AUR AI Reviewer

Review Results

Version #2882 of ngrok · commit d4c8529ceeac · status Reviewed

Risk 0/5 · Safe .SRCINFO
Result #5320

Comment

The only change in this .SRCINFO hunk is a version bump from 3.39.11 to 3.39.12. No sources, checksums, build steps, install scripts, or packaging metadata were altered, so there is no new security-relevant behavior to assess from this diff alone.

@@ -1,6 +1,6 @@
 pkgbase = ngrok
 	pkgdesc = A tunneling, reverse proxy for developing and understanding networked, HTTP services
-	pkgver = 3.39.11
+	pkgver = 3.39.12
 	pkgrel = 1
 	url = https://ngrok.com
 	arch = i686
Risk 0/5 · Safe .SRCINFO
Result #5321

Comment

The change is a straightforward version bump in .SRCINFO from ngrok 3.39.11 to 3.39.12, with corresponding updated HTTPS source URLs and SHA-256 checksums for each architecture. There are no new build steps, scripts, or packaging changes, and the sources remain pinned to specific release tarballs from the same upstream distribution host. No obvious supply-chain or persistence red flags are introduced by this diff alone.

@@ -12,13 +12,13 @@ pkgbase = ngrok
 	options = !strip
 	source = TERMS-OF-SERVICE.txt
 	sha256sums = d1fce3c7e78d5f7e5307238ee5f371b7a10911aeb249e3358e945eaa8cf2f1b2
-	source_i686 = https://bin.equinox.io/a/3erXiNs3rKK/ngrok-v3-3.39.11-linux-386.tar.gz
-	sha256sums_i686 = ade0d9fc069b990d0103bb87600d69931d85cb13bb68d94a4dfcb6b8ad54d714
-	source_x86_64 = https://bin.equinox.io/a/5Mrhp7gRDVb/ngrok-v3-3.39.11-linux-amd64.tar.gz
-	sha256sums_x86_64 = cec0b4997fcc5f529dfc74bac89050354d11a915f968720600039738fdf330cf
-	source_armv7h = https://bin.equinox.io/a/8ofUdPNoYoQ/ngrok-v3-3.39.11-linux-arm.tar.gz
-	sha256sums_armv7h = 3ace51ed57d18eb8d35404729121654eaa19ae1a7fd2c371eb991cac11c0eadb
-	source_aarch64 = https://bin.equinox.io/a/dg26hrkwY2F/ngrok-v3-3.39.11-linux-arm64.tar.gz
-	sha256sums_aarch64 = 3b6ba05a9d9585c34157fa0819fa95cdb13839f5b506b9e63204705cf7f79e29
+	source_i686 = https://bin.equinox.io/a/eVGus2j8dTf/ngrok-v3-3.39.12-linux-386.tar.gz
+	sha256sums_i686 = 246619ebc52e7acb2232ac04a120642dc00889af97886a76735c902c30b63252
+	source_x86_64 = https://bin.equinox.io/a/rG6QSVno1F/ngrok-v3-3.39.12-linux-amd64.tar.gz
+	sha256sums_x86_64 = 01f79749bc75273a0c634c59eec4e6235c3ab7266d5bc6a02cbac6c7fe6472b0
+	source_armv7h = https://bin.equinox.io/a/gVcEdAfwaka/ngrok-v3-3.39.12-linux-arm.tar.gz
+	sha256sums_armv7h = 7c8ac825d31da1005d634f9130fd7512a2f4ab2d13b63eee0ed12dc6a16e727d
+	source_aarch64 = https://bin.equinox.io/a/mZKpd326i7W/ngrok-v3-3.39.12-linux-arm64.tar.gz
+	sha256sums_aarch64 = 98adbac487844e00223b23c96f6831dd3f6210b2b046b78e78a7bd34bc0ac734
 
 pkgname = ngrok
Risk 0/5 · Safe PKGBUILD
Result #5322

Comment

The change only bumps pkgver from 3.39.11 to 3.39.12 in PKGBUILD. No source URLs, checksums, build steps, install scripts, permissions, or other packaging logic changed in the provided diff. Based on this hunk alone there are no new security concerns introduced.

