AUR AI Reviewer

Review Results

Version #2905 of discord_arch_electron · commit eb267b064151 · status Reviewed

Risk 0/5 · Safe .SRCINFO
Result #5418

Comment

The only change in this .SRCINFO hunk is a version bump from 1.0.164 to 1.0.166. No sources, build steps, install scripts, permissions, or package metadata affecting trust were modified in the reviewed diff. On its face this is a routine package version update with no security-relevant red flags in the provided change.

@@ -1,6 +1,6 @@
 pkgbase = discord_arch_electron
 	pkgdesc = Discord using system provided electron for increased security and performance
-	pkgver = 1.0.164
+	pkgver = 1.0.166
 	pkgrel = 1
 	epoch = 1
 	url = https://discord.com
Risk 0/5 · Safe .SRCINFO
Result #5419

Comment

This change is a routine upstream version bump in .SRCINFO from Discord 1.0.164 to 1.0.166, with all source URLs remaining on the official Discord domains over HTTPS and the checksums updated accordingly. No new sources, scripts, install logic, or packaging behavior are introduced by this diff, so there is no evident security regression in the reviewed hunk.

@@ -18,43 +18,43 @@ pkgbase = discord_arch_electron
 	provides = discord
 	conflicts = discord
 	options = !strip
-	source = https://dl.discordapp.net/apps/linux/1.0.164/discord-1.0.164.tar.gz
+	source = https://dl.discordapp.net/apps/linux/1.0.166/discord-1.0.166.tar.gz
 	source = LICENSE.html::https://discord.com/terms
 	source = OSS-LICENSES.html::https://discord.com/licenses
 	source = discord-launcher.sh
 	source = krisp-patcher.py
-	source = core-1.0.164.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.164/full.distro
-	source = discord_desktop_core-1.0.164.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.164/discord_desktop_core/1/full.distro
-	source = discord_zstd-1.0.164.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.164/discord_zstd/1/full.distro
-	source = discord_krisp-1.0.164.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.164/discord_krisp/1/full.distro
-	source = discord_rpc-1.0.164.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.164/discord_rpc/1/full.distro
-	source = discord_utils-1.0.164.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.164/discord_utils/1/full.distro
-	source = discord_voice-1.0.164.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.164/discord_voice/1/full.distro
-	source = discord_game_utils-1.0.164.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.164/discord_game_utils/1/full.distro
-	source = discord_erlpack-1.0.164.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.164/discord_erlpack/1/full.distro
-	source = discord_modules-1.0.164.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.164/discord_modules/1/full.distro
-	source = discord_spellcheck-1.0.164.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.164/discord_spellcheck/1/full.distro
-	source = discord_dispatch-1.0.164.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.164/discord_dispatch/1/full.distro
-	source = discord_cloudsync-1.0.164.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.164/discord_cloudsync/1/full.distro
-	source = discord_sysimg-1.0.164.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.164/discord_sysimg/1/full.distro
