LL
← All projectsLightning Labs

LND

Go implementation of a complete Lightning Network node.

BitcoinLightning NetworkNormal
Repository coverage

1399 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

142security candidates195second-pass queue1287AI analyses
86commits · 30 days
186commits · 60 days
609commits · 180 days
1240commits · 365 days
Backfill bands
Aug 5 → Feb 6405 seen5 candidatesComplete
Feb 6 → Jun 6665 seen28 candidatesComplete
Jun 6 → Jul 689 seen4 candidatesComplete
Jul 6 → Aug 569 seen0 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

67/100 average clarity
322Strong · 80–100
655Adequate · 60–79
391Thin · 40–59
31Opaque · 0–39
1security candidate with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Olaoluwa Osuntokun20942204474
Elle Mouton26832268167
ziggie44416413165
Yong28513171
LNBiG111173
Jared Tobin909171
bitromortac661153071
yyforyongyu83861068
Erick Cestari26726070
Andras Banki-Horvath11311072
Gijs van Dam33230073
ziggieXXX2026070
Analysis record

Published AI watches

Last scanned 1 hour, 2 minutes ago

Moderate 62 AI analysisMessage 58 · Thin
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11212 from ziggie1984/disable-legacy-channels

This change stops LND from opening new Lightning channels using the old 'legacy' commitment format. The legacy format makes it harder to recover funds if something goes wrong, because the money owed to you is tied to a secret key that chan…

Prevents opening new channels with the legacy commitment type, whose tweaked to_remote output complicates data-loss recoveryCloses a negotiation path where an empty channel_type TLV bypassed feature checks and forced a legacy channelAdds explicit RPC and wire rejection with a dedicated error code
112cb5f3by ziggieXXX+265−4716 files
Vendor flagged security relevance
Moderate 56 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11223 from gijswijs/legacy-dust-retribution-fix

This update fixes a bug in how LND handles old-style punishment transactions when a channel partner tries to cheat. Previously, tiny (dust) HTLCs were left as blank placeholder entries in the punishment data, which could cause the node to …

nil-pointer dereference risk in breach retribution pathlegacy revocation log handling inconsistency with modern formatdefensive hardening added for trimmed/dust HTLCs
500ca51fby ziggieXXX+168−146 files
No security note in commit
Moderate 62 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11190 from Roasbeef/zpay32-reject-duplicate-payment-hashes

This change tightens how LND reads Lightning invoices (BOLT 11). Previously, if an invoice contained more than one payment hash field, LND would silently keep the first one and ignore the rest. Now it rejects the invoice entirely. The rele…

Behavior change from 'use first duplicate field' to 'reject duplicate fields'New error type ErrDuplicatePaymentHash returned on duplicate payment hash fieldsMalformed/unsupported-length duplicate payment hash now treated as duplicate and rejected
86306f89by Yong+147−106 files
No security note in commit
Moderate 62 AI analysisMessage 98 · Strong
LL Lightning LabsLND BitcoinLightning Network

zpay32: reject duplicate payment hash fields

This change tightens how LND reads Lightning invoices. Previously, if an invoice contained more than one payment hash field, LND would silently keep the first valid one and ignore the rest. Now it rejects such invoices outright. This preve…

Behavioral change from silent first-field acceptance to explicit rejection of duplicate payment hash fieldsPrevents invoice parsing from depending on field ordering when multiple payment hashes are presentCovers malformed first field + valid second field, closing a potential bypass
e2f27063by Olaoluwa Osuntokun+147−106 files
Vendor flagged security relevance
Moderate 53 AI analysisMessage 58 · Thin
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11132 from yyforyongyu/task-11129-pong

This change fixes how LND answers network 'ping' messages from other Lightning nodes. Previously, LND would sometimes silently ignore valid pings to limit reply traffic, which violates the Lightning protocol (BOLT 1) and could make a peer …

