Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 158.0.8127.18 to 159.0.8154.6. No sources, checksums, install script, build commands, or packaging metadata changed in the reviewed diff, so there is no new security-relevant behavior to assess from this change alone. This appears to be a routine upstream version update.

@@ -1,6 +1,6 @@
 pkgbase = google-chrome-beta
 	pkgdesc = The popular web browser by Google (Beta Channel)
-	pkgver = 158.0.8127.18
+	pkgver = 159.0.8154.6
 	pkgrel = 1
 	url = https://www.google.com/chrome
 	install = google-chrome-beta.install

Comment

The change only updates the pinned upstream Google Chrome Beta .deb URLs and their corresponding SHA-512 checksums for x86_64 and aarch64. The sources remain HTTPS on the official dl.google.com domain, and there is no new build logic, script execution, or packaging behavior introduced in this .SRCINFO-only diff. This appears to be a routine version bump with no evident security regression in the reviewed hunk.

@@ -26,9 +26,9 @@ pkgbase = google-chrome-beta
 	source = google-chrome-beta.sh
 	sha512sums = a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396
 	sha512sums = 17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03
-	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_158.0.8127.18-1_amd64.deb
-	sha512sums_x86_64 = 8a4a711ef38b35079d0e89a558cbc9cf74a13077c7f4b947587a1631e960a20c44b8250cc1c1033cfa074fa1838ae0a6a18b0d5197479a410a938dd1490171d3
-	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_158.0.8127.18-1_arm64.deb
-	sha512sums_aarch64 = a294a9c81231a3741291cc3f073fee3d253d6c6542a3d6976cb4437d84a397f4d671117d4658cff2ec46c3429ec7279d360493b5b973de8cd2b0d5762ae26d9c
+	source_x86_64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_159.0.8154.6-1_amd64.deb
+	sha512sums_x86_64 = b78947226e48321dde18d8e3cc1a4fc4c81a3ff0130089f377969b3ea37b1d2a581c78f31fdf83692e2684e1587acfe917927564359d949b0f6b384228ac10b8
+	source_aarch64 = https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-beta/google-chrome-beta_159.0.8154.6-1_arm64.deb
+	sha512sums_aarch64 = 7090037d2fd43b569d967366047faaf5f91d72ec092fdf31b8cfa4aa34f1704af9976d00002e36ae464a0d3ea67cd784fc629abf37618a47d850802a3e7bd1f2
 
 pkgname = google-chrome-beta

Comment

The only change in the reviewed hunk is a version bump in PKGBUILD from 158.0.8127.18 to 159.0.8154.6. No build logic, sources, checksums, install scripts, permissions, or packaging behavior changed in the provided diff. Based on this hunk alone, there are no security red flags to flag.

@@ -7,7 +7,7 @@
 # or use: $ curl -sSf https://dl.google.com/linux/chrome/deb/dists/stable/main/binary-amd64/Packages | grep -A1 "Package: google-chrome-beta" | awk '/Version/{print $2}' | cut -d '-' -f1
 
 pkgname=google-chrome-beta
-pkgver=158.0.8127.18
+pkgver=159.0.8154.6
 pkgrel=1
 pkgdesc="The popular web browser by Google (Beta Channel)"
 arch=(

Comment

The change only updates the pinned SHA-512 checksums for the architecture-specific Google Chrome beta .deb sources. The source URLs remain HTTPS and point to the official Google download host, with no new build-time code execution, install-script changes, or packaging logic changes. This is a low-risk integrity update consistent with a new upstream release artifact.

@@ -42,8 +42,8 @@ source=(
 )
 sha512sums=('a225555c06b7c32f9f2657004558e3f996c981481dbb0d3cd79b1d59fa3f05d591af88399422d3ab29d9446c103e98d567aeafe061d9550817ab6e7eb0498396'
             '17827849624a365b501da6b4e9648f324dfa1ee081dbb46f8e9519de355c4b2996075c3acb254921afd7553e4814877fa6e4355ab29bbed5825c9cffa3032f03')
-sha512sums_x86_64=('8a4a711ef38b35079d0e89a558cbc9cf74a13077c7f4b947587a1631e960a20c44b8250cc1c1033cfa074fa1838ae0a6a18b0d5197479a410a938dd1490171d3')
-sha512sums_aarch64=('a294a9c81231a3741291cc3f073fee3d253d6c6542a3d6976cb4437d84a397f4d671117d4658cff2ec46c3429ec7279d360493b5b973de8cd2b0d5762ae26d9c')
+sha512sums_x86_64=('b78947226e48321dde18d8e3cc1a4fc4c81a3ff0130089f377969b3ea37b1d2a581c78f31fdf83692e2684e1587acfe917927564359d949b0f6b384228ac10b8')
+sha512sums_aarch64=('7090037d2fd43b569d967366047faaf5f91d72ec092fdf31b8cfa4aa34f1704af9976d00002e36ae464a0d3ea67cd784fc629abf37618a47d850802a3e7bd1f2')
 
 source_x86_64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_amd64.deb")
 source_aarch64=("https://dl.google.com/linux/chrome/deb/pool/main/g/google-chrome-${_channel}/google-chrome-${_channel}_${pkgver}-1_arm64.deb")