-	sha512sums = dc119802ba1ab0226ae969599d9049ddadcdd137a85ed8f235bb58ac1d62095982dbd5c5720c267579e7be3414ab83d0adba73e480e11b9c3f7d9e41f218b974
+	source = core-1.0.166.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.166/full.distro
+	source = discord_desktop_core-1.0.166.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.166/discord_desktop_core/1/full.distro
+	source = discord_zstd-1.0.166.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.166/discord_zstd/1/full.distro
+	source = discord_krisp-1.0.166.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.166/discord_krisp/1/full.distro
+	source = discord_rpc-1.0.166.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.166/discord_rpc/1/full.distro
+	source = discord_utils-1.0.166.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.166/discord_utils/1/full.distro
+	source = discord_voice-1.0.166.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.166/discord_voice/1/full.distro
+	source = discord_game_utils-1.0.166.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.166/discord_game_utils/1/full.distro
+	source = discord_erlpack-1.0.166.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.166/discord_erlpack/1/full.distro
+	source = discord_modules-1.0.166.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.166/discord_modules/1/full.distro
+	source = discord_spellcheck-1.0.166.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.166/discord_spellcheck/1/full.distro
+	source = discord_dispatch-1.0.166.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.166/discord_dispatch/1/full.distro
+	source = discord_cloudsync-1.0.166.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.166/discord_cloudsync/1/full.distro
+	source = discord_sysimg-1.0.166.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.166/discord_sysimg/1/full.distro
+	sha512sums = 102a5220c7b9d0b17bfa73a9cb006bc27994ea506c542481ab2c36fc8f7a5475bd031eee43b2fc76d713d3909e194cc873d668e1234ab4bf72cf1df674b95d89
 	sha512sums = SKIP
 	sha512sums = SKIP
 	sha512sums = d5373e2b2e9754bdcdbcda81fc1392ce6605939651839868823f3c3e0bf16f6fba2fb73bc1a0ff230eebd743d1463f2e8b2295503248f14845b3a56e57385bd1
 	sha512sums = 85da93530b2b92faad58cc84d0f7ddaea6b22fbec413e806c1981eb6369a301ec995eee6bfbe6b828e2cd0baf6168e578bbde456f2450a13199994ff9a1e7cd0
-	sha512sums = ff7457a76668ae0037d07575770a32d20f582c315070015d1dba708bda3d34e36a5202dfa1854ab694fea7c67807a2be25e29250a3ac10aedf4e9235f93b6bad
-	sha512sums = 84a40676e14965789ed735e662fedfde8e85379458837f8853e09c4f1670d3d84bdb9aecd1cebec9b245bcbf8ffd94a01fef219c882d86dcf4c15c69393f4cca
-	sha512sums = 1d3bb5b640099b0905a854b12e15aaadade13e1985afd3e9d02599e5ab28c73407bf2950cd72e844708b474202307f488644f2f8789f2e4db74d76f09c30fe87
-	sha512sums = 2c8a1e45ba99ec8703111d5f6dec7deba2e0115b5375e8aaa859e94027ac22fc8648a08faf0a396b9424a1ba7276897017c887d87cbe862322e1c87dc5e040d9
-	sha512sums = 5119c84120bc4d3e5a5249ecb3351d3071e986f2ee145c6a548f6a08432c6625f5344a33283903c37d792b162a94c0e4bc7001d7bd7687eb7baa15398ae0664d
-	sha512sums = ab085e27b78ac94d3d6aefbc2f4a3cadfd90cb77a653e2a6f686cf4884410c55ce76f156dd24aa4a21bb01e9802e3778690355417c2babddf65183428d5d4a6e
