AUR AI Reviewer

Review Results

Version #3003 of discord_arch_electron · commit 2e4297c54d3a · status Reviewed

Risk 0/5 · Safe .SRCINFO
Result #5806

Comment

The only change in this .SRCINFO diff is a pkgver bump from 1.0.167 to 1.0.168. No sources, checksums, build steps, install scripts, permissions, or package metadata affecting trust boundaries were changed in the reviewed hunk. Based on the provided diff alone, there is no security-relevant issue to flag.

@@ -1,6 +1,6 @@
 pkgbase = discord_arch_electron
 	pkgdesc = Discord using system provided electron for increased security and performance
-	pkgver = 1.0.167
+	pkgver = 1.0.168
 	pkgrel = 1
 	epoch = 1
 	url = https://discord.com
Risk 0/5 · Safe .SRCINFO
Result #5807

Comment

This change is a routine version bump in .SRCINFO from Discord 1.0.167 to 1.0.168, with corresponding source URLs and SHA-512 checksums updated. The sources remain HTTPS and point to the same official Discord domains; there are no new build steps, scripts, patches, or packaging directives introduced by this diff. No security-relevant behavior changes are visible in the .SRCINFO-only update.

@@ -18,43 +18,43 @@ pkgbase = discord_arch_electron
 	provides = discord
 	conflicts = discord
 	options = !strip
-	source = https://dl.discordapp.net/apps/linux/1.0.167/discord-1.0.167.tar.gz
+	source = https://dl.discordapp.net/apps/linux/1.0.168/discord-1.0.168.tar.gz
 	source = LICENSE.html::https://discord.com/terms
 	source = OSS-LICENSES.html::https://discord.com/licenses
 	source = discord-launcher.sh
 	source = krisp-patcher.py
-	source = core-1.0.167.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.167/full.distro
-	source = discord_desktop_core-1.0.167.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.167/discord_desktop_core/1/full.distro
-	source = discord_zstd-1.0.167.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.167/discord_zstd/1/full.distro
-	source = discord_krisp-1.0.167.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.167/discord_krisp/1/full.distro
-	source = discord_rpc-1.0.167.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.167/discord_rpc/1/full.distro
-	source = discord_utils-1.0.167.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.167/discord_utils/1/full.distro
-	source = discord_voice-1.0.167.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.167/discord_voice/1/full.distro
-	source = discord_game_utils-1.0.167.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.167/discord_game_utils/1/full.distro
-	source = discord_erlpack-1.0.167.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.167/discord_erlpack/1/full.distro
-	source = discord_modules-1.0.167.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.167/discord_modules/1/full.distro
-	source = discord_spellcheck-1.0.167.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.167/discord_spellcheck/1/full.distro
-	source = discord_dispatch-1.0.167.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.167/discord_dispatch/1/full.distro
-	source = discord_cloudsync-1.0.167.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.167/discord_cloudsync/1/full.distro
