Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 159.0rc1 to 160.0b1. This is a routine metadata update with no evidence of altered sources, build logic, install scripts, or packaging behavior. No security-relevant red flags are introduced by the diff itself.

@@ -1,6 +1,6 @@
 pkgbase = firefox-beta-bin
 	pkgdesc = Standalone web browser from mozilla.org - Beta
-	pkgver = 159.0rc1
+	pkgver = 160.0b1
 	pkgrel = 1
 	url = https://www.mozilla.org/en-US/firefox/channel/#beta
 	install = firefox-beta-bin.install

Comment

The change is a routine version/source bump in .SRCINFO for the Firefox beta binary package. The new source remains on Mozilla-controlled HTTPS infrastructure, the checksum was updated accordingly, and there are no signs of added build-time execution, extra sources, or packaging/persistence changes in this diff. No security concern is evident from the metadata update alone.

@@ -21,13 +21,13 @@ pkgbase = firefox-beta-bin
 	optdepends = networkmanager: Location detection via available WiFi networks
 	optdepends = pulseaudio: Sound
 	optdepends = upower: Battery API
-	provides = firefox=159.0rc1
+	provides = firefox=160.0b1
 	conflicts = firefox-beta
-	source = firefox-159.0rc1.tar.xz::https://ftp.mozilla.org/pub/firefox/candidates/159.0-candidates/build1/linux-x86_64/en-US/firefox-159.0.tar.xz
+	source = https://archive.mozilla.org/pub/firefox/releases/160.0b1/linux-x86_64/en-US/firefox-160.0b1.tar.xz
 	source = firefox-beta.sh
 	source = firefox-beta-bin.desktop
 	source = policies.json
-	sha256sums = 54536fcd120af484d4c56272a5a1cf4af57b9c713d1a3b1e775da192dd541fcd
+	sha256sums = 5145ddf71aab2d72840a92880662d3571d29e42b86780883c4783c446324a018
 	sha256sums = 4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b
 	sha256sums = 210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761
 	sha256sums = e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c

Comment

The change only bumps pkgver from 159.0rc1 to 160.0b1 in PKGBUILD. No source URLs, build commands, install scripts, permissions, or packaging logic are altered, and there are no new integrity or execution concerns visible in this diff. This appears to be a routine version update with no security impact in the reviewed hunk.

@@ -3,7 +3,7 @@
 
 pkgname=firefox-beta-bin
 _pkgname=firefox-beta
-pkgver=159.0rc1
+pkgver=160.0b1
 _major=${pkgver/rc*}
 _build=${pkgver/*rc}
 pkgrel=1

Comment

The change is a routine upstream version bump for the Firefox beta binary package: it updates the official Mozilla HTTPS tarball URL from 159.0b5 to 160.0b1 and refreshes the corresponding SHA-256 checksum. No new sources, scripts, patches, install logic, or packaging behavior are introduced by this diff. The package still pulls from the official Mozilla archive over HTTPS and remains pinned to a specific release artifact, so there are no obvious supply-chain or persistence concerns in this change alone.

@@ -22,11 +22,11 @@ optdepends=('ffmpeg: H264/AAC/MP3 decoding'
 provides=("firefox=$pkgver")
 conflicts=('firefox-beta')
 install=$pkgname.install
-source=("https://archive.mozilla.org/pub/firefox/releases/159.0b5/linux-x86_64/en-US/firefox-159.0b5.tar.xz"
+source=("https://archive.mozilla.org/pub/firefox/releases/160.0b1/linux-x86_64/en-US/firefox-160.0b1.tar.xz"
         "$_pkgname.sh"
         "$pkgname.desktop"
         "policies.json")
-sha256sums=('54536fcd120af484d4c56272a5a1cf4af57b9c713d1a3b1e775da192dd541fcd'
+sha256sums=('5145ddf71aab2d72840a92880662d3571d29e42b86780883c4783c446324a018'
             '4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b'
             '210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761'
             'e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c')