BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2923 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

258security candidates613second-pass queue2891AI analyses
195commits · 30 days
469commits · 60 days
1488commits · 180 days
2864commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
959Strong · 80–100
1188Adequate · 60–79
688Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow16351161065
MarcoFalke41021406074
Lőrinc17721177081
fanquake22819226057
Hennadii Stepanov21214208063
rkrux57957074
Sjors Provoost89889074
merge-script36718088
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Analysis record

Published AI watches

Last scanned 29 minutes ago

Low 28 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35959: Update secp256k1 subtree to latest master

This commit updates Bitcoin Core's embedded copy of the secp256k1 cryptographic library to a newer version. The update adds a new Silent Payments module, lets advanced users swap in a custom SHA256 compression function, removes some old de…

Dependency update of a core cryptographic library (libsecp256k1)New runtime SHA256 compression callback with self-test/smoke test to catch mis-implementations earlyBehavior change in ellswift_xdh to reject secret keys >= curve order (vendor states not a security issue)
625f951bby Ava Chow+297−11626 files
No security note in commit
Informational 23 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35605: wallet: rpc: Deprecate `removeprunedfunds` RPC

This commit deprecates a Bitcoin Core wallet RPC command called removeprunedfunds. The command lets users delete transactions from their own wallet, which can alter displayed balances. The change does not fix a software bug; it is a cleanu…

RPC allows deletion of arbitrary wallet transactions, affecting balancesDeprecation framed by authors as removing a dangerous and maintenance-burden featureNo authentication bypass, memory corruption, or consensus change present in diff
e9ed5e83by Ava Chow+64−695 files
No security note in commit
Informational 18 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35930: wallet: post-#35501 cleanups in CWalletTx

This is a follow-up cleanup and hardening patch for the Bitcoin Core wallet's handling of transactions that have multiple possible witness versions (same transaction ID but different witness data). It renames a variable, simplifies a helpe…

Added input-validation during wallet transaction deserializationNew unit test specifically exercises rejection of mismatched variant txidFollow-up to PR #35501 which introduced witness-variant tracking in the wallet
512dc9afby Ava Chow+68−315 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35729: refactor: test: Unroll `&&` conditions in macros

This commit only changes Bitcoin Core's internal test code. It splits combined conditions inside test-check macros (like BOOST_CHECK(a && b)) into separate checks so that when a test fails, the test output points to the exact failing condi…

aa0e0f79by merge-script+196−9519 files
No security note in commit
Low 26 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35493: wallet, descriptor: Fix MuSig private key completeness checks on `importdescriptors`

This commit fixes a bug in Bitcoin Core's wallet import logic for a new type of multi-signature setup called MuSig. Previously, when a user imported a MuSig descriptor that already contained all needed private keys, the wallet incorrectly …

False-positive warning in wallet import for fully-private MuSig descriptorsIncorrect private-key completeness check on synthetic aggregate public keyDescriptor logic now delegates completeness to `Descriptor::HavePrivateKeys()`
2c01832fby merge-script+76−374 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#33186: wallet, test: Ancient Wallet Migration from v0.14.3 (no-HD and Single Chain)

This commit only adds new automated tests for migrating very old Bitcoin Core wallets (version 0.14.3 from 2017) to the modern descriptor wallet format. It does not change any wallet production code, consensus rules, or network behavior. T…

757aa573by merge-script+246−124 files
No security note in commit
Low 28 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35925: wallet, rpc: Exclude non-owned addresses from listreceivedby*

This update fixes a wallet reporting bug. When a user asked their Bitcoin wallet to list every address that had received money, including empty ones, the result incorrectly included foreign addresses that the wallet merely knew about (for …

Information disclosure: wallet RPCs leaked existence/labels of foreign addressesIncorrect access-control boundary: non-owned addresses exposed in 'received' reportFix uses IsMine() rather than address purpose metadata, avoiding inconsistent purpose handling
e8cc21c5by Ava Chow+19−32 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35937: test: Append print_suppressions=0 to LSAN_OPTIONS, and suppress bitcoin-qt

This commit only changes test configuration. It tells the LeakSanitizer tool used during automated testing to stop printing long lists of suppressed memory leaks, and it narrows the list of ignored leaks to the bitcoin-qt GUI test binary. …

5973e075by merge-script+3−42 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-priorityRevert "gui, qt: brintToFront workaround for Wayland"by Hennadii Stepanov · 0672e727 · Nov 21, 2025 · 1 fileMessage 65 · AdequateInformational 15Details
Commit message · Hennadii Stepanov

Revert "gui, qt: brintToFront workaround for Wayland"

This reverts commit 15aa7d023688700a47997b92108de95f2d864f5a.

