LL
← All projectsLightning Labs

LND

Go implementation of a complete Lightning Network node.

BitcoinLightning NetworkNormal
Repository coverage

1400 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

142security candidates195second-pass queue1287AI analyses
87commits · 30 days
187commits · 60 days
610commits · 180 days
1241commits · 365 days
Backfill bands
Aug 5 → Feb 6405 seen5 candidatesComplete
Feb 6 → Jun 6665 seen28 candidatesComplete
Jun 6 → Jul 689 seen4 candidatesComplete
Jul 6 → Aug 569 seen0 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

67/100 average clarity
322Strong · 80–100
656Adequate · 60–79
391Thin · 40–59
31Opaque · 0–39
1security candidate with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Olaoluwa Osuntokun20942204474
Elle Mouton26832268167
ziggie44416413165
Yong28513171
LNBiG111173
Jared Tobin909171
bitromortac661153071
yyforyongyu83861068
Erick Cestari26726070
Andras Banki-Horvath11311072
Gijs van Dam33230073
ziggieXXX2126070
Analysis record

Published AI watches

Last scanned 9 minutes ago

Moderate 62 AI analysisMessage 58 · Thin
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11212 from ziggie1984/disable-legacy-channels

This change stops LND from opening new Lightning channels using the old 'legacy' commitment format. The legacy format makes it harder to recover funds if something goes wrong, because the money owed to you is tied to a secret key that chan…

Prevents opening new channels with the legacy commitment type, whose tweaked to_remote output complicates data-loss recoveryCloses a negotiation path where an empty channel_type TLV bypassed feature checks and forced a legacy channelAdds explicit RPC and wire rejection with a dedicated error code
112cb5f3by ziggieXXX+265−4716 files
Vendor flagged security relevance
Moderate 56 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11223 from gijswijs/legacy-dust-retribution-fix

This update fixes a bug in how LND handles old-style punishment transactions when a channel partner tries to cheat. Previously, tiny (dust) HTLCs were left as blank placeholder entries in the punishment data, which could cause the node to …

nil-pointer dereference risk in breach retribution pathlegacy revocation log handling inconsistency with modern formatdefensive hardening added for trimmed/dust HTLCs
500ca51fby ziggieXXX+168−146 files
No security note in commit
Moderate 62 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11190 from Roasbeef/zpay32-reject-duplicate-payment-hashes

This change tightens how LND reads Lightning invoices (BOLT 11). Previously, if an invoice contained more than one payment hash field, LND would silently keep the first one and ignore the rest. Now it rejects the invoice entirely. The rele…

Behavior change from 'use first duplicate field' to 'reject duplicate fields'New error type ErrDuplicatePaymentHash returned on duplicate payment hash fieldsMalformed/unsupported-length duplicate payment hash now treated as duplicate and rejected
86306f89by Yong+147−106 files
No security note in commit
Moderate 62 AI analysisMessage 98 · Strong
LL Lightning LabsLND BitcoinLightning Network

zpay32: reject duplicate payment hash fields

This change tightens how LND reads Lightning invoices. Previously, if an invoice contained more than one payment hash field, LND would silently keep the first valid one and ignore the rest. Now it rejects such invoices outright. This preve…

Behavioral change from silent first-field acceptance to explicit rejection of duplicate payment hash fieldsPrevents invoice parsing from depending on field ordering when multiple payment hashes are presentCovers malformed first field + valid second field, closing a potential bypass
e2f27063by Olaoluwa Osuntokun+147−106 files
Vendor flagged security relevance
Moderate 53 AI analysisMessage 58 · Thin
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11132 from yyforyongyu/task-11129-pong

This change fixes how LND answers network 'ping' messages from other Lightning nodes. Previously, LND would sometimes silently ignore valid pings to limit reply traffic, which violates the Lightning protocol (BOLT 1) and could make a peer …

