Review Results

Comment

The only change in this .SRCINFO diff is a pkgver bump from 156.0.4314.42 to 156.0.4314.50. This is a routine version update with no evidence of new sources, build logic, install scripts, permissions changes, or other packaging behavior changes. Based on the provided hunk alone, there are no security red flags.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 156.0.4314.42
+	pkgver = 156.0.4314.50
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change only bumps the Microsoft Edge upstream .deb from 156.0.4314.42-1 to 156.0.4314.50-1 and updates the corresponding SHA-256 checksum in .SRCINFO. The source remains the official Microsoft packages repository over HTTPS, with no new sources, scripts, or build/install logic introduced. This is a routine version refresh with no evident security impact in the metadata diff alone.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_156.0.4314.42-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_156.0.4314.50-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = a8642f829e105fe7a4ac440548e6fa7eb726b49fff8ffc6a27f3d0fb25a5b405
+	sha256sums = 0d0bc6303a8b935424e20afa7116c61dd7e7ccbca249c3cf49803ae343eacf8d
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change is a straightforward version bump in PKGBUILD from 156.0.4314.42 to 156.0.4314.50 with no accompanying changes to sources, build logic, install scripts, or packaging behavior. I see no new network fetches, no integrity regressions, no privilege-related changes, and no suspicious metadata alterations in the provided diff hunk. Based on this diff alone, the risk is minimal.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=156.0.4314.42
+pkgver=156.0.4314.50
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change is a routine version bump for a prebuilt Microsoft Edge .deb and an accompanying checksum update. The source remains an HTTPS URL on Microsoft's package repository, there are no new build-time commands, no added scripts, and no changes to install logic or permissions. I don't see any new supply-chain or persistence risk introduced by this diff alone.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('a8642f829e105fe7a4ac440548e6fa7eb726b49fff8ffc6a27f3d0fb25a5b405'
+sha256sums=('0d0bc6303a8b935424e20afa7116c61dd7e7ccbca249c3cf49803ae343eacf8d'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')