Protocol compliance fix: BOLT 1 requires a Pong for every valid PingRemoved silent suppression of Pong replies that could cause peer timeout/misbehaviorUnified rate limiting now accounts for amplification bandwidth, not just ping count
d3d1f1d0by Olaoluwa Osuntokun+274−1715 files
Vendor flagged security relevance
Low 33 AI analysisMessage 90 · Strong
LL Lightning LabsLND BitcoinLightning Network

itest: stop creating legacy channels

This commit updates LND's integration tests to stop using an obsolete 'legacy' channel type and adds a test confirming that LND now rejects that legacy type. The commit message says the real fix is elsewhere in the same pull request: previ…

Deprecated commitment format (legacy) is now rejected by RPCTest added to verify legacy channel type is refusedUnused legacy node configuration flag removed
03d8b09dby ziggie+24−85 files
No security note in commit
Moderate 60 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11198 from gijswijs/amp-setlocal-reconstruction-fix

This change fixes a bug in LND's handling of AMP (Atomic Multi-Path) payments. Previously, if one partial payment set failed to reconstruct its secret preimage, the entire invoice was canceled, including unrelated partial payment sets from…

Denial-of-service against reusable static AMP invoices by causing unrelated accepted HTLC sets to be canceledIncorrect invoice state transition from set-local failure to global invoice cancellationAvailability impact on multi-payer AMP invoice scenarios
88959aecby Olaoluwa Osuntokun+155−44 files
Vendor flagged security relevance
Low 29 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11200 from ziggie1984/build-go-1.27.1

This commit updates the Go programming language version used to build LND from 1.25.13/1.26.6 to 1.26.8 (language version) and 1.27.1 (toolchain). It also regenerates many automatically generated RPC files and adjusts linter settings. The …

Go version bump may indirectly address unlisted runtime/standard-library security fixesLarge regenerated protobuf files suggest dependency/toolchain refresh rather than logic changeLinter configuration expanded to suppress new checks, consistent with a toolchain upgrade
ef4820e5by Olaoluwa Osuntokun+4932−412670 files
No security note in commit
Informational 15 AI analysisMessage 92 · Strong
LL Lightning LabsLND BitcoinLightning Network

build: adopt focused golangci-lint v2.13 checks

This commit is a routine build-maintenance change. It updates the project's Go linter configuration to a newer version and fixes the resulting style warnings: a WebSocket header spelling and several documentation comments that didn't start…

bada7ea3by ziggie+27−1911 files
No security note in commit
Informational 15 AI analysisMessage 68 · Adequate
LL Lightning LabsLND BitcoinLightning Network

lnrpc: regenerate protos with Go 1.27

This commit is a housekeeping change that regenerates automatically generated RPC binding files using a newer Go compiler version. The only differences are in code comments (doc-comment formatting), not in actual program logic or API behav…

dd523108by ziggie+4501−369826 files
No security note in commit
Informational 20 AI analysisMessage 100 · Strong
LL Lightning LabsLND BitcoinLightning Network

build: fix Go 1.27 compatibility

This commit is a routine build-and-test maintenance patch to make the LND codebase compile and pass tests with the upcoming Go 1.27 release. It upgrades the project's custom linter tool, refreshes many indirect tool dependencies, adjusts o…

No production code changesNo vulnerability fix or CVE reference presentDependency-only refresh in tools module (development tooling)
6b54a387by ziggie+365−3706 files
No security note in commit
Informational 15 AI analysisMessage 80 · Strong
LL Lightning LabsLND BitcoinLightning Network

build: bump Go language and toolchain versions

This commit is a routine maintenance update that changes which version of the Go programming language is used to build the lnd project. It does not change any application logic, fix a bug, or address a security vulnerability. The project i…

b1f9ca66by ziggie+39−3930 files
No security note in commit
Moderate 60 AI analysisMessage 83 · Strong
LL Lightning LabsLND BitcoinLightning Network

invoices: cancel only the failing AMP set on reconstruction failure

This commit fixes a bug in LND's invoice handling for reusable AMP (Atomic Multi-Path) invoices. Previously, if one payment set failed to reconstruct its preimage, the entire invoice was canceled, even though other valid payment sets on th…

