Upstream's res/PKGBUILD no longer depends on pam as of 1.5.0. The recipe's prepare() checks _dpr against that list, so the sync's version and checksum bump stopped in _dpr_check with "Update _dpr from res/PKGBUILD/depends=()". The bump is the sync's, unchanged; _dpr now matches upstream's 1.5.0 depends.