-	source = discord_sysimg-1.0.167.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.167/discord_sysimg/1/full.distro
-	sha512sums = 74d550329f31de9d87e15d81331d458bcac303ab2cfd07bea32dc8366b525f53703b289ac7505d5ce09acc8064ee286e81accaaa762d3b016fcf5a013ee0c04d
+	source = core-1.0.168.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.168/full.distro
+	source = discord_desktop_core-1.0.168.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.168/discord_desktop_core/1/full.distro
+	source = discord_zstd-1.0.168.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.168/discord_zstd/1/full.distro
+	source = discord_krisp-1.0.168.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.168/discord_krisp/1/full.distro
+	source = discord_rpc-1.0.168.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.168/discord_rpc/1/full.distro
+	source = discord_utils-1.0.168.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.168/discord_utils/1/full.distro
+	source = discord_voice-1.0.168.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.168/discord_voice/1/full.distro
+	source = discord_game_utils-1.0.168.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.168/discord_game_utils/1/full.distro
+	source = discord_erlpack-1.0.168.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.168/discord_erlpack/1/full.distro
+	source = discord_modules-1.0.168.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.168/discord_modules/1/full.distro
+	source = discord_spellcheck-1.0.168.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.168/discord_spellcheck/1/full.distro
+	source = discord_dispatch-1.0.168.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.168/discord_dispatch/1/full.distro
+	source = discord_cloudsync-1.0.168.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.168/discord_cloudsync/1/full.distro
+	source = discord_sysimg-1.0.168.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/1.0.168/discord_sysimg/1/full.distro
+	sha512sums = 33ff24e65e2f1daaf7b1047ad663cee79cb1b1819b9a6d6507e08b55ab6efd423d4c3ee23f7b07ea00f909affef7c0b7826dc502ab3f800cbf6d7ed3955d8d09
 	sha512sums = SKIP
 	sha512sums = SKIP
 	sha512sums = d5373e2b2e9754bdcdbcda81fc1392ce6605939651839868823f3c3e0bf16f6fba2fb73bc1a0ff230eebd743d1463f2e8b2295503248f14845b3a56e57385bd1
 	sha512sums = 85da93530b2b92faad58cc84d0f7ddaea6b22fbec413e806c1981eb6369a301ec995eee6bfbe6b828e2cd0baf6168e578bbde456f2450a13199994ff9a1e7cd0
-	sha512sums = 9dd9de29d9709b50ee8d5d7d2957569c9e7a0472e383313f815fec01e97ddd8d489a9b4b90cb89dd31bed6fe9ef60fe92187bad50e5f470078ef4c88ee80aa69
-	sha512sums = 0e5b65c677eab5a88c0ee7b2b9bac18b541af0a396fcaee9cb5dbb16f1ed7e225585710b0caeda49033d9081039c624fb38f7bbc7f96cebe92971dd88f9d68ad
+	sha512sums = bf8664745fcf2069eb1903f003625d8d182ae415ee731aba87dd3a7102814072dc355d7682ad3bf588e4ec8b53db2a7fcab058b75602574d4254e33e17df1051
+	sha512sums = 23ce9fecb7701818af57acf5971c08ccc0290196be95c9a5a5d6dbe4e2f602b4c886ab3cf343e42c27599adc0e6153c963e37b9bf5d57afcacb1349f846fdf67
 	sha512sums = 462cb5d9f5b65d2abd3c59dfec3e3edf6c7c2e7a186cd3b4526fd4d83e712aaa4c65e571e04b6f673d3539aa611a675bd71420b629a5a5955696748227846555