Protocol compliance fix: BOLT 1 requires a Pong for every valid PingRemoved silent suppression of Pong replies that could cause peer timeout/misbehaviorUnified rate limiting now accounts for amplification bandwidth, not just ping count
d3d1f1d0by Olaoluwa Osuntokun+274−1715 files
Vendor flagged security relevance
Low 33 AI analysisMessage 90 · Strong
LL Lightning LabsLND BitcoinLightning Network

itest: stop creating legacy channels

This commit updates LND's integration tests to stop using an obsolete 'legacy' channel type and adds a test confirming that LND now rejects that legacy type. The commit message says the real fix is elsewhere in the same pull request: previ…

Deprecated commitment format (legacy) is now rejected by RPCTest added to verify legacy channel type is refusedUnused legacy node configuration flag removed
03d8b09dby ziggie+24−85 files
No security note in commit
Moderate 60 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11198 from gijswijs/amp-setlocal-reconstruction-fix

This change fixes a bug in LND's handling of AMP (Atomic Multi-Path) payments. Previously, if one partial payment set failed to reconstruct its secret preimage, the entire invoice was canceled, including unrelated partial payment sets from…

Denial-of-service against reusable static AMP invoices by causing unrelated accepted HTLC sets to be canceledIncorrect invoice state transition from set-local failure to global invoice cancellationAvailability impact on multi-payer AMP invoice scenarios
88959aecby Olaoluwa Osuntokun+155−44 files
Vendor flagged security relevance
Low 29 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11200 from ziggie1984/build-go-1.27.1

This commit updates the Go programming language version used to build LND from 1.25.13/1.26.6 to 1.26.8 (language version) and 1.27.1 (toolchain). It also regenerates many automatically generated RPC files and adjusts linter settings. The …

Go version bump may indirectly address unlisted runtime/standard-library security fixesLarge regenerated protobuf files suggest dependency/toolchain refresh rather than logic changeLinter configuration expanded to suppress new checks, consistent with a toolchain upgrade
ef4820e5by Olaoluwa Osuntokun+4932−412670 files
No security note in commit
Informational 15 AI analysisMessage 92 · Strong
LL Lightning LabsLND BitcoinLightning Network

build: adopt focused golangci-lint v2.13 checks

This commit is a routine build-maintenance change. It updates the project's Go linter configuration to a newer version and fixes the resulting style warnings: a WebSocket header spelling and several documentation comments that didn't start…

bada7ea3by ziggie+27−1911 files
No security note in commit
Informational 15 AI analysisMessage 68 · Adequate
LL Lightning LabsLND BitcoinLightning Network

lnrpc: regenerate protos with Go 1.27

This commit is a housekeeping change that regenerates automatically generated RPC binding files using a newer Go compiler version. The only differences are in code comments (doc-comment formatting), not in actual program logic or API behav…

dd523108by ziggie+4501−369826 files
No security note in commit
Informational 20 AI analysisMessage 100 · Strong
LL Lightning LabsLND BitcoinLightning Network

build: fix Go 1.27 compatibility

This commit is a routine build-and-test maintenance patch to make the LND codebase compile and pass tests with the upcoming Go 1.27 release. It upgrades the project's custom linter tool, refreshes many indirect tool dependencies, adjusts o…

No production code changesNo vulnerability fix or CVE reference presentDependency-only refresh in tools module (development tooling)
6b54a387by ziggie+365−3706 files
No security note in commit
Informational 15 AI analysisMessage 80 · Strong
LL Lightning LabsLND BitcoinLightning Network

build: bump Go language and toolchain versions

This commit is a routine maintenance update that changes which version of the Go programming language is used to build the lnd project. It does not change any application logic, fix a bug, or address a security vulnerability. The project i…

b1f9ca66by ziggie+39−3930 files
No security note in commit
Moderate 60 AI analysisMessage 83 · Strong
LL Lightning LabsLND BitcoinLightning Network

invoices: cancel only the failing AMP set on reconstruction failure

This commit fixes a bug in LND's invoice handling for reusable AMP (Atomic Multi-Path) invoices. Previously, if one payment set failed to reconstruct its preimage, the entire invoice was canceled, even though other valid payment sets on th…

