Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 157.0.8103.15 to 158.0.8127.2. There are no changes to source URLs, checksums, install scripts, dependencies, or build logic in the reviewed diff, so this does not introduce any new security-relevant behavior by itself. Risk is minimal for this change alone.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome-beta
 	pkgdesc = The popular web browser by Google (Beta Channel)
-	pkgver = 157.0.8103.15
+	pkgver = 158.0.8127.2
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome-beta.install

Comment

The change only updates the pinned upstream binary package URLs and their SHA-512 checksums in .SRCINFO from Chrome beta 157.0.8103.15-1 to 158.0.8127.2-1 for x86_64 and aarch64. This is a routine version bump to HTTPS-hosted Google download URLs, with no new sources, scripts, build logic, or packaging behavior introduced in the reviewed hunk. No security red flags are evident from this metadata-only change.

@@ -26,9 +26,9 @@ pkgbase = google-chrome-beta
 	source = google-chrome-beta.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = 17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_157.0.8103.15-1_amd64.deb
-	sha512sums_x86_64 = 907e179a0fd9a609ea4f6e907c798da2735e990af4c24d54c6e7b1e8300b36e1b6a4a0e50921f06be8e1d85893920d66170042b8e7b3239a7f68123815cb887c
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_157.0.8103.15-1_arm64.deb
-	sha512sums_aarch64 = bab26e322b66e30987ce46d5d8ff96b658a3b9afdc130bf9290f7b4b31f2e2434bf841e5f5c257d1e55f4d95eac8f091de974f98c959044def058fe236b73288
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_158.0.8127.2-1_amd64.deb
+	sha512sums_x86_64 = 2e460c53e452d8dcae1dd229c6ad282314d3dc70637c137f2987c5401784906dbbcecc84451e1a47fbd6aeb77cdd5ed83aeb5f7752c39dab0b3b4117771c1b8d
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_158.0.8127.2-1_arm64.deb
+	sha512sums_aarch64 = f1c4ea37aa59d3bf9e283300142979137ad2e0a4a3aa145d072117758212a1298f12e6324d4ea6ef6d85310042d1ecaf52e16eb07d1a79cb7baf98daa4a4d91c
 
 pkgname = google-chrome-beta

Comment

The only change in this diff is a pkgver bump from 157.0.8103.15 to 158.0.8127.2 in PKGBUILD. No build logic, sources, install scripts, permissions, or packaging behavior changed, and there are no new network, privilege, or persistence concerns introduced by the diff itself. This is a routine version update with no evident security impact from the provided hunk.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-beta" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome-beta
-pkgver=157.0.8103.15
+pkgver=158.0.8127.2
 pkgrel=1
 pkgdesc="The popular web browser by Google (Beta Channel)"
 arch=(

Comment

The change only updates the pinned SHA-512 checksums for the architecture-specific Google Chrome beta .deb downloads. The source URLs remain HTTPS and point to the official Google download host, with no new build-time execution, no added sources, and no packaging logic changes. Security impact is limited to integrity metadata refresh for upstream artifacts.

@@ -42,8 +42,8 @@ source=(
 )
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             '17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03')
-sha512sums_x86_64=('907e179a0fd9a609ea4f6e907c798da2735e990af4c24d54c6e7b1e8300b36e1b6a4a0e50921f06be8e1d85893920d66170042b8e7b3239a7f68123815cb887c')
-sha512sums_aarch64=('bab26e322b66e30987ce46d5d8ff96b658a3b9afdc130bf9290f7b4b31f2e2434bf841e5f5c257d1e55f4d95eac8f091de974f98c959044def058fe236b73288')
+sha512sums_x86_64=('2e460c53e452d8dcae1dd229c6ad282314d3dc70637c137f2987c5401784906dbbcecc84451e1a47fbd6aeb77cdd5ed83aeb5f7752c39dab0b3b4117771c1b8d')
+sha512sums_aarch64=('f1c4ea37aa59d3bf9e283300142979137ad2e0a4a3aa145d072117758212a1298f12e6324d4ea6ef6d85310042d1ecaf52e16eb07d1a79cb7baf98daa4a4d91c')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")