-	sha512sums = 9917e287858d5281da211d2e778256d56f776165c13517824f47f5f7b265a771cef7579f66fd950721ed3c51955f290daf783f89de4611cec238fc847d3efa61
-	sha512sums = e498e073c302a07a1a48b067320fb23100374e33a2b36e1c51be51a0b16c6492440075828e78c3db90671d90dbaeb2ce6577bec26f6c0d8f819dfa72104cab31
-	sha512sums = 535037d043baa8fa26ef8519b3dde6a3aeadb83f57664d760353cb7b61c4165f87fc985893ae9383b73d0156303dc1b7c2e8a4657284bb6130b7818bed2c8919
-	sha512sums = ef967ef29d995dbb1b2cf049b7432dba94b258898c4b151fbac0bbde27ab720e8e503a856b5773fdfc539b6db2bce103ee3d52d3d091a93219c037687dbbe058
-	sha512sums = c4fc1047d41b4c4130eee4986c759d3e56c1e214503e75fdce518c52246686acf8e29742e2aef3905ace54a007e44f75cce79215ea539f4eebedd4365281cc43
-	sha512sums = 2ebc252148285bb160f2a94119db539a6849593ef02a8a1ec8e976a77e5ec359a04a3a9a112789ea8355b43580e906a4674f13e7dd6adb359482e9b50efefa2f
-	sha512sums = 5ed7ddca4969df3d08daa9d3aa90002882499cd27cb3d6ae873ad54f7bfc618a467a22175efa243321132f3889fcaebf2a33f052980e53ec2cb4aa7275588563
-	sha512sums = 66f5c5ab84bf7a15b349edb7037d7e9afdf5f9a0392f28192398a9a5e5332b04836d59f9cb6e5717bed65889093ad246cc862f05202fbc8e585d9593a338a4af
-	sha512sums = 7f4a8fca13d5cfa4bca5098c6ce3c83bc0b14013d2340a463b4c20f71ee15b3a5964a8d773ce4915fc769ec6c105f7fe12c941f6bd675d0b0b9bbb91ff587c72
-	sha512sums = 378c63b13b43a349fef32efed3b9ae23412cfa15f736ea78cf702b2726a90f1f966f16e183597bbde02dd93cfb09df69c70e9666ab23a36d8ddef1333e8de5dc
-	sha512sums = c8499f062ab8690d0f25129928bff7bc2806a610ccf8f57566f845663f4b940b504714ec0d398e3395b005070d1d51955a3a1dbe76567c4952fcd40a2b5ec24c
+	sha512sums = 2d80a7fc173142e973e8b1f3763d95ebedf4f080f2da5d90971fadd972e92e0b690e5a81759171ad3157deeea4484ff7f55c865ad22b624cc8679c7a13d14f22
+	sha512sums = 49e4e5eafff7da96cd81322adff8c3999abeb70fb598e85ecf77290abb40a0f08d863acd91d996051ff51ca95b2281ee38b74629f46265927c15dd296c49dbb4
+	sha512sums = 9c2ff6d1d865261a0297614b1419d76df98adf792e8a3f37ef81371484cae5f1b5cfed064eb76d1091da5584bc246028b047ee98df5d79ba09f346464681ed9a
+	sha512sums = 8eabc0efd2627226fa9f3d3836f791dfc71254d75b6b4d905d4bfd297b12a0964b90013f7c9b233f8bedcfb44ca88f68e6332c8fde59fe25bfe996f78fd1d492
+	sha512sums = 5377cbd52a42b716f4167d47e775c7f3a978b79b95558aa829786fc28c2eef07c182c8ac608b381184a08fc2aa693c0f64309558c1d206f8d26d1f694f57944f
+	sha512sums = 40a00d7e12fb299dfad485d5f0f57807993ed205209edc9a7612aa316a98236a3488a5bf84ba549ab2a7785e72a65b996424a379272ed6f89b0ff9017fc58e62
+	sha512sums = cd35b680c0bd5ca7ee74014b2696156af2c53d39c23ae49e20f7d97fb6d012778110808c6fe9c4eceb4f0fcf3276a5b52fdcbdba93e1138dae67d42fc9c08464
+	sha512sums = cb4ef01ee9f203324902d49716c5f2a9e069c6ffaef8702574f2edf49f73e2251d83bfc19c49d9642453239b16bbb83f676a5e1fd5ab4dbe87cea4caf769bb1a
+	sha512sums = 8acaeeda97dc025ca8782364cde16397d4db870290dcbe954cf94ae8f9ba67ec26b4ab020bf2255de64d559b2a8f653ed47a75e6cd1835deb0f89dfdb28d7cf0
+	sha512sums = ccdf8145b5647e82b827b501bb6b577f1288dd23dadedf51cf2401b8b2cd000ac5fcb8c00d0c93dde5dc4f49b624a75d10873597d67b58bcf53707c4f40f130b
+	sha512sums = 160edd27d3c7710fc05a7fb5d9c4be8ad369a2485e77b5a17b1a3c29a4a8d829619e79036dce547c99e69e0c4ad3212e8c1f3ee36fe3a1f50938eaf6b7c73a95
 
