Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 155.0.4283.62 to 156.0.4314.42. No new sources, build steps, install scripts, permissions, or other packaging metadata changed in the reviewed diff. On its face this is a routine upstream version update with no security red flags visible in the provided change.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 155.0.4283.62
+	pkgver = 156.0.4314.42
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change only updates the pinned Microsoft Edge .deb source URL and its corresponding SHA-256 checksum in .SRCINFO for a new upstream release. The source remains HTTPS on the official Microsoft packages domain, and there are no new build-time commands, scripts, or privilege-related changes introduced by this diff. Based on the provided hunk alone, this is a routine version bump with no evident security red flags.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_155.0.4283.62-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_156.0.4314.42-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 3e53834d9d6e505bc57e6bff44d92cfe8cf0bed9064e88efc5b0d8f1c75f70fa
+	sha256sums = a8642f829e105fe7a4ac440548e6fa7eb726b49fff8ffc6a27f3d0fb25a5b405
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change only bumps pkgver in PKGBUILD from 155.0.4283.62 to 156.0.4314.42. No build logic, sources, checksums, install scripts, or packaging behavior changed, so there is no new security concern introduced by this diff alone. The package remains a prebuilt upstream binary package, but that risk is unchanged from prior revisions and not attributable to this commit.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=155.0.4283.62
+pkgver=156.0.4314.42
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change only updates the pinned Microsoft Edge package version and its corresponding SHA-256 checksum in source integrity metadata. The source remains an HTTPS URL on the official Microsoft package repository, and there are no new build-time commands, scripts, or packaging logic changes. No additional attack surface is introduced by this diff alone.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('3e53834d9d6e505bc57e6bff44d92cfe8cf0bed9064e88efc5b0d8f1c75f70fa'
+sha256sums=('a8642f829e105fe7a4ac440548e6fa7eb726b49fff8ffc6a27f3d0fb25a5b405'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')