-	sha512sums = 4b9443023cf18b0afdc9c388aca07001ab0cfa6da8f3846a80fe89037cf9ba738fd94e0600d5720169fc4eea7136b82cd21e0351f8af9949a4b5941ac0d562be
-	sha512sums = 9ce6fab6728dd33ac055e5cf27229d1433bbd5fcc724d624cbcfb51370163b72da564b03c98f4df636576fb4938848026e72f15568be76eb99b27fe600167b76
-	sha512sums = f20b779e8f50d2c7145c36564e8bebcfa5f6ebb89c96cb81532ebef912e0be5eace0455faa66b51c4d7b49464f3d730ac06d12b2ccbd32154e21ee41a3df9c99
-	sha512sums = 123dbb47abe8e6209428a346c56567ea19fcf463a035c516a6073fa825ef2d86e9607f9dff0f1db3eb5af96e0922681cc0388aa5db398d45b65827a0b29236ae
-	sha512sums = 84192c416123214f15b93aa572bb9a127c1c70d1dc3a1aa5b4dffbcea717ffdaea9c539991ba904c969608d93b0911ec7a03b8261c549ee7bcb2527b59d8c738
-	sha512sums = 773949720a5538eeec965e4694d84f87fa38ec6ee4e8261bb841d45656e15c2c8973e11ddc68746795935c711db58883aef1d4fbb86a149d96825eb89a1c951f
-	sha512sums = 7a1f9a464f01b549e9c292ffd6df40ee975ff77ee8c4fa503ce083837e25a310654913ad197f0fbd47a73c49aaaa3ec98d16a335a5a19178bc7fcaa16a058fd0
-	sha512sums = 5a37877beddbdbf8ed522a10977e560e3dc6812a414fed2f6ce71b60f5500a381c4697e8e5cad35dd0cccf857cf8f2aa32215fb48c5aa2327ed23d6c1b0a95a9
+	sha512sums = 364e8820887d2f8bdbfa275926127c466d078a9d82c65f9fe3dbec9893f6faed417918e32e587042e9923bfe536543d0f31115e978529608b3191a7f26b6aff9
+	sha512sums = d7a735350828e6a2e95ab50719c27d6b126e47dbb5688e5a3cc1b362cfb37dd6abd80ab3a0bc3fa29b72a0be0885200205701f0659c2b9462be3575354ad0036
+	sha512sums = d89df4596171f98261df540a7c2833a46647c2a6a91408e34655e00f9955820f9e5d4ae5b9a624d082fd8ec783f3d6344cdab4399d7abc182549cb7fc3e6aef9
+	sha512sums = f437e258f03e450e0cb59816c739a38573ccc2ebdc8e0cdd52cb125addcd3576ca48dd8abf2e51411aa82d73c55ab61b23c6f047f50f81b2d006fc9910519c48
+	sha512sums = a2626abdd13c595ab06e29f1de5b43fb16bb6dd3023ccd0fab73cdb387c2164fed13907d89effa49059f74707b72aa08574e7c4a69ad109970bfdf1265acbcd2
+	sha512sums = 707a36674a8b3ec8b9d4da2fbe665e51e6838f369affacfd75cf4e0febbbab89d822bf07a7c6e0f76173d59eefd62090660db66641774f0273b4e541bdece852
+	sha512sums = caeb46c9275a1d22c378da33e1f46b11c4e57a4cde6806117c4aea83ed8813435a8f6782bd34858d4dee322d97c90de50593b614b96db4d84c9a213f21585761
+	sha512sums = c4a2c5afd5d5e85fce12e9ba619825f452708edf9cd9f057bce0b0667fce7d78b881da132b7fec73567e5eef456842027658991d431944020a68ba2c3c43aefd
+	sha512sums = 4318d83d26b6ea63a8ffdd3b752217817db090df4f9d72b5c460ed8e23e6070409f2b931cb310847267fa541522e2901062fa645fedf1fadf8ce50f8f6deac07
+	sha512sums = ef6e0ccc8cb7abd5aeb371f88ebe83610405d7fc588bad3818fae07265b25c9e5b17ef403e9fad9da49b8aed24ec257ed6813e1417590efad9c2878556f1ea9f
+	sha512sums = ce4e44ee37e792781fa388821b5f9a599c0f2e50a0c228e4e3a4deb2ccdbf1f79be8b56e8ad4c348377b4c5d83e33de4232ce5ac361597d61abbae61f188f119
+	sha512sums = c58fdd06fc0cec06e01da2b29075903d91c094576811e29f62e71f57104b8ebfdb7ec92b9e999c2ac1b6c332ff48d87fc63d7bf42811cfd230c7ed13474d3942
+	sha512sums = e575bbfaf09ac3581463a2a5882c6ca9751544d467bea87992c9129b062a46d0f1db59845f9a50a6a9b0476666e40d4fceb9dd5714c4de68bd5661e37c79eccd
+	sha512sums = c3c1d58e4b0397c5c2df56923b7c494dd451b264c799ed28c9b9884b10e1798b685171316f2e8c5feb55cef6758187177b12a9282b9653e0bb07ea9a38783ebc
 
