Rust Electrum server that indexes Bitcoin Core data for wallet queries.
Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.
Aug 5 → Feb 641 seen0 candidatesCompleteFeb 6 → Jun 615 seen0 candidatesCompleteJun 6 → Jul 64 seen0 candidatesCompleteJul 6 → Aug 55 seen0 candidatesCompleteMessage quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.
Public Git author strings; identities are not independently verified.
Last scanned 48 minutes ago
This commit is a routine version bump from 0.11.1 to 0.12.0 in the project's package metadata files. It changes only the version number strings in Cargo.toml and Cargo.lock. There is no code change, no bug fix, and no security-related cont…
37501cc4by Roman Zeyde+2−22 filesThis commit only adds a new section to the RELEASE-NOTES.md file describing version 0.12.0. It lists user-visible changes such as a new indexing dependency, API fixes, a new SECURITY.md file, and routine dependency updates. No program code…
6c763137by Roman Zeyde+8−01 fileThis is an automated patch by Dependabot that updates the 'log' programming library from version 0.4.33 to 0.4.34. The change only updates a version number and cryptographic checksum in the project's dependency lock file. There is no indic…
264e8cb8by dependabot[bot]+2−21 fileThis commit only adds a SECURITY.md file to the project. It is a documentation-only change that explains the project's security policy and how to report vulnerabilities. No code was changed, and no security vulnerability was fixed or intro…
da1860e6by Roman Zeyde+14−01 fileThis is a routine automated patch by Dependabot that updates a single Rust dependency, crossbeam-channel, from version 0.5.15 to 0.5.16. The change only modifies the recorded version and cryptographic checksum in the project's lock file. T…
00b85822by dependabot[bot]+2−21 fileThis is an automated dependency update by Dependabot that bumps the serde_json library from version 1.0.150 to 1.0.151. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication …
b69f1a57by dependabot[bot]+2−21 fileThis commit only updates user-facing documentation and a helper shell script for an upcoming release. It changes wording in setup guides, replaces old example output with newer version numbers, and switches the default database directory i…
9cd09afaby Roman Zeyde+62−1176 filesThis is an automated dependency update by Dependabot that bumps the Rust `log` crate from version 0.4.29 to 0.4.33. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication in t…
9175b0f9by dependabot[bot]+2−21 fileThis commit simply updates the version of Bitcoin Core used in the project's automated testing environment from a release candidate (31.0rc2) to the final stable release (31.1). It is a routine CI/infrastructure maintenance change with no …
eed01b98by Roman Zeyde+4−41 fileThis commit only updates a single line in the installation documentation, changing the recommended minimum version of Bitcoin Core from 0.21+ to 31.0+. There is no code change, no bug fix, and no security patch in the diff itself.
c0a4b3faby Roman Zeyde+1−11 fileThis commit is a routine feature update. It upgrades a dependency called bindex from version 0.1.1 to 0.1.2 and changes the code to pass a configurable REST server URL into the indexing component. There is no indication in the commit that …
1255a377by Roman Zeyde+6−53 filesThis commit fixes broken documentation links. It changes three Markdown links from an incorrect anchor name (binaries.md#cnative-os-packages) to the correct one (binaries.md#native-os-packages). There is no code change and no security rele…
31c3fc5bby haoshengzhen+3−32 filesThis is an automated dependency update by Dependabot that bumps the serde_json library from version 1.0.149 to 1.0.150. The change only updates a version number and cryptographic checksum in the project's lock file. There is no indication …
ca254cb5by dependabot[bot]+2−21 fileThis is a routine automated dependency update by Dependabot, bumping the Rust 'bytes' library from version 1.11.0 to 1.11.1. Only the Cargo.lock file changed. There is no indication in the commit of any security fix, bug fix, or behavior c…
d889624fby dependabot[bot]+2−21 fileThis is a routine dependency update by Dependabot that upgrades the jsonrpc library used by the electrs Bitcoin server from version 0.18.0 to 0.20.1. The change also removes an older copy of the base64 library from the dependency tree. Dep…
acf4b98dby dependabot[bot]+6−122 filesThis is a large refactoring commit that replaces electrs's custom Bitcoin indexing, chain tracking, P2P networking, and RocksDB storage code with a new external library called `bindex`. It removes thousands of lines of in-house code (index…
0fe14fdfby Roman Zeyde+450−282724 filesThis is an automated patch by Dependabot that updates the 'bitcoin' Rust library used by the electrs project from version 0.32.8 to 0.32.9. Only version and checksum numbers changed in the dependency list; no project source code was modifi…
32e5944aby dependabot[bot]+3−32 filesThis is a routine automated dependency update by Dependabot that bumps the 'rayon' Rust library from version 1.11.0 to 1.12.0. The change only updates version numbers in the project's package manifest and lock file. There is no indication …
d81dc35aby dependabot[bot]+3−32 filesThis commit simply removes a previously added feature: support for Unix domain sockets. It reverts the code back to using only standard TCP network sockets. There is no indication in the commit itself that this is a security fix, and the c…
c134d64dby Roman Zeyde+29−18410 filesThis commit adds support for Unix domain sockets to the electrs Bitcoin Electrum server. The main security benefit is that administrators can use filesystem permissions to control which local users or processes can connect, instead of rely…
898e57dcby Martin Habovstiak+184−2910 filesExpand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.
