Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 157.0.8103.50 to 157.0.8103.78. No source URLs, checksums, build steps, install scripts, or packaging metadata were altered in the reviewed diff, so there is no new security concern visible here. This is a routine upstream version update in metadata only.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome
 	pkgdesc = The popular web browser by Google (Stable Channel)
-	pkgver = 157.0.8103.50
+	pkgver = 157.0.8103.78
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome.install

Comment

The change only updates the pinned upstream Google Chrome .deb URLs and their SHA-512 checksums in .SRCINFO from 157.0.8103.50-1 to 157.0.8103.78-1 for x86_64 and aarch64. This is a routine version bump on HTTPS from the official dl.google.com host, with no new sources, scripts, build logic, or packaging behavior introduced in the reviewed hunk. No security red flags are evident in this diff alone.

@@ -25,9 +25,9 @@ pkgbase = google-chrome
 	source = google-chrome-stable.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_157.0.8103.50-1_amd64.deb
-	sha512sums_x86_64 = 49834768987ee0323800be36433d7d381b5a213919f932b16f8e0c2f3720403058f350eb89cc0f3747048f244975ed68c14ab6e885d20a8dd7548704374bf152
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_157.0.8103.50-1_arm64.deb
-	sha512sums_aarch64 = b017a2b91f805dfe15531c95d6e8d7621346360bdc69976c21e7be90fd24a3db6710af313735425e44b0ba8d3aa3be316a5591d8e52f41bf294ef5299035f049
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_157.0.8103.78-1_amd64.deb
+	sha512sums_x86_64 = b7609f7eda276e569133ba7047dee4bfcbf431fc90ed38fe7c7fbb1c18c8a6a8fd6614915ab6910974b26d9e24c44b2f3142c02927e88861779b429a67a77bea
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_157.0.8103.78-1_arm64.deb
+	sha512sums_aarch64 = da9f796c7bc0d884c09ab3b69edd46f5d7cee27d8fc062ba66d5197b1cd1021798f3f9638d21409efe38fb9d7221ce243d0df779a1652f2d207618abeeb7618e
 
 pkgname = google-chrome

Comment

The change is a straightforward version bump in PKGBUILD from 157.0.8103.50 to 157.0.8103.78 with no other modifications shown. There are no new sources, build steps, install scripts, permissions changes, or other security-relevant packaging changes in the provided diff hunk. Based on this hunk alone, I see no evidence of malicious behavior or integrity regression.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-stable" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome
-pkgver=157.0.8103.50
+pkgver=157.0.8103.78
 pkgrel=1
 pkgdesc="The popular web browser by Google (Stable Channel)"
 arch=(

Comment

The change only updates the pinned SHA-512 checksums for the architecture-specific Google Chrome .deb sources. The source URLs remain HTTPS and point to the official Google download host, with no new build steps, scripts, or packaging logic introduced. This is a normal integrity-bump for an upstream release and does not add any obvious security risk in the PKGBUILD itself.

@@ -39,8 +39,8 @@ source=('eula_text.html'
         "google-chrome-$_channel.sh")
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             'de02b498a4b5b93e21622c8dba57befe795d733a04656be911cc38e28bfef0e20470450f44be523bbde8d4de28f79c10434846ca01fc2a2f4e67707b79332f94')
-sha512sums_x86_64=('49834768987ee0323800be36433d7d381b5a213919f932b16f8e0c2f3720403058f350eb89cc0f3747048f244975ed68c14ab6e885d20a8dd7548704374bf152')
-sha512sums_aarch64=('b017a2b91f805dfe15531c95d6e8d7621346360bdc69976c21e7be90fd24a3db6710af313735425e44b0ba8d3aa3be316a5591d8e52f41bf294ef5299035f049')
+sha512sums_x86_64=('b7609f7eda276e569133ba7047dee4bfcbf431fc90ed38fe7c7fbb1c18c8a6a8fd6614915ab6910974b26d9e24c44b2f3142c02927e88861779b429a67a77bea')
+sha512sums_aarch64=('da9f796c7bc0d884c09ab3b69edd46f5d7cee27d8fc062ba66d5197b1cd1021798f3f9638d21409efe38fb9d7221ce243d0df779a1652f2d207618abeeb7618e')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")