Review Results

Comment

The .SRCINFO change is a routine version bump from 8.3.4191.10 to 8.3.4191.15 with no changes to sources, checksums, dependencies, install scripts, or build logic. On its face this does not introduce any new supply-chain, persistence, or privilege-escalation risk. I did not see any suspicious metadata changes in the provided hunk.

@@ -1,8 +1,8 @@
 # Generated by makepkg 7.1.0
-# Fri Oct 30 18:11:13 UTC 2026
+# Mon Nov  2 12:11:06 UTC 2026
 pkgbase = vivaldi-snapshot
 	pkgdesc = An advanced browser made with the power user in mind. Snapshot
-	pkgver = 8.3.4191.10
+	pkgver = 8.3.4191.15
 	pkgrel = 1
 	url = https://vivaldi.com
 	arch = x86_64

Comment

The change only updates the upstream Vivaldi snapshot RPM version and its corresponding SHA-512 checksum in .SRCINFO. The source remains an HTTPS download from the official Vivaldi domain, and there are no new build steps, scripts, or packaging behaviors introduced by this metadata-only change. No supply-chain red flags are evident from the diff alone.

@@ -36,9 +36,9 @@ pkgbase = vivaldi-snapshot
 	optdepends = upower: Battery Status API support
 	options = !strip
 	options = !zipman
-	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.3.4191.10-1.x86_64.rpm
+	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.3.4191.15-1.x86_64.rpm
 	source = 0001-add-support-for-user-flags.patch
-	sha512sums = d121dcf905f4af94ba0ce3b6cf4df98bac0c39a5b914811f2ed32cdc83332d7d0ce609d1c5dab608871eba128436f976750be3d8e3aaeb5856a3d0b00ef94f5d
+	sha512sums = 95399eeea294e0d6a69e3c788435ebc521984f715a29325427a09975b79b5db0e81857bd3f6a23dd773dabe5d423213d7eccd587655688886e4839b79428ecd4
 	sha512sums = 6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726
 
 pkgname = vivaldi-snapshot

Comment

The change only bumps the upstream Vivaldi snapshot version and corresponding RPM version in PKGBUILD. No source URLs, build steps, install scripts, permissions, or packaging logic changed, and there are no new network, privilege, or persistence concerns visible in this diff. Based on the provided hunk alone, this is a routine version update with no security red flags.

@@ -2,8 +2,8 @@
 # Contributor: TZ86
 
 pkgname=vivaldi-snapshot
-_rpmversion=8.3.4191.10-1
-pkgver=8.3.4191.10
+_rpmversion=8.3.4191.15-1
+pkgver=8.3.4191.15
 pkgrel=1
 pkgdesc='An advanced browser made with the power user in mind. Snapshot'
 url="https://vivaldi.com"

Comment

The change only bumps the Vivaldi snapshot version and updates the corresponding SHA-512 checksum for the upstream RPM source. The source remains an HTTPS download from the official Vivaldi domain, and there are no new build-time commands, scripts, or packaging behaviors introduced by this diff. No security red flags are evident in the modified lines themselves.

@@ -42,7 +42,7 @@ optdepends=(
 )
 source=("https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-${_rpmversion}.x86_64.rpm"
         '0001-add-support-for-user-flags.patch')
-sha512sums=('d121dcf905f4af94ba0ce3b6cf4df98bac0c39a5b914811f2ed32cdc83332d7d0ce609d1c5dab608871eba128436f976750be3d8e3aaeb5856a3d0b00ef94f5d'
+sha512sums=('95399eeea294e0d6a69e3c788435ebc521984f715a29325427a09975b79b5db0e81857bd3f6a23dd773dabe5d423213d7eccd587655688886e4839b79428ecd4'
             '6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726')
 
 package() {