e7595479 · Jan 2, 2026 · 2 filesInformational 15Bump tempfile from 3.23.0 to 3.24.0
Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.23.0 to 3.24.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/compare/v3.23.0...v3.24.0)
---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.24.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
This is a routine automated dependency update by Dependabot, bumping the Rust 'tempfile' crate from version 3.23.0 to 3.24.0. The change only affects development/test dependencies and updates the lockfile accordingly. There is no indication in the commit or supplied references that this fixes a security issue.
4d421cc1 · Jan 2, 2026 · 1 fileInformational 15Bump serde_json from 1.0.146 to 1.0.148
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.146 to 1.0.148.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.146...v1.0.148)
---
updated-dependencies:
- dependency-name: serde_json
dependency-version: 1.0.148
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
This is an automated dependency update by Dependabot that bumps the serde_json library from version 1.0.146 to 1.0.148. The change only updates the Cargo.lock file, which records exact package versions. The newer version swaps one internal helper library (ryu) for another (zmij) but does not change electrs's own code. There is no indication in the commit that this fixes a security issue.
a80f0f71 · Dec 27, 2025 · 1 fileInformational 13Simplify network magic parsing
Why it was queuedThis is a small code cleanup that simplifies how the program reads the optional 'magic' network identifier. It removes an unused pattern variable and makes the logic slightly clearer. There is no apparent security change.
d846cc75 · Dec 24, 2025 · 74 filesInformational 21multi: expose configurable magic on non-signet
There's no point in limiting this option to signet only. Allowing this
flag to be set outside of signet networks lets electrs be used for
custom testing networks that aren't signets.
This commit is a large repository import or merge that adds many project files (documentation, CI, Docker, helper scripts, dependency lock file, etc.) and makes one small functional change: it allows users to configure the Bitcoin P2P network 'magic' bytes on networks other than signet. Previously this option was restricted to signet. The change is intended to support custom testing networks. There is no direct evidence in the commit of a security vulnerability, but it slightly increases the chance of misconfiguration when connecting to custom or test networks.
6ff91501 · Dec 23, 2025 · 2 filesInformational 15Bump ctrlc from 3.5.0 to 3.5.1
Bumps [ctrlc](https://github.com/Detegr/rust-ctrlc) from 3.5.0 to 3.5.1.
- [Release notes](https://github.com/Detegr/rust-ctrlc/releases)
- [Commits](https://github.com/Detegr/rust-ctrlc/compare/3.5.0...3.5.1)
---
updated-dependencies:
- dependency-name: ctrlc
dependency-version: 3.5.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
This is a routine dependency update by Dependabot, bumping the 'ctrlc' crate from version 3.5.0 to 3.5.1. The change only affects the Windows build of the project and updates internal macOS/Apple-related transitive dependencies. There is no indication in the commit or supplied references that this fixes or introduces any security issue.
d7d3a836 · Dec 23, 2025 · 1 fileInformational 15Bump serde_json from 1.0.145 to 1.0.146
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.145 to 1.0.146.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.145...v1.0.146)
---
updated-dependencies:
- dependency-name: serde_json
dependency-version: 1.0.146
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
This is an automated dependency update by Dependabot that bumps the serde_json library from version 1.0.145 to 1.0.146. It only changes one line in the project's lock file. There is no indication in the commit or supplied materials that this fixes a security issue.
