BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2913 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

257security candidates611second-pass queue2888AI analyses
188commits · 30 days
472commits · 60 days
1489commits · 180 days
2878commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
949Strong · 80–100
1188Adequate · 60–79
688Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow15850158064
MarcoFalke41021406074
Lőrinc17721177081
fanquake22819226057
Hennadii Stepanov21114208063
rkrux57957074
Sjors Provoost89889074
Sebastian Falbesoner33733073
merge-script32718088
David Gumberg55655072
Pieter Wuille95595066
Analysis record

Published AI watches

Last scanned 44 minutes ago

Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35729: refactor: test: Unroll `&&` conditions in macros

This commit only changes Bitcoin Core's internal test code. It splits combined conditions inside test-check macros (like BOOST_CHECK(a && b)) into separate checks so that when a test fails, the test output points to the exact failing condi…

aa0e0f79by merge-script+196−9519 files
No security note in commit
Low 26 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35493: wallet, descriptor: Fix MuSig private key completeness checks on `importdescriptors`

This commit fixes a bug in Bitcoin Core's wallet import logic for a new type of multi-signature setup called MuSig. Previously, when a user imported a MuSig descriptor that already contained all needed private keys, the wallet incorrectly …

False-positive warning in wallet import for fully-private MuSig descriptorsIncorrect private-key completeness check on synthetic aggregate public keyDescriptor logic now delegates completeness to `Descriptor::HavePrivateKeys()`
2c01832fby merge-script+76−374 files
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35943: doc: fix dead link in txrequest.h

This commit only fixes a broken web link in a code comment. It replaces an outdated URL to a research paper with a working URL to the same paper. There is no change to program logic, no security fix, and no vulnerability.

5d051c05by merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#33186: wallet, test: Ancient Wallet Migration from v0.14.3 (no-HD and Single Chain)

This commit only adds new automated tests for migrating very old Bitcoin Core wallets (version 0.14.3 from 2017) to the modern descriptor wallet format. It does not change any wallet production code, consensus rules, or network behavior. T…

757aa573by merge-script+246−124 files
No security note in commit
Low 28 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35925: wallet, rpc: Exclude non-owned addresses from listreceivedby*

This update fixes a wallet reporting bug. When a user asked their Bitcoin wallet to list every address that had received money, including empty ones, the result incorrectly included foreign addresses that the wallet merely knew about (for …

Information disclosure: wallet RPCs leaked existence/labels of foreign addressesIncorrect access-control boundary: non-owned addresses exposed in 'received' reportFix uses IsMine() rather than address purpose metadata, avoiding inconsistent purpose handling
e8cc21c5by Ava Chow+19−32 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35937: test: Append print_suppressions=0 to LSAN_OPTIONS, and suppress bitcoin-qt

This commit only changes test configuration. It tells the LeakSanitizer tool used during automated testing to stop printing long lists of suppressed memory leaks, and it narrows the list of ignored leaks to the bitcoin-qt GUI test binary. …

5973e075by merge-script+3−42 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Informational 15 AI analysisMessage 57 · Thin
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable misc-definitions-in-headers

This commit is a code cleanup: it turns on a clang-tidy style check called 'misc-definitions-in-headers' and suppresses that check around a large inline implementation block in a benchmark header. There is no change to Bitcoin's runtime be…

fa93132dby MarcoFalke+3−02 files
No security note in commit
Informational 15 AI analysisMessage 85 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Enable clang-tidy rule to reject anon namespace in header

This commit only changes a linting configuration file for the project's code style checker. It enables a rule that prevents anonymous namespaces from being used in header files, which is a code-quality and build-hygiene practice. There is …

