Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 1.99.56 to 1.99.57. No source URLs, checksums, build steps, install scripts, permissions, or package metadata were altered in this diff. On its face this is a routine upstream version update with no new security red flags visible in the provided change.

@@ -1,6 +1,6 @@
 pkgbase = brave-bin
 	pkgdesc = Web browser that blocks ads and trackers by default (binary release)
-	pkgver = 1.99.56
+	pkgver = 1.99.57
 	pkgrel = 1
 	epoch = 1
 	url = https://brave.com

Comment

This is a routine version bump in .SRCINFO for the Brave binary package. The change updates the provided version, noextract filenames, and official GitHub release URLs/checksums from 1.99.56 to 1.99.57. The sources remain HTTPS and point to the upstream Brave release assets, with pinned release artifacts and updated SHA-256 sums. No new build steps, scripts, permissions, or persistence mechanisms are introduced in this diff.

@@ -17,19 +17,19 @@ pkgbase = brave-bin
 	optdepends = cups: Printer support
 	optdepends = libgnome-keyring: Enable GNOME keyring support
 	optdepends = libnotify: Native notification support
-	provides = brave=1.99.56
+	provides = brave=1.99.57
 	provides = brave-browser
 	conflicts = brave
-	noextract = brave-bin-1.99.56-x86_64.zip
-	noextract = brave-bin-1.99.56-aarch64.zip
+	noextract = brave-bin-1.99.57-x86_64.zip
+	noextract = brave-bin-1.99.57-aarch64.zip
 	options = !strip
 	source = brave-bin.sh
 	source = brave-browser.desktop
 	sha256sums = 75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00
 	sha256sums = c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a
-	source_x86_64 = brave-bin-1.99.56-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.99.56/brave-browser-1.99.56-linux-amd64.zip
-	sha256sums_x86_64 = 8b115b4242b54b743c05ab73fb4ffe2ace5d9e59756ce0e8d65e8b07f08a5d58
-	source_aarch64 = brave-bin-1.99.56-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.99.56/brave-browser-1.99.56-linux-arm64.zip
-	sha256sums_aarch64 = 8c91f11c9a70d1ac8fd277dbf851d7e5e5daa02fd43edd442fce6e5ff301fe1d
+	source_x86_64 = brave-bin-1.99.57-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.99.57/brave-browser-1.99.57-linux-amd64.zip
+	sha256sums_x86_64 = 734bd9e1d24bc0a94c03b0a43845107dd8a29f572c652023cf7177f5fc3a5f38
+	source_aarch64 = brave-bin-1.99.57-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.99.57/brave-browser-1.99.57-linux-arm64.zip
+	sha256sums_aarch64 = 1bdad41be7adc541fb82b5265ed1e8c3d4a36c964ea1ad9254f9f64305285473
 
 pkgname = brave-bin

Comment

The only change in this diff is a version bump in PKGBUILD from 1.99.56 to 1.99.57. No source URLs, checksums, build logic, install scripts, permissions, or packaging behavior were modified in the reviewed hunk. On its face this is a routine upstream version update with no security-relevant changes visible in the provided diff.

@@ -10,7 +10,7 @@
 # Contributor: Giusy Digital <kurmikon at libero dot it>
 
 pkgname=brave-bin
-pkgver=1.99.56
+pkgver=1.99.57
 pkgrel=1
 epoch=1
 pkgdesc='Web browser that blocks ads and trackers by default (binary release)'

Comment

The change only updates the pinned SHA-256 checksums for the upstream Brave release ZIPs on x86_64 and aarch64. The source URLs remain HTTPS GitHub release assets, there are no new build-time downloads, scripts, patches, or packaging logic changes, and no privilege/persistence mechanisms are introduced. This is a routine integrity update, not a security concern by itself.

@@ -35,8 +35,8 @@ source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://github.com/brave/brave
 noextract=(${pkgname}-${pkgver}-x86_64.zip ${pkgname}-${pkgver}-aarch64.zip)
 sha256sums=('75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00'
             'c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a')
-sha256sums_x86_64=('8b115b4242b54b743c05ab73fb4ffe2ace5d9e59756ce0e8d65e8b07f08a5d58')
-sha256sums_aarch64=('8c91f11c9a70d1ac8fd277dbf851d7e5e5daa02fd43edd442fce6e5ff301fe1d')
+sha256sums_x86_64=('734bd9e1d24bc0a94c03b0a43845107dd8a29f572c652023cf7177f5fc3a5f38')
+sha256sums_aarch64=('1bdad41be7adc541fb82b5265ed1e8c3d4a36c964ea1ad9254f9f64305285473')
 
 prepare() {
 	mkdir -p brave