Review Results

Comment

The change only bumps .SRCINFO metadata from aurutils 22-2 to 23-1. No source URLs, build commands, install scripts, dependencies, or packaging logic are altered in the reviewed hunk, so there is no direct security impact visible here. The only caveat is that .SRCINFO must stay in sync with PKGBUILD, but this diff alone does not introduce any malicious behavior or integrity risk.

@@ -1,7 +1,7 @@
 pkgbase = aurutils
 	pkgdesc = helper tools for the arch user repository
-	pkgver = 22
-	pkgrel = 2
+	pkgver = 23
+	pkgrel = 1
 	url = https://github.com/AladW/aurutils
 	install = aurutils.install
 	changelog = aurutils.changelog

Comment

The change is a straightforward upstream version bump in .SRCINFO from aurutils 22 to 23, with the source URL still using HTTPS on the official GitHub repository and the checksum updated accordingly. No new build steps, scripts, binaries, or privilege-related metadata were introduced in this diff. Based on the provided hunk alone, there are no obvious supply-chain or persistence concerns.

@@ -23,7 +23,7 @@ pkgbase = aurutils
 	optdepends = git-delta: view-delta example script
 	optdepends = python-srcinfo: sync-rebuild example script
 	optdepends = expect: non-interactive usage
-	source = aurutils-22.tar.gz::https://github.com/AladW/aurutils/archive/refs/tags/22.tar.gz
-	sha256sums = c2d84529bcdbe733bcb522b2c9883f2048bca27cf916d10ef5739a1d7d3bccbb
+	source = aurutils-23.tar.gz::https://github.com/AladW/aurutils/archive/refs/tags/23.tar.gz
+	sha256sums = 7017fbf6cab85cfa6e9911b574492c9c57f91df2b1728fd12183fe56132ae313
 
 pkgname = aurutils

Comment

The change is a straightforward version bump in PKGBUILD from aurutils 22 to 23, with the source URL still pointing to the official upstream GitHub tag over HTTPS and the checksum updated accordingly. No new build steps, no additional sources, no install-script changes, and no suspicious dependencies or packaging behavior were introduced in this diff. Based on the provided hunk, this looks like a routine upstream release update with low security risk.

@@ -3,8 +3,8 @@
 # Co-Maintainer: zoorat <zoorat [at] protonmail [dot] com>
 
 pkgname=aurutils
-pkgver=22
-pkgrel=2
+pkgver=23
+pkgrel=1
 pkgdesc='helper tools for the arch user repository'
 url='https://github.com/AladW/aurutils'
 arch=('any')

Comment

The change is a straightforward version bump from 22 to 23 with an updated source tarball checksum. The source remains the official GitHub release archive over HTTPS, and there are no new build steps, scripts, dependencies, or packaging behaviors introduced in the shown diff. Based on the provided hunk, I see no security red flags.

@@ -12,7 +12,7 @@ license=('ISC')
 source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/$pkgver.tar.gz")
 changelog=aurutils.changelog
 install=aurutils.install
-sha256sums=('c2d84529bcdbe733bcb522b2c9883f2048bca27cf916d10ef5739a1d7d3bccbb')
+sha256sums=('7017fbf6cab85cfa6e9911b574492c9c57f91df2b1728fd12183fe56132ae313')
 depends=('git' 'pacutils' 'curl' 'perl' 'perl-json-xs' 'bash' 'trurl')
 optdepends=('bash-completion: bash completion'
             'zsh: zsh completion'