Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 8.3.4191.23 to 8.4.4226.3 and an updated generation timestamp. No sources, checksums, build steps, install scripts, or packaging metadata changed here, so there is no evidence of added attack surface or integrity regression in this diff alone.

@@ -1,8 +1,8 @@
 # Generated by makepkg 7.1.0
-# Wed Nov  4 10:58:53 UTC 2026
+# Mon Nov  9 16:11:38 UTC 2026
 pkgbase = vivaldi-snapshot
 	pkgdesc = An advanced browser made with the power user in mind. Snapshot
-	pkgver = 8.3.4191.23
+	pkgver = 8.4.4226.3
 	pkgrel = 1
 	url = https://vivaldi.com
 	arch = x86_64

Comment

The change only bumps the upstream Vivaldi snapshot RPM URL and updates its SHA-512 checksum in .SRCINFO. The source remains HTTPS from the official Vivaldi download domain, and there are no new build steps, scripts, or packaging behaviors introduced by this diff. No additional integrity or persistence concerns are evident from the metadata change alone.

@@ -36,9 +36,9 @@ pkgbase = vivaldi-snapshot
 	optdepends = upower: Battery Status API support
 	options = !strip
 	options = !zipman
-	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.3.4191.23-1.x86_64.rpm
+	source = https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-8.4.4226.3-1.x86_64.rpm
 	source = 0001-add-support-for-user-flags.patch
-	sha512sums = 8f8afc29501910e8853c34a3ef4a0181bd56083ca12ff09f15f55a4567988275f6862d80d32b8a4e1638bec30268ea5644b31ad8b47c87d4ba398569905ff32c
+	sha512sums = 8aca78fe26b2302d9be90d5e93eeb9eb2776e2a5973a396ccb014df3f68c36b0e768977ed0e30a6938bee2ab60bdcbc0838def982e1f6f64b5839a909dd86517
 	sha512sums = 6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726
 
 pkgname = vivaldi-snapshot

Comment

The change only bumps the upstream Vivaldi snapshot version in PKGBUILD from 8.3.4191.23-1 to 8.4.4226.3-1 and updates pkgver accordingly. No new sources, build steps, install scripts, permissions changes, or other packaging logic are introduced in the reviewed hunk. On its face this is a routine version update with no security red flags in the diff provided.

@@ -2,8 +2,8 @@
 # Contributor: TZ86
 
 pkgname=vivaldi-snapshot
-_rpmversion=8.3.4191.23-1
-pkgver=8.3.4191.23
+_rpmversion=8.4.4226.3-1
+pkgver=8.4.4226.3
 pkgrel=1
 pkgdesc='An advanced browser made with the power user in mind. Snapshot'
 url="https://vivaldi.com"

Comment

The only change is an updated SHA-512 checksum for the upstream Vivaldi snapshot RPM source. The source URL remains HTTPS and unchanged, and there are no new build steps, scripts, or packaging behaviors introduced by this diff. This is a normal integrity update, not a security concern in itself.

@@ -42,7 +42,7 @@ optdepends=(
 )
 source=("https://downloads.vivaldi.com/snapshot/vivaldi-snapshot-${_rpmversion}.x86_64.rpm"
         '0001-add-support-for-user-flags.patch')
-sha512sums=('8f8afc29501910e8853c34a3ef4a0181bd56083ca12ff09f15f55a4567988275f6862d80d32b8a4e1638bec30268ea5644b31ad8b47c87d4ba398569905ff32c'
+sha512sums=('8aca78fe26b2302d9be90d5e93eeb9eb2776e2a5973a396ccb014df3f68c36b0e768977ed0e30a6938bee2ab60bdcbc0838def982e1f6f64b5839a909dd86517'
             '6b230614419416c44adf8fc2a677f8b1f1aca16949d20b7499417737001a6e9e314fc5841afaf402ad55b09910fca4c70fa7b6d38509b0546959bdbefb036726')
 
 package() {