Review Results

Comment

The only change in this .SRCINFO diff is a version bump from 9.50 to 9.51. No source URLs, checksums, build steps, install scripts, or packaging metadata were altered in the reviewed hunk, so there is no new security concern visible here. This appears to be a routine upstream version update.

@@ -1,6 +1,6 @@
 pkgbase = perl-mojolicious
 	pkgdesc = Real-time web framework
-	pkgver = 9.50
+	pkgver = 9.51
 	pkgrel = 1
 	url = https://metacpan.org/release/Mojolicious
 	arch = any

Comment

The change is a straightforward upstream version bump in .SRCINFO from Mojolicious 9.50 to 9.51, with corresponding checksum updates. The source remains the official CPAN/MetaCPAN HTTPS URL, and there are no new build-time commands, scripts, patches, or packaging changes introduced in this diff. Based on the provided hunk alone, there are no security red flags.

@@ -10,8 +10,8 @@ pkgbase = perl-mojolicious
 	optdepends = perl-cpanel-json-xs>=4.09: Faster JSON encoding and decoding
 	optdepends = perl-role-tiny>=2.000001: Role support
 	options = !emptydirs
-	source = https://cpan.metacpan.org/authors/id/S/SR/SRI/Mojolicious-9.50.tar.gz
-	md5sums = 3168863643ba9508531a785e669dc3e3
-	sha512sums = dfc2eb9e8d200a68ab09fdd8d8d18d4234e71eaa82b37a5b22fc849f637db4441d2b21961c8d2770fb5b03921f722bda493a26585446caf6ddf5e070d38bfa35
+	source = https://cpan.metacpan.org/authors/id/S/SR/SRI/Mojolicious-9.51.tar.gz
+	md5sums = 02f52bbd4b3cc6e33e37886558097850
+	sha512sums = 00ce83129faff496b919b757b576ab2b8e8f8af954f95971252ebf979116e49d6c9dafe744209cdb533a716ed7ed74995cfe58ebc30d683fe7174fc7ce002499
 
 pkgname = perl-mojolicious

Comment

The only change in this PKGBUILD diff is a version bump from 9.50 to 9.51. No source URLs, checksums, build steps, install scripts, dependencies, or packaging logic were modified, so there is no new security-relevant behavior introduced by this change. Based on the provided diff alone, this is low risk.

@@ -3,7 +3,7 @@
 # Generator  : CPANPLUS::Dist::Arch 1.32
 
 pkgname='perl-mojolicious'
-pkgver='9.50'
+pkgver='9.51'
 pkgrel='1'
 pkgdesc="Real-time web framework"
 arch=('any')

Comment

The change is a routine upstream version bump from Mojolicious 9.50 to 9.51 with corresponding checksum updates. The source remains an HTTPS CPAN tarball from the official upstream namespace, there are no new build-time network fetches, no added scripts/patches, and no packaging logic changes that would introduce privilege escalation or persistence. No security concerns are evident in this diff.

@@ -14,8 +14,8 @@ makedepends=()
 optdepends=('perl-cpanel-json-xs>=4.09: Faster JSON encoding and decoding' 'perl-role-tiny>=2.000001: Role support')
 url='https://metacpan.org/release/Mojolicious'
 source=("https://cpan.metacpan.org/authors/id/S/SR/SRI/Mojolicious-${pkgver}.tar.gz")
-md5sums=('3168863643ba9508531a785e669dc3e3')
-sha512sums=('dfc2eb9e8d200a68ab09fdd8d8d18d4234e71eaa82b37a5b22fc849f637db4441d2b21961c8d2770fb5b03921f722bda493a26585446caf6ddf5e070d38bfa35')
+md5sums=('02f52bbd4b3cc6e33e37886558097850')
+sha512sums=('00ce83129faff496b919b757b576ab2b8e8f8af954f95971252ebf979116e49d6c9dafe744209cdb533a716ed7ed74995cfe58ebc30d683fe7174fc7ce002499')
 _distdir="Mojolicious-${pkgver}"
 
 build() {