Review Results

Comment

The only change in the reviewed diff is a version bump in .SRCINFO, updating the pinned Google Chrome release tarball/deb URLs and checksums for x86_64 and aarch64. The sources remain HTTPS on the official Google domain, and there are no new build steps, scripts, or packaging changes introduced by this diff. Based on the provided hunk alone, this is a routine upstream version update with no evident security regression.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome
 	pkgdesc = The popular web browser by Google (Stable Channel)
-	pkgver = 156.0.8078.79
+	pkgver = 157.0.8103.38
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome.install

Comment

The change only updates the pinned upstream Google Chrome .deb URLs and their SHA-512 checksums to a newer release for x86_64 and aarch64. The sources remain HTTPS on the official dl.google.com domain, and there are no new build-time commands, scripts, or packaging logic introduced by this .SRCINFO-only update. No obvious security regression is present in the diff itself.

@@ -25,9 +25,9 @@ pkgbase = google-chrome
 	source = google-chrome-stable.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_156.0.8078.79-1_amd64.deb
-	sha512sums_x86_64 = 68ea17afbc84d788ed9e1b6c2c16e979a5e5773b1ae6b6b30e4485d0c39547d7f3a74f028bc5e134cc1412c8534cfdf31b4f85e9f3016fc8b70430d768324315
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_156.0.8078.79-1_arm64.deb
-	sha512sums_aarch64 = 6510cdee61b3ee83c352c460ceb47fedc4caae638dbb380c523d57ea396e02174ffa5073f1932f4108f8416b62482c4759f993e8ccddf3a268737729b8c00d16
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_157.0.8103.38-1_amd64.deb
+	sha512sums_x86_64 = 92a77ba2ef2fce868ecfef0e288e4ef6f6c7b390cb249eb592287a3ce42d21fc36181f4dd234ff072cfa927abcb24cfd9dfa3bdb736d1dcf23eae6adaf91e706
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_157.0.8103.38-1_arm64.deb
+	sha512sums_aarch64 = 09d20ed5c76fe9f7b5a3d085bf1e3f78772ab376764e4318c9b497ce4a2c47b0b901b7daf0107dc2c4955869e21e9390e394ed43a9558d2358845a33cae67222
 
 pkgname = google-chrome

Comment

The only change in the provided hunk is a version bump in PKGBUILD from 156.0.8078.79 to 157.0.8103.38. No source URLs, checksums, build steps, install scripts, permissions, or packaging logic were modified in the reviewed diff, so there is no new security concern visible in this change alone.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-stable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome
-pkgver=156.0.8078.79
+pkgver=157.0.8103.38
 pkgrel=1
 pkgdesc="The popular web browser by Google (Stable Channel)"
 arch=(

Comment

The change only updates the pinned SHA-512 checksums for the architecture-specific Google Chrome .deb sources. The source URLs remain HTTPS and still point to the official Google download host, with no new build-time execution, install-script changes, or packaging behavior changes. Security impact is limited to integrity metadata refresh for upstream artifacts.

@@ -39,8 +39,8 @@ source=('eula_text.html'
         "google-chrome-$_channel.sh")
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             'de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94')
-sha512sums_x86_64=('68ea17afbc84d788ed9e1b6c2c16e979a5e5773b1ae6b6b30e4485d0c39547d7f3a74f028bc5e134cc1412c8534cfdf31b4f85e9f3016fc8b70430d768324315')
-sha512sums_aarch64=('6510cdee61b3ee83c352c460ceb47fedc4caae638dbb380c523d57ea396e02174ffa5073f1932f4108f8416b62482c4759f993e8ccddf3a268737729b8c00d16')
+sha512sums_x86_64=('92a77ba2ef2fce868ecfef0e288e4ef6f6c7b390cb249eb592287a3ce42d21fc36181f4dd234ff072cfa927abcb24cfd9dfa3bdb736d1dcf23eae6adaf91e706')
+sha512sums_aarch64=('09d20ed5c76fe9f7b5a3d085bf1e3f78772ab376764e4318c9b497ce4a2c47b0b901b7daf0107dc2c4955869e21e9390e394ed43a9558d2358845a33cae67222')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")