Review Results

Comment

The change only bumps gitkraken from 12.6.0 to 12.6.1 and updates the corresponding upstream release tarball URLs and SHA-256 checksums in .SRCINFO. The sources remain HTTPS on the official GitKraken release API, there are no new build steps, scripts, or privilege-related artifacts introduced, and this is consistent with a routine version update for a -bin package. No security red flags are evident in the diff itself.

@@ -1,7 +1,7 @@
 pkgbase = gitkraken
 	pkgdesc = The intuitive, fast, and beautiful cross-platform Git client.
-	pkgver = 12.6.0
-	pkgrel = 2
+	pkgver = 12.6.1
+	pkgrel = 1
 	url = https://www.gitkraken.com/
 	arch = x86_64
 	arch = aarch64

Comment

The change is a straightforward version bump in .SRCINFO from GitKraken 12.6.0 to 12.6.1, with matching source URLs and updated SHA-256 checksums for the official GitKraken release artifacts. No new sources, scripts, build steps, or packaging logic are introduced, and the URLs remain HTTPS and point to the vendor’s release host. Based on the provided diff alone, there are no obvious security concerns.

@@ -24,9 +24,9 @@ pkgbase = gitkraken
 	sha256sums = 4342596839114228740e5d61cdc49fbe9e98d05d1aabe2694ffe9d48ffd4082e
 	sha256sums = 4b3eaf932b79e8f1d6a6a6efd030e73cb544d3d0fbe6bf7b61b884f4c6042b0a
 	sha256sums = 22d30f568c6410f76f80412cd9665fbeb44a267828444df3203c37baabdf3335
-	source_x86_64 = gitkraken-12.6.0-x86_64.tar.gz::https://api.gitkraken.dev/releases/production/linux/x64/12.6.0/gitkraken-amd64.tar.gz
-	sha256sums_x86_64 = 68c9a9fcf15e8406832ac4cd2ea115454923893b2af88c69beaa9d8cfef84d39
-	source_aarch64 = gitkraken-12.6.0-aarch64.tar.gz::https://api.gitkraken.dev/releases/production/linux/arm64/12.6.0/gitkraken-aarch64.tar.gz
-	sha256sums_aarch64 = 9963a90e1de8eb986707b666da9d9d1d9e7b04fe69ac1416fc425f504a4f6a7c
+	source_x86_64 = gitkraken-12.6.1-x86_64.tar.gz::https://api.gitkraken.dev/releases/production/linux/x64/12.6.1/gitkraken-amd64.tar.gz
+	sha256sums_x86_64 = ee3190166d7277f17b4acce5906941beb90fcd5fc00635e36b6728ae10b4afb3
+	source_aarch64 = gitkraken-12.6.1-aarch64.tar.gz::https://api.gitkraken.dev/releases/production/linux/arm64/12.6.1/gitkraken-aarch64.tar.gz
+	sha256sums_aarch64 = 8f1f53112409474de29fd0a414026712884824e5081dd6a7e008c83bfb0c184b
 
 pkgname = gitkraken

Comment

The change is a straightforward version bump from 12.6.0 to 12.6.1 with updated checksums for the upstream release artifacts. No new sources, scripts, build steps, or packaging logic were introduced, and the pkgrel reset is normal for a new upstream version. Based on the provided diff, there are no security red flags in this change itself.

@@ -11,8 +11,8 @@
 # Contributor: mosi0815 <ralph.twentyone@gmail.com>
 
 pkgname=gitkraken
-pkgrel=2
-pkgver=12.6.0
+pkgrel=1
+pkgver=12.6.1
 pkgdesc="The intuitive, fast, and beautiful cross-platform Git client."
 url="https://www.gitkraken.com/"
 arch=('x86_64' 'aarch64')

Comment

The change is a routine version bump from 12.6.0 to 12.6.1 with updated architecture-specific checksums. No new sources, scripts, install hooks, or build logic were introduced, and the package still uses HTTPS upstream URLs. I don’t see any supply-chain or privilege-escalation concerns in this diff hunk.

@@ -33,8 +33,8 @@ sha256sums=('af2d2e5a44ec6e543c34f94cfb89fe34b6c05d2baf6ca9db5b6d332e4a5686e5'
             '4342596839114228740e5d61cdc49fbe9e98d05d1aabe2694ffe9d48ffd4082e'
             '4b3eaf932b79e8f1d6a6a6efd030e73cb544d3d0fbe6bf7b61b884f4c6042b0a'
             '22d30f568c6410f76f80412cd9665fbeb44a267828444df3203c37baabdf3335')
-sha256sums_x86_64=('68c9a9fcf15e8406832ac4cd2ea115454923893b2af88c69beaa9d8cfef84d39')
-sha256sums_aarch64=('9963a90e1de8eb986707b666da9d9d1d9e7b04fe69ac1416fc425f504a4f6a7c')
+sha256sums_x86_64=('ee3190166d7277f17b4acce5906941beb90fcd5fc00635e36b6728ae10b4afb3')
+sha256sums_aarch64=('8f1f53112409474de29fd0a414026712884824e5081dd6a7e008c83bfb0c184b')
 options=('!strip' '!debug')
 
 package() {