We watch what security-critical projects change—then translate the code into clear, independent intelligence anyone can understand.
AI analysis is published as generated. Community notes appear after human validation.
This commit updates a GitHub Actions workflow that runs an optional code-review bot called 'gateway'. It only changes two pinned version numbers (SHA hashes) for the bot's action and its runtime, moving from v0.5.0 to v0.6.0. There is no c…
17a4d42fby Suheb+4−41 fileThis commit only updates a generated API snapshot file (all-features.txt). It records that some serde helper functions now require only Encode for serialization and only Decode for deserialization, rather than requiring both traits. The ac…
76b1f333by Mitchell Bagot+6−61 fileThis commit relaxes the rules for which Rust types can be converted to and from serde serialization formats. Previously, a type had to support both encoding and decoding to be used in either direction. Now, types only need to support the d…
91a09335by Mitchell Bagot+12−121 fileThis commit only adds a new fuzz test for an existing data type (TapLeafHash). It does not change any production code, fix a bug, or alter behavior. There is no security issue here.
e15b0ad1by Mitchell Bagot+21−04 filesThis commit adds standard data-encoding support for a Bitcoin Taproot hash type (TapLeafHash) so it can be properly serialized and deserialized in PSBT data. There is no indication of a security bug being fixed; it appears to be a missing-…
b2ab0896by Mitchell Bagot+59−12 filesThis commit simply adds a new internal software building block (a Rust crate dependency called bitcoin-consensus-encoding) to another internal crate (taproot-primitives). It updates package lists and feature flags so the new dependency can…
a291c3a2by Mitchell Bagot+23−54 filesThis commit adds a single line re-exporting a new Rust crate called taproot_primitives from the main bitcoin crate. It is a routine dependency wiring change with no visible security implications in the diff itself.
5eb8867fby Mitchell Bagot+1−01 fileThis commit only adds a new automated test to the project. It does not change any production code. The test demonstrates that two equivalent Bitcoin blocks—one with a cached witness root and one without—compare as equal. It is a regression…
458e6b3aby Mitchell Bagot+46−01 fileThis commit only updates generated API snapshot text files that record which Rust traits are implemented for the library's types. The actual code change (adding or removing trait bounds on equality comparisons for a Block type) is not pres…
d166d57eby Mitchell Bagot+12−162 filesThis commit fixes a bug in how Bitcoin 'Block' objects are compared for equality. The old code automatically compared every internal field, including a cached 'witness_root' value that can be missing or different depending on how the block…
106563b8by Mitchell Bagot+43−11 fileThis commit only adds two new empty database tables (our_outputs and our_txs) to Core Lightning's wallet. It is a preparatory schema change for a future feature; no code reads from or writes to these tables yet, and no existing behavior is…
ea4d1fcaby Sangbida Chaudhuri+38−01 fileThis commit adds new wallet bookkeeping code for Core Lightning. It records Bitcoin deposits found by a new chain-watcher ('bwatch') into database tables and handles blockchain reorganizations by demoting transactions back to unconfirmed r…
bc021011by Sangbida Chaudhuri+543−07 filesA quiet fix may be responsible caution—or it may leave users unaware that their assets were ever at risk. CommitWatch preserves the evidence, adds context, and tracks whether vendors disclose, acknowledge, and learn.