No security-relevant signals in the diff or commit message.Change is purely a static-analysis/linting configuration update.
fa5ca877by MarcoFalke+2−11 file
No security note in commit
Informational 15 AI analysisMessage 62 · Adequate
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

refactor: Use C++20 std::identity over IntIdentity

This commit is a straightforward code cleanup: it replaces a small custom helper named IntIdentity with the standard C++20 std::identity from the <functional> header. The behavior of the ConvertBits function is unchanged; only the implemen…

fafe5042by MarcoFalke+4−111 file
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-prioritydoc: bump the template macOS versionby kevkevinpal · f6567527 · Oct 10, 2025 · 1 fileMessage 60 · AdequateInformational 15Details
Commit message · kevkevinpal

doc: bump the template macOS version

It makes more sense to have a higher OS version than one that is not
supported

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only updates the example text in a GitHub bug report template. It changes the placeholder operating system examples from older versions (MacOS Ventura 13.2 and Ubuntu 22.04 LTS) to newer versions (MacOS 26.0 and Ubuntu 26.04 LTS). There is no code change, no security fix, and no vulnerability.

AI review queuedrefactor: Construct g_verify_flag_names on first useby MarcoFalke · faa9d10c · Oct 10, 2025 · 3 filesMessage 62 · AdequateInformational 15Details
Commit message · MarcoFalke

refactor: Construct g_verify_flag_names on first use

62/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a code cleanup (refactor) that changes how a lookup table of script verification flag names is created and accessed. It moves the table from a global variable constructed at program startup to a function that creates the table the first time it is called. There is no change to transaction validation rules, no bug fix, and no security-relevant behavior change.

Lower-prioritytest: improve coverage for a resolved stalling situationby Martin Zumsande · 01cc20f3 · Oct 9, 2025 · 1 fileMessage 95 · StrongInformational 15Details
Commit message · Martin Zumsande

test: improve coverage for a resolved stalling situation

This test (which would fail without the previous commit) checks
that after the stalling block was received, we don't incorrectly
mark another peer as a staller immediately.

95/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only changes a test file. It adds a new test scenario to make sure a previously fixed bug in block-download stalling logic stays fixed. There is no change to the actual Bitcoin Core node software, so it cannot directly affect live network security.

Lower-prioritytest: remove magic number when checking for blocks that have arrivedby Martin Zumsande · 9af6daf0 · Oct 9, 2025 · 1 fileMessage 87 · StrongInformational 15Details
Commit message · Martin Zumsande

test: remove magic number when checking for blocks that have arrived

getpeerinfo provides a list of blocks that are inflight, which can be used
instead.

87/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only changes a test file. It replaces a hard-coded byte-count workaround with a cleaner check using existing peer information. There is no change to the actual Bitcoin Core software that users run, and no security issue is present.

Lower-priorityp2p: During block download, adjust pindexLastCommonBlock betterby Martin Zumsande · 3069d66d · Oct 9, 2025 · 1 fileMessage 85 · StrongLow 36Details
Commit message · Martin Zumsande

p2p: During block download, adjust pindexLastCommonBlock better

Simplify and improve the logic for calculating pindexLastCommonBlock, in order to calculate
nWindowEnd better.
The previous logic would not take into account when the chain tip had moved forward, so that
FindNextBlocks could iterate over many blocks already downloaded and
connected, which could result in blocks not being requested for download that should have been
requested, and peers being wrongly marked as staller.

It also removes extra logic from commit 49d569cb1fdd62a9da8dff51dccaf4680fe3d0eb
for the situation right after a snapshot was loaded:
After snapshot loading, our tip becomes the snapshot block.
For peers that have the most-work chain, which inlcludes the snapshot,
our tip is an ancestor of the peer's best block, hence the general
advancement logic will move pindexLastCommonBlock
from any pre-snapshot position to the snapshot height automatically.

Co-authored-by: stringintech <stringintech@gmail.com>
Co-authored-by: Pieter Wuille <pieter@wuille.net>

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Low 36/100

This change fixes how Bitcoin nodes decide which blocks to ask peers for during initial sync or catch-up. Previously, the node could get stuck reviewing blocks it already had, fail to request new blocks it actually needed, and incorrectly label peers as slow (stallers). The patch makes the 'last common block' calculation follow the current chain tip and the peer's known chain more accurately. It is a robustness improvement to block download scheduling, not a direct theft or remote-code-execution bug.