66b6efb5 · Dec 23, 2025 · 1 fileInformational 15Bump log from 0.4.28 to 0.4.29
Bumps [log](https://github.com/rust-lang/log) from 0.4.28 to 0.4.29.
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/log/compare/0.4.28...0.4.29)
---
updated-dependencies:
- dependency-name: log
dependency-version: 0.4.29
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
This is an automated patch by Dependabot that updates the 'log' Rust library from version 0.4.28 to 0.4.29. The 'log' crate is a widely-used logging facade; a patch-level update like this is typically a routine bug-fix or maintenance release. There is no indication in the commit or supplied references that this update fixes a security vulnerability or changes any behavior relevant to security.
30c019f3 · Dec 13, 2025 · 2 filesInformational 3Bump bitcoin from 0.32.7 to 0.32.8
Bumps [bitcoin](https://github.com/rust-bitcoin/rust-bitcoin) from 0.32.7 to 0.32.8.
- [Release notes](https://github.com/rust-bitcoin/rust-bitcoin/releases)
- [Changelog](https://github.com/rust-bitcoin/rust-bitcoin/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-bitcoin/rust-bitcoin/compare/bitcoin-0.32.7...bitcoin-0.32.8)
---
updated-dependencies:
- dependency-name: bitcoin
dependency-version: 0.32.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
This is an automated dependency update by Dependabot that bumps the 'bitcoin' Rust library from version 0.32.7 to 0.32.8, along with a related 'hex-conservative' library from 0.2.1 to 0.2.2. Only version numbers and cryptographic checksums in the project's package manifest files changed. There is no information in the commit itself indicating this fixes a security problem, and no independent references were provided to confirm any security relevance.
800bebee · Nov 15, 2025 · 3 filesInformational 15Release 0.11.0
Why it was queuedThis commit is a routine version bump for the electrs project from version 0.10.10 to 0.11.0. It only changes the version number in packaging files and sets the release date in the release notes. There are no code changes, no bug fixes, and no security-related modifications visible in this commit.
39413a80 · Nov 15, 2025 · 1 fileInformational 15Update release notes
Why it was queuedThis commit only updates the project's release notes document. It adds two bullet points describing a new Electrum RPC feature and routine dependency updates. There are no code changes, no bug fixes, and no security-related statements.
a2a47e8c · Oct 7, 2025 · 1 fileInformational 15Update README.md (#1234)
Why it was queuedThis commit simply updates a single link in the README file, pointing the Rust logo credit to a different URL. There is no code change and no security relevance.
bd2a8874 · Oct 2, 2025 · 2 filesInformational 15Bump tempfile from 3.22.0 to 3.23.0 (#1233)
Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.22.0 to 3.23.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/compare/v3.22.0...v3.23.0)
---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.23.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This is a routine automated dependency update by Dependabot, bumping the Rust 'tempfile' library from version 3.22.0 to 3.23.0. The change only affects development/test dependencies and contains no code changes in the electrs project itself. There is no indication in the commit or supplied references that this update fixes a security issue.
6d9fc298 · Sep 15, 2025 · 2 filesInformational 15Bump tempfile from 3.21.0 to 3.22.0 (#1231)
Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.21.0 to 3.22.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/compare/v3.21.0...v3.22.0)
---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This is an automated dependency update by Dependabot that bumps the Rust crate `tempfile` from version 3.21.0 to 3.22.0. The change only affects the development/test dependency section of the project and updates the lockfile accordingly. There is no indication in the commit itself that this fixes a security vulnerability, and no security advisory references were provided.
a11e00f6 · Sep 15, 2025 · 1 fileInformational 15Bump serde_json from 1.0.143 to 1.0.145 (#1232)
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.143 to 1.0.145.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.143...v1.0.145)
---
updated-dependencies:
- dependency-name: serde_json
dependency-version: 1.0.145
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This is an automated dependency update by Dependabot that bumps the serde_json library from version 1.0.143 to 1.0.145, along with related serde crates. The change only modifies the Cargo.lock lockfile. There is no indication in the commit itself that this fixes a security vulnerability, and no security references were provided.
0a8d9b21 · Sep 13, 2025 · 1 fileInformational 15Bump log from 0.4.27 to 0.4.28 (#1228)
Bumps [log](https://github.com/rust-lang/log) from 0.4.27 to 0.4.28.