65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit simply undoes a previous user-interface tweak for Linux Wayland users. The original workaround tried to force a Bitcoin Core window to the front by temporarily making it stay-on-top. Removing it restores the older, simpler window-raising behavior. There is no security issue visible in this change.

Lower-prioritydoc: Add `INSTALL.md` to Linux release tarballsby Hennadii Stepanov · d62f46ee · Nov 21, 2025 · 2 filesMessage 45 · ThinInformational 15Details
Commit message · Hennadii Stepanov

doc: Add `INSTALL.md` to Linux release tarballs

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This change only adds an installation instruction file to Linux release packages. It does not modify any executable code, network behavior, or security-sensitive logic.

Lower-priorityci: Run GUI unit tests in cross-Windows taskby MarcoFalke · fa7ea497 · Nov 20, 2025 · 1 fileMessage 67 · AdequateInformational 15Details
Commit message · MarcoFalke

ci: Run GUI unit tests in cross-Windows task

67/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit simply adds one line to Bitcoin Core's automated CI (continuous integration) workflow so that the GUI unit tests for the Windows build are executed alongside existing tests. It is a testing infrastructure change, not a code change to the Bitcoin software itself, and has no direct security relevance.

Lower-priorityci: Remove redundant busybox optionby MarcoFalke · fa0fee44 · Nov 20, 2025 · 4 filesMessage 90 · StrongInformational 15Details
Commit message · MarcoFalke

ci: Remove redundant busybox option

The option was fine, but now that there is a dedicated Alpine Linux
task, which uses BusyBox, it seems redundant.
(See: ci/test/00_setup_env_native_alpine_musl.sh)

So remove the USE_BUSY_BOX option, along with the BINS_SCRATCH_DIR env
var.

Also, enable pipefail in the ci/test/00_setup_env.sh script, while
touching it.

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit is a routine cleanup of Bitcoin Core's continuous integration (CI) scripts. It removes an old option that let CI jobs use BusyBox utilities instead of GNU tools, because a dedicated Alpine Linux CI job now covers BusyBox testing. It also removes a now-unused temporary directory for executables and enables stricter shell error handling in one script. There is no user-facing change, no change to the Bitcoin node software, and no security relevance.

Lower-prioritydoc: Shorten ci nameby MarcoFalke · fa102ec6 · Nov 20, 2025 · 1 fileMessage 43 · ThinInformational 15Details
Commit message · MarcoFalke

doc: Shorten ci name

No other task has in its name whether it is using depends or not, so
remove it here as well.

43/100 · ThinMessage clarity
✓ Subject identifies a change✓ Provides an explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only shortens the display name of one automated testing job in the project's GitHub Actions configuration. It removes the words 'no depends' from a CI job label. There is no code change, no security fix, and no functional impact on the Bitcoin Core software or its users.

Lower-priorityclang-format: Set Bitcoin Core IncludeCategoriesby MarcoFalke · fa7e222a · Nov 20, 2025 · 2 filesMessage 60 · AdequateInformational 15Details
Commit message · MarcoFalke

clang-format: Set Bitcoin Core IncludeCategories

Replace the default llvm include categories with the ones specific to
Bitcoin Core.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit only changes code-formatting rules and reorders one test file's #include lines accordingly. It has no effect on program behavior or security.

Lower-prioritydoc: Remove bash -c wrapperby MarcoFalke · 22222237 · Nov 20, 2025 · 1 fileMessage 60 · AdequateInformational 15Details
Commit message · MarcoFalke

doc: Remove bash -c wrapper

This is not needed in combination with the outer env.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit is a minor documentation cleanup in Bitcoin Core's CI (continuous integration) README. It removes an unnecessary 'bash -c' wrapper from example shell commands, showing users they can pass environment variables directly to 'env' instead. There is no security-relevant change to the software itself.