Denial-of-service-like availability impact: a malicious or buggy payer could cause a whole reusable AMP invoice to be canceled, blocking legitimate concurrent payersSet-local failure incorrectly escalated to invoice-global cancellationRegression test added for concurrent-set survival after reconstruction failure
d74ab6faby Gijs van Dam+141−42 files
No security note in commit
Informational 15 AI analysisMessage 68 · Adequate
LL Lightning LabsLND BitcoinLightning Network

bolt12: describe the lnwire dependency

This is a documentation-only change. A package comment was updated to accurately describe that the bolt12 codec library does depend on LND's lnwire package for low-level message types, while clarifying it still does not interact with the r…

5f53171dby bitromortac+3−21 file
No security note in commit
Moderate 60 AI analysisMessage 91 · Strong
LL Lightning LabsLND BitcoinLightning Network

bolt12: cover the amount overflow guard

This commit adds a test to ensure that when a BOLT 12 invoice is validated against a request, the multiplication of the offer amount by the requested quantity cannot overflow and wrap around to zero. Without this guard, a malicious or malf…

Integer overflow / wraparound in amount calculationMissing test coverage for security-critical branchBOLT 12 invoice amount validation
3c8e2bcbby bitromortac+47−01 file
Vendor flagged security relevance
Low 34 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11061 from bitromortac/2604-bolt12-1f

This commit adds the missing cryptographic signature layer for BOLT 12 offers in LND. It builds a Merkle tree from the message fields, signs that tree with a BIP-340 Schnorr signature, and now rejects invoice requests and invoices whose si…

Adds BIP-340 Schnorr signature verification for BOLT 12 invoice_request and invoice messagesMerkle tree commits to canonical re-encoded TLV records; non-minimal feature/amount encodings now rejected to preserve byte-exactnessSignature TLV type 240 and reserved range 240-1000 excluded from the signed Merkle root
1049d301by Yong+2076−7815 files
Vendor flagged security relevance
Low 35 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #11125 from bhandras/codex/reorg-aware-output-lock-20260825

This commit adds a new optional wallet feature to LND that lets users lock UTXOs until the transaction spending them reaches a chosen confirmation depth, instead of relying on a wall-clock timeout. It is a feature addition with safety chec…

New RPC fields release_after_spend_confs and confirmed_spend_height added to LeaseOutput and FundPsbtCustom lock ID enforced as required for confirmation-controlled FundPsbt leases; all-zero and reserved internal IDs rejectedCapability check (ResolveOutputLeaser) prevents silent downgrade to time-only lease when confirmation control is requested
80dde144by Yong+1293−10021 files
No security note in commit
Informational 19 AI analysisMessage 58 · Thin
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #10812 from ziggie1984/chanstate-kv-store-move

This commit is a large internal code reorganization for the LND Lightning node. It moves channel state storage logic from the `channeldb` package into a new `chanstate` package, while keeping the same database keys, serialization formats, …

Large refactoring with no change to cryptographic or consensus-critical logicCodec serialization moved verbatim to new package; wire format unchangedDatabase bucket keys and TLV record types preserved
62b0a073by Olaoluwa Osuntokun+3923−310924 files
No security note in commit
Low 25 AI analysisMessage 73 · Adequate
LL Lightning LabsLND BitcoinLightning Network

Merge pull request #10804 from GeorgeTsagk/close-immediately-itest-lnd-7c38

This change fixes a data-handling bug in LND's channel-opening code. When opening a Lightning channel using an optional 'auxiliary funding controller' (used for custom channel types such as Taproot Assets), the funding manager was previous…

Data-correctness fix in funding handshake: negotiated channel configs now exposed to auxiliary funding controllerAuxiliary funding controller receives incomplete channel state before patch, complete state after patchNo explicit security claim, CVE, or advisory referenced in commit or supplied materials
1e127653by Olaoluwa Osuntokun+291−254 files
No security note in commit
Moderate 60 AI analysisMessage 88 · Strong
LL Lightning LabsLND BitcoinLightning Network

bolt12: verify invoice_request and invoice signatures on read

This change makes LND's BOLT 12 invoice and invoice-request reader actually check that the digital signature is valid, instead of only checking that a signature field exists. Before, an attacker could craft or modify a BOLT 12 message and …

