Review Results

Comment

The only change in this .SRCINFO diff is a version bump from 157.0.8103.6 to 157.0.8103.15. No source URLs, checksums, build logic, install scripts, permissions, or other packaging metadata changed in the reviewed hunk. On its face this is a routine upstream version update with no security-relevant red flags in the provided diff.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome-beta
 	pkgdesc = The popular web browser by Google (Beta Channel)
-	pkgver = 157.0.8103.6
+	pkgver = 157.0.8103.15
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome-beta.install

Comment

The change only updates the pinned upstream Google Chrome beta .deb URLs and their SHA-512 checksums from 157.0.8103.6-1 to 157.0.8103.15-1 for x86_64 and aarch64. This is a routine version bump in .SRCINFO with no new sources, no build-script changes, and no added execution or persistence mechanisms. The sources remain HTTPS on the official dl.google.com domain and are checksum-pinned, so there is no obvious integrity or supply-chain concern in this diff alone.

@@ -26,9 +26,9 @@ pkgbase = google-chrome-beta
 	source = google-chrome-beta.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = 17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_157.0.8103.6-1_amd64.deb
-	sha512sums_x86_64 = 6ddb804e2ad4b7c9adaf64e025014d46c0ad07866915849340c860356a8ede2374f051575f8b7916e5657f47306c7f7e84711238fbd5e0bddc5cc70ec3f8987b
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_157.0.8103.6-1_arm64.deb
-	sha512sums_aarch64 = fb875947090416f98b0501dd418694094e61f1cfbf735a5a0f6a47b33069a7c4a740359abb7c4be8638e8f0f6caf8852733e27794f82ba63053e7f24b7cc0a6b
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_157.0.8103.15-1_amd64.deb
+	sha512sums_x86_64 = 907e179a0fd9a609ea4f6e907c798da2735e990af4c24d54c6e7b1e8300b36e1b6a4a0e50921f06be8e1d85893920d66170042b8e7b3239a7f68123815cb887c
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_157.0.8103.15-1_arm64.deb
+	sha512sums_aarch64 = bab26e322b66e30987ce46d5d8ff96b658a3b9afdc130bf9290f7b4b31f2e2434bf841e5f5c257d1e55f4d95eac8f091de974f98c959044def058fe236b73288
 
 pkgname = google-chrome-beta

Comment

The only change in this diff is a pkgver bump from 157.0.8103.6 to 157.0.8103.15 in PKGBUILD. No build logic, sources, checksums, install scripts, permissions, or package metadata beyond the version string were altered. This is a routine upstream version update with no visible security red flags in the reviewed hunk.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-beta" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome-beta
-pkgver=157.0.8103.6
+pkgver=157.0.8103.15
 pkgrel=1
 pkgdesc="The popular web browser by Google (Beta Channel)"
 arch=(

Comment

The change only bumps google-chrome-beta from 157.0.8103.6 to 157.0.8103.15 and updates the corresponding per-architecture SHA-512 checksums for the official dl.google.com .deb artifacts. The source URLs remain HTTPS and point to Google’s official Chrome repository, with no new build-time downloads, scripts, or packaging logic changes. No additional persistence, privilege, or integrity red flags are introduced by this diff.

@@ -42,8 +42,8 @@ source=(
 )
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             '17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03')
-sha512sums_x86_64=('6ddb804e2ad4b7c9adaf64e025014d46c0ad07866915849340c860356a8ede2374f051575f8b7916e5657f47306c7f7e84711238fbd5e0bddc5cc70ec3f8987b')
-sha512sums_aarch64=('fb875947090416f98b0501dd418694094e61f1cfbf735a5a0f6a47b33069a7c4a740359abb7c4be8638e8f0f6caf8852733e27794f82ba63053e7f24b7cc0a6b')
+sha512sums_x86_64=('907e179a0fd9a609ea4f6e907c798da2735e990af4c24d54c6e7b1e8300b36e1b6a4a0e50921f06be8e1d85893920d66170042b8e7b3239a7f68123815cb887c')
+sha512sums_aarch64=('bab26e322b66e30987ce46d5d8ff96b658a3b9afdc130bf9290f7b4b31f2e2434bf841e5f5c257d1e55f4d95eac8f091de974f98c959044def058fe236b73288')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")