Denial-of-service-like availability impact: a malicious or buggy payer could cause a whole reusable AMP invoice to be canceled, blocking legitimate concurrent payersSet-local failure incorrectly escalated to invoice-global cancellationRegression test added for concurrent-set survival after reconstruction failure
d74ab6faby Gijs van Dam+141−42 files
No security note in commit
Informational 15 AI analysisMessage 68 · Adequate
LL Lightning LabsLND BitcoinLightning Network

bolt12: describe the lnwire dependency

This is a documentation-only change. A package comment was updated to accurately describe that the bolt12 codec library does depend on LND's lnwire package for low-level message types, while clarifying it still does not interact with the r…

5f53171dby bitromortac+3−21 file
No security note in commit
Moderate 60 AI analysisMessage 91 · Strong
LL Lightning LabsLND BitcoinLightning Network

bolt12: cover the amount overflow guard

This commit adds a test to ensure that when a BOLT 12 invoice is validated against a request, the multiplication of the offer amount by the requested quantity cannot overflow and wrap around to zero. Without this guard, a malicious or malf…

Integer overflow / wraparound in amount calculationMissing test coverage for security-critical branchBOLT 12 invoice amount validation
3c8e2bcbby bitromortac+47−01 file
Vendor flagged security relevance
Low 34 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11061 from bitromortac/2604-bolt12-1f

This commit adds the missing cryptographic signature layer for BOLT 12 offers in LND. It builds a Merkle tree from the message fields, signs that tree with a BIP-340 Schnorr signature, and now rejects invoice requests and invoices whose si…

Adds BIP-340 Schnorr signature verification for BOLT 12 invoice_request and invoice messagesMerkle tree commits to canonical re-encoded TLV records; non-minimal feature/amount encodings now rejected to preserve byte-exactnessSignature TLV type 240 and reserved range 240-1000 excluded from the signed Merkle root
1049d301by Yong+2076−7815 files
Vendor flagged security relevance
Low 35 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11125 from bhandras/codex/reorg-aware-output-lock-20260825

This commit adds a new optional wallet feature to LND that lets users lock UTXOs until the transaction spending them reaches a chosen confirmation depth, instead of relying on a wall-clock timeout. It is a feature addition with safety chec…

New RPC fields release_after_spend_confs and confirmed_spend_height added to LeaseOutput and FundPsbtCustom lock ID enforced as required for confirmation-controlled FundPsbt leases; all-zero and reserved internal IDs rejectedCapability check (ResolveOutputLeaser) prevents silent downgrade to time-only lease when confirmation control is requested
80dde144by Yong+1293−10021 files
No security note in commit
Informational 19 AI analysisMessage 58 · Thin
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #10812 from ziggie1984/chanstate-kv-store-move

This commit is a large internal code reorganization for the LND Lightning node. It moves channel state storage logic from the `channeldb` package into a new `chanstate` package, while keeping the same database keys, serialization formats, …

Large refactoring with no change to cryptographic or consensus-critical logicCodec serialization moved verbatim to new package; wire format unchangedDatabase bucket keys and TLV record types preserved
62b0a073by Olaoluwa Osuntokun+3923−310924 files
No security note in commit
Low 25 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #10804 from GeorgeTsagk/close-immediately-itest-lnd-7c38

This change fixes a data-handling bug in LND's channel-opening code. When opening a Lightning channel using an optional 'auxiliary funding controller' (used for custom channel types such as Taproot Assets), the funding manager was previous…