 pkgname = discord_arch_electron
Risk 0/5 · Safe PKGBUILD
Result #5420

Comment

The change is a simple version bump in PKGBUILD from 1.0.164 to 1.0.166 with no other modifications shown. There are no new sources, build steps, install scripts, permissions changes, or packaging logic introduced in this diff hunk. Based on the provided change alone, I see no security-relevant risk.

@@ -9,7 +9,7 @@
 _pkgname=discord
 _electron=electron
 pkgname=${_pkgname}_arch_electron
-pkgver=1.0.164
+pkgver=1.0.166
 pkgrel=1
 epoch=1
 pkgdesc="Discord using system provided ${_electron} for increased security and performance"
Risk 0/5 · Safe PKGBUILD
Result #5421

Comment

The change only updates sha512 checksums for the existing Discord release artifacts in PKGBUILD. The source URLs remain HTTPS and point to Discord’s official download hosts, and there are no new build steps, scripts, or packaging behaviors introduced. I don’t see any added network fetches outside source=(), privilege escalation, persistence mechanisms, or other security-relevant logic changes in this diff hunk. This appears to be a routine checksum refresh for a new upstream release.

@@ -48,25 +48,25 @@ source=("https://dl.discordapp.net/apps/linux/${pkgver}/${_pkgname}-${pkgver}.ta
         "discord_dispatch-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_dispatch/1/full.distro"
         "discord_cloudsync-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_cloudsync/1/full.distro"
         "discord_sysimg-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_sysimg/1/full.distro")
-sha512sums=('dc119802ba1ab0226ae969599d9049ddadcdd137a85ed8f235bb58ac1d62095982dbd5c5720c267579e7be3414ab83d0adba73e480e11b9c3f7d9e41f218b974'
+sha512sums=('102a5220c7b9d0b17bfa73a9cb006bc27994ea506c542481ab2c36fc8f7a5475bd031eee43b2fc76d713d3909e194cc873d668e1234ab4bf72cf1df674b95d89'
             '2590151db4404a9ecbae2c45269c74f5ea26479967de5bc0b221a9143f4efeeeda9e335c23cf1f982680ab4fd895dcf3fd5731bd230908b3b2568eee0ec223ec'
             '5cccf397a772fed0db9b19253e496e78af27810227325ce681de985e2e0fbbdb195873d9642574ad3ae7bfcf4699bfdaa16933ca50c13cb98a1ff53c86c6de05'
             'd5373e2b2e9754bdcdbcda81fc1392ce6605939651839868823f3c3e0bf16f6fba2fb73bc1a0ff230eebd743d1463f2e8b2295503248f14845b3a56e57385bd1'
             '85da93530b2b92faad58cc84d0f7ddaea6b22fbec413e806c1981eb6369a301ec995eee6bfbe6b828e2cd0baf6168e578bbde456f2450a13199994ff9a1e7cd0'
-            'ff7457a76668ae0037d07575770a32d20f582c315070015d1dba708bda3d34e36a5202dfa1854ab694fea7c67807a2be25e29250a3ac10aedf4e9235f93b6bad'
-            '84a40676e14965789ed735e662fedfde8e85379458837f8853e09c4f1670d3d84bdb9aecd1cebec9b245bcbf8ffd94a01fef219c882d86dcf4c15c69393f4cca'
-            '1d3bb5b640099b0905a854b12e15aaadade13e1985afd3e9d02599e5ab28c73407bf2950cd72e844708b474202307f488644f2f8789f2e4db74d76f09c30fe87'
-            '2c8a1e45ba99ec8703111d5f6dec7deba2e0115b5375e8aaa859e94027ac22fc8648a08faf0a396b9424a1ba7276897017c887d87cbe862322e1c87dc5e040d9'
-            '5119c84120bc4d3e5a5249ecb3351d3071e986f2ee145c6a548f6a08432c6625f5344a33283903c37d792b162a94c0e4bc7001d7bd7687eb7baa15398ae0664d'
-            'ab085e27b78ac94d3d6aefbc2f4a3cadfd90cb77a653e2a6f686cf4884410c55ce76f156dd24aa4a21bb01e9802e3778690355417c2babddf65183428d5d4a6e'
