Review Results

Comment

The change only bumps the package version in .SRCINFO from 2026.2.4 to 2026.3. No source URLs, checksums, build steps, install scripts, or permissions are changed in the provided diff, so there is no direct security signal in this hunk. This is a metadata-only update and appears low risk based on the reviewed change alone.

@@ -1,6 +1,6 @@
 pkgbase = phpstorm
 	pkgdesc = Lightweight and Smart PHP IDE
-	pkgver = 2026.2.4
+	pkgver = 2026.3
 	pkgrel = 1
 	url = https://www.jetbrains.com/phpstorm/
 	arch = x86_64

Comment

The change is limited to updating the upstream PhpStorm tarball version and its corresponding BLAKE2 checksum in .SRCINFO. The source remains the official JetBrains HTTPS download URL, with no new build steps, scripts, patches, or packaging logic introduced. I do not see any supply-chain red flags in this diff alone.

@@ -9,10 +9,10 @@ pkgbase = phpstorm
 	depends = glib2
 	depends = python
 	options = !strip
-	source = https://download.jetbrains.com/webide/PhpStorm-2026.2.4.tar.gz
+	source = https://download.jetbrains.com/webide/PhpStorm-2026.3.tar.gz
 	source = jetbrains-phpstorm.desktop
 	source = LICENSE
-	b2sums = 20a8378dca6cfcbf9918ba85c08e8d155d95060e677cf4ec73e2dda3c33c719689198c65da34efe7d730d202f7f2e32f6e97f47ace1953605a1cab0a94ea785b
+	b2sums = ee4afc6f972fff8ac822c046925aa55f20c4cdac9dfc9154e39d80bc8ebf718002f7937a96babfbed2df1f5709dcdf427931ba7969842407fda8bbc7645f2698
 	b2sums = ae7f5b69c057c78dac26ca571fc29c5deff0ae7c2955dd39561168a1ab0e25dfd3b0c6570a42af135588e9791c96958ffaaeea6db983f4fd8e8ec68efad413a5
 	b2sums = dadaf0e67b598aa7a7a4bf8644943a7ee8ebf4412abb17cd307f5989e36caf9d0db529a0e717a9df5d9537b10c4b13e814b955ada6f0d445913c812b63804e77
 

Comment

The change is a straightforward version bump for PhpStorm from 2026.2.4 to 2026.3, with the corresponding source checksum updated. The source remains an HTTPS JetBrains download URL, and there are no new build steps, scripts, dependencies, or packaging changes introduced in this diff. No security red flags are evident from the provided hunk alone.

@@ -6,7 +6,7 @@
 
 pkgbase=phpstorm
 pkgname=(phpstorm phpstorm-jre)
-pkgver=2026.2.4
+pkgver=2026.3
 pkgrel=1
 pkgdesc='Lightweight and Smart PHP IDE'
 arch=('x86_64' 'i686')

Comment

The change only updates the B2 checksum for the upstream PhpStorm tarball in PKGBUILD. The source URL remains the official JetBrains HTTPS download endpoint, and no build logic, install scripts, permissions, or additional sources are introduced. This looks like a routine upstream release refresh or re-roll checksum update, with no evident security impact from the diff itself.

@@ -17,7 +17,7 @@ options=('!strip')
 source=("https://download.jetbrains.com/webide/PhpStorm-${pkgver%b*}.tar.gz"
         jetbrains-phpstorm.desktop
         LICENSE)
-b2sums=('20a8378dca6cfcbf9918ba85c08e8d155d95060e677cf4ec73e2dda3c33c719689198c65da34efe7d730d202f7f2e32f6e97f47ace1953605a1cab0a94ea785b'
+b2sums=('ee4afc6f972fff8ac822c046925aa55f20c4cdac9dfc9154e39d80bc8ebf718002f7937a96babfbed2df1f5709dcdf427931ba7969842407fda8bbc7645f2698'
         'ae7f5b69c057c78dac26ca571fc29c5deff0ae7c2955dd39561168a1ab0e25dfd3b0c6570a42af135588e9791c96958ffaaeea6db983f4fd8e8ec68efad413a5'
         'dadaf0e67b598aa7a7a4bf8644943a7ee8ebf4412abb17cd307f5989e36caf9d0db529a0e717a9df5d9537b10c4b13e814b955ada6f0d445913c812b63804e77')