Review Results

Comment

The change only bumps pkgver in .SRCINFO from 7.2.13.lqx1 to 7.2.14.lqx1. No source URLs, checksums, build logic, install scripts, or packaging permissions are changed, and there are no new execution or persistence risks visible in this diff. This is a routine metadata version update with no security impact evident from the provided hunk.

@@ -1,6 +1,6 @@
 pkgbase = linux-lqx
 	pkgdesc = Linux Liquorix
-	pkgver = 7.2.13.lqx1
+	pkgver = 7.2.14.lqx1
 	pkgrel = 1
 	url = https://liquorix.net/
 	arch = x86_64

Comment

The change only bumps the upstream liquorix-package tarball from 7.2-22 to 7.2-23 and updates the corresponding SHA-512 checksum in .SRCINFO. The kernel source URL, signatures, and PGP keys are unchanged, and there are no new build-time commands, scripts, or privilege-related artifacts introduced by this metadata-only update. Based on the provided diff, this is a routine version refresh with no obvious security impact.

@@ -23,12 +23,12 @@ pkgbase = linux-lqx
 	options = !strip
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.xz
 	source = https://cdn.kernel.org/pub/linux/kernel/v7.x/linux-7.2.tar.sign
-	source = https://github.com/damentz/liquorix-package/archive/7.2-22.tar.gz
+	source = https://github.com/damentz/liquorix-package/archive/7.2-23.tar.gz
 	validpgpkeys = ABAF11C65A2970B130ABE3C479BE3E4300411886
 	validpgpkeys = 647F28654894E3BD457199BE38DBBDC86092693E
 	sha512sums = 47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1
 	sha512sums = SKIP
-	sha512sums = 2c46fa1ee0242ccc9536ec74c66e3fad0721d48d64463b9048b665fca8c8d1d232700c5dd77eedb650397614cdf7a2471e5c483da8e0edf1946814dae96183aa
+	sha512sums = 6a91fbb6b7bd3ac978e6f0396c9720d70656dc27cfb09b685a4d0605b0ff2088206401975263f36e2b6c1040d34f046872dd45ea04222a08bc9a247c7e925f5f
 
 pkgname = linux-lqx
 	pkgdesc = The Linux Liquorix kernel and modules

Comment

The change is a routine version bump in PKGBUILD: it updates the Liquorix patch release number, package version, and the corresponding sha512 checksum for the source archive. I do not see any new sources, network fetches, privilege changes, install-script behavior, or other suspicious packaging changes in this diff. Risk is low.

@@ -54,10 +54,10 @@ _htmldocs_enable=
 _major=7.2
 _srcname=linux-${_major}
 _lqxpatchname=liquorix-package
-_lqxpatchrel=22
+_lqxpatchrel=23
 _lqxpatchver=${_lqxpatchname}-${_major}-${_lqxpatchrel}
 pkgbase=linux-lqx
-pkgver=7.2.13.lqx1
+pkgver=7.2.14.lqx1
 pkgrel=1
 pkgdesc='Linux Liquorix'
 url='https://liquorix.net/'

Comment

The change only updates the package version/release metadata and replaces the sha512 checksum for one source artifact in PKGBUILD. I did not see any new sources, build-time network access, script execution, privilege escalation, or packaging behavior changes. This appears to be a routine upstream version bump with checksum refresh, so risk is low.

@@ -106,7 +106,7 @@ validpgpkeys=(
 )
 sha512sums=('47e63679363261a864d271277340a6f2d45f544e1a056be4159df081f4f6537d0efa865c4af26611ab33a3079ee65db88ec2f6bc0e5fff43e0c043cde0cd91e1'
             'SKIP'
-            '2c46fa1ee0242ccc9536ec74c66e3fad0721d48d64463b9048b665fca8c8d1d232700c5dd77eedb650397614cdf7a2471e5c483da8e0edf1946814dae96183aa')
+            '6a91fbb6b7bd3ac978e6f0396c9720d70656dc27cfb09b685a4d0605b0ff2088206401975263f36e2b6c1040d34f046872dd45ea04222a08bc9a247c7e925f5f')