Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 7.3 to 7.4rc1. This is metadata-only and does not introduce new sources, build steps, install scripts, permissions changes, or other executable content. No security-relevant behavior is evident from the diff provided.

@@ -1,6 +1,6 @@
 pkgbase = linux-mainline
 	pkgdesc = Linux Mainline
-	pkgver = 7.3
+	pkgver = 7.4rc1
 	pkgrel = 1
 	url = https://kernel.org/
 	arch = x86_64

Comment

The change only updates the upstream kernel source tag from v7.3 to v7.4-rc1 and refreshes the corresponding checksum in .SRCINFO. The source remains the official kernel.org git repository over HTTPS, pinned to a specific tag, with no new build-time downloads, scripts, or packaging behavior changes. I do note that this is a release-candidate kernel tag, but that is a normal upstream source choice rather than a security issue in the packaging metadata itself.

@@ -32,13 +32,13 @@ pkgbase = linux-mainline
 	makedepends = texlive-latexextra
 	options = !debug
 	options = !strip
-	source = linux-mainline::git+https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git#tag=v7.3
+	source = linux-mainline::git+https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git#tag=v7.4-rc1
 	source = config.x86_64
 	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
 	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	validpgpkeys = 83BC8889351B5DEBBB68416EB8AC08600F108CDF
-	sha256sums = 91e4df83d2049987d063d2fde93e12b65e50a463c11811f77dc72ed03abe7fd9
-	sha256sums = 9f6e1be50d2ebb69a23b14799ccf23462c80e29f284ce3b205186921c5c3bf3d
+	sha256sums = 1df673d4efe51072159bc426679cbd682c69f2e6d80e26e2a272cba459d5fb93
+	sha256sums = e8f340e4d83dd3cac6ac516a6d43919d325ec15895c8e63bb27e1db156eb0731
 
 pkgname = linux-mainline
 	pkgdesc = The Linux Mainline kernel and modules