Lower-prioritydepends: Update Qt download linkby Hennadii Stepanov · 50cbde32 · Nov 20, 2025 · 1 fileMessage 68 · AdequateInformational 18Details
Commit message · Hennadii Stepanov

depends: Update Qt download link

Replace the unreliable https://code.qt.io with the GitHub mirror link.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 18/100

This commit simply changes where Bitcoin Core's build system downloads some Qt source files from one official Qt location (code.qt.io) to another official mirror (GitHub's raw content server). The downloaded files are still verified by fixed SHA-256 hashes, so even if the new host were malicious, the build would reject tampered files. There is no security vulnerability here.

Security candidateChange Parse descriptor argument to string_viewby Sjors Provoost · c0bfe72f · Nov 20, 2025 · 3 filesMessage 95 · StrongInformational 20Details
Commit message · Sjors Provoost

Change Parse descriptor argument to string_view

Commit b3bf18f0bac0ffe18206ee20642e11264ba0c99d changed the function
signature from Parse(const std::string& descriptor,...) to
Parse(std::span<const char> descriptor,...).

Calling this new version of Parse with a string literal will trigger
a confusing "Invalid characters in payload" due to the trailing "\0".

Switch to string_view and add a test.

Co-authored-by: MarcoFalke <*~=`'#}+{/-|&$^_@721217.xyz>

95/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification✓ Names security-relevant behavior explicitly
Why it was queued
signing boundary
AI analysis · Informational 20/100

This commit fixes a minor developer-facing bug in how Bitcoin Core parses text-based wallet descriptors. A recent code change had made the parser accept raw character spans, which accidentally included the hidden null terminator at the end of C++ string literals. That caused the parser to reject valid descriptors with a misleading 'Invalid characters in payload' error. The fix switches the public API to use std::string_view, which does not include the trailing null byte, and adds a regression test. It is not a consensus or network security issue.

Lower-prioritydepends: expat 2.7.3by fanquake · f541b92c · Nov 20, 2025 · 2 filesMessage 61 · AdequateLow 38Details
Commit message · fanquake

depends: expat 2.7.3

Remove the patch, as expat has bumped it's minimum to 3.15.
Remove the lto related workaround. I haven't seen issues with CMakes
TestBigEndian.

61/100 · AdequateMessage clarity
✓ Subject identifies a change✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Low 38/100

This commit updates the expat XML parsing library used by Bitcoin Core's build system from version 2.4.8 to 2.7.3. Expat is a widely-used library for processing XML data, and newer versions often fix security bugs found in older releases. The change also removes an old build patch and a workaround that were only needed for the older expat version. However, the commit message itself does not say this is a security fix, and no specific vulnerability is mentioned.

Lower-prioritytest: retry download in get_previous_releases.pyby MarcoFalke · fad06f3b · Nov 20, 2025 · 1 fileMessage 67 · AdequateInformational 16Details
Commit message · MarcoFalke

test: retry download in get_previous_releases.py

67/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
AI analysis · Informational 16/100

This is a test-only helper script that downloads old Bitcoin Core release binaries for testing. The change simply retries a failed download once after a 12-second wait. It is not a security fix and does not affect the Bitcoin Core software users run.

Lower-prioritydepends: libxcb 1.17.0by Hennadii Stepanov · 2ebf4356 · Nov 20, 2025 · 2 filesMessage 69 · AdequateInformational 18Details
Commit message · Hennadii Stepanov

depends: libxcb 1.17.0

--without-launchd was removed in
https://gitlab.freedesktop.org/xorg/lib/libxcb/-/commit/ccdef1a8a5b6956a3fb7115d634db213433dca75.

69/100 · AdequateMessage clarity
✓ Subject identifies a change✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 18/100

This commit updates the libxcb library used in Bitcoin Core's build dependencies from version 1.15 to 1.17.0. It also removes an obsolete build option and adjusts a patch that removes an unneeded pthread-stubs dependency so it also covers more operating systems. This is a routine dependency maintenance change, not a fix for a known Bitcoin Core security bug.