-            '4b9443023cf18b0afdc9c388aca07001ab0cfa6da8f3846a80fe89037cf9ba738fd94e0600d5720169fc4eea7136b82cd21e0351f8af9949a4b5941ac0d562be'
-            '9ce6fab6728dd33ac055e5cf27229d1433bbd5fcc724d624cbcfb51370163b72da564b03c98f4df636576fb4938848026e72f15568be76eb99b27fe600167b76'
-            'f20b779e8f50d2c7145c36564e8bebcfa5f6ebb89c96cb81532ebef912e0be5eace0455faa66b51c4d7b49464f3d730ac06d12b2ccbd32154e21ee41a3df9c99'
-            '123dbb47abe8e6209428a346c56567ea19fcf463a035c516a6073fa825ef2d86e9607f9dff0f1db3eb5af96e0922681cc0388aa5db398d45b65827a0b29236ae'
-            '84192c416123214f15b93aa572bb9a127c1c70d1dc3a1aa5b4dffbcea717ffdaea9c539991ba904c969608d93b0911ec7a03b8261c549ee7bcb2527b59d8c738'
-            '773949720a5538eeec965e4694d84f87fa38ec6ee4e8261bb841d45656e15c2c8973e11ddc68746795935c711db58883aef1d4fbb86a149d96825eb89a1c951f'
-            '7a1f9a464f01b549e9c292ffd6df40ee975ff77ee8c4fa503ce083837e25a310654913ad197f0fbd47a73c49aaaa3ec98d16a335a5a19178bc7fcaa16a058fd0'
-            '5a37877beddbdbf8ed522a10977e560e3dc6812a414fed2f6ce71b60f5500a381c4697e8e5cad35dd0cccf857cf8f2aa32215fb48c5aa2327ed23d6c1b0a95a9')
+            '364e8820887d2f8bdbfa275926127c466d078a9d82c65f9fe3dbec9893f6faed417918e32e587042e9923bfe536543d0f31115e978529608b3191a7f26b6aff9'
+            'd7a735350828e6a2e95ab50719c27d6b126e47dbb5688e5a3cc1b362cfb37dd6abd80ab3a0bc3fa29b72a0be0885200205701f0659c2b9462be3575354ad0036'
+            'd89df4596171f98261df540a7c2833a46647c2a6a91408e34655e00f9955820f9e5d4ae5b9a624d082fd8ec783f3d6344cdab4399d7abc182549cb7fc3e6aef9'
+            'f437e258f03e450e0cb59816c739a38573ccc2ebdc8e0cdd52cb125addcd3576ca48dd8abf2e51411aa82d73c55ab61b23c6f047f50f81b2d006fc9910519c48'
+            'a2626abdd13c595ab06e29f1de5b43fb16bb6dd3023ccd0fab73cdb387c2164fed13907d89effa49059f74707b72aa08574e7c4a69ad109970bfdf1265acbcd2'
+            '707a36674a8b3ec8b9d4da2fbe665e51e6838f369affacfd75cf4e0febbbab89d822bf07a7c6e0f76173d59eefd62090660db66641774f0273b4e541bdece852'
+            'caeb46c9275a1d22c378da33e1f46b11c4e57a4cde6806117c4aea83ed8813435a8f6782bd34858d4dee322d97c90de50593b614b96db4d84c9a213f21585761'
+            'c4a2c5afd5d5e85fce12e9ba619825f452708edf9cd9f057bce0b0667fce7d78b881da132b7fec73567e5eef456842027658991d431944020a68ba2c3c43aefd'
+            '4318d83d26b6ea63a8ffdd3b752217817db090df4f9d72b5c460ed8e23e6070409f2b931cb310847267fa541522e2901062fa645fedf1fadf8ce50f8f6deac07'
+            'ef6e0ccc8cb7abd5aeb371f88ebe83610405d7fc588bad3818fae07265b25c9e5b17ef403e9fad9da49b8aed24ec257ed6813e1417590efad9c2878556f1ea9f'
+            'ce4e44ee37e792781fa388821b5f9a599c0f2e50a0c228e4e3a4deb2ccdbf1f79be8b56e8ad4c348377b4c5d83e33de4232ce5ac361597d61abbae61f188f119'
+            'c58fdd06fc0cec06e01da2b29075903d91c094576811e29f62e71f57104b8ebfdb7ec92b9e999c2ac1b6c332ff48d87fc63d7bf42811cfd230c7ed13474d3942'
+            'e575bbfaf09ac3581463a2a5882c6ca9751544d467bea87992c9129b062a46d0f1db59845f9a50a6a9b0476666e40d4fceb9dd5714c4de68bd5661e37c79eccd'
+            'c3c1d58e4b0397c5c2df56923b7c494dd451b264c799ed28c9b9884b10e1798b685171316f2e8c5feb55cef6758187177b12a9282b9653e0bb07ea9a38783ebc')
 
 # Skip "LICENSE.html" and "OSS-LICENSES.html" files hashes as they are unstable
 # Since "updpkgsums"/"pkgctl version upgrade" overwrite the checksum array with