Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 5.3.21 to 5.3.22. No sources, checksums, dependencies, install scripts, or build logic are altered here, so this diff does not introduce any new security concern on its own. Risk is minimal.

@@ -1,6 +1,6 @@
 pkgbase = rutorrent
 	pkgdesc = Yet another web front-end for rTorrent
-	pkgver = 5.3.21
+	pkgver = 5.3.22
 	pkgrel = 1
 	url = https://github.com/Novik/ruTorrent
 	arch = any

Comment

The change is a straightforward upstream version bump in .SRCINFO from ruTorrent 5.3.21 to 5.3.22, with the corresponding source checksum updated. The source remains the official GitHub release archive over HTTPS, and there are no new build steps, scripts, patches, or privilege-related artifacts introduced by this diff. Based on the provided hunk alone, this does not add any obvious supply-chain or execution risk.

@@ -16,10 +16,10 @@ pkgbase = rutorrent
 	backup = etc/webapps/rutorrent/conf/config.php
 	backup = etc/webapps/rutorrent/conf/plugins.ini
 	backup = etc/webapps/rutorrent/conf/access.ini
-	source = rutorrent-5.3.21.tar.gz::https://github.com/Novik/ruTorrent/archive/v5.3.21.tar.gz
+	source = rutorrent-5.3.22.tar.gz::https://github.com/Novik/ruTorrent/archive/v5.3.22.tar.gz
 	source = apache.example.conf
 	source = apache.example.site.conf
-	sha256sums = aedde51857ba68f03eec69f73188fe3b3b6ff51a99757e5987959c6628e263f8
+	sha256sums = bc0bf99773c3459340c273f7dfeb5a510685ea8b4d05d5d273d6014cad2ae811
 	sha256sums = 79b5aab7ef928727b3ec2aa0f1b0869310adde11cd774d148c03025deb6dec0c
 	sha256sums = 9afe7d2a9aadb5fd6a0fcd907f7f46bdc3630c369a5a684c51bbeeb5b4d354aa
 

Comment

The change is a routine version bump from 5.3.21 to 5.3.22 plus an updated source checksum. No new sources, scripts, build steps, permissions, or packaging behavior were introduced, and the source URL remains the official GitHub release tarball over HTTPS. Based on the diff provided, there are no security red flags in this change itself.

@@ -7,7 +7,7 @@
 
 pkgname=rutorrent
 _pkgname=ruTorrent
-pkgver=5.3.21
+pkgver=5.3.22
 _pkgver=$pkgver
 pkgrel=1
 pkgdesc="Yet another web front-end for rTorrent"

Comment

The change is a straightforward version bump in PKGBUILD from 5.3.21 to 5.3.22 with the corresponding source checksum update. No new sources, no build-script changes, no added network access, and no packaging/install logic changes are introduced by this diff. Based on the provided hunk alone, there are no obvious security red flags.

@@ -22,7 +22,7 @@ source=(
     apache.example.conf
     apache.example.site.conf
 )
-sha256sums=('aedde51857ba68f03eec69f73188fe3b3b6ff51a99757e5987959c6628e263f8'
+sha256sums=('bc0bf99773c3459340c273f7dfeb5a510685ea8b4d05d5d273d6014cad2ae811'
             '79b5aab7ef928727b3ec2aa0f1b0869310adde11cd774d148c03025deb6dec0c'
             '9afe7d2a9aadb5fd6a0fcd907f7f46bdc3630c369a5a684c51bbeeb5b4d354aa')
 backup=(