Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 157.0.4341.42 to 157.0.4341.46. No sources, checksums, install scripts, build commands, permissions, or package metadata affecting trust boundaries were changed in the reviewed diff. On its face this is a routine upstream version update with no security-relevant red flags in the provided hunk.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-stable-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 157.0.4341.42
+	pkgver = 157.0.4341.46
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change is a routine version bump in .SRCINFO for the Microsoft Edge binary package, updating the upstream .deb URL and its SHA-256 checksum. The source remains on the official Microsoft HTTPS repository, there are no new build steps, scripts, or privilege-related artifacts introduced by this diff, and no evidence of tampering or supply-chain red flags in the metadata change itself. Based on the provided hunk alone, this appears low risk.

@@ -29,10 +29,10 @@ pkgbase = microsoft-edge-stable-bin
 	conflicts = edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_157.0.4341.42-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/microsoft-edge-stable_157.0.4341.46-1_amd64.deb
 	source = microsoft-edge-stable.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = 1bd6f4753cf139ec751ca74b47054693c5a6c28128461ec1c3dd80c05640e2b9
+	sha256sums = b22585500e6d0366d959cc10cf5864fc1a28524ba2b1eb97ead3eb7ee351b61a
 	sha256sums = dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change only bumps pkgver from 157.0.4341.42 to 157.0.4341.46 in the PKGBUILD metadata. No build logic, sources, checksums, install scripts, or packaging behavior changed, so there is no new security-relevant behavior introduced by this diff. Risk is minimal and limited to the usual trust in the upstream binary package already present before this update.

@@ -10,7 +10,7 @@ pkgname=microsoft-edge-stable-bin
 _pkgname=microsoft-edge
 _pkgshortname=msedge
 _channel=stable
-pkgver=157.0.4341.42
+pkgver=157.0.4341.46
 pkgrel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"
 arch=('x86_64')

Comment

The change is a routine version bump for a prebuilt Microsoft Edge .deb and only updates the corresponding SHA256 checksum. The source remains an HTTPS URL on Microsoft's package repository, with no new build-time code, scripts, patches, or install-time behavior introduced by this diff. I don't see any added persistence, privilege escalation, or integrity red flags in the reviewed hunk.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-stable/${_pkgname}-${_channel}_${pkgver}-1_amd64.deb"
 	"microsoft-edge-stable.sh"
 	"Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('1bd6f4753cf139ec751ca74b47054693c5a6c28128461ec1c3dd80c05640e2b9'
+sha256sums=('b22585500e6d0366d959cc10cf5864fc1a28524ba2b1eb97ead3eb7ee351b61a'
             'dc3765d2de6520b13f105b8001aa0e40291bc9457ac508160b23eea8811e26af'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')