Review Results

Comment

The change is low risk. It only bumps pkgrel, updates the declared license string, and refreshes the provided virtual package version to match the new upstream release. There are no new sources, no build-time execution changes, no install-script or systemd modifications, and no evidence of privilege escalation or persistence mechanisms in this diff hunk. The only thing to note is that .SRCINFO is metadata and should be consistent with the PKGBUILD, but this specific update does not introduce security concerns.

@@ -1,16 +1,16 @@
 pkgbase = rstudio-desktop-bin
 	pkgdesc = An integrated development environment (IDE) for R (binary from RStudio official repository)
 	pkgver = 2026.06.0.242
-	pkgrel = 1
+	pkgrel = 2
 	url = https://posit.co/products/open-source/rstudio/
 	arch = x86_64
-	license = AGPL
+	license = AGPL-3.0-or-later
 	depends = r>=3.3.0
 	depends = sqlite
 	depends = libxkbcommon
 	optdepends = clang: C/C++ and Rcpp code completion
 	optdepends = ttf-dejavu: fallback font support
-	provides = rstudio-desktop=2026.04.0.526
+	provides = rstudio-desktop=2026.06.0.242
 	conflicts = rstudio-desktop
 	conflicts = rstudio-desktop-git
 	conflicts = rstudio-desktop-preview-bin

Comment

The change only removes an exception from .gitignore for the package's .install file, meaning that file will now remain ignored by git rather than being tracked. This does not alter build logic, package contents, permissions, dependencies, or any executed install script behavior itself. The security impact is negligible from the diff alone; at most it affects repository hygiene and visibility of the .install file, not runtime/package security.

@@ -2,4 +2,3 @@
 !PKGBUILD
 !.gitignore
 !.SRCINFO
-!.rstudio-desktop-bin.install

Comment

The change is low risk. It only refactors the version string construction from a sed subshell to shell parameter expansion, bumps pkgrel, updates the license identifier, and removes two non-functional lines from package(). The source still points to the official Posit/RStudio download host over HTTPS, and there are no new build-time downloads, shell execution, privilege escalation, persistence mechanisms, or packaging writes outside $pkgdir introduced by this hunk. I do note that the package still installs a prebuilt .deb from upstream, but that is pre-existing and not worsened by this change.

@@ -1,29 +1,24 @@
+# Maintainer: Clemens Brunner < clemens dot brunner at gmail dot com >
 pkgname=rstudio-desktop-bin
 pkgver=2026.06.0.242
-_pkgver=`echo $pkgver | sed 's/\(.*\)\./\1-/'`
-pkgrel=1
+_pkgver=${pkgver%.*}-${pkgver##*.}
+pkgrel=2
 pkgdesc="An integrated development environment (IDE) for R (binary from RStudio official repository)"
 arch=('x86_64')
-license=('AGPL')
+license=('AGPL-3.0-or-later')
 url="https://posit.co/products/open-source/rstudio/"
 depends=('r>=3.3.0' 'sqlite' 'libxkbcommon')
 optdepends=('clang: C/C++ and Rcpp code completion'
             'ttf-dejavu: fallback font support')
-makedepends=()
 conflicts=('rstudio-desktop' 'rstudio-desktop-git' 'rstudio-desktop-preview-bin')
 provides=("rstudio-desktop=${pkgver}")
 options=(!strip)
 
 sha256sums_x86_64=('885fb9f2dc6d8fb49d57b1111bc735b2e2b8e254fa7a50224e389c1dfc586008')
 
-source_x86_64=("https://download1.rstudio.org/electron/jammy/amd64/rstudio-2026.06.0-242-amd64.deb")
+source_x86_64=("https://download1.rstudio.org/electron/jammy/amd64/rstudio-${_pkgver}-amd64.deb")
 
 package() {
-
-  shopt -s extglob
-
-  msg "Converting Debian package..."
-
   cd "$srcdir"
   tar Jxpf data.tar.xz -C "$pkgdir"
 

Comment

Risk score 0. The change only adds packaging of the upstream license file into /usr/share/licenses/$pkgname by creating the directory and symlinking to an existing COPYING file inside the extracted upstream payload. It does not introduce network access, privilege escalation, persistence, new dependencies, or writes outside $pkgdir. The source remains the official Posit/RStudio binary .deb over HTTPS, and this hunk is limited to license installation hygiene.

@@ -31,4 +26,8 @@ package() {
 
   ln -s /usr/lib/rstudio/rstudio "$pkgdir/usr/bin/rstudio"
 
+  install -dm755 "$pkgdir/usr/share/licenses/$pkgname"
+  ln -s /usr/lib/rstudio/resources/app/COPYING \
+    "$pkgdir/usr/share/licenses/$pkgname/COPYING"
+
 }