Missing cryptographic verification on parsed BOLT 12 messages replaced with BIP-340 Schnorr signature verificationReader accepted any 64-byte placeholder signature before the patchNew negative tests verify rejection of wrong-signer and tampered Merkle-root fields
aa8bd19fby bitromortac+272−723 files
Vendor flagged security relevance
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-prioritygraph/db: let node helpers take versionby Elle Mouton · d2b47cdb · Feb 13, 2026 · 1 fileMessage 45 · ThinInformational 15Details
Commit message · Elle Mouton

graph/db: let node helpers take version

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit only changes test code. It updates helper functions in the graph database test file so they can create either version 1 or version 2 Lightning Network gossip nodes, and updates existing tests to explicitly request version 1 nodes. There is no change to production code, no bug fix, and no security-relevant behavior.

Lower-prioritygraph/db: add TestVersionedDBsby Elle Mouton · 7a5a5881 · Feb 13, 2026 · 1 fileMessage 60 · AdequateInformational 15Details
Commit message · Elle Mouton

graph/db: add TestVersionedDBs

This will be used to run sub-tests with v2 data.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Provides an explanatory body✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only adds and reorganizes test code. It introduces a new test helper that runs existing node database tests against both v1 and v2 gossip data formats, and refactors one existing test to use that helper. There is no change to production code, runtime behavior, or security-sensitive logic.

Lower-prioritydocs: update release notesby Elle Mouton · fcbfeb33 · Feb 13, 2026 · 1 fileMessage 47 · ThinInformational 15Details
Commit message · Elle Mouton

docs: update release notes

47/100 · ThinMessage clarity
✓ Descriptive subject✓ Uses a recognizable type or scope! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only adds a single line to the release notes document, describing a past code change (preparing the graph database for a future gossip protocol version). It contains no actual code changes, no bug fixes, and no security-related content.

Lower-prioritygraph/db: use route.Vertex for channel keysby Elle Mouton · 34f74c71 · Feb 13, 2026 · 2 filesMessage 68 · AdequateInformational 15Details
Commit message · Elle Mouton

graph/db: use route.Vertex for channel keys

Replace [33]byte with route.Vertex for NodeKey1Bytes, NodeKey2Bytes,
BitcoinKey1Bytes, and BitcoinKey2Bytes in ChannelEdgeInfo. Since
route.Vertex is defined as [33]byte, this change is functionally
equivalent but provides better type safety and consistency with the
rest of the routing subsystem.

OtherNodeKeyBytes is also updated to return route.Vertex.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a straightforward internal code cleanup in LND's channel graph database. It swaps one Go data type for another equivalent one (route.Vertex, which is defined as exactly the same 33-byte array) when storing public keys in channel records. There is no functional change, no bug fix, and no security-relevant behavior change.

Lower-prioritygraph/db: add V2 Node constructorby Elle Mouton · 3dfc8353 · Feb 13, 2026 · 1 fileMessage 68 · AdequateInformational 12Details
Commit message · Elle Mouton

graph/db: add V2 Node constructor

We add a new NewV2Node constructor which takes a new NodeV2Fields as a
parameter. This NodeV2Fields struct defines the fields that can be set
in a models.Node if the version is V2.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 12/100

This commit adds a new helper function and data structure for creating version 2 node announcements in the Lightning Network graph database. It is a straightforward feature addition with no visible security bug or fix.

Lower-prioritysqldb: update node query for v2by Elle Mouton · c6161720 · Feb 13, 2026 · 2 filesMessage 72 · AdequateInformational 18Details
Commit message · Elle Mouton

sqldb: update node query for v2

Here we update the UpdateNode query so that it can be used to insert
the new blockheight field for a v2 node.

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Explains rationale or failure mode
AI analysis · Informational 18/100

This commit updates the database query that stores Lightning Network node announcements so it can also record a new 'block height' field used by a newer protocol version. It is a schema/query evolution, not a fix for an active security flaw. There is no indication it addresses a vulnerability.

