Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 1.99.55 to 1.99.56 for the existing brave-bin package metadata. No sources, checksums, install scripts, dependencies, or build logic are modified in the reviewed diff, so there is no new security-relevant behavior introduced by this change alone.

@@ -1,6 +1,6 @@
 pkgbase = brave-bin
 	pkgdesc = Web browser that blocks ads and trackers by default (binary release)
-	pkgver = 1.99.55
+	pkgver = 1.99.56
 	pkgrel = 1
 	epoch = 1
 	url = https://brave.com

Comment

The change is a straightforward version bump in .SRCINFO for an AUR binary package, updating the provided Brave release URLs, checksums, and noextract filenames from 1.99.55 to 1.99.56. The sources remain HTTPS GitHub release assets from the upstream Brave project, with pinned versioned artifacts and matching checksums. No new build steps, scripts, permissions, or persistence mechanisms are introduced by this diff.

@@ -17,19 +17,19 @@ pkgbase = brave-bin
 	optdepends = cups: Printer support
 	optdepends = libgnome-keyring: Enable GNOME keyring support
 	optdepends = libnotify: Native notification support
-	provides = brave=1.99.55
+	provides = brave=1.99.56
 	provides = brave-browser
 	conflicts = brave
-	noextract = brave-bin-1.99.55-x86_64.zip
-	noextract = brave-bin-1.99.55-aarch64.zip
+	noextract = brave-bin-1.99.56-x86_64.zip
+	noextract = brave-bin-1.99.56-aarch64.zip
 	options = !strip
 	source = brave-bin.sh
 	source = brave-browser.desktop
 	sha256sums = 75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00
 	sha256sums = c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a
-	source_x86_64 = brave-bin-1.99.55-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.99.55/brave-browser-1.99.55-linux-amd64.zip
-	sha256sums_x86_64 = ace5409dfb5a6238e3c09576fab56ef76d31e00ed6d62f10d0b41685ab3fe200
-	source_aarch64 = brave-bin-1.99.55-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.99.55/brave-browser-1.99.55-linux-arm64.zip
-	sha256sums_aarch64 = 1b542c83474770a94606e03e4a57536d586b905a22861a3440095729f388e7fc
+	source_x86_64 = brave-bin-1.99.56-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.99.56/brave-browser-1.99.56-linux-amd64.zip
+	sha256sums_x86_64 = 8b115b4242b54b743c05ab73fb4ffe2ace5d9e59756ce0e8d65e8b07f08a5d58
+	source_aarch64 = brave-bin-1.99.56-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.99.56/brave-browser-1.99.56-linux-arm64.zip
+	sha256sums_aarch64 = 8c91f11c9a70d1ac8fd277dbf851d7e5e5daa02fd43edd442fce6e5ff301fe1d
 
 pkgname = brave-bin

Comment

The change is a trivial version bump in PKGBUILD from 1.99.55 to 1.99.56 with no modifications to sources, checksums, build steps, install scripts, or package metadata beyond pkgver. Based on the provided diff, there are no new security concerns introduced by this change.

@@ -10,7 +10,7 @@
 # Contributor: Giusy Digital <kurmikon at libero dot it>
 
 pkgname=brave-bin
-pkgver=1.99.55
+pkgver=1.99.56
 pkgrel=1
 epoch=1
 pkgdesc='Web browser that blocks ads and trackers by default (binary release)'

Comment

This is a routine version bump for a binary package, with only updated SHA-256 checksums for the upstream Brave release archives. The sources remain HTTPS GitHub release URLs, there are no new build-time downloads, scripts, patches, privilege changes, or packaging logic changes. Based on the diff provided, I see no security red flags beyond the inherent trust in upstream binary blobs, which is unchanged from the prior package.

@@ -35,8 +35,8 @@ source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://github.com/brave/brave
 noextract=(${pkgname}-${pkgver}-x86_64.zip ${pkgname}-${pkgver}-aarch64.zip)
 sha256sums=('75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00'
             'c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a')
-sha256sums_x86_64=('ace5409dfb5a6238e3c09576fab56ef76d31e00ed6d62f10d0b41685ab3fe200')
-sha256sums_aarch64=('1b542c83474770a94606e03e4a57536d586b905a22861a3440095729f388e7fc')
+sha256sums_x86_64=('8b115b4242b54b743c05ab73fb4ffe2ace5d9e59756ce0e8d65e8b07f08a5d58')
+sha256sums_aarch64=('8c91f11c9a70d1ac8fd277dbf851d7e5e5daa02fd43edd442fce6e5ff301fe1d')
 
 prepare() {
 	mkdir -p brave