electrs

This commit is a routine version bump from 0.11.1 to 0.12.0 in the project's package metadata files. It changes only the version number strings in Cargo.toml and Cargo.lock. There is no code change, no bug fix, and no security-related content in the diff.

This commit only adds a new section to the RELEASE-NOTES.md file describing version 0.12.0. It lists user-visible changes such as a new indexing dependency, API fixes, a new SECURITY.md file, and routine dependency updates. No program code was changed, so this commit by itself cannot introduce, fix, or exploit a security vulnerability.

This is an automated patch by Dependabot that updates the 'log' programming library from version 0.4.33 to 0.4.34. The change only updates a version number and cryptographic checksum in the project's dependency lock file. There is no indication of a security fix or vulnerability in the commit itself, and no security references were provided.

This commit only adds a SECURITY.md file to the project. It is a documentation-only change that explains the project's security policy and how to report vulnerabilities. No code was changed, and no security vulnerability was fixed or introduced.

This is a routine automated patch by Dependabot that updates a single Rust dependency, crossbeam-channel, from version 0.5.15 to 0.5.16. The change only modifies the recorded version and cryptographic checksum in the project's lock file. There is no indication in the commit itself that this update fixes a security vulnerability.

This is an automated dependency update by Dependabot that bumps the serde_json library from version 1.0.150 to 1.0.151. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication in the commit itself that this fixes a security issue, and no security references were provided.

This commit only updates user-facing documentation and a helper shell script for an upcoming release. It changes wording in setup guides, replaces old example output with newer version numbers, and switches the default database directory in server.sh from ./_db to ./db. There is no code change that fixes or introduces a security vulnerability.

This is an automated dependency update by Dependabot that bumps the Rust `log` crate from version 0.4.29 to 0.4.33. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication in the commit of any security fix or vulnerability being addressed, and the `log` crate is a widely-used, stable logging utility. This appears to be a routine maintenance patch with no direct security relevance.

This commit simply updates the version of Bitcoin Core used in the project's automated testing environment from a release candidate (31.0rc2) to the final stable release (31.1). It is a routine CI/infrastructure maintenance change with no direct security fix or code change to the electrs software itself.

This commit only updates a single line in the installation documentation, changing the recommended minimum version of Bitcoin Core from 0.21+ to 31.0+. There is no code change, no bug fix, and no security patch in the diff itself.

This commit is a routine feature update. It upgrades a dependency called bindex from version 0.1.1 to 0.1.2 and changes the code to pass a configurable REST server URL into the indexing component. There is no indication in the commit that this fixes a security vulnerability.

This commit fixes broken documentation links. It changes three Markdown links from an incorrect anchor name (binaries.md#cnative-os-packages) to the correct one (binaries.md#native-os-packages). There is no code change and no security relevance.

This is an automated dependency update by Dependabot that bumps the serde_json library from version 1.0.149 to 1.0.150. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication in the commit itself that this fixes a security issue, and no security references were provided.

This is a routine automated dependency update by Dependabot, bumping the Rust 'bytes' library from version 1.11.0 to 1.11.1. Only the Cargo.lock file changed. There is no indication in the commit of any security fix, bug fix, or behavior change in electrs itself.

This is a routine dependency update by Dependabot that upgrades the jsonrpc library used by the electrs Bitcoin server from version 0.18.0 to 0.20.1. The change also removes an older copy of the base64 library from the dependency tree. Dependency updates can sometimes fix security bugs, but the commit message itself does not say this update fixes any vulnerability, and no security advisory was provided.

This is a large refactoring commit that replaces electrs's custom Bitcoin indexing, chain tracking, P2P networking, and RocksDB storage code with a new external library called `bindex`. It removes thousands of lines of in-house code (indexing, chain state, P2P connection, RocksDB wrapper, transaction cache) and switches RPC communication from the `bitcoincore-rpc` crate to direct `jsonrpc` calls. The change is architectural, not a targeted security fix. There is no mention of a vulnerability, CVE, or security issue in the commit message or diff.

This is an automated patch by Dependabot that updates the 'bitcoin' Rust library used by the electrs project from version 0.32.8 to 0.32.9. Only version and checksum numbers changed in the dependency list; no project source code was modified. There is no information in the commit or supplied references indicating this update fixes a security problem, so it appears to be a routine maintenance bump.

This is a routine automated dependency update by Dependabot that bumps the 'rayon' Rust library from version 1.11.0 to 1.12.0. The change only updates version numbers in the project's package manifest and lock file. There is no indication in the commit itself that this update fixes a security problem.

This commit simply removes a previously added feature: support for Unix domain sockets. It reverts the code back to using only standard TCP network sockets. There is no indication in the commit itself that this is a security fix, and the change does not appear to introduce or remove any vulnerability. It is a feature rollback.

This commit adds support for Unix domain sockets to the electrs Bitcoin Electrum server. The main security benefit is that administrators can use filesystem permissions to control which local users or processes can connect, instead of relying solely on TCP network rules. It also lets operators advertise a different public address than the one the server actually binds to, which is useful when tunneling through SSH or NAT. The changes are mostly a feature addition and refactoring; there is no direct evidence in the commit of a fixed vulnerability or exploit.

This is a routine automated dependency update by Dependabot, bumping the Rust 'rand' crate from version 0.8.5 to 0.8.6 in the project's lock file. There is no indication in the commit itself that this update fixes a security issue or changes any project code. It is a normal maintenance patch.

This is a one-line code cleanup that removes an unnecessary `.into_iter()` call. It does not change what the program does, only makes the code slightly simpler and silences a Clippy lint warning. There is no security relevance.

This commit fixes the JSON response format of a network information method called server.features. Previously, the software told connecting clients about its TCP port in a malformed way that did not follow the Electrum protocol. The patch now wraps the port under the server's IP address, which is the correct shape. This is a protocol-compliance bug, not an obvious security vulnerability, but non-compliant responses can confuse or break Electrum wallet clients that rely on this data.

This is a routine dependency version bump by Dependabot, updating the bitcoin_slices library from version 0.10.0 to 0.11.0. Only the version number and cryptographic checksum changed in the project's package files. There is no indication in the commit itself of any security fix or vulnerability.

This commit simply updates the CI Docker file to test against a newer release candidate of Bitcoin Core (31.0rc2) instead of the older 29.0 stable release. There is no security-relevant code change in the electrs project itself.