Lower-prioritygraph/db: allow v2 nodesby Elle Mouton · 1738e0ca · Feb 13, 2026 · 1 fileMessage 83 · StrongInformational 18Details
Commit message · Elle Mouton

graph/db: allow v2 nodes

Update the SQLStore node writer and readers to handle V2 ndoes.
Currently no logic will actually add such nodes. The following commits
will update what is needed so that CRUD for v2 nodes can be tested.

83/100 · StrongMessage clarity
✓ Subject identifies a change✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 18/100

This commit updates LND's internal graph database code so it can recognize and store a new type of Lightning node announcement (called 'v2 nodes'). It does not add any user-facing feature or change network behavior yet; it is plumbing work to support a future protocol version. There is no obvious security bug in the change itself.

Lower-prioritysqldb/sqlc: add NodeExists queryby Elle Mouton · 5a3c013e · Feb 13, 2026 · 3 filesMessage 45 · ThinInformational 15Details
Commit message · Elle Mouton

sqldb/sqlc: add NodeExists query

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit adds a new database query helper called NodeExists. It simply checks whether a node with a given public key and version already exists in the database. There is no change to user-facing behavior, no bug fix, and no security-related content visible in the diff.

Lower-prioritysqldb: add new gossip v2 columns to graph tablesby Elle Mouton · cb2fc662 · Feb 13, 2026 · 6 filesMessage 90 · StrongInformational 20Details
Commit message · Elle Mouton

sqldb: add new gossip v2 columns to graph tables

Add a new migration that updates the graph tables (nodes, channels and
policies) in preparation for the new columns required for V2
announcements. This migration has to be added to the set of "live"
migrations instead of "dev only" since it edits the columns of existing
tables and so changes the existing sql models. We are going to prep the
SQLStore code to handle the V2 types in the coming commits, so we need
this migration to be in place.

In this commit we also remove the TestSchemaMigrationIdempotency test
since this test fails with the new "ALTER TABLE" migrations which dont
have "IF NOT EXISTS" options like tables and indexes do. Migrations
should be idempotent anyways due to the migration tracker file and/or
the sqlc migration tracker.

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 20/100

This commit is a routine database schema update for an upcoming Lightning Network feature called "gossip v2." It adds new empty columns to tables that store node, channel, and routing-policy data, and updates the code that reads those tables to expect the new columns. It also removes an automated test that checked whether schema migrations could be safely run over and over, because the new migration uses SQL "ALTER TABLE" commands that are not naturally repeatable. There is no direct security vulnerability visible in the diff, but removing the idempotency test slightly weakens the project's safety net against migration mistakes.

Lower-prioritygraph/db: move gossip versions up one layerby Elle Mouton · c281810a · Feb 13, 2026 · 5 filesMessage 68 · AdequateInformational 13Details
Commit message · Elle Mouton

graph/db: move gossip versions up one layer

Update some of the node related graph CRUD methods to take a version
rather than hardcoding them in the SQLStore layer. Move the version up
one layer instead. This will make it easier to make it configurable
later on.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 13/100

This commit is a straightforward internal code refactor in LND's channel graph database. It moves the choice of which gossip protocol version to use from deep inside the database layer up to the caller layer, but still hardcodes version 1 everywhere. There is no security fix or vulnerability here; it is preparation for possible future configurability.

Lower-prioritygraph/db: split HasNode into two methodsby Elle Mouton · 97143a74 · Feb 13, 2026 · 8 filesMessage 68 · AdequateInformational 15Details
Commit message · Elle Mouton

graph/db: split HasNode into two methods

HasNode currently is very v1 specific since it returns a time.Time
timestamp which is specific to V1 node announcements. However, it is
mostly only used for the "exists" return value. So here we split it up
into HasNode which just checks existence and HasV1Node which retains the
same behavaiour as before.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a routine internal code cleanup in the Lightning Network Daemon (LND) graph database. It splits one method, HasNode, into two methods: a simple existence check (HasNode) and a version-specific check that also returns a timestamp (HasV1Node). There is no security fix or vulnerability here.

