Review Results

Comment

The change is a routine version bump in .SRCINFO, updating the upstream Vivaldi snapshot RPM URL and its checksum. The source remains HTTPS and points to the vendor's official download domain, with no new scripts, patches, or packaging logic introduced. No evidence of added persistence, privilege escalation, or build-time network behavior beyond the existing upstream binary source.

@@ -1,8 +1,8 @@
 # Generated by makepkg 7.1.0
-# Wed Oct 28 14:11:45 UTC 2026
+# Fri Oct 30 18:11:13 UTC 2026
 pkgbase = vivaldi-snapshot
 	pkgdesc = An advanced browser made with the power user in mind. Snapshot
-	pkgver = 8.3.4191.3
+	pkgver = 8.3.4191.10
 	pkgrel = 1
 	url = https://vivaldi.com
 	arch = x86_64

Comment

The change is a straightforward upstream snapshot version bump in .SRCINFO: it updates the Vivaldi RPM download URL to a newer official HTTPS release and refreshes the corresponding sha512 checksum. No new sources, scripts, build steps, or privilege-related artifacts are introduced, and the existing patch source remains unchanged. Based on the provided diff, there are no security red flags beyond the usual trust in the vendor-supplied binary release.

@@ -36,9 +36,9 @@ pkgbase = vivaldi-snapshot
 	optdepends = upower: Battery Status API support
 	options = !strip
 	options = !zipman
-	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.3.4191.3-1.x86_64.rpm
+	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.3.4191.10-1.x86_64.rpm
 	source = 0001-add-support-for-user-flags.patch
-	sha512sums = 1052cc7f9d45c49921670957805aa5cf63450b09e3b9185d047ec8a45dca00311d06d2e1c2994932fbf878062c30b57139af2e81ac439b8a843b6f5d16059f5e
+	sha512sums = d121dcf905f4af94ba0ce3b6cf4df98bac0c39a5b914811f2ed32cdc83332d7d0ce609d1c5dab608871eba128436f976750be3d8e3aaeb5856a3d0b00ef94f5d
 	sha512sums = 6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726
 
 pkgname = vivaldi-snapshot

Comment

The change only bumps the upstream Vivaldi snapshot version from 8.3.4191.3 to 8.3.4191.10 in PKGBUILD. No new sources, build steps, install scripts, permissions, or other packaging logic are introduced. This is a routine version update with no visible security red flags in the provided diff.

@@ -2,8 +2,8 @@
 # Contributor: TZ86
 
 pkgname=vivaldi-snapshot
-_rpmversion=8.3.4191.3-1
-pkgver=8.3.4191.3
+_rpmversion=8.3.4191.10-1
+pkgver=8.3.4191.10
 pkgrel=1
 pkgdesc='An advanced browser made with the power user in mind. Snapshot'
 url="https://vivaldi.com"

Comment

The change only updates the SHA-512 checksum for the upstream Vivaldi snapshot RPM source. The source URL remains HTTPS and points to the official Vivaldi download host, and there are no new build steps, scripts, or privilege-related changes in this diff. This is a normal integrity-pin update, not an execution or persistence risk. I did not see any indication of a malicious source swap or additional network fetches in the reviewed hunk.

@@ -42,7 +42,7 @@ optdepends=(
 )
 source=("https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-${_rpmversion}.x86_64.rpm"
         '0001-add-support-for-user-flags.patch')
-sha512sums=('1052cc7f9d45c49921670957805aa5cf63450b09e3b9185d047ec8a45dca00311d06d2e1c2994932fbf878062c30b57139af2e81ac439b8a843b6f5d16059f5e'
+sha512sums=('d121dcf905f4af94ba0ce3b6cf4df98bac0c39a5b914811f2ed32cdc83332d7d0ce609d1c5dab608871eba128436f976750be3d8e3aaeb5856a3d0b00ef94f5d'
             '6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726')
 
 package() {