Review Results

Comment

The change is a straightforward version bump in .SRCINFO from 6.6 to 6.6.1, with the source URL still using HTTPS and pinned to an upstream release tag on the official GitHub repository. The checksum was updated accordingly. No new build steps, scripts, dependencies, or persistence mechanisms are introduced by this diff, and there are no signs of source integrity or packaging red flags in the reviewed hunk.

@@ -1,12 +1,12 @@
 pkgbase = pi-hole-web
 	pkgdesc = Pi-hole Dashboard for stats and more.
-	pkgver = 6.6
+	pkgver = 6.6.1
 	pkgrel = 1
 	url = https://github.com/pi-hole/web
 	install = pi-hole-web.install
 	arch = any
 	license = EUPL-1.2
-	source = web-6.6.tar.gz::https://github.com/pi-hole/web/archive/refs/tags/v6.6.tar.gz
-	sha256sums = 6792fa672317432161b7ece41862dba6c9a7aa2b6b98e2786f71c346ba3745f6
+	source = web-6.6.1.tar.gz::https://github.com/pi-hole/web/archive/refs/tags/v6.6.1.tar.gz
+	sha256sums = 34d82b58a0b601803769e66c0f3e1d8bd06513449625e38e07afa007399284d9
 
 pkgname = pi-hole-web

Comment

The change only bumps pkgver from 6.6 to 6.6.1 in PKGBUILD. No source URLs, build steps, install scripts, permissions, or packaging behavior changed, and there are no new integrity or execution concerns visible in this diff. This is a routine version update with no security impact evident from the provided hunk.

@@ -3,7 +3,7 @@
 pkgname=pi-hole-web
 _mainpkgname=pi-hole
 _pkgname=web
-pkgver=6.6
+pkgver=6.6.1
 pkgrel=1
 pkgdesc='Pi-hole Dashboard for stats and more.'
 arch=('any')

Comment

The change only bumps the upstream release tarball from 6.6 to 6.6.1 and updates the corresponding SHA-256 checksum. The source remains an HTTPS GitHub release archive from the expected upstream project, with no new build steps, scripts, patches, or privilege-related changes. No security red flags are introduced by this diff alone.

@@ -16,7 +16,7 @@ install=$pkgname.install
 backup=()
 
 source=($_pkgname-$pkgver.tar.gz::https://github.com/$_mainpkgname/$_pkgname/archive/refs/tags/v$pkgver.tar.gz)
-sha256sums=('6792fa672317432161b7ece41862dba6c9a7aa2b6b98e2786f71c346ba3745f6')
+sha256sums=('34d82b58a0b601803769e66c0f3e1d8bd06513449625e38e07afa007399284d9')
 
 package() {
   cd "$srcdir"