BC
← All projectsBitcoin Core

Bitcoin Core

The Bitcoin network's reference node and wallet implementation.

BitcoinSupply chainNormal
Repository coverage

2924 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

258security candidates613second-pass queue2891AI analyses
186commits · 30 days
470commits · 60 days
1488commits · 180 days
2865commits · 365 days
Backfill bands
Aug 5 → Feb 61351 seen45 candidatesComplete
Feb 6 → Jun 61033 seen63 candidatesComplete
Jun 6 → Jul 6281 seen11 candidatesComplete
Jul 6 → Aug 5207 seen5 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

70/100 average clarity
960Strong · 80–100
1188Adequate · 60–79
688Thin · 40–59
88Opaque · 0–39
6security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Antoine Poinsot22422170
Ava Chow16351161065
MarcoFalke41021406074
Lőrinc17721177081
fanquake22819226057
Hennadii Stepanov21214208063
rkrux57957074
Sjors Provoost89889074
merge-script37718088
Sebastian Falbesoner33733073
David Gumberg55655072
Pieter Wuille95595066
Analysis record

Published AI watches

Last scanned 16 minutes ago

Low 28 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35959: Update secp256k1 subtree to latest master

This commit updates Bitcoin Core's embedded copy of the secp256k1 cryptographic library to a newer version. The update adds a new Silent Payments module, lets advanced users swap in a custom SHA256 compression function, removes some old de…

Dependency update of a core cryptographic library (libsecp256k1)New runtime SHA256 compression callback with self-test/smoke test to catch mis-implementations earlyBehavior change in ellswift_xdh to reject secret keys >= curve order (vendor states not a security issue)
625f951bby Ava Chow+297−11626 files
No security note in commit
Informational 23 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35605: wallet: rpc: Deprecate `removeprunedfunds` RPC

This commit deprecates a Bitcoin Core wallet RPC command called removeprunedfunds. The command lets users delete transactions from their own wallet, which can alter displayed balances. The change does not fix a software bug; it is a cleanu…

RPC allows deletion of arbitrary wallet transactions, affecting balancesDeprecation framed by authors as removing a dangerous and maintenance-burden featureNo authentication bypass, memory corruption, or consensus change present in diff
e9ed5e83by Ava Chow+64−695 files
No security note in commit
Informational 18 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35930: wallet: post-#35501 cleanups in CWalletTx

This is a follow-up cleanup and hardening patch for the Bitcoin Core wallet's handling of transactions that have multiple possible witness versions (same transaction ID but different witness data). It renames a variable, simplifies a helpe…

Added input-validation during wallet transaction deserializationNew unit test specifically exercises rejection of mismatched variant txidFollow-up to PR #35501 which introduced witness-variant tracking in the wallet
512dc9afby Ava Chow+68−315 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35729: refactor: test: Unroll `&&` conditions in macros

This commit only changes Bitcoin Core's internal test code. It splits combined conditions inside test-check macros (like BOOST_CHECK(a && b)) into separate checks so that when a test fails, the test output points to the exact failing condi…

aa0e0f79by merge-script+196−9519 files
No security note in commit
Low 26 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35493: wallet, descriptor: Fix MuSig private key completeness checks on `importdescriptors`

This commit fixes a bug in Bitcoin Core's wallet import logic for a new type of multi-signature setup called MuSig. Previously, when a user imported a MuSig descriptor that already contained all needed private keys, the wallet incorrectly …

False-positive warning in wallet import for fully-private MuSig descriptorsIncorrect private-key completeness check on synthetic aggregate public keyDescriptor logic now delegates completeness to `Descriptor::HavePrivateKeys()`
2c01832fby merge-script+76−374 files
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35943: doc: fix dead link in txrequest.h

This commit only fixes a broken web link in a code comment. It replaces an outdated URL to a research paper with a working URL to the same paper. There is no change to program logic, no security fix, and no vulnerability.