Lower-priorityrefactor: Revert "disable self-assign warning for tests"by MarcoFalke · fa0fa0f7 · Oct 9, 2025 · 2 filesMessage 87 · StrongInformational 15Details
Commit message · MarcoFalke

refactor: Revert "disable self-assign warning for tests"

This reverts commit 53372f21767be449bb452fc3f5fe7f16286ae371.

87/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit removes compiler warning suppressions from two test files. It is a code cleanup that reverts an earlier workaround for a Clang compiler warning about self-assignment (like x = x). It does not change any production code, network behavior, or wallet logic, and has no direct security impact on Bitcoin users.

AI review queuedbuild: Bump clang minimum supported version to 17by MarcoFalke · faed118f · Oct 9, 2025 · 4 filesMessage 57 · ThinInformational 15Details
Commit message · MarcoFalke

build: Bump clang minimum supported version to 17

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit simply raises the minimum supported Clang compiler version from 16 to 17 and removes a now-unnecessary C++ deduction guide. It is a routine build-system/maintenance change with no security relevance.

Lower-prioritytest: add functional test for `TestShell` (matching doc example)by Sebastian Falbesoner · 57f7c688 · Oct 9, 2025 · 2 filesMessage 72 · AdequateInformational 15Details
Commit message · Sebastian Falbesoner

test: add functional test for `TestShell` (matching doc example)

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 15/100

This commit adds a new automated test for Bitcoin Core's developer testing tool called TestShell. It does not change any production code, network rules, or wallet behavior. It only runs in the project's own test environment and is not a security fix or vulnerability.

Security candidatedoc: test: update TestShell example instructions/optionsby Sebastian Falbesoner · 53874f79 · Oct 9, 2025 · 1 fileMessage 83 · StrongInformational 15Details
Commit message · Sebastian Falbesoner

doc: test: update TestShell example instructions/options

The `createwallet` RPC doesn't return the empty passphrase
warning anymore if no passphrase was passed explicitly.
The `noshutdown` parameter key was removed in commit
fa0dc09b9002f0bcae63af6af8d37fb3e0040ef4, so remove it from
the table.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
access controldocumentation-only discount
AI analysis · Informational 15/100

This commit only updates documentation for Bitcoin Core's test shell. It changes an example output to remove a wallet passphrase warning that is no longer returned, and removes a 'noshutdown' option from a table because that option was removed in an earlier commit. There is no code change and no security impact.

AI review queuedUpdate ci.ymlby Coder · b35341b9 · Oct 9, 2025 · 1 fileMessage 28 · OpaqueInformational 15Details
Commit message · Coder

Update ci.yml

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
Why it was queued
documentation-only discountsecond-pass: opaque commit message
AI analysis · Informational 15/100

This commit simply bumps a GitHub Actions helper from version 4 to version 5 in the project's continuous-integration workflow. It is a routine dependency update with no visible security relevance in the diff itself.

Lower-priorityci: Properly include $FILE_ENV in DEPENDS_HASHby Ava Chow · ceeb53ad · Oct 8, 2025 · 1 fileMessage 90 · StrongInformational 18Details
Commit message · Ava Chow

ci: Properly include $FILE_ENV in DEPENDS_HASH

$FILE_ENV has a full relative path already, prepending with ci/test/
results in a non-existent path which means that DEPENDS_HASH was not
actually committing to the test's environment file.

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
documentation-only discount
AI analysis · Informational 18/100

This is a tiny CI (Continuous Integration) configuration fix. The GitHub Actions script was accidentally pointing to the wrong path for an environment file when computing a cache hash. As a result, changes to that environment file would not invalidate the build cache. It is not a vulnerability in Bitcoin Core itself and does not directly put user funds or node security at risk, but it could theoretically cause CI to reuse a stale dependency cache after an environment change.