@@ -4,7 +4,7 @@
 # Contributor: Peter Sutton (foxxy) <foxxy@foxdogstudios.com>
 
 pkgname=ngrok
-pkgver=3.39.11
+pkgver=3.39.12
 pkgrel=1
 pkgdesc='A tunneling, reverse proxy for developing and understanding networked, HTTP services'
 url='https://ngrok.com'
Risk 0/5 · Safe PKGBUILD
Result #5323

Comment

The change is a straightforward version bump of the ngrok prebuilt binaries from 3.39.11 to 3.39.12, with corresponding checksum updates for each architecture. The sources remain HTTPS on the official bin.equinox.io distribution domain, there are no new build-time downloads, scripts, patches, or packaging changes, and no privilege/persistence mechanisms were introduced. Risk is low and limited to the inherent trust in upstream prebuilt binaries, which was already present before this change.

@@ -12,15 +12,15 @@ license=('LicenseRef-custom')
 arch=('i686' 'x86_64' 'armv7h' 'aarch64')
 optdepends=('bash-completion: Bash completion support')
 source=("TERMS-OF-SERVICE.txt")
-source_x86_64=("https://bin.equinox.io/a/5Mrhp7gRDVb/ngrok-v3-3.39.11-linux-amd64.tar.gz")
-source_i686=("https://bin.equinox.io/a/3erXiNs3rKK/ngrok-v3-3.39.11-linux-386.tar.gz")
-source_armv7h=("https://bin.equinox.io/a/8ofUdPNoYoQ/ngrok-v3-3.39.11-linux-arm.tar.gz")
-source_aarch64=("https://bin.equinox.io/a/dg26hrkwY2F/ngrok-v3-3.39.11-linux-arm64.tar.gz")
+source_x86_64=("https://bin.equinox.io/a/rG6QSVno1F/ngrok-v3-3.39.12-linux-amd64.tar.gz")
+source_i686=("https://bin.equinox.io/a/eVGus2j8dTf/ngrok-v3-3.39.12-linux-386.tar.gz")
+source_armv7h=("https://bin.equinox.io/a/gVcEdAfwaka/ngrok-v3-3.39.12-linux-arm.tar.gz")
+source_aarch64=("https://bin.equinox.io/a/mZKpd326i7W/ngrok-v3-3.39.12-linux-arm64.tar.gz")
 sha256sums=('d1fce3c7e78d5f7e5307238ee5f371b7a10911aeb249e3358e945eaa8cf2f1b2')
-sha256sums_i686=('ade0d9fc069b990d0103bb87600d69931d85cb13bb68d94a4dfcb6b8ad54d714')
-sha256sums_x86_64=('cec0b4997fcc5f529dfc74bac89050354d11a915f968720600039738fdf330cf')
-sha256sums_armv7h=('3ace51ed57d18eb8d35404729121654eaa19ae1a7fd2c371eb991cac11c0eadb')
-sha256sums_aarch64=('3b6ba05a9d9585c34157fa0819fa95cdb13839f5b506b9e63204705cf7f79e29')
+sha256sums_i686=('246619ebc52e7acb2232ac04a120642dc00889af97886a76735c902c30b63252')
+sha256sums_x86_64=('01f79749bc75273a0c634c59eec4e6235c3ab7266d5bc6a02cbac6c7fe6472b0')
+sha256sums_armv7h=('7c8ac825d31da1005d634f9130fd7512a2f4ab2d13b63eee0ed12dc6a16e727d')
+sha256sums_aarch64=('98adbac487844e00223b23c96f6831dd3f6210b2b046b78e78a7bd34bc0ac734')
 
 # In order to make Ngrok's built-in updater happy, we need to avoid modifying the binary
 options=(!strip)