Review Results

Comment

The change is a routine version bump in .SRCINFO: it updates pkgver/pkgrel and the pinned upstream .deb URL plus its checksum. No new sources, scripts, or build logic are introduced, and the package still fetches from the same official Yandex repository over HTTPS. I don’t see any added security-relevant behavior in this diff alone.

@@ -1,7 +1,7 @@
 pkgbase = yandex-disk
 	pkgdesc = Yandex.Disk keeps your files with you at all times.
-	pkgver = 0.1.6.1080
-	pkgrel = 2
+	pkgver = 0.1.6.1081
+	pkgrel = 1
 	url = http://disk.yandex.ru/
 	install = yandex-disk.install
 	arch = x86_64

Comment

The change is a routine upstream version bump in .SRCINFO from yandex-disk 0.1.6.1080 to 0.1.6.1081, with the source URL still using HTTPS on the official Yandex repository. No new sources, scripts, patches, or packaging behavior are introduced by this diff, and the checksum update is expected for the new .deb artifact. Based on this hunk alone, there are no obvious supply-chain or privilege-escalation concerns.

@@ -10,10 +10,10 @@ pkgbase = yandex-disk
 	depends = gcc
 	depends = gcc-libs
 	depends = zlib
-	source = yandex-disk_0.1.6.1080_amd64.deb::https://repo.yandex.ru/yandex-disk/deb/pool/main/y/yandex-disk/yandex-disk_0.1.6.1080_amd64.deb
+	source = yandex-disk_0.1.6.1081_amd64.deb::https://repo.yandex.ru/yandex-disk/deb/pool/main/y/yandex-disk/yandex-disk_0.1.6.1081_amd64.deb
 	source = yandex-disk.install
 	source = yandex-disk.service
-	md5sums = 19446922ba1713183476953663a2b1cb
+	md5sums = 36cd5e191a0c3e36a90fff5e9de02bc6
 	md5sums = 5ad775bd895526c6b1f335c6d71dbdfa
 	md5sums = 3d0370f3dfadf9da294b91441c226547
 

Comment

The change is limited to a PKGBUILD version bump from 0.1.6.1080 to 0.1.6.1081 and a pkgrel reset. No sources, build steps, install scripts, dependencies, or packaging logic changed in the provided diff hunk. On its face this does not introduce any new security risk; however, I did not assess upstream tarball contents beyond this metadata-only change.

@@ -3,8 +3,8 @@
 # Contributor: Dmitry Chusovitin <dchusovitin@gmail.com>
 
 pkgname='yandex-disk'
-pkgver=0.1.6.1080
-pkgrel=2
+pkgver=0.1.6.1081
+pkgrel=1
 pkgdesc='Yandex.Disk keeps your files with you at all times.'
 arch=('x86_64')
 url='http://disk.yandex.ru/'

Comment

The change is limited to bumping the packaged upstream .deb version from 0.1.6.1080 to 0.1.6.1081 and updating the corresponding md5 checksum. No new sources, scripts, build steps, or privilege-related artifacts were introduced. The package still fetches the binary from the same HTTPS Yandex repository, and this diff does not alter the install script or systemd unit contents. Low risk.

@@ -15,7 +15,7 @@ install=yandex-disk.install
 source=("$_deb_package::https://repo.yandex.ru/yandex-disk/deb/pool/main/y/yandex-disk/$_deb_package"
         "yandex-disk.install"
         "yandex-disk.service")
-md5sums=('19446922ba1713183476953663a2b1cb'
+md5sums=('36cd5e191a0c3e36a90fff5e9de02bc6'
         '5ad775bd895526c6b1f335c6d71dbdfa'
         '3d0370f3dfadf9da294b91441c226547')