Review Results

Comment

The only change in this diff is a version bump in .SRCINFO from 158.0.4357.0 to 159.0.4378.0. .SRCINFO is metadata used by AUR helpers and does not itself introduce executable behavior, network access, privilege changes, or packaging logic. No suspicious source, install script, or build-step changes are present in the reviewed hunk. Based on this diff alone, there is no security concern.

@@ -1,6 +1,6 @@
 pkgbase = microsoft-edge-dev-bin
 	pkgdesc = A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier
-	pkgver = 158.0.4357.0
+	pkgver = 159.0.4378.0
 	pkgrel = 1
 	url = https://www.microsoftedgeinsider.com/en-us/download
 	arch = x86_64

Comment

The change is a routine version bump in .SRCINFO for a Microsoft Edge Dev binary package: it updates the provided version, the official Microsoft HTTPS .deb source URL, and the corresponding checksum. There are no new sources, no build-script changes, no install-script changes, and no signs of added persistence or privilege escalation. Risk is low and limited to the usual trust in the upstream binary release.

@@ -22,14 +22,14 @@ pkgbase = microsoft-edge-dev-bin
 	optdepends = libunity: for download progress on KDE
 	optdepends = ttf-liberation: fix fonts for some PDFs - CRBug #369991
 	optdepends = xdg-utils
-	provides = microsoft-edge=158.0.4357.0
+	provides = microsoft-edge=159.0.4378.0
 	conflicts = microsoft-edge
 	options = !strip
 	options = !zipman
-	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_158.0.4357.0-1_amd64.deb
+	source = https://packages.microsoft.com/repos/edge/pool/main/m/microsoft-edge-dev/microsoft-edge-dev_159.0.4378.0-1_amd64.deb
 	source = microsoft-edge-dev.sh
 	source = Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf
-	sha256sums = b997a31b1a30a980ee53ba391deaaa2b69ae34ed403d455c47c367fd4c3916f2
+	sha256sums = 209f54a27eb99cacf9243f626ffe80adb2ad8f7c16bdb033a964d90e219b133d
 	sha256sums = 285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a
 	sha256sums = edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e
 

Comment

The change is a straightforward version bump in PKGBUILD from 158.0.4357.0 to 159.0.4378.0 with no accompanying changes to source URLs, checksums, build logic, install scripts, or packaging behavior. Based on the provided diff, there are no new security red flags such as added network fetches, privilege escalation, persistence mechanisms, or integrity regressions.

@@ -10,7 +10,7 @@ _channel=dev
 _pkgname=microsoft-edge-dev
 pkgname=microsoft-edge-dev-bin
 _pkgshortname=msedge-dev
-pkgver=158.0.4357.0
+pkgver=159.0.4378.0
 pkgrel=1
 _uprel=1
 pkgdesc="A browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier"

Comment

The change only bumps the packaged Microsoft Edge Dev version and updates the SHA256 for the upstream .deb source. The source remains an HTTPS URL on Microsoft's package repository, with no new build-time code execution, no added sources, and no packaging logic changes. I don't see any integrity or persistence red flags introduced by this diff alone.

@@ -33,7 +33,7 @@ options=(!strip !zipman)
 source=("https://packages.microsoft.com/repos/edge/pool/main/m/$_pkgname/${_pkgname}_$pkgver-${_uprel}_amd64.deb"
         "$_pkgname.sh"
         "Microsoft Standard Application License Terms - Standalone (free) Use Terms.pdf")
-sha256sums=('b997a31b1a30a980ee53ba391deaaa2b69ae34ed403d455c47c367fd4c3916f2'
+sha256sums=('209f54a27eb99cacf9243f626ffe80adb2ad8f7c16bdb033a964d90e219b133d'
             '285afe53b2cd617ae7f4930a1d0befe12a97ae31c30cfad74e97bf695c6f6a8a'
             'edf2ed596eb068f168287fc76aa713ad5e0afb59f0a0a47a4f29c0c124ade15e')