From 7ebdb60279be642a5f1a14cb836f97cff791ea98 Mon Sep 17 00:00:00 2001
From: Hansehart <97880342+Hansehart@users.noreply.github.com>
Date: Sun, 23 Aug 2026 09:23:24 +0000
Subject: [PATCH] docs(headless-chrome): state that the build is unverified

headless-chrome and age are the only features that install a downloaded binary
without a checksum, but only age said so, which made this one read as an
oversight. Chrome for Testing publishes no hash: its last-known-good-versions
metadata carries only platform and url, so there is nothing to verify against.

Comment only, so no version bump.
---
 src/headless-chrome/install.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/headless-chrome/install.sh b/src/headless-chrome/install.sh
index 9612d58..f6c0808 100644
--- a/src/headless-chrome/install.sh
+++ b/src/headless-chrome/install.sh
@@ -59,7 +59,7 @@ fi
 url="$BUCKET/$resolved/linux64/chrome-headless-shell-linux64.zip"
 echo "chrome: installing chrome-headless-shell $resolved ($VERSION)"
 
-# Fetch: download and unpack the build.
+# Fetch: download and unpack the build over HTTPS, trusting the TLS-authenticated Google origin.
 tmp="$(mktemp -d)"
 trap 'rm -rf "$tmp"' EXIT
 curl -fsSL "$url" -o "$tmp/chs.zip"