Lower-prioritygraph/db: explicit redirect to Storeby Elle Mouton · 628b89cc · Feb 13, 2026 · 2 filesMessage 80 · StrongInformational 15Details
Commit message · Elle Mouton

graph/db: explicit redirect to Store

Instead of embedding Store in ChannelGraph so that any methods of the
Store interface not implemented by the ChannelGraph are redirected to
the underlying Store, we update things in this commit to instead
make the "redirection" explicit. This is in preparation for changes we
will make soon where some underlying store methods will take an explicit
"version" parameter but then we will keep the ChannelGraph methods as is
so that existing call-sites dont all need to be updated. We will then
add "Versioned" ChannelGraph wrapper which decides the version use.
Initially, most call-sites will just create a wrapped V1 ChannelGraph so
that the logic remains as it is today.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit is a straightforward internal code restructure in LND's channel graph component. It stops automatically forwarding every unimplemented method to an embedded database store and instead explicitly writes out forwarding methods. The change is described by the developers as preparation for future versioning work and does not alter what the code does today. There is no security fix or vulnerability here.

Lower-prioritygraph/db: rename V1Store to Storeby Elle Mouton · bc76383e · Feb 13, 2026 · 11 filesMessage 68 · AdequateInformational 15Details
Commit message · Elle Mouton

graph/db: rename V1Store to Store

The underling store will store gossip messages across gossip versions
and we will instead expose version parameters on many of the methods. So
this interface really just abstracts the underlying store/schema type.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a simple, mechanical rename of the graph database interface from V1Store to Store across the codebase. It changes no behavior, logic, or data handling. There is no security relevance.

AI review queueddevrpc: fix commentby Elle Mouton · 2e58c075 · Feb 13, 2026 · 1 fileMessage 28 · OpaqueInformational 15Details
Commit message · Elle Mouton

devrpc: fix comment

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This commit only fixes a code comment by removing an incomplete sentence fragment. No code logic, behavior, or security properties were changed.

Lower-prioritywtclient: fix race conditions locking testsby Gijs van Dam · 09379d03 · Feb 12, 2026 · 1 fileMessage 78 · AdequateInformational 15Details
Commit message · Gijs van Dam

wtclient: fix race conditions locking tests

This commit fixes two flaky test scenarios:

1. testRemoveLockedAddr: Add synchronization to wait for the dial to
start before asserting that the address is locked. Previously, the
test could race and check the lock state before session negotiation
began.

2. testTowerSwitch: Use wait.Predicate for RemoveTower since the
address may still be locked by an active session, causing
intermittent failures.

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This change only adjusts internal test code to fix timing-related flakiness in two watchtower client tests. It does not modify production code, so it has no direct security impact on running LND nodes.

Lower-priorityinvoices: increase timeout parallel Postgres testsby Gijs van Dam · 6ea99cde · Feb 12, 2026 · 1 fileMessage 83 · StrongInformational 15Details
Commit message · Gijs van Dam

invoices: increase timeout parallel Postgres tests

Increase the test timeout from 10s to 60s to accommodate slow
Postgres database setup and migrations when running tests in
parallel. This prevents false-positive test failures on slower
CI runners.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only changes a test file, increasing a timeout from 10 seconds to 60 seconds during automated tests. It is not a security fix and does not affect the production LND software that users run.

Lower-prioritysqldb: wire up PragmaOptions config for SQLite storeby ziggie · a7d1a30c · Feb 11, 2026 · 1 fileMessage 73 · AdequateLow 27Details
Commit message · ziggie

sqldb: wire up PragmaOptions config for SQLite store

The SqliteConfig.PragmaOptions field existed but was never appended to
the DSN. Add the loop to apply user-specified pragma options after the
built-in ones, matching the existing behavior in kvdb/sqlite.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Low 27/100

This commit fixes a configuration bug in LND's new SQLite-based database layer. A setting called PragmaOptions existed in the config but was being silently ignored when building the database connection string. The change now appends those user-specified SQLite pragma options, matching how the older key-value SQLite store already behaves. Pragmas control low-level database behavior such as locking modes, journal settings, and synchronous levels, so honoring the user's choices matters for both correctness and security hardening.