Lower-prioritydepends: xcb_proto 1.17.0by Hennadii Stepanov · ba7ac870 · Nov 20, 2025 · 1 fileMessage 45 · ThinInformational 13Details
Commit message · Hennadii Stepanov

depends: xcb_proto 1.17.0

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 13/100

This commit updates a build dependency called xcb_proto from version 1.15.2 to 1.17.0 inside Bitcoin Core's dependency system. It only changes a version number, download URL extension, and the cryptographic hash used to verify the downloaded file. There is no direct evidence in the commit that this fixes a security vulnerability, but updating dependencies can sometimes include upstream security fixes.

Lower-priorityclang-format: Set PackConstructorInitializers: CurrentLineby MarcoFalke · fad0c76d · Nov 20, 2025 · 2 filesMessage 50 · ThinInformational 15Details
Commit message · MarcoFalke

clang-format: Set PackConstructorInitializers: CurrentLine

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only changes code formatting rules. It tells the project's automated style tool (clang-format) to place constructor initializer list items on separate lines instead of packing them together. The only code change is a reformatting of one constructor in net.cpp to match the new style. There is no functional change to the Bitcoin software and no security impact.

Lower-prioritydepends: libxcb-util-wm 0.4.2by fanquake · d129384c · Nov 20, 2025 · 1 fileMessage 45 · ThinInformational 11Details
Commit message · fanquake

depends: libxcb-util-wm 0.4.2

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 11/100

This commit updates a build dependency called libxcb-util-wm from version 0.4.1 to 0.4.2 inside Bitcoin Core's 'depends' packaging system. It only changes the version number and the expected file hash (SHA-256) used to verify the downloaded source. There is no statement in the commit or supplied references saying this fixes a security problem, and no details about what changed in libxcb-util-wm 0.4.2 are provided. On its own, this looks like a routine dependency refresh rather than a confirmed security patch.

Lower-prioritydepends: libxcb-util-cursor 0.1.6by fanquake · 42d0692f · Nov 20, 2025 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · fanquake

depends: libxcb-util-cursor 0.1.6

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit simply updates a third-party graphics library used by Bitcoin Core's build system from version 0.1.5 to 0.1.6, along with its corresponding checksum. There is no indication in the commit itself that this fixes a security problem, and no security-relevant information is provided.

AI review queueddepends: libxcb 1.15by fanquake · 25b85919 · Nov 20, 2025 · 1 fileMessage 28 · OpaqueInformational 13Details
Commit message · fanquake

depends: libxcb 1.15

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 13/100

This commit updates the libxcb dependency used when building Bitcoin Core from source. It bumps the version from 1.14 to 1.15, switches the download archive format from .tar.xz to .tar.gz, updates the SHA-256 checksum, and refreshes a documentation link. There is no direct evidence in the commit that this fixes a specific security vulnerability, but dependency updates can include upstream security fixes.

Lower-prioritydepends: libxcb-util-image 0.4.1by fanquake · 74b68ad2 · Nov 20, 2025 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · fanquake

depends: libxcb-util-image 0.4.1

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit simply updates a dependency package version for libxcb-util-image from 0.4.0 to 0.4.1 in Bitcoin Core's build system, along with its corresponding SHA-256 hash. There is no indication in the commit itself of any security issue. It is a routine dependency bump.

Lower-prioritydepends: libxcb-util 0.4.1by fanquake · 5bc0dde8 · Nov 20, 2025 · 1 fileMessage 45 · ThinInformational 11Details
Commit message · fanquake

depends: libxcb-util 0.4.1

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 11/100

This commit updates a build dependency, libxcb-util, from version 0.4.0 to 0.4.1 in Bitcoin Core's packaging system. It only changes the version number and the expected file hash (SHA-256) used to verify the downloaded source. There is no direct evidence in the commit that this fixes a security vulnerability, but dependency updates can sometimes include upstream bug or security fixes. Without external references, the security relevance is unclear.

