Review Results

Comment

The only change in this diff is a version bump in .SRCINFO from 160.0b2 to 160.0b3. No build logic, sources, checksums, install scripts, or package metadata affecting execution/persistence were changed. On its face this is a routine upstream version update with no security-relevant red flags in the provided hunk.

@@ -1,6 +1,6 @@
 pkgbase = firefox-beta-bin
 	pkgdesc = Standalone web browser from mozilla.org - Beta
-	pkgver = 160.0b2
+	pkgver = 160.0b3
 	pkgrel = 1
 	url = https://www.mozilla.org/en-US/firefox/channel/#beta
 	install = firefox-beta-bin.install

Comment

The change is a straightforward version bump in .SRCINFO: it updates the Firefox beta tarball URL, matching checksum, and provided virtual package version from 160.0b2 to 160.0b3. The source remains the official Mozilla archive over HTTPS, there are no new sources, scripts, or packaging behaviors introduced, and no signs of privilege escalation or persistence mechanisms. This is low risk and consistent with a normal upstream release update.

@@ -21,13 +21,13 @@ pkgbase = firefox-beta-bin
 	optdepends = networkmanager: Location detection via available WiFi networks
 	optdepends = pulseaudio: Sound
 	optdepends = upower: Battery API
-	provides = firefox=160.0b2
+	provides = firefox=160.0b3
 	conflicts = firefox-beta
-	source = https://archive.mozilla.org/pub/firefox/releases/160.0b2/linux-x86_64/en-US/firefox-160.0b2.tar.xz
+	source = https://archive.mozilla.org/pub/firefox/releases/160.0b3/linux-x86_64/en-US/firefox-160.0b3.tar.xz
 	source = firefox-beta.sh
 	source = firefox-beta-bin.desktop
 	source = policies.json
-	sha256sums = 8a7cbb54ad1da92e9d15905c21536b695898017f03612f6e1504c4ee57b7bc75
+	sha256sums = f703b8ae5da292748c0056efa14bd527784f1e2191af01d09ed058219bf502f4
 	sha256sums = 4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b
 	sha256sums = 210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761
 	sha256sums = e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c

Comment

The change only bumps pkgver from 160.0b2 to 160.0b3 in PKGBUILD. No source URLs, build logic, install scripts, permissions, or packaging behavior are altered, and there are no new integrity or execution risks visible in this diff. This is a routine version update with no security-relevant changes in the reviewed hunk.

@@ -3,7 +3,7 @@
 
 pkgname=firefox-beta-bin
 _pkgname=firefox-beta
-pkgver=160.0b2
+pkgver=160.0b3
 _major=${pkgver/rc*}
 _build=${pkgver/*rc}
 pkgrel=1

Comment

The change is a straightforward upstream version bump for the Firefox beta binary tarball from 160.0b2 to 160.0b3, with the corresponding SHA-256 updated. The source remains the official Mozilla archive over HTTPS, there are no new build-time downloads, scripts, patches, privilege changes, or packaging logic changes in the shown hunk. No security red flags are introduced by this diff alone.

@@ -22,11 +22,11 @@ optdepends=('ffmpeg: H264/AAC/MP3 decoding'
 provides=("firefox=$pkgver")
 conflicts=('firefox-beta')
 install=$pkgname.install
-source=("https://archive.mozilla.org/pub/firefox/releases/160.0b2/linux-x86_64/en-US/firefox-160.0b2.tar.xz"
+source=("https://archive.mozilla.org/pub/firefox/releases/160.0b3/linux-x86_64/en-US/firefox-160.0b3.tar.xz"
         "$_pkgname.sh"
         "$pkgname.desktop"
         "policies.json")
-sha256sums=('8a7cbb54ad1da92e9d15905c21536b695898017f03612f6e1504c4ee57b7bc75'
+sha256sums=('f703b8ae5da292748c0056efa14bd527784f1e2191af01d09ed058219bf502f4'
             '4bec62032e49c28ff27750abddbdbdbb1a4b5cba719c39498968fe53adee790b'
             '210f13ea47c4b96387f26ee7fc4dfc5c192cfb169aef2a13303fbd1ee58b3761'
             'e977c3d690224dd727d8761d2c0a66ba41bfd02ae0fd7850c4545d06b5a8e63c')