Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 157.0.4329.0 to 158.0.4357.0. No sources, checksums, build steps, install scripts, or permissions are altered here, so there is no new security-relevant behavior introduced by this diff alone. This is a routine package version update with no evident red flags in the provided change.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-dev-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 157.0.4329.0
+	pkgver = 158.0.4357.0
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change is a routine version bump in .SRCINFO for microsoft-edge-dev-bin: it updates the Microsoft Edge Dev .deb URL, the provided virtual version, and the corresponding checksum. The source remains an HTTPS download from Microsoft's official package repository, with no new scripts, patches, install hooks, or packaging behavior changes introduced by this diff. No integrity or persistence red flags are present in the reviewed hunk.

@@ -22,14 +22,14 @@ pkgbase = microsoft-edge-dev-bin
 	optdepends = libunity: for download progress on KDE
 	optdepends = ttf-liberation: fix fonts for some PDFs - CRBug #369991
 	optdepends = xdg-utils
-	provides = microsoft-edge=157.0.4329.0
+	provides = microsoft-edge=158.0.4357.0
 	conflicts = microsoft-edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_157.0.4329.0-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_158.0.4357.0-1_amd64.deb
 	source = microsoft-edge-dev.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = da9c085c073f011976f870917a4c4dcbac0e79ed67673d75210a8836fd908be6
+	sha256sums = b997a31b1a30a980ee53ba391deaaa2b69ae34ed403d455c47c367fd4c3916f2
 	sha256sums = 285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

Low risk change: this PKGBUILD update only bumps the Microsoft Edge Dev package version and refreshes the corresponding source checksum. The source remains the official Microsoft packages repository over HTTPS, and there are no changes to build logic, install scripts, permissions, or additional sources. No obvious supply-chain or persistence concerns are introduced by this diff alone.

@@ -10,7 +10,7 @@ _channel=dev
 _pkgname=microsoft-edge-dev
 pkgname=microsoft-edge-dev-bin
 _pkgshortname=msedge-dev
-pkgver=157.0.4329.0
+pkgver=158.0.4357.0
 pkgrel=1
 _uprel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"

Comment

The change only updates the SHA-256 checksum for the Microsoft Edge .deb source in PKGBUILD. The source URL remains the official Microsoft packages repository over HTTPS, and there are no new build steps, scripts, or privilege-related changes in this diff. This looks like a routine upstream package refresh rather than a security concern.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
         "$_pkgname.sh"
         "Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('da9c085c073f011976f870917a4c4dcbac0e79ed67673d75210a8836fd908be6'
+sha256sums=('b997a31b1a30a980ee53ba391deaaa2b69ae34ed403d455c47c367fd4c3916f2'
             '285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')