Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.
Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.
66/100 average clarity
499Strong · 80–100
1084Adequate · 60–79
567Thin · 40–59
151Opaque · 0–39
20security candidates with opaque commit messaging
This commit fixes a small but real bug in a Rust helper that reads fixed-size chunks from a data slice. The helper was supposed to safely return 'nothing' when asked to read past the end of the data, but it accidentally added two numbers t…
Integer overflow in bounds-checking helperContract violation: method documented to return None on out-of-bounds access could panic insteadDebug-build panic (denial of service) possible
This commit fixes a bug in a Rust helper method called `get_array`, which is meant to safely read a fixed-size chunk from a slice and return nothing if the requested range is out of bounds. The bug was that the code added the caller's offs…
Integer overflow in bounds calculationPotential panic due to violated internal length expectationCaller-controlled arithmetic used for memory access bounds
This commit fixes a bug in how the Rust Bitcoin library counts and compares transaction witness data when a witness contains an oversized item. Previously, several functions relied on an iterator that silently skips oversized items, causin…
Inconsistent serialization/iterator behavior for oversized witness itemswtxid collision risk between transactions differing only in oversized witness bytesIncorrect witness equality for oversized single-item stacks
This is a code-quality and performance improvement, not a security fix. It changes how the library adds up lists of Bitcoin amounts so that it stops early once an overflow is detected, rather than continuing to process the rest of the list…
No security-relevant signal in commit message or diffRefactor preserves overflow-checking behavior (short-circuits instead of continuing)New API method `NumOpResult::from_result` is a pure inverse of existing `into_result`
This update fixes a bug in how the library reads Bitcoin amount strings like '1.5 BTC'. Previously, certain malformed inputs such as '.', '._', '1_', '1_.0', and '1._0' were incorrectly accepted and treated as valid amounts (often zero), i…
Input validation bypass in amount parserMalformed strings silently parsed as zero or ordinary amountsUnderscore separator placement not enforced
This commit fixes a rounding bug in how the rust-bitcoin library calculates the minimum transaction weight needed to pay a given fee at a given fee rate. The old code rounded the fee rate up too early, which could produce a weight slightly…
Incorrect fee-weight calculation due to premature integer roundingPotential transaction fee shortfall when using div_by_fee_rate_ceilOverflow protection added for Amount::MAX * 4_000_000 intermediate value
This is a routine release-management commit that bumps the version number of the `bitcoin-consensus-encoding` crate from 1.2.0 to 1.3.0 and updates lock files accordingly. It contains no code changes that fix or introduce a security issue.…
This commit updates a GitHub Actions automation tool (actions/labeler) used to automatically tag pull requests with labels. It is a routine dependency version bump from 6.2.0 to 7.0.0, with no indication of a security fix or vulnerability.…
This commit is a routine update to the GitHub Actions checkout tool used by the project's automated workflows. It only changes version numbers in configuration files and does not alter the actual Bitcoin library code that users run. There …
This commit updates a GitHub Actions helper used to install a Python tool called uv, which runs the zizmor security scanner. The change only bumps the pinned version of the helper from 8.3.2 to 9.0.0. The new version's release notes mentio…
No security-relevant signals in commit or upstream release notesDependency bump in CI only, not in library codeNo CVE or advisory referenced
This is a routine Dependabot update that changes the pinned version of GitHub's official CodeQL upload-sarif action from 4.37.0 to 4.37.3 in a single CI workflow. The action only uploads static analysis results to GitHub; it does not touch…
This is a routine update to a GitHub Actions helper used to install Rust during automated testing. It only changes the pinned version of the dtolnay/rust-toolchain action in workflow files. There is no change to the actual rust-bitcoin lib…
This commit adds a way to ask, in advance, exactly how many bytes a Bitcoin block or transaction will take when serialized. It is a feature addition for the library's encoding system, not a fix for a vulnerability. There is no indication i…
No security-relevant signals in commit message or diffFeature addition: expose exact encoded sizeNo mention of vulnerability, CVE, bug bounty, or security report
This is a routine update by Dependabot that changes which version of a popular GitHub Action (dtolnay/rust-toolchain) is used to install Rust in automated CI workflows. The commit only updates pinned commit hashes in workflow files; it doe…
This is a routine patch-version update of a GitHub-maintained action used only to upload static-analysis results (SARIF files) from a scheduled CI job. The change does not touch any project source code, cryptographic logic, or user-facing …
This is a routine automated update by Dependabot that changes the pinned version of a GitHub Action used to install a Python tool called 'uv' in two workflow files. The new version is a major release of the setup-uv action itself, but the …
This commit removes the automatic `Copy` trait from several public error types in the rust-bitcoin library and updates the project's written policy to discourage `Copy` on error types. `Copy` is a Rust trait that lets values be duplicated …
API hardening: removes `Copy` from public error types to preserve future flexibilityPolicy update: docs/policy.md now explicitly discourages `Copy` on error typesNo vulnerability fix: change is defensive/preventive, not reactive to a disclosed issue
This change is a routine code cleanup, not a security fix. It moves a method that converts Bitcoin output scripts into human-readable addresses from a temporary 'extension trait' directly onto the main Address type. The actual conversion l…
This is a routine code-quality and API-expansion pull request for the rust-bitcoin library's 'units' crate. It widens some fee-rate constructors from 32-bit to 64-bit inputs, renames the old 32-bit versions, improves serde error messages, …
API surface change: new u64 fee-rate constructors return NumOpResult to prevent silent overflowRenaming of existing u32 constructors to *_u32 may break downstream callers at compile time (breaking API change)Removal of artificial restriction in from_per_vb allows larger valid inputs
This commit fixes a bug in how the library handles math errors. Previously, if you added or subtracted two values and one of them already had an error (for example, dividing by zero), the library would silently replace that original error …
Error-state information loss in arithmetic wrapper typeIncorrect error propagation could mask prior failures such as division by zeroDefensive correctness fix in numeric operation result handling
This macro will be used in multiple crates following the move of PushBytes to primitives. To reduce code duplication, it should be moved to the include directory and introduced into each crate as needed using include!.