 pkgname = discord_arch_electron
Risk 0/5 · Safe PKGBUILD
Result #5808

Comment

The change only bumps pkgver from 1.0.167 to 1.0.168 in PKGBUILD. No source URLs, build steps, install scripts, permissions, or packaging logic were modified, so there is no new security-relevant behavior in this diff. Based on the provided hunk alone, this is a routine version update with no evident risk.

@@ -9,7 +9,7 @@
 _pkgname=discord
 _electron=electron
 pkgname=${_pkgname}_arch_electron
-pkgver=1.0.167
+pkgver=1.0.168
 pkgrel=1
 epoch=1
 pkgdesc="Discord using system provided ${_electron} for increased security and performance"
Risk 0/5 · Safe PKGBUILD
Result #5809

Comment

The change only updates sha512 checksums for the existing upstream Discord tarball and bundled component archives. I did not find any new sources, build steps, scripts, or packaging logic changes, and the source URLs remain HTTPS and pinned to the package version. This looks like a routine checksum refresh rather than a supply-chain risk.

@@ -48,25 +48,25 @@ source=("https://dl.discordapp.net/apps/linux/${pkgver}/${_pkgname}-${pkgver}.ta
         "discord_dispatch-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_dispatch/1/full.distro"
         "discord_cloudsync-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_cloudsync/1/full.distro"
         "discord_sysimg-${pkgver}.tar.br::https://stable.dl2.discordapp.net/distro/app/stable/linux/x64/${pkgver}/discord_sysimg/1/full.distro")
-sha512sums=('74d550329f31de9d87e15d81331d458bcac303ab2cfd07bea32dc8366b525f53703b289ac7505d5ce09acc8064ee286e81accaaa762d3b016fcf5a013ee0c04d'
+sha512sums=('33ff24e65e2f1daaf7b1047ad663cee79cb1b1819b9a6d6507e08b55ab6efd423d4c3ee23f7b07ea00f909affef7c0b7826dc502ab3f800cbf6d7ed3955d8d09'
             '2590151db4404a9ecbae2c45269c74f5ea26479967de5bc0b221a9143f4efeeeda9e335c23cf1f982680ab4fd895dcf3fd5731bd230908b3b2568eee0ec223ec'
             '5cccf397a772fed0db9b19253e496e78af27810227325ce681de985e2e0fbbdb195873d9642574ad3ae7bfcf4699bfdaa16933ca50c13cb98a1ff53c86c6de05'
             'd5373e2b2e9754bdcdbcda81fc1392ce6605939651839868823f3c3e0bf16f6fba2fb73bc1a0ff230eebd743d1463f2e8b2295503248f14845b3a56e57385bd1'
             '85da93530b2b92faad58cc84d0f7ddaea6b22fbec413e806c1981eb6369a301ec995eee6bfbe6b828e2cd0baf6168e578bbde456f2450a13199994ff9a1e7cd0'
-            '9dd9de29d9709b50ee8d5d7d2957569c9e7a0472e383313f815fec01e97ddd8d489a9b4b90cb89dd31bed6fe9ef60fe92187bad50e5f470078ef4c88ee80aa69'
-            '0e5b65c677eab5a88c0ee7b2b9bac18b541af0a396fcaee9cb5dbb16f1ed7e225585710b0caeda49033d9081039c624fb38f7bbc7f96cebe92971dd88f9d68ad'
+            'bf8664745fcf2069eb1903f003625d8d182ae415ee731aba87dd3a7102814072dc355d7682ad3bf588e4ec8b53db2a7fcab058b75602574d4254e33e17df1051'
+            '23ce9fecb7701818af57acf5971c08ccc0290196be95c9a5a5d6dbe4e2f602b4c886ab3cf343e42c27599adc0e6153c963e37b9bf5d57afcacb1349f846fdf67'
             '462cb5d9f5b65d2abd3c59dfec3e3edf6c7c2e7a186cd3b4526fd4d83e712aaa4c65e571e04b6f673d3539aa611a675bd71420b629a5a5955696748227846555'
-            '9917e287858d5281da211d2e778256d56f776165c13517824f47f5f7b265a771cef7579f66fd950721ed3c51955f290daf783f89de4611cec238fc847d3efa61'