Lower-prioritydepends: Use $(package)_file_name when downloading from the fallbackby Ava Chow · 671b774d · Oct 8, 2025 · 1 fileMessage 50 · ThinLow 35Details
Commit message · Ava Chow

depends: Use $(package)_file_name when downloading from the fallback

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Low 35/100

This is a one-line fix in Bitcoin Core's dependency build system. When downloading a required library from a fallback mirror, the code was accidentally using the original download URL as the filename instead of the intended filename. This could cause the downloaded file to be saved under the wrong name, potentially leading to a failed or mismatched build. The change makes the fallback download use the correct filename.

Lower-priorityRevert "depends: Update URL for `qrencode` package source tarball"by Ava Chow · e4335a31 · Oct 8, 2025 · 1 fileMessage 65 · AdequateInformational 15Details
Commit message · Ava Chow

Revert "depends: Update URL for `qrencode` package source tarball"

This reverts commit 93a70a42d30fa2f9404b76d5bbdb5ea316fc1032.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit simply reverts a recent change to the download URL and checksum for the qrencode dependency used in Bitcoin Core's build system. It restores the older, original source URL and its corresponding hash. There is no security issue visible in the diff itself.

Lower-priorityRevert "depends: Use hash instead of file name for package download stamp"by Ava Chow · a89a822e · Oct 8, 2025 · 1 fileMessage 65 · AdequateInformational 14Details
Commit message · Ava Chow

Revert "depends: Use hash instead of file name for package download stamp"

This reverts commit 6de80512632afe612a3427463c94ac51f90f5203.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 14/100

This commit undoes a recent change in the Bitcoin Core dependency build system. The original change made build stamps use a cryptographic hash to track downloaded packages; this reversion goes back to using the package file name. On its own, this is a build-system correctness/reliability change, not a clearly exploitable security vulnerability. It could, in unusual cases, make the build slightly more prone to re-downloading or cache-confusion issues if a package file name stays the same while its contents change, but no direct attack is demonstrated in the commit.

Lower-priorityci: Add macOS cross task for arm64by MarcoFalke · fad5a710 · Oct 8, 2025 · 4 filesMessage 57 · ThinInformational 15Details
Commit message · MarcoFalke

ci: Add macOS cross task for arm64

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit adds a new automated build test that cross-compiles Bitcoin Core for Intel (x86_64) macOS, while renaming the existing macOS cross-compile test to target Apple Silicon (arm64). It only changes continuous integration configuration and documentation. There is no change to the Bitcoin Core software that users run, and no security issue is present.

Lower-priorityci: Refactor get_previous_releases step in win-test-cross taskby MarcoFalke · fa8c750a · Oct 8, 2025 · 1 fileMessage 87 · StrongInformational 15Details
Commit message · MarcoFalke

ci: Refactor get_previous_releases step in win-test-cross task

This refactor does not change behavior, but allows the step to be
re-used in other tasks, such as a mac-test-cross task

87/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Mentions testing or verification
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This is a minor GitHub Actions workflow refactor. It changes one CI step from running inside the 'test' directory to running from the repository root by specifying the script path as './test/get_previous_releases.py'. The commit message explicitly states this does not change behavior and is only to allow re-use in other tasks. There is no security relevance.

Lower-priorityci: add libcpp hardening flags to macOS fuzz jobby fanquake · e4c04f77 · Oct 8, 2025 · 1 fileMessage 90 · StrongInformational 15Details
Commit message · fanquake

ci: add libcpp hardening flags to macOS fuzz job

Follows up to
https://github.com/bitcoin/bitcoin/pull/33425#issuecomment-3323149107.

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
Why it was queued
defensive validationfuzzing or regression evidence
AI analysis · Informational 15/100

This commit changes only a macOS CI fuzz-testing script. It adds a compiler flag that turns on extra safety checks in Apple's C++ standard library during automated fuzz testing. It does not change any production code, wallet logic, networking, or consensus behavior. There is no indication this fixes a security bug in Bitcoin Core itself; it is a testing-hardening configuration change.

