Review Results

Comment

The change is a straightforward version bump in .SRCINFO: it updates pkgver/provides, the GitHub release tarball URL, and the corresponding SHA-256 checksum. The source remains on the official upstream GitHub releases page over HTTPS, there are no new build-time commands, no added scripts, and no packaging/install behavior changes in this diff. I don’t see any integrity or persistence red flags in the reviewed hunk.

@@ -1,19 +1,19 @@
 pkgbase = dxvk-bin
 	pkgdesc = A Vulkan-based compatibility layer for Direct3D 9/10/11 which allows running 3D applications on Linux using Wine (Windows DLL binary files)
-	pkgver = 3.1.0
+	pkgver = 3.1.1
 	pkgrel = 1
 	url = https://github.com/doitsujin/dxvk
 	arch = x86_64
 	license = zlib/libpng
 	provides = dxvk
 	provides = d9vk
-	provides = dxvk=3.1.0
+	provides = dxvk=3.1.1
 	conflicts = dxvk
 	conflicts = d9vk
 	options = !strip
-	source = https://github.com/doitsujin/dxvk/releases/download/v3.1/dxvk-3.1.tar.gz
+	source = https://github.com/doitsujin/dxvk/releases/download/v3.1.1/dxvk-3.1.1.tar.gz
 	source = setup_dxvk.sh
-	sha256sums = 30f9cc326874be344285582275446968cfa4c069db31ce56df312d6644179154
+	sha256sums = 40565b4a724aadc4433fa4e010b4b23916d9b1f1baeee64e17186db94f54e608
 	sha256sums = 2ca9ece1b6c36446e9f6955d3d03ab72b173c8f85539a2848febc51b38be705e
 
 pkgname = dxvk-bin

Comment

The change is a straightforward version bump from 3.1.0 to 3.1.1 with the corresponding upstream release tarball checksum update, and it keeps the source on HTTPS from the official GitHub upstream. No new build steps, scripts, patches, privilege changes, or network-at-build behavior were introduced by this diff. The only notable effect is that _githubver now tracks pkgver directly, which is benign here and reduces the chance of version mismatch. Based on the provided hunk, there are no security red flags.

@@ -3,8 +3,8 @@
 
 pkgbase=dxvk-bin
 pkgname=('dxvk-bin')
-pkgver=3.1.0
-_githubver=3.1
+pkgver=3.1.1
+_githubver=$pkgver
 pkgrel=1
 pkgdesc="A Vulkan-based compatibility layer for Direct3D 9/10/11 which allows running 3D applications on Linux using Wine (Windows DLL binary files)"
 url="https://github.com/doitsujin/dxvk"

Comment

The change only updates the SHA-256 checksum for the upstream DXVK release tarball in PKGBUILD. The source URL remains the official GitHub release HTTPS URL, there are no new build steps, scripts, network fetches, privilege changes, or packaging behavior changes. This is a routine integrity update and does not introduce a security concern by itself.

@@ -16,7 +16,7 @@ options=(!strip)
 source=("https://github.com/doitsujin/dxvk/releases/download/v$_githubver/dxvk-$_githubver.tar.gz"
 "setup_dxvk.sh"
 )
-sha256sums=('30f9cc326874be344285582275446968cfa4c069db31ce56df312d6644179154'
+sha256sums=('40565b4a724aadc4433fa4e010b4b23916d9b1f1baeee64e17186db94f54e608'
             '2ca9ece1b6c36446e9f6955d3d03ab72b173c8f85539a2848febc51b38be705e')
 
 package_dxvk-bin () {