5d051c05by merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#33186: wallet, test: Ancient Wallet Migration from v0.14.3 (no-HD and Single Chain)

This commit only adds new automated tests for migrating very old Bitcoin Core wallets (version 0.14.3 from 2017) to the modern descriptor wallet format. It does not change any wallet production code, consensus rules, or network behavior. T…

757aa573by merge-script+246−124 files
No security note in commit
Low 28 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35925: wallet, rpc: Exclude non-owned addresses from listreceivedby*

This update fixes a wallet reporting bug. When a user asked their Bitcoin wallet to list every address that had received money, including empty ones, the result incorrectly included foreign addresses that the wallet merely knew about (for …

Information disclosure: wallet RPCs leaked existence/labels of foreign addressesIncorrect access-control boundary: non-owned addresses exposed in 'received' reportFix uses IsMine() rather than address purpose metadata, avoiding inconsistent purpose handling
e8cc21c5by Ava Chow+19−32 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35937: test: Append print_suppressions=0 to LSAN_OPTIONS, and suppress bitcoin-qt

This commit only changes test configuration. It tells the LeakSanitizer tool used during automated testing to stop printing long lists of suppressed memory leaks, and it narrows the list of ignored leaks to the bitcoin-qt GUI test binary. …

5973e075by merge-script+3−42 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35928: doc: mention -DWITH_ZMQ=ON in macOS build guide

This is a one-line documentation update to the macOS build guide. It adds a note telling users to pass a specific CMake option if they want ZeroMQ notification support. There is no code change and no security impact.

8397e09eby merge-script+1−11 file
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35482: fuzz: exercise the transaction-handling path in process_message(s)

This commit only changes Bitcoin Core's internal fuzz testing code. It makes the fuzz tests exercise more of the transaction-handling code path by toggling Initial Block Download mode and resetting the mempool between test runs. There is n…

No production code modifiedNo consensus, validation, net_processing, or wallet logic changedOnly fuzz test harnesses and test utilities affected
f11dc617by merge-script+105−798 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35914: test, fuzz: Remove unused variables

This commit removes unused variables from Bitcoin Core's test and fuzzing code. It is a cleanup/refactoring change with no effect on the live network software or user funds. It does not fix or introduce any security vulnerability.

d36bf709by merge-script+1−138 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35896: refactor: Default uint256::operator==, add operator<=>

This commit is a routine code cleanup in Bitcoin Core. It switches the uint256 equality and comparison operators to use standard C++20 defaults, removes an old custom Compare() helper, and marks an internal assertion-failure function as ne…

ed2c59abby merge-script+99−245 files
No security note in commit
Moderate 62 AI analysisMessage 96 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35872: rpc: avoid descriptor range counter overflow

This update fixes a counting bug in several Bitcoin Core RPC commands that scan descriptors. When a user requested a descriptor range ending at the maximum allowed value (2,147,483,647), the internal counter used a smaller integer type and…

Signed integer overflow in descriptor expansion loopCrash/undefined behavior on maximum-range descriptor scansAuthenticated RPC surface affected (scantxoutset, scanblocks, getdescriptoractivity, utxoupdatepsbt, descriptorprocesspsbt)
b388674aby Ava Chow+3−12 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 91 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35842: rpc: Properly make RPCResult::Type::ANY non-test-only

This is a small cleanup and documentation fix for Bitcoin Core's RPC help system. It removes a comment that incorrectly said a certain output type was 'for testing only' and makes the help text properly display those outputs. There is no d…

No memory safety, cryptography, consensus, or authorization changes observedChange is confined to RPC help/schema metadata generationComment-only/type-label change from 'for testing only' to general use
c36ffd87by merge-script+42−364 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35895: refactor: Enable clang-tidy rule to reject anon namespace in header

This is a code cleanup change that turns on a static-analysis rule to prevent a specific C++ coding pattern (anonymous namespaces in header files) and updates two headers to comply. It does not change how Bitcoin Core behaves at runtime an…

No security-relevant code changeNo memory safety, cryptography, consensus, or network changesTooling-only refactor (clang-tidy configuration)
c4fbd3c7by merge-script+9−123 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35630: test: Add importdescriptors rpc error test coverage

This commit only adds new test cases to Bitcoin Core's functional test suite. It does not change any production wallet, node, or RPC code. The tests verify that the importdescriptors RPC reports errors in the right order, rejects bad times…

465196d0by merge-script+77−11 file
No security note in commit
Informational 15 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35180: coins: group private cache helpers

This change is purely a code cleanup: it moves two internal helper functions of a Bitcoin Core cache class into the private section of the class and removes a duplicate 'private:' label. There is no change to what the code does, no bug fix…

c940fd75by merge-script+13−141 file
No security note in commit
Low 29 AI analysisMessage 81 · Strong
BC Bitcoin CoreBitcoin Core BitcoinSupply chain

Merge bitcoin/bitcoin#35582: rpc: reject null for optional parameters

This Bitcoin Core change tightens how three RPC commands (scantxoutset, scanblocks, deriveaddresses) handle the value null when it is passed for optional parameters. Previously, explicitly passing null could be treated differently from sim…

