electrs

This commit fixes the JSON response format of a network information method called server.features. Previously, the software told connecting clients about its TCP port in a malformed way that did not follow the Electrum protocol. The patch now wraps the port under the server's IP address, which is the correct shape. This is a protocol-compliance bug, not an obvious security vulnerability, but non-compliant responses can confuse or break Electrum wallet clients that rely on this data.

This is a routine dependency version bump by Dependabot, updating the bitcoin_slices library from version 0.10.0 to 0.11.0. Only the version number and cryptographic checksum changed in the project's package files. There is no indication in the commit itself of any security fix or vulnerability.

This commit simply updates the CI Docker file to test against a newer release candidate of Bitcoin Core (31.0rc2) instead of the older 29.0 stable release. There is no security-relevant code change in the electrs project itself.

This is a routine automated patch by Dependabot that updates the signal-hook library from version 0.4.3 to 0.4.4 in the project's dependency lock file. There is no indication in the commit itself that this update fixes a security problem. It is a normal maintenance change.

This is a routine automated dependency update by Dependabot, bumping the Rust crate `tempfile` from version 3.24.0 to 3.25.0. The change only affects version numbers and checksums in the project's dependency files. There is no indication in the commit itself that this fixes a security issue, and no security advisory was supplied.

This is an automated dependency update by Dependabot that bumps the `ctrlc` crate (used only on Windows builds) from version 3.5.1 to 3.5.2, along with its indirect dependencies `libc` and `nix`. There is no indication in the commit or supplied references that this fixes a security issue. It appears to be a routine patch-level maintenance update.

This commit is a routine version bump for the electrs project from version 0.11.0 to 0.11.1. It only changes the version number in two files and adds a short release note describing minor improvements and dependency updates. There is no code change that fixes or introduces a security issue.

This is a routine automated dependency update by Dependabot, bumping the signal-hook library from version 0.4.1 to 0.4.3. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication in the commit itself that this fixes a security vulnerability.

This commit renames a field in the server's JSON response from 'tx_id' to 'tx_hash' to match the official Electrum protocol specification. It is a compatibility/API compliance fix, not a security patch. There is no indication it fixes a vulnerability.

This commit simply reverts the Cargo.lock file format version from 4 back to 3. It changes only a single metadata line in the dependency lockfile and does not alter any actual dependency versions, source code, or runtime behavior. There is no security relevance.

This is an automated dependency update by Dependabot that bumps the serde_json library from version 1.0.148 to 1.0.149. The only changed file is Cargo.lock, which records the exact version of a Rust dependency. There is no indication in the commit that this fixes a security issue, and no security-relevant code changes are present.

This is a routine dependency version bump by an automated bot. It updates the signal-hook library from version 0.3.18 to 0.4.1 in the project's package manifest and lock file. There is no indication in the commit that this fixes a security vulnerability.

This commit adds support for the Bitcoin 'signet' test network to a small helper script (contrib/history.py). It simply lets users choose the signet network by picking a different port and reusing an existing testnet address parser. There is no security issue here.

This is a routine automated dependency update by Dependabot, bumping the Rust 'tempfile' crate from version 3.23.0 to 3.24.0. The change only affects development/test dependencies and updates the lockfile accordingly. There is no indication in the commit or supplied references that this fixes a security issue.

This is an automated dependency update by Dependabot that bumps the serde_json library from version 1.0.146 to 1.0.148. The change only updates the Cargo.lock file, which records exact package versions. The newer version swaps one internal helper library (ryu) for another (zmij) but does not change electrs's own code. There is no indication in the commit that this fixes a security issue.

This commit is a minor build hygiene change. It removes a blanket Clippy flag that suppressed 'unused-attributes' warnings across the whole project, and instead suppresses that specific warning only inside the auto-generated configuration file where it occurs. There is no security-relevant behavior change to the application.

This is a small code cleanup that simplifies how the program reads the optional 'magic' network identifier. It removes an unused pattern variable and makes the logic slightly clearer. There is no apparent security change.

This commit is a large repository import or merge that adds many project files (documentation, CI, Docker, helper scripts, dependency lock file, etc.) and makes one small functional change: it allows users to configure the Bitcoin P2P network 'magic' bytes on networks other than signet. Previously this option was restricted to signet. The change is intended to support custom testing networks. There is no direct evidence in the commit of a security vulnerability, but it slightly increases the chance of misconfiguration when connecting to custom or test networks.

This is a routine dependency update by Dependabot, bumping the 'ctrlc' crate from version 3.5.0 to 3.5.1. The change only affects the Windows build of the project and updates internal macOS/Apple-related transitive dependencies. There is no indication in the commit or supplied references that this fixes or introduces any security issue.

This is an automated dependency update by Dependabot that bumps the serde_json library from version 1.0.145 to 1.0.146. It only changes one line in the project's lock file. There is no indication in the commit or supplied materials that this fixes a security issue.

This is an automated patch by Dependabot that updates the 'log' Rust library from version 0.4.28 to 0.4.29. The 'log' crate is a widely-used logging facade; a patch-level update like this is typically a routine bug-fix or maintenance release. There is no indication in the commit or supplied references that this update fixes a security vulnerability or changes any behavior relevant to security.

This is an automated dependency update by Dependabot that bumps the 'bitcoin' Rust library from version 0.32.7 to 0.32.8, along with a related 'hex-conservative' library from 0.2.1 to 0.2.2. Only version numbers and cryptographic checksums in the project's package manifest files changed. There is no information in the commit itself indicating this fixes a security problem, and no independent references were provided to confirm any security relevance.

This commit simply updates the GitHub Actions CI workflow to use version 6 of the official actions/checkout action instead of version 5. It is a routine maintenance change to the project's automated build/test pipeline and does not alter any application code, configuration, or security behavior of the electrs software itself.

This commit is a routine version bump for the electrs project from version 0.10.10 to 0.11.0. It only changes the version number in packaging files and sets the release date in the release notes. There are no code changes, no bug fixes, and no security-related modifications visible in this commit.

This commit only updates the project's release notes document. It adds two bullet points describing a new Electrum RPC feature and routine dependency updates. There are no code changes, no bug fixes, and no security-related statements.