Review Results

Comment

The change is a routine version bump in .SRCINFO from 8.3.4191.1 to 8.3.4191.3 with no accompanying source, build, install-script, or metadata changes visible in the provided diff. On its face this does not introduce any new attack surface or packaging red flags; it only updates the recorded package version and timestamp. Based on the reviewed hunk alone, risk is minimal.

@@ -1,8 +1,8 @@
 # Generated by makepkg 7.1.0
-# Fri Oct 23 08:11:34 UTC 2026
+# Wed Oct 28 14:11:45 UTC 2026
 pkgbase = vivaldi-snapshot
 	pkgdesc = An advanced browser made with the power user in mind. Snapshot
-	pkgver = 8.3.4191.1
+	pkgver = 8.3.4191.3
 	pkgrel = 1
 	url = https://vivaldi.com
 	arch = x86_64

Comment

The change only updates the upstream Vivaldi snapshot RPM version and its corresponding sha512 checksum in .SRCINFO. The source remains the official HTTPS downloads.vivaldi.com endpoint, and there are no new build steps, scripts, or privilege-related artifacts introduced by this diff. This looks like a routine upstream version bump with integrity metadata updated accordingly.

@@ -36,9 +36,9 @@ pkgbase = vivaldi-snapshot
 	optdepends = upower: Battery Status API support
 	options = !strip
 	options = !zipman
-	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.3.4191.1-1.x86_64.rpm
+	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.3.4191.3-1.x86_64.rpm
 	source = 0001-add-support-for-user-flags.patch
-	sha512sums = 7c0104e5edefae2173d364e2a15d8bbcf439b3fbc5b06793e183f097b8edb9b7a9c514d60b5a263937c94106be0c632713d84ac7bcc3cdb7e72a3777a7b11915
+	sha512sums = 1052cc7f9d45c49921670957805aa5cf63450b09e3b9185d047ec8a45dca00311d06d2e1c2994932fbf878062c30b57139af2e81ac439b8a843b6f5d16059f5e
 	sha512sums = 6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726
 
 pkgname = vivaldi-snapshot

Comment

The change only bumps the upstream snapshot version in PKGBUILD from 8.3.4191.1 to 8.3.4191.3. No build logic, source URLs, checksums, install scripts, permissions, or packaging behavior changed. Based on the provided diff, there are no new security concerns introduced by this version bump alone.

@@ -2,8 +2,8 @@
 # Contributor: TZ86
 
 pkgname=vivaldi-snapshot
-_rpmversion=8.3.4191.1-1
-pkgver=8.3.4191.1
+_rpmversion=8.3.4191.3-1
+pkgver=8.3.4191.3
 pkgrel=1
 pkgdesc='An advanced browser made with the power user in mind. Snapshot'
 url="https://vivaldi.com"

Comment

Low risk change. The diff only updates the upstream Vivaldi snapshot version and corresponding SHA-512 checksum for the RPM source. The source remains the official HTTPS Vivaldi download URL, there are no new build steps, no added scripts, and no changes to packaging logic or permissions. Security impact is limited to normal upstream version refresh and integrity verification update.

@@ -42,7 +42,7 @@ optdepends=(
 )
 source=("https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-${_rpmversion}.x86_64.rpm"
         '0001-add-support-for-user-flags.patch')
-sha512sums=('7c0104e5edefae2173d364e2a15d8bbcf439b3fbc5b06793e183f097b8edb9b7a9c514d60b5a263937c94106be0c632713d84ac7bcc3cdb7e72a3777a7b11915'
+sha512sums=('1052cc7f9d45c49921670957805aa5cf63450b09e3b9185d047ec8a45dca00311d06d2e1c2994932fbf878062c30b57139af2e81ac439b8a843b6f5d16059f5e'
             '6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726')
 
 package() {