Review Results

Comment

The only change in this .SRCINFO is a pkgver bump from 158.0.8127.2 to 158.0.8127.18. No sources, checksums, build logic, install scripts, or packaging metadata were altered in the reviewed hunk, so there is no new security-relevant behavior introduced by this diff alone. This appears to be a routine version update.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome-beta
 	pkgdesc = The popular web browser by Google (Beta Channel)
-	pkgver = 158.0.8127.2
+	pkgver = 158.0.8127.18
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome-beta.install

Comment

The change only updates the pinned upstream Google Chrome beta binary package URLs and their corresponding SHA-512 checksums from version 158.0.8127.2-1 to 158.0.8127.18-1 for x86_64 and aarch64. The sources remain HTTPS on the official dl.google.com domain, and the integrity hashes are updated consistently. No new build-time code, scripts, or packaging behavior is introduced by this .SRCINFO-only change.

@@ -26,9 +26,9 @@ pkgbase = google-chrome-beta
 	source = google-chrome-beta.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = 17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_158.0.8127.2-1_amd64.deb
-	sha512sums_x86_64 = 2e460c53e452d8dcae1dd229c6ad282314d3dc70637c137f2987c5401784906dbbcecc84451e1a47fbd6aeb77cdd5ed83aeb5f7752c39dab0b3b4117771c1b8d
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_158.0.8127.2-1_arm64.deb
-	sha512sums_aarch64 = f1c4ea37aa59d3bf9e283300142979137ad2e0a4a3aa145d072117758212a1298f12e6324d4ea6ef6d85310042d1ecaf52e16eb07d1a79cb7baf98daa4a4d91c
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_158.0.8127.18-1_amd64.deb
+	sha512sums_x86_64 = 8a4a711ef38b35079d0e89a558cbc9cf74a13077c7f4b947587a1631e960a20c44b8250cc1c1033cfa074fa1838ae0a6a18b0d5197479a410a938dd1490171d3
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_158.0.8127.18-1_arm64.deb
+	sha512sums_aarch64 = a294a9c81231a3741291cc3f073fee3d253d6c6542a3d6976cb4437d84a397f4d671117d4658cff2ec46c3429ec7279d360493b5b973de8cd2b0d5762ae26d9c
 
 pkgname = google-chrome-beta

Comment

The only change in this diff is a pkgver bump from 158.0.8127.2 to 158.0.8127.18 in PKGBUILD. No build logic, sources, install scripts, permissions, or network behavior changed. This is a routine version update with no visible security red flags in the provided hunk.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-beta" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome-beta
-pkgver=158.0.8127.2
+pkgver=158.0.8127.18
 pkgrel=1
 pkgdesc="The popular web browser by Google (Beta Channel)"
 arch=(

Comment

The change only updates the pinned SHA-512 checksums for the architecture-specific Google Chrome beta .deb downloads. The source URLs remain HTTPS and point to the official Google download host, with no new build-time execution, network fetches outside source(), or packaging/install-script changes. This is a normal upstream release checksum refresh and does not introduce an obvious security issue in the PKGBUILD diff itself.

@@ -42,8 +42,8 @@ source=(
 )
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             '17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03')
-sha512sums_x86_64=('2e460c53e452d8dcae1dd229c6ad282314d3dc70637c137f2987c5401784906dbbcecc84451e1a47fbd6aeb77cdd5ed83aeb5f7752c39dab0b3b4117771c1b8d')
-sha512sums_aarch64=('f1c4ea37aa59d3bf9e283300142979137ad2e0a4a3aa145d072117758212a1298f12e6324d4ea6ef6d85310042d1ecaf52e16eb07d1a79cb7baf98daa4a4d91c')
+sha512sums_x86_64=('8a4a711ef38b35079d0e89a558cbc9cf74a13077c7f4b947587a1631e960a20c44b8250cc1c1033cfa074fa1838ae0a6a18b0d5197479a410a938dd1490171d3')
+sha512sums_aarch64=('a294a9c81231a3741291cc3f073fee3d253d6c6542a3d6976cb4437d84a397f4d671117d4658cff2ec46c3429ec7279d360493b5b973de8cd2b0d5762ae26d9c')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")