Lower-prioritydoc: how to update a subtreeby Sjors Provoost · a1226bc7 · Oct 8, 2025 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Sjors Provoost

doc: how to update a subtree

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only adds documentation explaining how developers can update a code subtree (a bundled external library). It contains no code changes, no configuration changes, and no security fixes or functional behavior changes.

AI review queuedSquashed 'src/ipc/libmultiprocess/' changes from 47d79db8a552..a4f929696490by Ryan Ofsky · 0f01e157 · Oct 7, 2025 · 15 filesMessage 91 · StrongLow 32Details
Commit message · Ryan Ofsky

Squashed 'src/ipc/libmultiprocess/' changes from 47d79db8a552..a4f929696490

a4f929696490 Merge bitcoin-core/libmultiprocess#224: doc: fix typos
f4344ae87da0 Merge bitcoin-core/libmultiprocess#222: test, ci: Fix threadsanitizer errors in mptest
1434642b3804 doc: fix typos
73d22ba2e930 test: Fix tsan race in thread busy test
b74e1bba014d ci: Use tsan-instrumented cap'n proto in sanitizers job
c332774409ad test: Fix failing exception check in new thread busy test
ca3c05d56709 test: Use KJ_LOG instead of std::cout for logging
7eb1da120ab6 ci: Use tsan-instrumented libcxx in sanitizers job
ec86e4336e98 Merge bitcoin-core/libmultiprocess#220: Add log levels and advertise them to users via logging callback
515ce93ad349 Logging: Pass LogData struct to logging callback
213574ccc43d Logging: reclassify remaining log messages
e4de0412b430 Logging: Break out expensive log messages and classify them as Trace
408874a78fdc Logging: Use new logging macros
67b092d835cd Logging: Disable logging if messsage level is less than the requested level
d0a1ba7ebf21 Logging: add log levels to mirror Core's
463a8296d188 Logging: Disable moving or copying Logger
83a2e10c0b03 Logging: Add an EventLoop constructor to allow for user-specified log options
58cf47a7fc8c Merge bitcoin-core/libmultiprocess#221: test default PassField impl handles output parameters
db03a663f514 Merge bitcoin-core/libmultiprocess#214: Fix crash on simultaneous IPC calls using the same thread
afcc40b0f1e8 Merge bitcoin-core/libmultiprocess#213: util+doc: Clearer errors when attempting to run examples + polished docs
6db669628387 test In|Out parameter
29cf2ada75ea test default PassField impl handles output parameters
1238170f68e8 test: simultaneous IPC calls using same thread
eb069ab75d83 Fix crash on simultaneous IPC calls using the same thread
ec03a9639ab5 doc: Precision and typos
2b4348193551 doc: Where possible, remove links to ryanofsky/bitcoin/
286fe469c9c9 util: Add helpful error message when failing to execute file

git-subtree-dir: src/ipc/libmultiprocess
git-subtree-split: a4f92969649018ca70f949a09148bccfeaecd99a

91/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
Why it was queued
defensive validationsigning or wallet pathsecond-pass: near security thresholdsecond-pass: broader security terminologysecond-pass: security-sensitive path
AI analysis · Low 32/100

This is a routine subtree update for the libmultiprocess library used by Bitcoin Core. The bulk of the changes are developer-facing improvements: adding log levels, fixing typos, updating CI sanitizer settings, and adding tests. The most notable functional change is a fix for a crash that could occur when multiple IPC calls were made on the same thread at the same time. The fix makes the code throw a controlled 'thread busy' error instead of crashing. It is a stability/reliability improvement rather than a traditional security vulnerability fix.

Lower-priorityci: Use native platform for win-cross taskby MarcoFalke · fa6fd16f · Oct 7, 2025 · 1 fileMessage 57 · ThinInformational 15Details
Commit message · MarcoFalke

ci: Use native platform for win-cross task

57/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit removes a single line from a Bitcoin Core continuous integration (CI) configuration file. The removed line forced the Windows cross-compilation CI task to run on the linux/amd64 platform. After the change, the CI task will use the CI runner's native platform instead. This is a build-infrastructure tweak with no apparent effect on the Bitcoin Core software that end users run.