RPC parameter validation changeNull value handling changeAddition of explicit error checks for missing required contextual parameters
3db96eb5by merge-script+18−75 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-priorityci: Enable experimental kernel stuff in i686 taskby MarcoFalke · faff7b23 · Nov 12, 2025 · 2 filesMessage 100 · StrongInformational 15Details
Commit message · MarcoFalke

ci: Enable experimental kernel stuff in i686 task

Base the task on --preset=dev-mode to ensure maximal coverage and add
the following:

bitcoin-chainstate (experimental) ... ON
libbitcoinkernel (experimental) ..... ON
kernel-test (experimental) .......... ON

IPC remains explicitly disabled.

100/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only changes Bitcoin Core's continuous integration (CI) testing setup. It renames one CI job and adjusts build flags for an existing 32-bit (i686) test task so that it also exercises experimental kernel-related components. There is no change to the actual Bitcoin node code, consensus rules, wallet handling, networking, or any user-facing behavior.

Lower-priorityci: Enable experimental kernel stuff in mac-cross tasksby MarcoFalke · fa1632ee · Nov 12, 2025 · 2 filesMessage 100 · StrongInformational 15Details
Commit message · MarcoFalke

ci: Enable experimental kernel stuff in mac-cross tasks

Base the task on --preset=dev-mode to ensure maximal coverage and add
the following:

bitcoin-chainstate (experimental) ... ON
libbitcoinkernel (experimental) ..... ON
kernel-test (experimental) .......... ON

USDT remains explicitly disabled.

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit changes two Bitcoin Core continuous integration (CI) configuration files for macOS cross-compilation tasks. It switches the build to use the 'dev-mode' preset and explicitly disables USDT tracing, while keeping reduced symbol exports. There is no change to the actual Bitcoin node or wallet code that users run.

Lower-priorityci: Enable experimental kernel stuff in armhf taskby MarcoFalke · fad10ff7 · Nov 12, 2025 · 2 filesMessage 100 · StrongInformational 15Details
Commit message · MarcoFalke

ci: Enable experimental kernel stuff in armhf task

Base the task on --preset=dev-mode to ensure maximal coverage and add
the following:

bitcoin-chainstate (experimental) ... ON
libbitcoinkernel (experimental) ..... ON
kernel-test (experimental) .......... ON

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit changes Bitcoin Core's continuous integration (CI) settings for 32-bit ARM testing. It switches the build to use the 'dev-mode' preset and enables several experimental kernel-related components for testing. There is no code change that affects how Bitcoin Core runs in production, and nothing in the commit suggests a security fix or vulnerability.

Security candidateci: Enable experimental kernel stuff in Alpine taskby MarcoFalke · fa9d67c1 · Nov 12, 2025 · 2 filesMessage 100 · StrongInformational 15Details
Commit message · MarcoFalke

ci: Enable experimental kernel stuff in Alpine task

Base the task on --preset=dev-mode to ensure maximal coverage and add
the following:

bitcoin-chainstate (experimental) ... ON
libbitcoinkernel (experimental) ..... ON
kernel-test (experimental) .......... ON

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
Why it was queued
authentication path
AI analysis · Informational 15/100

This commit changes a Bitcoin Core continuous integration (CI) test job. It renames the Alpine Linux test task and switches its build configuration to use a developer preset that enables experimental kernel-related components. There is no change to the actual Bitcoin node software, wallet code, network handling, or any code that end users run. It is purely a testing/CI configuration adjustment.

Lower-priorityci: Enable experimental kernel stuff in s390x taskby MarcoFalke · fab3fb83 · Nov 12, 2025 · 1 fileMessage 100 · StrongInformational 15Details
Commit message · MarcoFalke

ci: Enable experimental kernel stuff in s390x task

Base the task on --preset=dev-mode to ensure maximal coverage and add
the following:

bitcoin-chainstate (experimental) ... ON
libbitcoinkernel (experimental) ..... ON
kernel-test (experimental) .......... ON

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit changes only a continuous integration (CI) configuration file for the s390x mainframe platform. It switches the build to use the developer preset and explicitly turns on experimental kernel-related build options for automated testing. There is no change to the Bitcoin Core software that users run, no bug fix, and no security-relevant code change.

