electrs

This commit adds support for a new optional parameter on an existing Electrum RPC method that broadcasts groups of Bitcoin transactions. When the new verbose=false option is used, the server now returns a smaller, simplified response instead of the full raw reply from Bitcoin Core. There is no obvious security bug in the change itself; it is a feature completion patch.

This commit adds a new Electrum protocol method that lets a user submit multiple Bitcoin transactions as a package to the connected Bitcoin node. It is a feature addition: it reuses the same hex parsing and RPC forwarding logic already used for single-transaction broadcast, just extended to a list. There is no direct evidence in the commit that this fixes a security vulnerability or introduces a new attack path beyond the existing transaction-broadcast surface.

This commit adds support for Bitcoin's new 'testnet4' network to a helper script called contrib/history.py. It simply tells the script which TCP port to use (40001) and which pycoin network symbol to import. There is no security issue visible in the change.

This commit changes the GitHub Actions CI workflow so that the Rust Clippy linter now ignores one specific warning type ('unused-attributes') instead of treating it as a fatal error. It is a build/tooling configuration change, not a code change, and has no direct security relevance.

This commit only removes extra trailing spaces at the end of lines in two documentation files (usage.md and upgrading.md). It does not change any code, configuration, instructions, or behavior of the electrs software. There is no security relevance.

This commit simply updates a single link in the README file, pointing the Rust logo credit to a different URL. There is no code change and no security relevance.

This is a routine automated dependency update by Dependabot, bumping the Rust 'tempfile' library from version 3.22.0 to 3.23.0. The change only affects development/test dependencies and contains no code changes in the electrs project itself. There is no indication in the commit or supplied references that this update fixes a security issue.

This is an automated dependency update by Dependabot that bumps the Rust crate `tempfile` from version 3.21.0 to 3.22.0. The change only affects the development/test dependency section of the project and updates the lockfile accordingly. There is no indication in the commit itself that this fixes a security vulnerability, and no security advisory references were provided.

This is an automated dependency update by Dependabot that bumps the serde_json library from version 1.0.143 to 1.0.145, along with related serde crates. The change only modifies the Cargo.lock lockfile. There is no indication in the commit itself that this fixes a security vulnerability, and no security references were provided.

This is an automated dependency update by Dependabot that bumps the Rust 'log' crate from version 0.4.27 to 0.4.28. The change only updates the version number and cryptographic checksum in the project's lock file. There is no indication of a security fix or vulnerability in the supplied materials, and the update is classified by Dependabot as a routine semver-patch update.

This is a routine dependency update by Dependabot, bumping the 'ctrlc' library used only on Windows builds from version 3.4.2 to 3.5.0. The change itself only edits version numbers in the project's package manifest and lock file. There is no indication in the commit that this fixes a security vulnerability, and no security advisory was supplied.

This commit only changes a code comment to make it more accurate. It does not modify any actual program behavior, configuration, or security logic. There is no security issue here.

This is a routine code cleanup to fix a Rust compiler error after upgrading the `bitcoin` library. The old code had a catch-all branch for unknown Bitcoin networks that printed an error and exited. The new version of the `bitcoin` library no longer allows that extra branch, so the developer removed it. There is no security issue here—just making the project compile again.

This commit only updates the version number and cryptographic checksum of the 'bitcoin' Rust library in the project's dependency lock file. There are no code changes visible in the diff, and no security-related explanation is provided in the commit message.

This commit simply bumps the optional `prometheus` metrics library from version 0.13 to 0.14.0 in the project's dependency files. It is a routine maintenance update with no visible code changes to electrs itself. There is no indication in the commit that this fixes or introduces a security problem.

This is a routine automated dependency update by Dependabot, bumping the serde_json library from version 1.0.109 to 1.0.143. The change only updates the recorded version and checksum in the project's lock file and adds a new required sub-dependency (memchr). There is no indication in the commit that this fixes a security problem.

This is an automated dependency update by Dependabot that bumps the 'tempfile' Rust crate from version 3.20.0 to 3.21.0. The change only updates version numbers in the project's package manifest (Cargo.toml) and lock file (Cargo.lock). There is no indication in the commit itself that this update fixes a security issue, and no security advisory or incident details were provided.

This commit is a small performance optimization. It stores references to database column family handles in local variables before writing data, instead of fetching the same handle repeatedly inside each loop. There is no security change visible in the diff.

This commit adds a single missing semicolon at the end of a Rust statement. It is a trivial syntax/style fix with no security relevance. The change does not alter program behavior because Rust automatically treats the last expression of a block as a return value, and the function's return type already matches the returned value.

This commit updates the serde and serde_derive Rust libraries from version 1.0.171 to 1.0.219. The project had previously pinned serde_derive to 1.0.171 or lower to avoid precompiled binaries. Now that upstream has removed those precompiled libraries, the project is moving to a newer serde version. This is a routine dependency update with no direct security fix visible in the diff, but staying on older library versions can mean missing security patches.

This is a routine automated dependency update by Dependabot, bumping the Rust 'rayon' library from version 1.10.0 to 1.11.0. The change only updates version numbers and checksums in the project's package manifest files. There is no indication of a security fix or vulnerability in the commit itself.

This is a routine maintenance update for the electrs Bitcoin server. It raises the minimum Rust compiler version, switches the underlying database library from a custom fork (electrs-rocksdb) back to the upstream rust-rocksdb project, and updates the required RocksDB version from 7.8.3 to 9.10.0. The release notes explicitly warn that older electrs versions will not be able to read the new database format and will need to reindex. There is no direct evidence in the commit of a security vulnerability being fixed.

This commit simply updates the version of a GitHub-provided action used to check out source code during automated testing. There is no indication of a security vulnerability or fix in the code change itself.

This commit only updates a single hyperlink in a TODO markdown file, pointing the 'bytes' Rust crate reference from an old Carllerche GitHub Pages URL to the current docs.rs URL. No code, configuration, or security behavior changed.