Lower-prioritySwitch to ANSI Windows API in `fsbridge::fopen()` functionby Hennadii Stepanov · 53e4951a · Oct 6, 2025 · 1 fileMessage 50 · ThinLow 37Details
Commit message · Hennadii Stepanov

Switch to ANSI Windows API in `fsbridge::fopen()` function

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Low 37/100

This commit changes how Bitcoin Core opens files on Windows. Previously it used a Unicode-aware Windows function (`_wfopen`) that could handle non-English characters in file paths. Now it uses the older ANSI `fopen`, which only reliably supports a limited set of characters. On some Windows systems this could make file paths containing certain characters fail to open, potentially causing wallet or data file errors. It is not a direct remote exploit, but it is a reliability/security-adjacent change on Windows.

AI review queuedRemove no longer necessary `WinCmdLineArgs` classby Hennadii Stepanov · 06d0be4e · Oct 6, 2025 · 6 filesMessage 68 · AdequateInformational 19Details
Commit message · Hennadii Stepanov

Remove no longer necessary `WinCmdLineArgs` class

This change removes one use case of `std::wstring_convert`, which is
deprecated in C++17 and removed in C++26. Other uses remain for now.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 19/100

This commit removes a Windows-specific helper class that converted command-line arguments from Windows' native wide-character format to the standard character format used by the rest of the program. The change is a cleanup to avoid using a C++ standard library feature (`std::wstring_convert`) that is being phased out. It is not a security fix and does not appear to introduce a vulnerability; it simply changes how Windows command-line arguments are handled, likely relying on a newer mechanism elsewhere.

Lower-prioritycmake: Set process code page to UTF-8 on Windowsby Hennadii Stepanov · f3664084 · Oct 6, 2025 · 7 filesMessage 60 · AdequateLow 32Details
Commit message · Hennadii Stepanov

cmake: Set process code page to UTF-8 on Windows

Additionally, this change adds app manifests to targets that were
previously missing them.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Low 32/100

This commit changes how Bitcoin Core handles text encoding on Windows. It tells Windows programs to use UTF-8 (a universal character encoding) instead of older regional code pages, and adds the same declaration to several helper programs that were missing it. It also makes the main bitcoin program run a setup routine that was previously only used by other entry points. The change is primarily a robustness/correctness fix; it does not by itself create a vulnerability, but it removes a class of bugs where non-English characters in file paths, command-line arguments, or log messages could be misinterpreted. Those misinterpretations could, in some situations, contribute to security-relevant behavior such as wrong file access or corrupted data.

Lower-prioritySwitch to ANSI Windows API in `Win32ErrorString()` functionby Hennadii Stepanov · dbe770d9 · Oct 6, 2025 · 1 fileMessage 50 · ThinInformational 16Details
Commit message · Hennadii Stepanov

Switch to ANSI Windows API in `Win32ErrorString()` function

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 16/100

This commit changes how Bitcoin Core turns Windows system error numbers into human-readable text. It switches from the modern Unicode ('wide character') version of a Windows API to the older ANSI ('A') version. The change removes C++ standard-library helpers for converting between Unicode and UTF-8. The practical effect is that error messages on Windows may no longer display correctly for languages that need non-ASCII characters; it is not a direct remote-exploitable vulnerability.

Lower-prioritySet minimum supported Windows version to 1903 (May 2019 Update)by Hennadii Stepanov · dccbb178 · Oct 6, 2025 · 1 fileMessage 65 · AdequateInformational 15Details
Commit message · Hennadii Stepanov

Set minimum supported Windows version to 1903 (May 2019 Update)

This version is the minimum required to support the UTF-8 code page
(CP_UTF8).

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only updates a documentation template to state that the minimum supported Windows version is Windows 10 version 1903 (May 2019 Update). It does not change any code, build settings, or runtime behavior. The change is purely informational and has no security relevance on its own.