Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 2.27.0 to 2.28.0. No source URLs, checksums, install scripts, dependencies, or packaging logic are altered here, so there is no new security-relevant behavior to assess from this diff alone.

@@ -1,6 +1,6 @@
 pkgbase = teams-for-linux
 	pkgdesc = Unofficial Microsoft Teams client for Linux using Electron.
-	pkgver = 2.27.0
+	pkgver = 2.28.0
 	pkgrel = 1
 	url = https://github.com/IsmaelMartinez/teams-for-linux
 	arch = aarch64

Comment

The change is a straightforward version bump in .SRCINFO for teams-for-linux, updating the upstream tarball URL from v2.27.0 to v2.28.0 and its corresponding checksum. The source remains the official GitHub release archive over HTTPS, there are no new sources, scripts, or packaging directives introduced, and no signs of persistence, privilege escalation, or build-time network abuse in this diff hunk. Based on the provided change alone, this is low risk.

@@ -15,9 +15,9 @@ pkgbase = teams-for-linux
 	depends = libxss
 	depends = nss
 	optdepends = libfido2: WebAuthn with FIDO2 devices
-	source = teams-for-linux-2.27.0.tar.gz::https://github.com/IsmaelMartinez/teams-for-linux/archive/v2.27.0.tar.gz
+	source = teams-for-linux-2.28.0.tar.gz::https://github.com/IsmaelMartinez/teams-for-linux/archive/v2.28.0.tar.gz
 	source = teams-for-linux.desktop
-	sha256sums = aa9a7a73cbb3535c439bce385f46ad48a21d70313aa44096fad5245ab6baced4
+	sha256sums = f90554de1bfb9af5cd7db96e4ac8e97effd64ba9d7f5a7f8c15041887d980d39
 	sha256sums = e67c98084736f797c575970935dd773b5c348ea3d9522bc5db733a92361fc05e
 
 pkgname = teams-for-linux

Comment

The change is a straightforward version bump in PKGBUILD from 2.27.0 to 2.28.0 with the corresponding source tarball checksum update. The source remains an HTTPS GitHub release archive from the upstream project, and there are no new build steps, scripts, privilege changes, or additional sources introduced in this diff. Based on the provided hunk, I don’t see any security-relevant regression.

@@ -3,7 +3,7 @@
 # Contributor: Ivelin Velkov <ivelin dot velkov at gmail dot com>
 
 pkgname=teams-for-linux
-pkgver=2.27.0
+pkgver=2.28.0
 pkgrel=1
 pkgdesc="Unofficial Microsoft Teams client for Linux using Electron."
 arch=("aarch64" "armv7h" "i686" "x86_64")

Comment

The change is a straightforward version bump in PKGBUILD from 2.27.0 to 2.28.0 with an updated SHA-256 checksum for the upstream GitHub release tarball. The source remains the official GitHub repository over HTTPS, there are no new build-time downloads, scripts, patches, or packaging changes, and no privilege/persistence red flags are introduced by this diff. Based on the provided hunk, this appears low risk.

@@ -16,7 +16,7 @@ source=(
   "${pkgname}-${pkgver}.tar.gz::https://github.com/IsmaelMartinez/${pkgname}/archive/v${pkgver}.tar.gz"
   "${pkgname}.desktop"
 )
-sha256sums=('aa9a7a73cbb3535c439bce385f46ad48a21d70313aa44096fad5245ab6baced4'
+sha256sums=('f90554de1bfb9af5cd7db96e4ac8e97effd64ba9d7f5a7f8c15041887d980d39'
             'e67c98084736f797c575970935dd773b5c348ea3d9522bc5db733a92361fc05e')
 
 build() {