Review Results

Comment

The only change in this .SRCINFO hunk is a version bump from 1.92.134 to 1.92.138 for the existing brave-bin package. No sources, checksums, install scripts, dependencies, permissions, or build logic are altered here, so there is no new security concern introduced by this diff alone. This is a routine upstream binary version update.

@@ -1,6 +1,6 @@
 pkgbase = brave-bin
 	pkgdesc = Web browser that blocks ads and trackers by default (binary release)
-	pkgver = 1.92.134
+	pkgver = 1.92.138
 	pkgrel = 1
 	epoch = 1
 	url = https://brave.com

Comment

The change is a routine version bump in .SRCINFO for the Brave binary package. The sources remain HTTPS GitHub release URLs from the official upstream project, and the new tarball names/checksums are updated consistently for both x86_64 and aarch64. No new build logic, install scripts, privileges, persistence mechanisms, or additional sources are introduced in this diff hunk. Risk is low and limited to the usual trust in upstream binary releases, which is unchanged by this metadata update.

@@ -17,19 +17,19 @@ pkgbase = brave-bin
 	optdepends = cups: Printer support
 	optdepends = libgnome-keyring: Enable GNOME keyring support
 	optdepends = libnotify: Native notification support
-	provides = brave=1.92.134
+	provides = brave=1.92.138
 	provides = brave-browser
 	conflicts = brave
-	noextract = brave-bin-1.92.134-x86_64.zip
-	noextract = brave-bin-1.92.134-aarch64.zip
+	noextract = brave-bin-1.92.138-x86_64.zip
+	noextract = brave-bin-1.92.138-aarch64.zip
 	options = !strip
 	source = brave-bin.sh
 	source = brave-browser.desktop
 	sha256sums = 75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00
 	sha256sums = c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a
-	source_x86_64 = brave-bin-1.92.134-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.92.134/brave-browser-1.92.134-linux-amd64.zip
-	sha256sums_x86_64 = fdda298329b9058c9d4e4ae0841d0e50101cbf8c2fe22deaccd44223b7b535cd
-	source_aarch64 = brave-bin-1.92.134-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.92.134/brave-browser-1.92.134-linux-arm64.zip
-	sha256sums_aarch64 = 506d3e64722620d30e87eea719daf12bd552b065b409c8d5af78fead5ab625b5
+	source_x86_64 = brave-bin-1.92.138-x86_64.zip::https://github.com/brave/brave-browser/releases/download/v1.92.138/brave-browser-1.92.138-linux-amd64.zip
+	sha256sums_x86_64 = 97c744e4ded05373176fa611bf454cffae8f76a51a0e9e01930730a33c0176a1
+	source_aarch64 = brave-bin-1.92.138-aarch64.zip::https://github.com/brave/brave-browser/releases/download/v1.92.138/brave-browser-1.92.138-linux-arm64.zip
+	sha256sums_aarch64 = a601d2305c47d1fe76d023ac56ad3be160ba756b4994651da4d58a9ee0f540af
 
 pkgname = brave-bin

Comment

The change only bumps pkgver from 1.92.134 to 1.92.138 in PKGBUILD. No source URLs, checksums, build steps, install scripts, permissions, or other packaging logic are modified in the provided hunk. This is a routine version update with no security red flags visible in the diff.

@@ -10,7 +10,7 @@
 # Contributor: Giusy Digital <kurmikon at libero dot it>
 
 pkgname=brave-bin
-pkgver=1.92.134
+pkgver=1.92.138
 pkgrel=1
 epoch=1
 pkgdesc='Web browser that blocks ads and trackers by default (binary release)'

Comment

The change only updates the pinned SHA-256 checksums for the prebuilt Brave release archives in source arrays. I did not find any new sources, build-time network access, script execution, privilege changes, or packaging logic changes in this hunk. From a security perspective this is a normal integrity update, assuming the new checksums correspond to the intended upstream release artifacts.

@@ -35,8 +35,8 @@ source_aarch64=(${pkgname}-${pkgver}-aarch64.zip::https://github.com/brave/brave
 noextract=(${pkgname}-${pkgver}-x86_64.zip ${pkgname}-${pkgver}-aarch64.zip)
 sha256sums=('75a87dd17b42fcc6f27adfd16c82bed1c08e9251b07d2012f8d49f7412fa1d00'
             'c07276b69c7304981525ecb022f92daf7ae125a4fb05ac3442157b50826e257a')
-sha256sums_x86_64=('fdda298329b9058c9d4e4ae0841d0e50101cbf8c2fe22deaccd44223b7b535cd')
-sha256sums_aarch64=('506d3e64722620d30e87eea719daf12bd552b065b409c8d5af78fead5ab625b5')
+sha256sums_x86_64=('97c744e4ded05373176fa611bf454cffae8f76a51a0e9e01930730a33c0176a1')
+sha256sums_aarch64=('a601d2305c47d1fe76d023ac56ad3be160ba756b4994651da4d58a9ee0f540af')
 
 prepare() {
 	mkdir -p brave