Data-correctness fix in funding handshake: negotiated channel configs now exposed to auxiliary funding controllerAuxiliary funding controller receives incomplete channel state before patch, complete state after patchNo explicit security claim, CVE, or advisory referenced in commit or supplied materials
1e127653by Olaoluwa Osuntokun+291−254 files
No security note in commit
Moderate 60 AI analysisMessage 88 · Strong
LL Lightning LabsLND BitcoinLightning Network

bolt12: verify invoice_request and invoice signatures on read

This change makes LND's BOLT 12 invoice and invoice-request reader actually check that the digital signature is valid, instead of only checking that a signature field exists. Before, an attacker could craft or modify a BOLT 12 message and …

Missing cryptographic verification on parsed BOLT 12 messages replaced with BIP-340 Schnorr signature verificationReader accepted any 64-byte placeholder signature before the patchNew negative tests verify rejection of wrong-signer and tampered Merkle-root fields
aa8bd19fby bitromortac+272−723 files
Vendor flagged security relevance
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-prioritygraphdb: pass context to AddEdgeProofby Elle Mouton · 68c52060 · Feb 25, 2026 · 6 filesMessage 45 · ThinInformational 15Details
Commit message · Elle Mouton

graphdb: pass context to AddEdgeProof

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a routine code cleanup: it threads a request-scoped cancellation context through the AddEdgeProof function instead of creating a blank context.TODO() inside the SQL database path. There is no security-relevant behavior change; it simply lets callers pass their own context for timeouts and cancellation.

Lower-prioritygraphdb: pass context to GraphSessionby Elle Mouton · 0bb0d669 · Feb 25, 2026 · 9 filesMessage 45 · ThinInformational 18Details
Commit message · Elle Mouton

graphdb: pass context to GraphSession

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 18/100

This commit is a small internal cleanup: it threads a Go request-lifecycle 'context' through the GraphSession database-query helper so callers can cancel or time out graph lookups. The only concrete behavior change is in the SQL backend, where a hard-coded placeholder context.TODO() is replaced by the caller-supplied context. There is no direct security fix, exploit, or vulnerability visible in the diff, but it removes a future foot-gun where graph queries could not respect cancellation/timeouts.

Lower-prioritygraphdb: pass context to IsPublicNodeby Elle Mouton · f62ea62c · Feb 25, 2026 · 8 filesMessage 45 · ThinInformational 19Details
Commit message · Elle Mouton

graphdb: pass context to IsPublicNode

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 19/100

This commit is a routine code-quality refactor: it threads a request-scoped cancellation signal (a 'context') through the IsPublicNode database lookup. Previously the SQL backend used a placeholder TODO context, which meant long-running queries could not be cancelled. The change does not alter what the function returns, only how it handles timeouts and cancellation. It is not a security patch in itself, though better context plumbing can help limit resource exhaustion in future hardening.

Lower-prioritygraphdb: pass context to HasChannelEdgeby Elle Mouton · 3079c07a · Feb 25, 2026 · 7 filesMessage 45 · ThinInformational 19Details
Commit message · Elle Mouton

graphdb: pass context to HasChannelEdge

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 19/100

This commit is a routine code-quality change: it threads a request-scoped cancellation signal (a 'context') through a database lookup method called HasChannelEdge. Previously some code paths used a blank, never-cancelling context.TODO(), which meant long-running database queries could not be cancelled. The change lets callers cancel or time out the lookup. It is not a security patch in itself and does not fix a known exploitable bug, but it removes a small source of unbounded work that could contribute to denial-of-service conditions.

Lower-prioritygraphdb: pass context to ChannelIDby Elle Mouton · 397330cb · Feb 25, 2026 · 6 filesMessage 45 · ThinInformational 19Details
Commit message · Elle Mouton

graphdb: pass context to ChannelID

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 19/100

This change simply threads a request context through a database lookup function so callers can cancel or time out the operation. It does not fix a vulnerability or change behavior in a security-relevant way.