Lower-priorityci: Enable experimental kernel stuff in valgrind taskby MarcoFalke · fa7da8a6 · Nov 12, 2025 · 1 fileMessage 100 · StrongInformational 15Details
Commit message · MarcoFalke

ci: Enable experimental kernel stuff in valgrind task

Base the task on --preset=dev-mode to ensure maximal coverage and add
the following:

bitcoin-chainstate (experimental) ... ON
libbitcoinkernel (experimental) ..... ON
kernel-test (experimental) .......... ON

The GUI and USDT remain disabled explicitly.

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit changes only a continuous integration (CI) test script. It switches the valgrind test job to use a developer build preset and explicitly turns on experimental Bitcoin kernel-related components for testing. There is no change to the actual Bitcoin Core software that users run, and nothing in the commit suggests a security fix or vulnerability.

Lower-priorityci: Enable experimental kernel stuff in TSan taskby MarcoFalke · fa9c2973 · Nov 12, 2025 · 2 filesMessage 100 · StrongInformational 15Details
Commit message · MarcoFalke

ci: Enable experimental kernel stuff in TSan task

Base the task on --preset=dev-mode to ensure maximal coverage and add
the following:

bitcoin-chainstate (experimental) ... ON
libbitcoinkernel (experimental) ..... ON
kernel-test (experimental) .......... ON

The GUI remains disabled explicitly.

100/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit changes only the Bitcoin Core continuous integration (CI) test configuration. It turns on additional experimental kernel-related build options for the ThreadSanitizer (TSan) test job and switches it to use the developer-mode build preset. There is no change to the actual Bitcoin node code that users run, and nothing in the commit suggests a security vulnerability or fix.

Lower-priorityci: Enable experimental kernel stuff in MSan taskby MarcoFalke · fad30d43 · Nov 12, 2025 · 2 filesMessage 100 · StrongInformational 15Details
Commit message · MarcoFalke

ci: Enable experimental kernel stuff in MSan task

Base the task on --preset=dev-mode to ensure maximal coverage and add
the following:

bitcoin-chainstate (experimental) ... ON
libbitcoinkernel (experimental) ..... ON
kernel-test (experimental) .......... ON

The GUI remains disabled explicitly.

100/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only changes Bitcoin Core's continuous integration (CI) testing configuration. It renames a CI job from 'MSan, depends' to 'MSan' and switches the build to use a 'dev-mode' preset that enables experimental kernel-related components for testing with MemorySanitizer (MSan). There is no change to the actual Bitcoin node or wallet code that users run, and nothing in the commit suggests a security vulnerability or fix.

Lower-prioritytest: exercise TransactionMerklePath with empty block; targets the MerkleComputation empty-leaves path that was only reached by fuzz testsby frankomosh · ffcae82a · Nov 12, 2025 · 1 fileMessage 72 · AdequateInformational 12Details
Commit message · frankomosh

test: exercise TransactionMerklePath with empty block; targets the MerkleComputation empty-leaves path that was only reached by fuzz tests

72/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 12/100

This commit only adds a new test case to Bitcoin Core's test suite. It checks that when a block has no transactions, a helper function called TransactionMerklePath returns an empty path. There is no change to production code, no bug fix, and no security-relevant behavior change.

Lower-prioritydoc: Recommend latest Debian stable or Ubuntu LTSby MarcoFalke · fa9f29a4 · Nov 11, 2025 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · MarcoFalke

doc: Recommend latest Debian stable or Ubuntu LTS

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only updates documentation. It changes the build instructions for Linux to recommend using the latest Debian stable or Ubuntu LTS release, and notes that older releases may need a newer compiler. There is no code change and no security fix or vulnerability introduced.

Lower-prioritydoc: Add GCC-12 min release notesby MarcoFalke · fa1711ee · Nov 11, 2025 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · MarcoFalke

doc: Add GCC-12 min release notes

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only adds a release note document stating that the minimum supported GCC compiler version has been increased to 12.1. It contains no code changes and no security-related content.

Lower-priorityci: Enable experimental kernel stuff in G++-12 task (previous releases)by MarcoFalke · faa8be75 · Nov 11, 2025 · 2 filesMessage 100 · StrongInformational 15Details
Commit message · MarcoFalke

ci: Enable experimental kernel stuff in G++-12 task (previous releases)

Base the task on --preset=dev-mode to ensure maximal coverage and add
the following:

bitcoin-chainstate (experimental) ... ON
libbitcoinkernel (experimental) ..... ON
kernel-test (experimental) .......... ON

Also, shorten the name, for a less cluttered web view.