- [Release notes](https://github.com/rust-lang/log/releases)
- [Changelog](https://github.com/rust-lang/log/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/log/compare/0.4.27...0.4.28)
---
updated-dependencies:
- dependency-name: log
dependency-version: 0.4.28
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This is an automated dependency update by Dependabot that bumps the Rust 'log' crate from version 0.4.27 to 0.4.28. The change only updates the version number and cryptographic checksum in the project's lock file. There is no indication of a security fix or vulnerability in the supplied materials, and the update is classified by Dependabot as a routine semver-patch update.
cd339c60 · Sep 13, 2025 · 2 filesInformational 11Bump ctrlc from 3.4.2 to 3.5.0 (#1229)
Bumps [ctrlc](https://github.com/Detegr/rust-ctrlc) from 3.4.2 to 3.5.0.
- [Release notes](https://github.com/Detegr/rust-ctrlc/releases)
- [Commits](https://github.com/Detegr/rust-ctrlc/commits)
---
updated-dependencies:
- dependency-name: ctrlc
dependency-version: 3.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This is a routine dependency update by Dependabot, bumping the 'ctrlc' library used only on Windows builds from version 3.4.2 to 3.5.0. The change itself only edits version numbers in the project's package manifest and lock file. There is no indication in the commit that this fixes a security vulnerability, and no security advisory was supplied.
01bde1c5 · Sep 6, 2025 · 1 fileInformational 15Fix CI after bumping `bitcoin` dependency (#1226)
Why it was queuedThis is a routine code cleanup to fix a Rust compiler error after upgrading the `bitcoin` library. The old code had a catch-all branch for unknown Bitcoin networks that printed an error and exited. The new version of the `bitcoin` library no longer allows that extra branch, so the developer removed it. There is no security issue here—just making the project compile again.
96a3b7c4 · Sep 6, 2025 · 1 fileInformational 15Bump `bitcoin` dependency to 0.32.7
Why it was queuedThis commit only updates the version number and cryptographic checksum of the 'bitcoin' Rust library in the project's dependency lock file. There are no code changes visible in the diff, and no security-related explanation is provided in the commit message.
639e87b0 · Sep 6, 2025 · 1 fileInformational 15Bump serde_json from 1.0.109 to 1.0.143 (#1223)
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.109 to 1.0.143.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.109...v1.0.143)
---
updated-dependencies:
- dependency-name: serde_json
dependency-version: 1.0.143
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This is a routine automated dependency update by Dependabot, bumping the serde_json library from version 1.0.109 to 1.0.143. The change only updates the recorded version and checksum in the project's lock file and adds a new required sub-dependency (memchr). There is no indication in the commit that this fixes a security problem.
f210ead3 · Sep 6, 2025 · 2 filesInformational 15Bump tempfile from 3.20.0 to 3.21.0 (#1222)
Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.20.0 to 3.21.0.
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Stebalien/tempfile/commits)
---
updated-dependencies:
- dependency-name: tempfile
dependency-version: 3.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This is an automated dependency update by Dependabot that bumps the 'tempfile' Rust crate from version 3.20.0 to 3.21.0. The change only updates version numbers in the project's package manifest (Cargo.toml) and lock file (Cargo.lock). There is no indication in the commit itself that this update fixes a security issue, and no security advisory or incident details were provided.
3ab7eb4f · Aug 22, 2025 · 2 filesInformational 15Bump rayon from 1.10.0 to 1.11.0 (#1215)
Bumps [rayon](https://github.com/rayon-rs/rayon) from 1.10.0 to 1.11.0.
- [Changelog](https://github.com/rayon-rs/rayon/blob/main/RELEASES.md)
- [Commits](https://github.com/rayon-rs/rayon/compare/rayon-core-v1.10.0...rayon-core-v1.11.0)
---
updated-dependencies:
- dependency-name: rayon
dependency-version: 1.11.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This is a routine automated dependency update by Dependabot, bumping the Rust 'rayon' library from version 1.10.0 to 1.11.0. The change only updates version numbers and checksums in the project's package manifest files. There is no indication of a security fix or vulnerability in the commit itself.
8e1cf184 · Aug 5, 2025 · 1 fileInformational 15Update TODO.md (#1208)
Why it was queuedThis commit only updates a single hyperlink in a TODO markdown file, pointing the 'bytes' Rust crate reference from an old Carllerche GitHub Pages URL to the current docs.rs URL. No code, configuration, or security behavior changed.