Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 591.0.0 to 592.0.0. No sources, checksums, build steps, install scripts, permissions, or package metadata with security impact were changed in the provided diff. Based on this hunk alone, there is no evidence of malicious behavior or integrity regression.

@@ -1,6 +1,6 @@
 pkgbase = google-cloud-cli
 	pkgdesc = A core set of command-line tools for the Google Cloud Platform. Includes only gcloud core (with beta and alpha commands), gcloud-crc32c and man pages
-	pkgver = 591.0.0
+	pkgver = 592.0.0
 	pkgrel = 1
 	url = https://cloud.google.com/cli/
 	arch = x86_64

Comment

The change is a routine version bump in .SRCINFO from 591.0.0 to 592.0.0, updating the per-architecture source tarball URLs and checksums. The sources remain HTTPS on Google’s official download host, and there are no new scripts, build steps, or packaging behaviors introduced by this metadata-only change. No security red flags are evident in the provided diff.

@@ -17,10 +17,10 @@ pkgbase = google-cloud-cli
 	source = google-cloud-cli.install
 	sha256sums = 6e88b535c020b0f28c986fdb66918f8c07e4d337e813b77ec2068068f03457f8
 	sha256sums = 6ac95bcc5afa06e9c1e3bd402ecbe1a2092b963d70a8f314215dd4be27e16fc6
-	source_x86_64 = google-cloud-cli-591.0.0.orig_x86_64.tar.gz::https://dl.google.com/dl/cloudsdk/release/downloads/for_packagers/linux/google-cloud-cli_591.0.0.orig_amd64.tar.gz
-	sha256sums_x86_64 = 23e67d8de3a5b4dd4e92028648f7d51c0b6a7c65b71d4c5765316c998c95b506
-	source_aarch64 = google-cloud-cli-591.0.0.orig_aarch64.tar.gz::https://dl.google.com/dl/cloudsdk/release/downloads/for_packagers/linux/google-cloud-cli_591.0.0.orig_aarch64.tar.gz
-	sha256sums_aarch64 = f59f6d9fededa7349c900039a78389b7939dfe0558f742a46433469a6751d429
+	source_x86_64 = google-cloud-cli-592.0.0.orig_x86_64.tar.gz::https://dl.google.com/dl/cloudsdk/release/downloads/for_packagers/linux/google-cloud-cli_592.0.0.orig_amd64.tar.gz
+	sha256sums_x86_64 = 5289e52163f465125dcbb81eb9d5286480c539076a059c223ed23401f2604f36
+	source_aarch64 = google-cloud-cli-592.0.0.orig_aarch64.tar.gz::https://dl.google.com/dl/cloudsdk/release/downloads/for_packagers/linux/google-cloud-cli_592.0.0.orig_aarch64.tar.gz
+	sha256sums_aarch64 = 47575dd281e8c7eff422e72de79b4c6a50436f0e1b8063b153b8b51af0331632
 
 pkgname = google-cloud-cli
 	install = google-cloud-cli.install

Comment

The only change in this hunk is a version bump from 591.0.0 to 592.0.0 in PKGBUILD. No source URLs, checksums, build commands, install scripts, permissions, or packaging logic were modified in the reviewed diff. Based on this hunk alone, there are no new security red flags.

@@ -64,7 +64,7 @@ pkgname=(
 #   'google-cloud-cli-component-kubectl'
 #   'google-cloud-cli-component-gsutil'
 # )
-pkgver=591.0.0
+pkgver=592.0.0
 pkgrel=1
 pkgdesc="A core set of command-line tools for the Google Cloud Platform. Includes only gcloud core (with beta and alpha commands), gcloud-crc32c and man pages"
 url="https://cloud.google.com/cli/"

Comment

The change only bumps google-cloud-cli from 591.0.0 to 592.0.0 and updates the corresponding x86_64/aarch64 source checksums. The sources remain HTTPS downloads from dl.google.com, there are no new build steps, scripts, patches, or privilege/persistence mechanisms introduced, and the package still appears to be a straightforward repackaging of upstream release artifacts. No security red flags are evident in this diff alone.

@@ -86,8 +86,8 @@ source_aarch64=("$pkgbase-$pkgver.orig_aarch64.tar.gz::https://dl.google.com/dl/
 
 sha256sums=('6e88b535c020b0f28c986fdb66918f8c07e4d337e813b77ec2068068f03457f8'
             '6ac95bcc5afa06e9c1e3bd402ecbe1a2092b963d70a8f314215dd4be27e16fc6')
-sha256sums_x86_64=('23e67d8de3a5b4dd4e92028648f7d51c0b6a7c65b71d4c5765316c998c95b506')
-sha256sums_aarch64=('f59f6d9fededa7349c900039a78389b7939dfe0558f742a46433469a6751d429')
+sha256sums_x86_64=('5289e52163f465125dcbb81eb9d5286480c539076a059c223ed23401f2604f36')
+sha256sums_aarch64=('47575dd281e8c7eff422e72de79b4c6a50436f0e1b8063b153b8b51af0331632')
 
 prepare() {
   cd "$_extracted_name"