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only changes Bitcoin Core's continuous integration (CI) testing configuration. It switches one CI job to use a development preset and turns on experimental kernel-related build options for testing purposes. There is no change to the actual Bitcoin software that users run, and no security issue is present.

Lower-prioritytest: Remove gccbug_90348 test caseby MarcoFalke · fabce97b · Nov 11, 2025 · 3 filesMessage 98 · StrongInformational 12Details
Commit message · MarcoFalke

test: Remove gccbug_90348 test case

The test case no longer detects this specific issue for GCC versions
12.1+, as explained in the
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=90348 thread and in this
compiler-explorer playground:
https://godbolt.org/z/Y48osrjM8

So remove the test case and update the -fstack-reuse=none cmake
docstring with the underlying affected GCC versions, and the bug URL.

98/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 12/100

This commit removes an old automated test that checked whether the GCC compiler had a specific bug. The test no longer catches the bug in newer GCC versions, so the developers deleted it and updated a build-system comment to note which GCC versions are affected. There is no change to the actual Bitcoin Core program code or its security behavior.

Lower-prioritytest: Remove unused fs::create_directories testby MarcoFalke · fa3854e4 · Nov 11, 2025 · 1 fileMessage 98 · StrongInformational 15Details
Commit message · MarcoFalke

test: Remove unused fs::create_directories test

The test was added in commit ddb75c2e87a60ed24065bdf0c3bfabf4e058cef1.
After the create_directories wrapper removal, the test is redundant with
the unit test in the upstream stdlib. Also, there is a Bitcoin Core
functional test that covers this behavior in
test/functional/feature_dirsymlinks.py

So remove this unit test.

Finally, I could not find a real system that still ships a buggy stdlib
(v11.2) in their package manager. A stand-alone test is also available
in compiler-explorer under https://godbolt.org/z/aeMKraYrT.

98/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 15/100

This commit simply deletes a unit test that is no longer needed. It does not change any production code, so it cannot introduce or fix a security vulnerability on its own.

Lower-priorityutil: [refactor] Remove unused create_directories workaroundby MarcoFalke · fa9dacdb · Nov 11, 2025 · 1 fileMessage 73 · AdequateInformational 15Details
Commit message · MarcoFalke

util: [refactor] Remove unused create_directories workaround

This was added in commit 1f46b6e46e1454b91ff7ceb31853bc440952f8eb, but
is no longer needed after g++-12 is the minimum required.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit removes a helper function that worked around a compiler/library bug in older versions of GCC. The project now requires a newer GCC version where the bug is fixed, so the workaround is no longer needed. There is no security issue here—this is routine code cleanup.

Lower-prioritybuild: add -Wtrailing-whitespace=anyby fanquake · 40dcbf58 · Nov 11, 2025 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · fanquake

build: add -Wtrailing-whitespace=any

This is available in GCC 15. See
https://gcc.gnu.org/gcc-15/changes.html.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit adds a new compiler warning flag that flags trailing whitespace in source code. It is a code-style/build-hygiene change, not a security fix. There is no vulnerability being patched.

Lower-priorityci: Enable experimental kernel stuff in ASan taskby MarcoFalke · a3ac59a4 · Nov 11, 2025 · 2 filesMessage 100 · StrongInformational 15Details
Commit message · MarcoFalke

ci: Enable experimental kernel stuff in ASan task

Base the task on --preset=dev-mode to ensure maximal coverage and add
the following:

bitcoin-chainstate (experimental) ... ON
libbitcoinkernel (experimental) ..... ON
kernel-test (experimental) .......... ON

100/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit changes Bitcoin Core's continuous integration (CI) settings for one automated testing job. It switches the build configuration to use a developer preset and enables experimental kernel-related components for testing. There is no change to the actual Bitcoin node software that users run, no bug fix, and no security patch.

Lower-prioritykernel: Allow null arguments for serialized databy TheCharlatan · 5b89956e · Nov 11, 2025 · 3 filesMessage 68 · AdequateLow 34Details
Commit message · TheCharlatan

kernel: Allow null arguments for serialized data

An empty span constructed from an empty vector may have a null data
pointer depending on the implementation. Remove the
BITCOINKERNEL_ARG_NONNULL requirement for these arguments and instead
handle such null arguments in the implementation.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Low 34/100

This change loosens a strict rule in the Bitcoin Core kernel library so that callers can safely pass an empty data buffer even if its internal memory pointer happens to be null. Previously the library declared that certain pointers could never be null, which could cause crashes or undefined behavior when empty vectors produced null pointers. The patch now checks for the one truly invalid case—a null pointer paired with a non-zero length—and otherwise accepts null pointers when the length is zero.

