Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 160.0b1 to 160.0b2. No sources, checksums, install scripts, dependencies, or build logic are altered, so there is no new security-relevant behavior introduced by this diff. This appears to be a routine package version update.

@@ -1,6 +1,6 @@
 pkgbase = firefox-beta-bin
 	pkgdesc = Standalone web browser from mozilla.org - Beta
-	pkgver = 160.0b1
+	pkgver = 160.0b2
 	pkgrel = 1
 	url = https://www.mozilla.org/en-US/firefox/channel/#beta
 	install = firefox-beta-bin.install

Comment

The change is a routine version bump in .SRCINFO from Firefox Beta 160.0b1 to 160.0b2, updating the upstream Mozilla archive URL, provided virtual package version, and the corresponding source checksum. No new sources, scripts, install hooks, privilege-related metadata, or other suspicious packaging changes are introduced in this diff. Based on the provided hunk alone, this looks like a normal upstream release update with no evident security issue.

@@ -21,13 +21,13 @@ pkgbase = firefox-beta-bin
 	optdepends = networkmanager: Location detection via available WiFi networks
 	optdepends = pulseaudio: Sound
 	optdepends = upower: Battery API
-	provides = firefox=160.0b1
+	provides = firefox=160.0b2
 	conflicts = firefox-beta
-	source = https://archive.mozilla.org/pub/firefox/releases/160.0b1/linux-x86_64/en-US/firefox-160.0b1.tar.xz
+	source = https://archive.mozilla.org/pub/firefox/releases/160.0b2/linux-x86_64/en-US/firefox-160.0b2.tar.xz
 	source = firefox-beta.sh
 	source = firefox-beta-bin.desktop
 	source = policies.json
-	sha256sums = 5145ddf71aab2d72840a92880662d3571d29e42b86780883c4783c446324a018
+	sha256sums = 8a7cbb54ad1da92e9d15905c21536b695898017f03612f6e1504c4ee57b7bc75
 	sha256sums = 4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b
 	sha256sums = 210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761
 	sha256sums = e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c

Comment

The change is a simple version bump in PKGBUILD from 160.0b1 to 160.0b2 with no other modifications. There are no new sources, build steps, install scripts, permissions changes, or packaging logic introduced by this diff. Based on the provided hunk alone, this is low risk and does not indicate a security issue.

@@ -3,7 +3,7 @@
 
 pkgname=firefox-beta-bin
 _pkgname=firefox-beta
-pkgver=160.0b1
+pkgver=160.0b2
 _major=${pkgver/rc*}
 _build=${pkgver/*rc}
 pkgrel=1

Comment

The change is a straightforward upstream version bump for the Firefox beta tarball from 160.0b1 to 160.0b2, with the corresponding SHA-256 updated. The source remains the official Mozilla archive over HTTPS, and no new build steps, scripts, or packaging behavior were introduced. I don’t see any integrity or persistence red flags in this diff.

@@ -22,11 +22,11 @@ optdepends=('ffmpeg: H264/AAC/MP3 decoding'
 provides=("firefox=$pkgver")
 conflicts=('firefox-beta')
 install=$pkgname.install
-source=("https://archive.mozilla.org/pub/firefox/releases/160.0b1/linux-x86_64/en-US/firefox-160.0b1.tar.xz"
+source=("https://archive.mozilla.org/pub/firefox/releases/160.0b2/linux-x86_64/en-US/firefox-160.0b2.tar.xz"
         "$_pkgname.sh"
         "$pkgname.desktop"
         "policies.json")
-sha256sums=('5145ddf71aab2d72840a92880662d3571d29e42b86780883c4783c446324a018'
+sha256sums=('8a7cbb54ad1da92e9d15905c21536b695898017f03612f6e1504c4ee57b7bc75'
             '4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b'
             '210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761'
             'e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c')