Review Results

Comment

The change is a routine version bump in .SRCINFO for the official Visual Studio Code binary package. The source URLs remain HTTPS and point to the upstream Microsoft update endpoint, and the checksums were updated accordingly. No new scripts, patches, install logic, or packaging behavior changed, so there is no evident security impact in this diff alone.

@@ -1,6 +1,6 @@
 pkgbase = visual-studio-code-bin
 	pkgdesc = Visual Studio Code (vscode): Editor for building and debugging modern web and cloud applications (official binary version)
-	pkgver = 1.143.1
+	pkgver = 1.144.0
 	pkgrel = 1
 	url = https://code.visualstudio.com/
 	install = visual-studio-code-bin.install

Comment

The change is a routine version bump in .SRCINFO for the prebuilt Visual Studio Code package, updating the official Microsoft download URLs and corresponding SHA-256 checksums for all listed architectures. The sources remain HTTPS and point to the expected upstream update endpoint; there are no new scripts, patches, install hooks, or privilege-related changes in this diff. No security red flags are introduced by this metadata-only update.

@@ -33,11 +33,11 @@ pkgbase = visual-studio-code-bin
 	options = !strip
 	source = visual-studio-code-bin.sh
 	sha256sums = bd0d9edf69283ebdf4e73e0a7b168d2fcf50acbd01f63674cad93ed4fe42fdad
-	source_x86_64 = code_1.143.1_amd64.deb::https://update.code.visualstudio.com/1.143.1/linux-deb-x64/stable
-	sha256sums_x86_64 = e459729dee13758960924be07157da44f0ba69503ab5edf4586fcde936bac9b9
-	source_aarch64 = code_1.143.1_arm64.deb::https://update.code.visualstudio.com/1.143.1/linux-deb-arm64/stable
-	sha256sums_aarch64 = b5163fe68935a3d11c954de08c2ca953532f1ba70204df1bc95e736c1eea31ff
-	source_armv7h = code_1.143.1_armhf.deb::https://update.code.visualstudio.com/1.143.1/linux-deb-armhf/stable
-	sha256sums_armv7h = ee4f0d3da5ff9487733edef736aecfa258af1a8216c090e25f1545ec82928863
+	source_x86_64 = code_1.144.0_amd64.deb::https://update.code.visualstudio.com/1.144.0/linux-deb-x64/stable
+	sha256sums_x86_64 = b8fbff92d8d95908990eed0acf004c980f29003725469e794ddbd017ea511a20
+	source_aarch64 = code_1.144.0_arm64.deb::https://update.code.visualstudio.com/1.144.0/linux-deb-arm64/stable
+	sha256sums_aarch64 = 044e1cfd2ba1a93ff05b1d58f4b720896142c939f862c9a9204c2efe6c87b3af
+	source_armv7h = code_1.144.0_armhf.deb::https://update.code.visualstudio.com/1.144.0/linux-deb-armhf/stable
+	sha256sums_armv7h = d59b753be386b65450a393d2b30f6a65a812f8a4664e1da2e8ae0a9e885f58c3
 
 pkgname = visual-studio-code-bin

Comment

This change only bumps pkgver from 1.143.1 to 1.144.0 in PKGBUILD. No source URLs, checksums, build steps, install scripts, permissions, or package metadata beyond the version number are altered in the provided diff. On its face this is a routine upstream version update with no security-relevant red flags in the reviewed hunk.

@@ -2,7 +2,7 @@
 
 pkgname=visual-studio-code-bin
 _pkgname=visual-studio-code
-pkgver=1.143.1
+pkgver=1.144.0
 pkgrel=1
 pkgdesc="Visual Studio Code (vscode): Editor for building and debugging modern web and cloud applications (official binary version)"
 arch=('x86_64' 'aarch64' 'armv7h')

Comment

The change only updates the package version and the corresponding SHA-256 checksums for the official Microsoft-hosted .deb artifacts. The source URLs remain HTTPS and point to the upstream update endpoint, with no new build steps, scripts, or privilege-related changes. Based on the provided diff, this is a routine version bump with no evident security regression.

@@ -30,9 +30,9 @@ source_x86_64=(code_${pkgver}_amd64.deb::https://update.code.visualstudio.com/${
 source_aarch64=(code_${pkgver}_arm64.deb::https://update.code.visualstudio.com/${pkgver}/linux-deb-arm64/stable)
 source_armv7h=(code_${pkgver}_armhf.deb::https://update.code.visualstudio.com/${pkgver}/linux-deb-armhf/stable)
 sha256sums=('bd0d9edf69283ebdf4e73e0a7b168d2fcf50acbd01f63674cad93ed4fe42fdad')
-sha256sums_x86_64=('e459729dee13758960924be07157da44f0ba69503ab5edf4586fcde936bac9b9')
-sha256sums_aarch64=('b5163fe68935a3d11c954de08c2ca953532f1ba70204df1bc95e736c1eea31ff')
-sha256sums_armv7h=('ee4f0d3da5ff9487733edef736aecfa258af1a8216c090e25f1545ec82928863')
+sha256sums_x86_64=('b8fbff92d8d95908990eed0acf004c980f29003725469e794ddbd017ea511a20')
+sha256sums_aarch64=('044e1cfd2ba1a93ff05b1d58f4b720896142c939f862c9a9204c2efe6c87b3af')
+sha256sums_armv7h=('d59b753be386b65450a393d2b30f6a65a812f8a4664e1da2e8ae0a9e885f58c3')
 
 package() {
   bsdtar -xf data.tar.xz -C "${pkgdir}/"