Lower-prioritydepends: libxcb-util-renderutil 0.3.10by fanquake · 0b857ae9 · Nov 20, 2025 · 1 fileMessage 45 · ThinInformational 11Details
Commit message · fanquake

depends: libxcb-util-renderutil 0.3.10

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 11/100

This commit simply bumps the version of a third-party graphics-related library (libxcb-util-renderutil) used when building Bitcoin Core's dependencies. The change updates the version number and its corresponding cryptographic hash so the build system downloads the newer release. There is no direct evidence in the commit that this fixes a security vulnerability, and the library is only used in build tooling for graphical wallet support, not in Bitcoin's core networking or consensus code.

Lower-prioritydepends: libxcb-util-keysyms 0.4.1by fanquake · 35e50488 · Nov 20, 2025 · 1 fileMessage 45 · ThinInformational 14Details
Commit message · fanquake

depends: libxcb-util-keysyms 0.4.1

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 14/100

This commit updates a dependency used by Bitcoin Core's build system from version 0.4.0 to 0.4.1 of libxcb-util-keysyms, a small helper library for X11 keyboard handling. The change itself is a routine version bump with a new checksum. There is no direct evidence in the commit that this fixes a security vulnerability, but updating dependencies can sometimes address bugs or security issues in the upstream library.

AI review queueddepends: libXau 1.0.12by fanquake · 8d07292c · Nov 20, 2025 · 1 fileMessage 38 · OpaqueInformational 15Details
Commit message · fanquake

depends: libXau 1.0.12

38/100 · OpaqueMessage clarity
✓ Subject identifies a change✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This commit simply bumps the version of a third-party graphics-related library (libXau) used in Bitcoin Core's build dependencies from 1.0.9 to 1.0.12, updating the corresponding download hash. There is no indication in the commit itself that this fixes a security issue, and no security references were provided.

Lower-priorityrefactor: Use reference for chain_start in HeadersSyncStateby Daniela Brozzoni · de4242f4 · Nov 20, 2025 · 5 filesMessage 85 · StrongInformational 15Details
Commit message · Daniela Brozzoni

refactor: Use reference for chain_start in HeadersSyncState

chain_start can never be null, so it's better to pass it as a reference
rather than a raw pointer

Also slightly reformat HeaderSyncState constructor to make clang-format
happy

Lastly, remove `const` from `chain_start` declaration in
headers_sync_chainwork_tests, to work aroud a false-positive
dangling-reference warning in gcc 13.0

Co-Authored-By: maflcko <6399679+maflcko@users.noreply.github.com>

85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a code cleanup (refactor) that changes how one internal data structure receives a known-valid block index. It replaces a raw pointer with a C++ reference because the value is never null. There is no functional change to how Bitcoin validates blocks, syncs headers, or handles network data, and no security vulnerability is fixed or introduced.

AI review queuedtest: Fix race condition in IPC interface block propagation testby Fabian Jahr · 2578e6fc · Nov 19, 2025 · 1 fileMessage 72 · AdequateInformational 15Details
Commit message · Fabian Jahr

test: Fix race condition in IPC interface block propagation test

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
second-pass: broader security terminology
AI analysis · Informational 15/100

This commit fixes a test-only race condition in a Bitcoin Core functional test. It changes which node is checked first when verifying that a newly submitted block has propagated, so the test waits for the local node to update its own chain before checking that all nodes agree. There is no change to production code, no user-facing behavior change, and no security vulnerability in the Bitcoin Core software itself.

Lower-prioritydoc: Drop (default: none) from -i2psam descriptionby Ryan Ofsky · 288b8c30 · Nov 19, 2025 · 1 fileMessage 73 · AdequateInformational 15Details
Commit message · Ryan Ofsky

doc: Drop (default: none) from -i2psam description

Suggested by Vojtěch Strnad (vostrnad)
https://github.com/bitcoin/bitcoin/pull/33770#discussion_r2529117675

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 15/100

This commit is a one-word documentation cleanup. It removes the phrase '(default: none)' from the help text describing the -i2psam command-line option in Bitcoin Core. The actual behavior of the software does not change; only the user-visible description is slightly simplified for consistency with other options.