Lower-prioritygraph/db: thread context through FetchChannelEdgesByOutpointby Elle Mouton · 1d4c6aad · Feb 25, 2026 · 10 filesMessage 50 · ThinInformational 15Details
Commit message · Elle Mouton

graph/db: thread context through FetchChannelEdgesByOutpoint

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This change is a routine code cleanup: it threads a request-scoped cancellation context through a database lookup function called FetchChannelEdgesByOutpoint. It does not fix a security bug, change behavior, or introduce any new logic. The only effect is that callers can now pass a context, and the SQL backend can use that context instead of a placeholder. The KV backend ignores the context for now.

Lower-prioritygraphdb: pass context to HasV1ChannelEdgeby Elle Mouton · 87ed09a8 · Feb 25, 2026 · 5 filesMessage 45 · ThinInformational 18Details
Commit message · Elle Mouton

graphdb: pass context to HasV1ChannelEdge

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 18/100

This commit is a routine code cleanup: it threads a request-scoped cancellation signal (a 'context') into a database lookup function called HasV1ChannelEdge. Previously the SQL database backend used a placeholder context.TODO(), which meant long-running queries could not be cancelled cleanly. The change lets callers cancel or time out the lookup, improving robustness but not directly fixing an exploitable security bug.

Lower-prioritygraph/db: thread context through FetchChannelEdgesByIDby Elle Mouton · 6bbb9a32 · Feb 25, 2026 · 14 filesMessage 50 · ThinInformational 19Details
Commit message · Elle Mouton

graph/db: thread context through FetchChannelEdgesByID

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 19/100

This change simply passes a request-scoped cancellation signal (a 'context') through a database lookup function called FetchChannelEdgesByID. It does not fix a concrete bug by itself; it is plumbing work that lets future callers cancel long-running queries or propagate deadlines. There is no direct security vulnerability being patched here.

Lower-prioritygraph/db: thread context through DeleteChannelEdgesby Elle Mouton · acdef84d · Feb 25, 2026 · 8 filesMessage 50 · ThinInformational 15Details
Commit message · Elle Mouton

graph/db: thread context through DeleteChannelEdges

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This change simply passes a request-scoped cancellation signal (a 'context') through the DeleteChannelEdges function and its callers. It does not change what the function does, only how it receives timeout/cancellation information. There is no security vulnerability or fix here.

Lower-prioritygraph/db: thread context through ForEachChannelCacheableby Elle Mouton · e8e714f6 · Feb 25, 2026 · 4 filesMessage 50 · ThinInformational 17Details
Commit message · Elle Mouton

graph/db: thread context through ForEachChannelCacheable

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 17/100

This change threads a request-scoped cancellation context through a database method that populates the Lightning Network graph cache. It replaces a placeholder TODO context in the SQL backend with a real one, allowing long-running cache population to be cancelled if the caller stops waiting. There is no direct security bug being fixed; it is a robustness and maintainability improvement.

Lower-prioritygraph/db: thread context through FilterChannelRangeby Elle Mouton · bb38aa89 · Feb 25, 2026 · 6 filesMessage 50 · ThinInformational 15Details
Commit message · Elle Mouton

graph/db: thread context through FilterChannelRange

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a routine code cleanup: it passes a request-scoped cancellation signal (a 'context') through a database query method called FilterChannelRange. Previously the SQL backend created a blank context internally, while the caller in the network discovery code ignored any context. Now the context is threaded from the caller down to the database. There is no security bug being fixed here; it is a maintainability and consistency improvement.

Lower-prioritygraph/db: thread context through NumZombiesby Elle Mouton · 37cc6b29 · Feb 25, 2026 · 6 filesMessage 45 · ThinInformational 18Details
Commit message · Elle Mouton

graph/db: thread context through NumZombies

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 18/100

This change simply passes an existing request context (a standard cancellation/timeout carrier) into a database query that counts 'zombie' channels. It does not fix a crash, bug, or security flaw by itself; it is a code-cleanup and consistency change that lets callers cancel or time out the query properly. There is no indication this was a security patch.

