mike Fährmann
-sha512sums=('7041fac19a8e90dea8ed7acdd5e98adbef9c6affb2f877081d2a06de8dc3290366e243f105d370e6ec23bec44b65fc527aa2e47a8ea2ba33c006092de18efd43')
+sha512sums=('5d5b7d6e1a48d5e7446be9a44409fefbb325892fede43ae1ad5d3046113b1ec1696a26770b208e7f853bf974d604600253bc822acaa0b9f20a0f7b9b51d1c0b9')
 
 prepare() {
     # Clean out old wheels etc.