Right, they're the ones requesting the change from the maintainer, who is not responding. The maintainer is NOT handling the deps as seblu and eworm are suggesting.

The maintainer started pinning the dependency in a recent commit[0], against the suggestion of seblu's pinned comment from 2011.

[0]: https://aur.archlinux.org/cgit/aur.git/commit/?h=virtualbox-ext-oracle&id=8009c93e77a8a8317574ef42f5167a9d0a8fbb85

--
Zach Himsel
mailto://zach@himsel.net
tel://5303784786

On Thu, May 11, 2023, 10:04 <notify@aur.archlinux.org> wrote:
Request #41385 has been Rejected by gromit [1]:

Without looking at the issue in detail: seblu[0] and eworm[1] are both
arch developers, so its safe to assume that they know what they are
doing in this regard.
The pinned comment[2] also mentions that there is a reason for the way
they handle deps like this.

Also the package builds just fine :)

[0] https://archlinux.org/people/developers/#seblu
[1] https://archlinux.org/people/developers/#eworm
[2] https://aur.archlinux.org/packages/virtualbox-ext-
oracle#comment-691385

[1] https://aur.archlinux.org/account/gromit/