Lower-prioritydepends: drop qtbase_avoid_native_float16 qt patchby fanquake · 169f93d2 · Nov 11, 2025 · 2 filesMessage 73 · AdequateInformational 15Details
Commit message · fanquake

depends: drop qtbase_avoid_native_float16 qt patch

There is no-longer a minimum required libgcc version, after
https://github.com/bitcoin/bitcoin/pull/33181.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 15/100

This commit removes a build-system patch that forced Qt to avoid using newer native half-precision floating-point types. The change is a cleanup: Bitcoin Core no longer requires an old libgcc version, so the workaround is unnecessary. There is no direct security relevance in the diff itself.

Lower-prioritycmake: Disable `-Wtrailing-whitespace` warnings for RCC-generated filesby Hennadii Stepanov · d8665022 · Nov 11, 2025 · 1 fileMessage 73 · AdequateInformational 15Details
Commit message · Hennadii Stepanov

cmake: Disable `-Wtrailing-whitespace` warnings for RCC-generated files

See: https://bugreports.qt.io/browse/QTBUG-141858.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This change simply tells the compiler to ignore a harmless style warning about extra spaces at the end of lines in files automatically generated by Qt's resource compiler. It does not fix a security bug or change any program behavior.

Lower-prioritycmake: Switch from AUTORCC to `qt6_add_resources`by Hennadii Stepanov · aabc5ca6 · Nov 11, 2025 · 1 fileMessage 60 · AdequateInformational 15Details
Commit message · Hennadii Stepanov

cmake: Switch from AUTORCC to `qt6_add_resources`

This change provides finer control over the compilation of RCC-generated
files.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit changes how Bitcoin Core's Qt graphical interface build system handles embedded resource files (like icons and translations). It switches from CMake's automatic Qt resource handling to an explicit Qt6 function call. There is no indication this is a security fix; it appears to be a routine build-system refactor for finer control over compilation.

Security candidatescripted-diff: remove whitespace in sha256_sse4.cppby fanquake · 0c2b9dad · Nov 11, 2025 · 1 fileMessage 83 · StrongInformational 15Details
Commit message · fanquake

scripted-diff: remove whitespace in sha256_sse4.cpp

-BEGIN VERIFY SCRIPT-
expand -t4 src/crypto/sha256_sse4.cpp | sed 's/ *$//' | sponge src/crypto/sha256_sse4.cpp
-END VERIFY SCRIPT-

Co-authored-by: Anthony Towns <aj@erisian.com.au>

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
cryptography-sensitive path
AI analysis · Informational 15/100

This commit is a purely cosmetic cleanup of a single file. It only removes trailing whitespace and converts tab characters to spaces in the assembly code comments and formatting of src/crypto/sha256_sse4.cpp. No program logic, instructions, constants, or behavior was changed.

Lower-prioritybuild: add -Wleading-whitespace=spacesby fanquake · d7659cd7 · Nov 11, 2025 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · fanquake

build: add -Wleading-whitespace=spaces

This is available in GCC 15. See
https://gcc.gnu.org/gcc-15/changes.html.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit adds a new compiler warning flag that flags leading whitespace characters that are spaces (rather than tabs). It is a code-style/build-hygiene change with no security relevance visible in the commit or supplied references.

Lower-priorityci: add moreutils to lint jobby fanquake · e6caf150 · Nov 11, 2025 · 1 fileMessage 72 · AdequateInformational 15Details
Commit message · fanquake

ci: add moreutils to lint job

Makes the sponge utility available for an upcoming scripted-diff.

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit simply adds a small utility package called 'moreutils' to the software's automated testing and linting environment. It does not change any Bitcoin Core code that handles transactions, networking, wallets, or consensus. There is no security issue here.

Lower-priorityscripted-diff: change whitespace to spaces in univalueby fanquake · 4da084fb · Nov 11, 2025 · 1 fileMessage 83 · StrongInformational 15Details
Commit message · fanquake

scripted-diff: change whitespace to spaces in univalue

-BEGIN VERIFY SCRIPT-
sed -i 's/^\t/ /' src/univalue/include/univalue_escapes.h
-END VERIFY SCRIPT-

Co-authored-by: Anthony Towns <aj@erisian.com.au>

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only changes leading tabs to four spaces in a single generated header file. It is a pure whitespace/style cleanup with no functional change to the Bitcoin software.