Review Results

Comment

The change only updates .SRCINFO metadata to reflect a new upstream version (1.1.1) and resets pkgrel from 2 to 1. No build logic, sources, checksums, install scripts, or packaging behavior are changed in this diff. On its face this is a routine version bump with no security-relevant red flags.

@@ -1,7 +1,7 @@
 pkgbase = bstring
 	pkgdesc = Better String Library
-	pkgver = 1.1.0
-	pkgrel = 2
+	pkgver = 1.1.1
+	pkgrel = 1
 	url = https://mike.steinert.ca/bstring
 	arch = x86_64
 	arch = i686

Comment

The change is a straightforward upstream version bump in .SRCINFO from bstring 1.1.0 to 1.1.1, with the source URL still using HTTPS and pointing to the official GitHub release asset. No new sources, scripts, build steps, or packaging metadata were introduced, and there are no signs of privilege escalation or persistence mechanisms in this diff. The only notable change is the updated checksum for the new tarball, which is expected for a release bump.

@@ -12,7 +12,7 @@ pkgbase = bstring
 	license = BSD-3-Clause
 	makedepends = meson
 	depends = glibc
-	source = https://github.com/msteinert/bstring/releases/download/v1.1.0/bstring-1.1.0.tar.xz
-	md5sums = 72e6920f00587346da233ede274f5d6a
+	source = https://github.com/msteinert/bstring/releases/download/v1.1.1/bstring-1.1.1.tar.xz
+	md5sums = a2d1d07166930c3030d84dc41fef65d0
 
 pkgname = bstring

Comment

The change is a straightforward version bump from 1.1.0 to 1.1.1 with an updated checksum. The source remains an HTTPS GitHub release tarball, there are no new build steps, no additional sources, and no install scripts or packaging logic changes. I do not see any supply-chain, persistence, or privilege-escalation concerns in this diff.

@@ -1,15 +1,15 @@
 # Maintainer: Denis Yantarev <denis dot yantarev at gmail dot com>
 
 pkgname=bstring
-pkgver=1.1.0
-pkgrel=2
+pkgver=1.1.1
+pkgrel=1
 pkgdesc='Better String Library'
 url='https://mike.steinert.ca/bstring'
 license=('BSD-3-Clause')
 
 source=("https://github.com/msteinert/bstring/releases/download/v${pkgver}/bstring-${pkgver}.tar.xz")
 
-md5sums=('72e6920f00587346da233ede274f5d6a')
+md5sums=('a2d1d07166930c3030d84dc41fef65d0')
 
 arch=('x86_64' 'i686' 'pentium4' 'armv6h' 'armv7h' 'aarch64')