Lower-prioritygraph/db: thread context through MarkEdgeZombieby Elle Mouton · c2703670 · Feb 25, 2026 · 6 filesMessage 45 · ThinInformational 15Details
Commit message · Elle Mouton

graph/db: thread context through MarkEdgeZombie

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This change simply passes a request-scoped cancellation signal (a 'context') through the MarkEdgeZombie function and its database backends. It does not alter what the function does, who can call it, or how channel zombie state is decided. There is no security fix or vulnerability here—only a routine code-quality refactor to make the function consistent with the rest of the codebase.

Lower-prioritygraph/db: thread context through MarkEdgeLiveby Elle Mouton · 8a96e5f3 · Feb 25, 2026 · 6 filesMessage 45 · ThinInformational 15Details
Commit message · Elle Mouton

graph/db: thread context through MarkEdgeLive

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a routine internal refactoring change. It adds a standard request context parameter to a function called MarkEdgeLive so that database operations can be cancelled or timed out cleanly. There is no security fix or vulnerability here.

Lower-prioritygraph/db: thread context through NodeUpdatesInHorizonby Elle Mouton · 2f0d2962 · Feb 25, 2026 · 7 filesMessage 50 · ThinInformational 18Details
Commit message · Elle Mouton

graph/db: thread context through NodeUpdatesInHorizon

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 18/100

This change simply passes a request-scoped cancellation signal (a 'context') through a database query function called NodeUpdatesInHorizon. It does not fix a crash, bug, or security flaw by itself; it is a routine plumbing/refactoring patch that lets callers cancel long-running queries cleanly. There is no indication it addresses a disclosed vulnerability.

Lower-prioritygraph/db: thread context through ChanUpdatesInHorizonby Elle Mouton · dc9dae8d · Feb 25, 2026 · 8 filesMessage 50 · ThinInformational 15Details
Commit message · Elle Mouton

graph/db: thread context through ChanUpdatesInHorizon

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a routine code cleanup: it passes a request-scoped cancellation signal (a 'context') through a database query method called ChanUpdatesInHorizon. The change itself does not fix a crash, bug, or security vulnerability. It simply makes the code more consistent with modern Go practices and allows future callers to cancel long-running queries properly. The SQL implementation now uses the provided context instead of creating a blank one internally, while the older key-value store implementation ignores the new parameter for now.

Lower-prioritygraph/db: thread context through ForEachNodeDirectedChannelby Elle Mouton · 6ccf93c2 · Feb 25, 2026 · 10 filesMessage 50 · ThinInformational 15Details
Commit message · Elle Mouton

graph/db: thread context through ForEachNodeDirectedChannel

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This change is a routine code cleanup: it threads a request-scoped 'context' parameter through a graph traversal function called ForEachNodeDirectedChannel so that database operations can be cancelled or time out properly. It does not fix a security bug and introduces no user-visible behavior change.

Lower-prioritygraph/db: thread context through IsZombieEdgeby Elle Mouton · f98905ae · Feb 25, 2026 · 5 filesMessage 45 · ThinInformational 15Details
Commit message · Elle Mouton

graph/db: thread context through IsZombieEdge

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a routine code cleanup: it threads a standard Go context.Context parameter through the IsZombieEdge function and its callers. The context allows callers to pass cancellation/timeout information into the SQL store implementation, replacing a placeholder TODO context. There is no security-relevant behavior change visible in the diff.

Lower-prioritygraph/db: thread context through DisabledChannelIDsby Elle Mouton · 0597250a · Feb 25, 2026 · 6 filesMessage 50 · ThinInformational 18Details
Commit message · Elle Mouton

graph/db: thread context through DisabledChannelIDs

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 18/100

This change simply passes a request-scoped cancellation signal (a 'context') through a database lookup function called DisabledChannelIDs. It does not fix a crash, bug, or security flaw by itself; it is a routine code-quality improvement that makes the function respect caller cancellation and enables future SQL query timeouts. The only concrete effect visible in the diff is that the SQL backend now reuses the caller's context instead of creating a blank one internally.

