Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 1.32.19 to 1.32.20. No sources, checksums, build steps, install scripts, permissions, or metadata affecting trust boundaries changed in the reviewed diff. Based on this hunk alone, there is no security concern.

@@ -1,6 +1,6 @@
 pkgbase = gallery-dl
 	pkgdesc = Command-line program to download image-galleries and collections from several image hosting sites
-	pkgver = 1.32.19
+	pkgver = 1.32.20
 	pkgrel = 1
 	url = https://codeberg.org/mikf/gallery-dl
 	arch = any

Comment

The change is a routine upstream version bump in .SRCINFO from v1.32.19 to v1.32.20 with the corresponding updated sha512 checksum. The source remains an HTTPS Codeberg git tag with the same pinned signing key, and there are no new build steps, scripts, dependencies, or packaging behaviors introduced by this diff. No security concerns are evident from this metadata-only update.

@@ -27,8 +27,8 @@ pkgbase = gallery-dl
 	optdepends = python-psycopg: PostgreSQL support
 	optdepends = python-truststore: Support using system certificates
 	optdepends = python-jinja: Jinja template support
-	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.19?signed
+	source = git+https://codeberg.org/mikf/gallery-dl.git#tag=v1.32.20?signed
 	validpgpkeys = 3E09F5908333DD83DBDCE7375680CA389D365A88
-	sha512sums = ce970ee81d7cacc6a3a9617e30e74166404cbddcae13316baa6a7101b22527f4536054daa4a9f65fb2c5de1e60cc5608258ca04aab22b68161a37c914e99d3b0
+	sha512sums = 8426803e1248f38e46ac0b92f0099e850a1d40e15c5b65168a50416bad94048430679ce545d309c15676aa02024d4a279ff96b8ef4804ecdca72b2e516b753a5
 
 pkgname = gallery-dl

Comment

This change is a trivial version bump in PKGBUILD from 1.32.19 to 1.32.20 with no other modifications to sources, build steps, install scripts, dependencies, or packaging logic. Based on the provided diff, there are no new security concerns introduced by this commit.

@@ -2,7 +2,7 @@
 # Contributor: LLL2yu <lll2yu@protonmail.com>
 
 pkgname=gallery-dl
-pkgver=1.32.19
+pkgver=1.32.20
 pkgrel=1
 pkgdesc='Command-line program to download image-galleries and collections from several image hosting sites'
 arch=(any)

Comment

The change is a routine version bump in PKGBUILD from 1.32.19 to 1.32.20 with the corresponding source checksum update. The source remains a pinned, signed git tag over HTTPS, and there are no new build steps, network fetches, install-script changes, or packaging behavior changes. No security red flags are introduced by this diff.

@@ -29,7 +29,7 @@ optdepends=(
 )
 source=(git+"${url}".git#tag=v"${pkgver}"?signed)
 validpgpkeys=(3E09F5908333DD83DBDCE7375680CA389D365A88) #Mike Fährmann
-sha512sums=('ce970ee81d7cacc6a3a9617e30e74166404cbddcae13316baa6a7101b22527f4536054daa4a9f65fb2c5de1e60cc5608258ca04aab22b68161a37c914e99d3b0')
+sha512sums=('8426803e1248f38e46ac0b92f0099e850a1d40e15c5b65168a50416bad94048430679ce545d309c15676aa02024d4a279ff96b8ef4804ecdca72b2e516b753a5')
 
 prepare() {
     # Clean out old wheels etc.