-            'e498e073c302a07a1a48b067320fb23100374e33a2b36e1c51be51a0b16c6492440075828e78c3db90671d90dbaeb2ce6577bec26f6c0d8f819dfa72104cab31'
-            '535037d043baa8fa26ef8519b3dde6a3aeadb83f57664d760353cb7b61c4165f87fc985893ae9383b73d0156303dc1b7c2e8a4657284bb6130b7818bed2c8919'
-            'ef967ef29d995dbb1b2cf049b7432dba94b258898c4b151fbac0bbde27ab720e8e503a856b5773fdfc539b6db2bce103ee3d52d3d091a93219c037687dbbe058'
-            'c4fc1047d41b4c4130eee4986c759d3e56c1e214503e75fdce518c52246686acf8e29742e2aef3905ace54a007e44f75cce79215ea539f4eebedd4365281cc43'
-            '2ebc252148285bb160f2a94119db539a6849593ef02a8a1ec8e976a77e5ec359a04a3a9a112789ea8355b43580e906a4674f13e7dd6adb359482e9b50efefa2f'
-            '5ed7ddca4969df3d08daa9d3aa90002882499cd27cb3d6ae873ad54f7bfc618a467a22175efa243321132f3889fcaebf2a33f052980e53ec2cb4aa7275588563'
-            '66f5c5ab84bf7a15b349edb7037d7e9afdf5f9a0392f28192398a9a5e5332b04836d59f9cb6e5717bed65889093ad246cc862f05202fbc8e585d9593a338a4af'
-            '7f4a8fca13d5cfa4bca5098c6ce3c83bc0b14013d2340a463b4c20f71ee15b3a5964a8d773ce4915fc769ec6c105f7fe12c941f6bd675d0b0b9bbb91ff587c72'
-            '378c63b13b43a349fef32efed3b9ae23412cfa15f736ea78cf702b2726a90f1f966f16e183597bbde02dd93cfb09df69c70e9666ab23a36d8ddef1333e8de5dc'
-            'c8499f062ab8690d0f25129928bff7bc2806a610ccf8f57566f845663f4b940b504714ec0d398e3395b005070d1d51955a3a1dbe76567c4952fcd40a2b5ec24c')
+            '2d80a7fc173142e973e8b1f3763d95ebedf4f080f2da5d90971fadd972e92e0b690e5a81759171ad3157deeea4484ff7f55c865ad22b624cc8679c7a13d14f22'
+            '49e4e5eafff7da96cd81322adff8c3999abeb70fb598e85ecf77290abb40a0f08d863acd91d996051ff51ca95b2281ee38b74629f46265927c15dd296c49dbb4'
+            '9c2ff6d1d865261a0297614b1419d76df98adf792e8a3f37ef81371484cae5f1b5cfed064eb76d1091da5584bc246028b047ee98df5d79ba09f346464681ed9a'
+            '8eabc0efd2627226fa9f3d3836f791dfc71254d75b6b4d905d4bfd297b12a0964b90013f7c9b233f8bedcfb44ca88f68e6332c8fde59fe25bfe996f78fd1d492'
+            '5377cbd52a42b716f4167d47e775c7f3a978b79b95558aa829786fc28c2eef07c182c8ac608b381184a08fc2aa693c0f64309558c1d206f8d26d1f694f57944f'
+            '40a00d7e12fb299dfad485d5f0f57807993ed205209edc9a7612aa316a98236a3488a5bf84ba549ab2a7785e72a65b996424a379272ed6f89b0ff9017fc58e62'
+            'cd35b680c0bd5ca7ee74014b2696156af2c53d39c23ae49e20f7d97fb6d012778110808c6fe9c4eceb4f0fcf3276a5b52fdcbdba93e1138dae67d42fc9c08464'
+            'cb4ef01ee9f203324902d49716c5f2a9e069c6ffaef8702574f2edf49f73e2251d83bfc19c49d9642453239b16bbb83f676a5e1fd5ab4dbe87cea4caf769bb1a'
+            '8acaeeda97dc025ca8782364cde16397d4db870290dcbe954cf94ae8f9ba67ec26b4ab020bf2255de64d559b2a8f653ed47a75e6cd1835deb0f89dfdb28d7cf0'
+            'ccdf8145b5647e82b827b501bb6b577f1288dd23dadedf51cf2401b8b2cd000ac5fcb8c00d0c93dde5dc4f49b624a75d10873597d67b58bcf53707c4f40f130b'
+            '160edd27d3c7710fc05a7fb5d9c4be8ad369a2485e77b5a17b1a3c29a4a8d829619e79036dce547c99e69e0c4ad3212e8c1f3ee36fe3a1f50938eaf6b7c73a95')
 
 # Skip "LICENSE.html" and "OSS-LICENSES.html" files hashes as they are unstable
 # Since "updpkgsums"/"pkgctl version upgrade" overwrite the checksum array with