Lower-prioritysqldb+lncfg: consolidate SQLite default constantsby ziggie · 325f83c1 · Feb 11, 2026 · 2 filesMessage 68 · AdequateInformational 15Details
Commit message · ziggie

sqldb+lncfg: consolidate SQLite default constants

Move the SQLite default constants (max connections, busy timeout) to
sqldb/config.go as the single source of truth and export them. Remove
the duplicate definitions from lncfg/db.go and reference the sqldb
constants instead.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a simple code cleanup: it moves two default SQLite settings (maximum connections and busy timeout) into one shared location and removes duplicate copies elsewhere. The actual values stay exactly the same, so there is no security or functional change for users.

Lower-prioritysqldb+lncfg: use SQLite-appropriate default for max connectionsby ziggie · d87d93b1 · Feb 11, 2026 · 3 filesMessage 73 · AdequateInformational 23Details
Commit message · ziggie

sqldb+lncfg: use SQLite-appropriate default for max connections

Both the sqldb and kvdb SQLite layers were not using a sensible default
for MaxConnections. The sqldb store used defaultMaxConns (25) which is
meant for Postgres, and the kvdb path passed 0 (unlimited) to
sqlbase.Init when unconfigured.

Add a MaxConns() method on SqliteConfig that returns the configured
value or defaults to 2, appropriate for SQLite's single-writer model.
Use it in both sqldb/sqlite.go and lncfg/db.go so both layers share
the same default.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 23/100

This commit fixes a configuration bug where LND's SQLite database layers used an unsuitable number of maximum database connections. One layer used the Postgres default (25), and another used 0 (unlimited). The patch introduces a shared SQLite-specific default of 2 connections, which matches SQLite's single-writer design and reduces resource contention. This is a reliability/resource-tuning fix rather than a direct security vulnerability, though excessive connections could contribute to denial-of-service conditions under load.

Lower-prioritysqldb: wire up BusyTimeout config for SQLite storeby ziggie · 57fd9659 · Feb 11, 2026 · 2 filesMessage 73 · AdequateInformational 18Details
Commit message · ziggie

sqldb: wire up BusyTimeout config for SQLite store

The SqliteConfig.BusyTimeout field existed but was never used — the
busy_timeout pragma was hardcoded to 5000ms. Add a busyTimeoutMs()
helper that returns the configured value or falls back to the 5000ms
default, and use it when constructing the SQLite DSN.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 18/100

This commit fixes a minor configuration bug in LND's SQLite database support. The software had a user-configurable 'busy timeout' setting, but it was being ignored and always set to 5000 milliseconds (5 seconds). The change makes the setting actually work, falling back to 5000 ms when not configured. This is a correctness/availability improvement, not a direct security vulnerability fix.

Lower-prioritymulti: add issue dedupe command and workflowby Elle Mouton · 7baead71 · Feb 11, 2026 · 3 filesMessage 68 · AdequateInformational 15Details
Commit message · Elle Mouton

multi: add issue dedupe command and workflow

- add /dedupe command definition for Claude Code
- add workflow to run dedupe on issue opened
- add comment helper script for posting duplicates

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit adds a new GitHub automation that uses an AI assistant (Claude Code) to detect and comment on duplicate GitHub issues. It does not change any wallet, networking, or cryptographic code in the Lightning node itself. There is no direct security risk visible in the diff.

Lower-prioritybuild+docs: bump minimum Go version to 1.25.5by Olaoluwa Osuntokun · ba1fb503 · Feb 10, 2026 · 15 filesMessage 68 · AdequateInformational 15Details
Commit message · Olaoluwa Osuntokun

build+docs: bump minimum Go version to 1.25.5

With Go 1.26 now released, this bumps the minimum required Go version
from 1.24.11 to 1.25.5 across all go.mod files and updates the
installation documentation with the correct download links and SHA256
hashes for Go 1.25.5 binaries.

The build system (Dockerfiles, Makefile, CI) was already using Go 1.25.5,
so this change aligns the go.mod minimum version to match.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit simply updates the stated minimum Go programming language version from 1.24.11 to 1.25.5 across project files and installation instructions. It does not change any application code, fix a bug, or address a security vulnerability. The build system was already using Go 1.25.5, so this is just a paperwork alignment.