Lower-prioritygraph/db: thread context through FetchNodeFeaturesby Elle Mouton · b1873e63 · Feb 25, 2026 · 8 filesMessage 50 · ThinInformational 15Details
Commit message · Elle Mouton

graph/db: thread context through FetchNodeFeatures

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a routine code cleanup that threads a request-scoped context.Context parameter through the FetchNodeFeatures function and its callers. It does not change any security logic, fix a bug, or alter behavior. The change simply lets callers pass cancellation/timeout context into database reads instead of the function internally creating a blank context.TODO().

Lower-prioritygraph/db tests: make compareEdgePolicies assert internallyby Elle Mouton · 160c2a9f · Feb 25, 2026 · 1 fileMessage 83 · StrongInformational 15Details
Commit message · Elle Mouton

graph/db tests: make compareEdgePolicies assert internally

Convert compareEdgePolicies into a test helper that accepts a
testing handle and performs assertions directly.

Update call sites to invoke the helper instead of threading errors
into immediate require.NoError checks.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit is a minor internal cleanup of a test helper function in lnd's graph database tests. It changes how a comparison helper reports failures but does not alter production code, network behavior, or any security-relevant logic. There is no security issue here.

Lower-prioritygraph/tests: make createChannelEdge assert internallyby Elle Mouton · ceb939eb · Feb 25, 2026 · 2 filesMessage 83 · StrongInformational 15Details
Commit message · Elle Mouton

graph/tests: make createChannelEdge assert internally

Update createChannelEdge to take a testing handle, mark itself as a
helper, and call require.NoError for funding script generation.

All call sites now consume only returned values and no longer plumb
an immediately-asserted error value.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit is a small cleanup of internal test helper code. It changes how a test-only function reports errors so that callers don't have to check an error value themselves. There is no change to the actual LND node software that users run, and no security relevance.

Lower-prioritygraph/tests: make randEdgePolicy assert internallyby Elle Mouton · 96397513 · Feb 25, 2026 · 1 fileMessage 83 · StrongInformational 15Details
Commit message · Elle Mouton

graph/tests: make randEdgePolicy assert internally

Update randEdgePolicy to take a testing handle, mark itself as a
helper, and assert internal packing errors directly with require.

Call sites now receive only the policy value without plumbing an
error through immediate require.NoError checks.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only changes a test helper function in LND's graph test code. It makes the helper report its own errors instead of returning them to callers. There is no change to production code, user-facing behavior, or security-sensitive logic.

Lower-prioritygraph: migrate tests from Fatal to require helpersby Elle Mouton · 8dfe747c · Feb 25, 2026 · 2 filesMessage 83 · StrongInformational 15Details
Commit message · Elle Mouton

graph: migrate tests from Fatal to require helpers

Replace remaining fatal-style assertions in graph package tests with
direct testify/require helpers. This simplifies control flow and makes
test intent clearer by using NoError, True/False, Len, Empty, and
Equal/EqualValues assertions.

Also remove FailNow-style patterns in favor of specific assertion
helpers.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit is a test-only cleanup in the LND Lightning node project. It replaces old-style manual error checks (which stop the test with t.Fatal) with equivalent helper functions from the testify/require library. No production code, user behavior, or network protocol handling is changed. It cannot affect node security or be exploited.

Lower-prioritygraph/db: migrate tests from Fatal to require helpersby Elle Mouton · f8899dd3 · Feb 25, 2026 · 4 filesMessage 83 · StrongInformational 15Details
Commit message · Elle Mouton

graph/db: migrate tests from Fatal to require helpers

Replace remaining fatal-style assertions in graph/db tests with direct
testify/require helpers. This simplifies control flow and reduces
indentation by using NoError, True/False, Equal, Len, Empty, and Nil
assertions directly.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only changes test files in the LND project. It replaces older-style error-checking code in tests with cleaner helper functions from the testify/require library. No production code is modified, so it cannot affect how the software behaves when users run it, and it introduces no security risk.