Review Results

Comment

The change is a routine version bump in .SRCINFO for the official Visual Studio Code binary package. The source URLs remain HTTPS and point to Microsoft's update endpoint, with updated checksums for the new release artifacts. No new sources, scripts, install logic, or packaging behavior are introduced in this diff, so there is no evident security regression in the reviewed change.

@@ -1,6 +1,6 @@
 pkgbase = visual-studio-code-bin
 	pkgdesc = Visual Studio Code (vscode): Editor for building and debugging modern web and cloud applications (official binary version)
-	pkgver = 1.145.3
+	pkgver = 1.146.0
 	pkgrel = 1
 	url = https://code.visualstudio.com/
 	install = visual-studio-code-bin.install

Comment

The change is a routine version bump in .SRCINFO for the prebuilt Visual Studio Code binary package, updating the official Microsoft download URLs from 1.145.3 to 1.146.0 and refreshing the corresponding SHA-256 checksums for each architecture. The sources remain HTTPS and point to the expected upstream update endpoint; there are no new scripts, patches, install hooks, or packaging behavior changes in this diff. No security red flags are introduced by this metadata-only update.

@@ -33,11 +33,11 @@ pkgbase = visual-studio-code-bin
 	options = !strip
 	source = visual-studio-code-bin.sh
 	sha256sums = bd0d9edf69283ebdf4e73e0a7b168d2fcf50acbd01f63674cad93ed4fe42fdad
-	source_x86_64 = code_1.145.3_amd64.deb::https://update.code.visualstudio.com/1.145.3/linux-deb-x64/stable
-	sha256sums_x86_64 = 68d94e293056455af5b40431f71a750eb3cd790813278e546668c7f154ae4258
-	source_aarch64 = code_1.145.3_arm64.deb::https://update.code.visualstudio.com/1.145.3/linux-deb-arm64/stable
-	sha256sums_aarch64 = 0338c2ebc083bcc7a93470ed7a79d9814ea43f36870a3e3778e5c829abefd356
-	source_armv7h = code_1.145.3_armhf.deb::https://update.code.visualstudio.com/1.145.3/linux-deb-armhf/stable
-	sha256sums_armv7h = 28a3eeca71bc51afe800e39aac369b7b406e454e9213dcbfe8d2e174374eb5fd
+	source_x86_64 = code_1.146.0_amd64.deb::https://update.code.visualstudio.com/1.146.0/linux-deb-x64/stable
+	sha256sums_x86_64 = f83565f7f11a60b256807fe2216da8405f9728f193754959695242eecd148992
+	source_aarch64 = code_1.146.0_arm64.deb::https://update.code.visualstudio.com/1.146.0/linux-deb-arm64/stable
+	sha256sums_aarch64 = ae7c714ee9c80bd98323e53cdf211d3c9249a83f34d78b8fd6cfbc143ba2424f
+	source_armv7h = code_1.146.0_armhf.deb::https://update.code.visualstudio.com/1.146.0/linux-deb-armhf/stable
+	sha256sums_armv7h = a28da18dd44cc8709bc3b6e8275df639be958ee859944ac7c03e146e862e06bf
 
 pkgname = visual-studio-code-bin

Comment

This change only bumps the packaged Visual Studio Code version from 1.145.3 to 1.146.0 and updates the corresponding SHA-256 checksums for the upstream .deb artifacts. The source URLs remain HTTPS and point to the official Microsoft update endpoint, with no new build logic, scripts, or packaging behavior introduced. No security-relevant behavior changes are present in the diff itself.

@@ -2,7 +2,7 @@
 
 pkgname=visual-studio-code-bin
 _pkgname=visual-studio-code
-pkgver=1.145.3
+pkgver=1.146.0
 pkgrel=1
 pkgdesc="Visual Studio Code (vscode): Editor for building and debugging modern web and cloud applications (official binary version)"
 arch=('x86_64' 'aarch64' 'armv7h')

Comment

The change only bumps pkgver from 1.145.3 to 1.146.0 and updates the expected SHA-256 checksums for the official Microsoft .deb artifacts on all architectures. The source URLs remain HTTPS and point to the vendor's update endpoint, and there are no new build steps, scripts, or packaging behaviors introduced. No security red flags are evident in this diff alone.

@@ -30,9 +30,9 @@ source_x86_64=(code_${pkgver}_amd64.deb::https://update.code.visualstudio.com/${
 source_aarch64=(code_${pkgver}_arm64.deb::https://update.code.visualstudio.com/${pkgver}/linux-deb-arm64/stable)
 source_armv7h=(code_${pkgver}_armhf.deb::https://update.code.visualstudio.com/${pkgver}/linux-deb-armhf/stable)
 sha256sums=('bd0d9edf69283ebdf4e73e0a7b168d2fcf50acbd01f63674cad93ed4fe42fdad')
-sha256sums_x86_64=('68d94e293056455af5b40431f71a750eb3cd790813278e546668c7f154ae4258')
-sha256sums_aarch64=('0338c2ebc083bcc7a93470ed7a79d9814ea43f36870a3e3778e5c829abefd356')
-sha256sums_armv7h=('28a3eeca71bc51afe800e39aac369b7b406e454e9213dcbfe8d2e174374eb5fd')
+sha256sums_x86_64=('f83565f7f11a60b256807fe2216da8405f9728f193754959695242eecd148992')
+sha256sums_aarch64=('ae7c714ee9c80bd98323e53cdf211d3c9249a83f34d78b8fd6cfbc143ba2424f')
+sha256sums_armv7h=('a28da18dd44cc8709bc3b6e8275df639be958ee859944ac7c03e146e862e06bf')
 
 package() {
   bsdtar -xf data.tar.xz -C "${pkgdir}/"