Lower-prioritybuild: classify cmd/* as MEDIUM in PR severity botby ziggie · ad8b6441 · Feb 10, 2026 · 1 fileMessage 100 · StrongInformational 15Details
Commit message · ziggie

build: classify cmd/* as MEDIUM in PR severity bot

The severity bot was misclassifying CLI client code as HIGH because
filenames like cmd_walletunlocker.go matched the walletunlocker/*
auth/security keyword. Add cmd/* explicitly to the MEDIUM tier and
add a classification rule to prevent filename-based false positives.

100/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Names security-relevant behavior explicitly
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only changes the internal GitHub workflow that automatically labels pull requests by severity. It adjusts the bot so that command-line client files under cmd/* are classified as MEDIUM instead of HIGH, because filenames like cmd_walletunlocker.go were being incorrectly matched to security-sensitive server-side package names. There is no change to LND's actual code, no user-facing behavior change, and no security fix or vulnerability patch.

Lower-priorityactor: refactor Actor to use Mailbox interfaceby Olaoluwa Osuntokun · 20c5c9d6 · Feb 10, 2026 · 1 fileMessage 68 · AdequateInformational 12Details
Commit message · Olaoluwa Osuntokun

actor: refactor Actor to use Mailbox interface

This commit refactors the Actor implementation to use the new Mailbox
interface instead of directly managing a channel. This change
significantly simplifies the actor's message processing loop and
improves separation of concerns.

The main changes include replacing the direct channel field with a
Mailbox interface, updating NewActor to create a ChannelMailbox
instance, and refactoring the process method to use the iterator
pattern provided by mailbox.Receive. The new implementation uses a
clean for-range loop over the mailbox's message iterator, eliminating
the complex select statement that previously handled both message
reception and context cancellation.

The Tell and Ask methods in actorRefImpl have been simplified to use
the mailbox's Send method, which internally handles both the caller's
context and the actor's context. This eliminates the need for complex
select statements in these methods and ensures consistent context
handling throughout the actor system.

Message draining during shutdown is now handled through the mailbox's
Drain method, providing a cleaner separation between normal message
processing and cleanup operations. The actor still properly sends
unprocessed messages to the Dead Letter Office and completes pending
promises with appropriate errors during shutdown.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 12/100

This commit is a straightforward internal code cleanup in LND's actor system. It replaces a raw Go channel with a new 'Mailbox' interface that wraps the same behavior. There is no indication of a security bug being fixed; the change is described by the author as a refactor to simplify message handling and improve separation of concerns.

Security candidateactor: introduce generic Mailbox interface with iter.Seq supportby Olaoluwa Osuntokun · 30af2810 · Feb 10, 2026 · 1 fileMessage 78 · AdequateInformational 12Details
Commit message · Olaoluwa Osuntokun

actor: introduce generic Mailbox interface with iter.Seq support

This commit introduces a new Mailbox interface that abstracts the
message queue implementation for actors. Previously, actors used a
direct channel for their mailbox, which limited flexibility and made
it difficult to implement alternative mailbox strategies.

The new Mailbox interface provides methods for sending, receiving, and
draining messages, with full context support for cancellation. The
Receive method leverages Go 1.23's iter.Seq pattern, providing a clean
iterator-based API that allows natural for-range loops over messages.

The ChannelMailbox implementation maintains the existing channel-based
behavior while conforming to the new interface. It stores the actor's
context internally, ensuring both caller and actor contexts are
properly respected during send and receive operations. This simplifies
context handling compared to complex context merging approaches.

This abstraction enables future implementations such as priority
mailboxes, persistent mailboxes, or bounded mailboxes with overflow
strategies, without requiring changes to the actor implementation.

78/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Names security-relevant behavior explicitly
Why it was queued
memory safety
AI analysis · Informational 12/100

This commit adds a new internal message-queue abstraction for LND's actor system. It is purely a refactoring/new-code change: it introduces a generic Mailbox interface and a channel-based implementation, with no existing callers shown and no obvious security bug. The code is defensive (uses mutexes and atomic flags to avoid send-on-closed-channel panics) and does not change any externally reachable behavior.