Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 159.0.8130.0 to 159.0.8144.0. No sources, checksums, build logic, install scripts, or packaging metadata were altered in the reviewed diff. On its face this is a routine upstream version update with no new security red flags visible in the provided change.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome-dev
 	pkgdesc = The popular web browser by Google (Dev Channel)
-	pkgver = 159.0.8130.0
+	pkgver = 159.0.8144.0
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome-dev.install

Comment

The change only bumps the pinned upstream Google Chrome Dev .deb version and updates the corresponding SHA-512 checksums for x86_64 and aarch64. The download remains on the official HTTPS dl.google.com domain, there are no new build-time commands, scripts, or packaging logic changes, and no integrity red flags beyond the inherent trust in a prebuilt upstream binary package that was already present. This is a routine version update with no additional security concern visible in the diff.

@@ -26,9 +26,9 @@ pkgbase = google-chrome-dev
 	source = google-chrome-unstable.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = 445eb36a588f49af018ded3d852b63e0523ffac20c25be721f3ef4663591256849432bebb3d9f352e4f53cbe1fb77fa67cf8911c9161f826490a21adbdcc81f4
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_159.0.8130.0-1_amd64.deb
-	sha512sums_x86_64 = 9e7f12aa4ad4d033d7c21b30afb9b7366f1908a361c6ca213eea2811e628d30edb2c815f2f020ffe98f1c301bb070dcf05edce964f5285f624c7425ab294ece6
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_159.0.8130.0-1_arm64.deb
-	sha512sums_aarch64 = 916331fb0583c8888bd735288bee7ea7ac0735ddb1e84836ad2c4cd9219080efab906c1a9df1aa09e2928a5fbb0fbf6ecac69f6293369c64e094017ac6007b53
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_159.0.8144.0-1_amd64.deb
+	sha512sums_x86_64 = 56a1ab33c95547c134ab5540f7a92094df6494d780bff38785234075672ee3c1740fa02fabc406d0ba168e75f559150c9630d343ba19120f5f71acff73d96e3f
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-unstable/google-chrome-unstable_159.0.8144.0-1_arm64.deb
+	sha512sums_aarch64 = df4bfa5e793b025d0b1a39578bdfebd546212314cad4f7a76d9712f8224fca08c26391b1aefb53c29b9772a4a1463606d223528c7fbe4564857408f577a57adc
 
 pkgname = google-chrome-dev

Comment

The change is a routine version bump in PKGBUILD from 159.0.8130.0 to 159.0.8144.0 with no other modifications. There are no new sources, build steps, install scripts, permissions changes, or packaging logic changes in the provided diff hunk, so no additional security risk is introduced by this change alone.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-unstable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome-dev
-pkgver=159.0.8130.0
+pkgver=159.0.8144.0
 pkgrel=1
 pkgdesc="The popular web browser by Google (Dev Channel)"
 arch=(

Comment

The change only updates the pinned SHA-512 checksums for the architecture-specific Google Chrome .deb downloads while keeping the HTTPS source URLs unchanged. This is a normal integrity update for a new upstream release and does not introduce new code execution, build-time network access, privilege escalation, or packaging red flags in the reviewed hunk. No suspicious sources or install-script changes are present in this diff.

@@ -42,8 +42,8 @@ source=(
 )
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             '445eb36a588f49af018ded3d852b63e0523ffac20c25be721f3ef4663591256849432bebb3d9f352e4f53cbe1fb77fa67cf8911c9161f826490a21adbdcc81f4')
-sha512sums_x86_64=('9e7f12aa4ad4d033d7c21b30afb9b7366f1908a361c6ca213eea2811e628d30edb2c815f2f020ffe98f1c301bb070dcf05edce964f5285f624c7425ab294ece6')
-sha512sums_aarch64=('916331fb0583c8888bd735288bee7ea7ac0735ddb1e84836ad2c4cd9219080efab906c1a9df1aa09e2928a5fbb0fbf6ecac69f6293369c64e094017ac6007b53')
+sha512sums_x86_64=('56a1ab33c95547c134ab5540f7a92094df6494d780bff38785234075672ee3c1740fa02fabc406d0ba168e75f559150c9630d343ba19120f5f71acff73d96e3f')
+sha512sums_aarch64=('df4bfa5e793b025d0b1a39578bdfebd546212314cad4f7a76d9712f8224fca08c26391b1aefb53c29b9772a4a1463606d223528c7fbe4564857408f577a57adc')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")