Move impl_asref_push_bytes to include/asref_pushbytes.rs and include! in bitcoin.
68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
AI analysis · Informational 15/100
This commit is a routine code reorganization. It moves a small helper macro that implements conversions for script push bytes from one internal file to a shared include directory, then pulls it back in with no functional changes. There is no security issue here.
Security candidateMove PushBytes and co to primitivesby Mitchell Bagot · 58965872 · May 20, 2026 · 12 filesMessage 68 · AdequateInformational 18Details
Commit message · Mitchell Bagot
Move PushBytes and co to primitives
To simplify the move of Address to the new addresses crate, the PushBytes type can be moved to primitives first.
Move PushBytes, PushBytesBuf, PushBytesError and PushBytesErrorReport to primitives.
68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
AI analysis · Informational 18/100
This commit is a routine internal code reorganization. It moves the PushBytes family of types and helpers from the main bitcoin crate into a lower-level primitives crate, and adjusts re-exports and trait implementations accordingly. There is no indication of a security bug being fixed or introduced.
AI review queuedUpdate API filesby Mitchell Bagot · f30cff4b · May 20, 2026 · 2 filesMessage 28 · OpaqueInformational 15Details
Commit message · Mitchell Bagot
Update API files
28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
This commit only updates two generated API snapshot files that list what functions and types are publicly exposed by the library. No actual source code was changed, and the commit message simply says 'Update API files.' There is no indication of a security fix or vulnerability.
Having moved to primitives, the tests must cover all mutants in PushBytes. Since existing tests from bitcoin all rely on extension traits or other functionality, new tests should be created just for PushBytes and PushBytesBuf.
78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100
This commit only adds new test code for existing PushBytes types. It does not change any production code, fix a bug, or alter behavior. There is no security issue here.
Security candidateFix lint errors in primitives and cryptoby Mitchell Bagot · dd3aaf61 · May 20, 2026 · 2 filesMessage 68 · AdequateInformational 15Details
Commit message · Mitchell Bagot
Fix lint errors in primitives and crypto
With the move of PushBytes and co to primitives, a handful of lint errors are now thrown in both crypto and primitives.
Fix lint errors in primitives and crypto.
68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
AI analysis · Informational 15/100
This is a routine code cleanup commit that fixes compiler lint warnings. It removes an unused import, simplifies how a borrowed reference is obtained, makes a large numeric constant more readable with underscores, and adds a missing semicolon. None of these changes affect program behavior or fix any security issue.
In order to stabilise PushBytes now, the impls of AsRef/Borrow, etc between PushBytes and the crypto types need to be in a non-stable crate until the crypto types are stable. While we want primitives to depend on crypto eventually, for now, the only way to stabilise PushBytes in primitives is to invert the dependency and put the impls in crypto.
This commit only changes build configuration files (Cargo.toml and lock files) to add a new internal crate dependency. It does not modify any executable code, fix a bug, or address a security issue. It is a routine refactoring step to resolve a dependency direction problem during library development.
Lower-priorityAdd From<Infallible> to push_bytes errorsby Mitchell Bagot · 2b8f25ed · May 20, 2026 · 1 fileMessage 68 · AdequateInformational 15Details
Commit message · Mitchell Bagot
Add From<Infallible> to push_bytes errors
The error types in push_bytes in bitcoin are missing From<Infallible>. This impl should be present on all error types in all crates.
68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100
This commit adds a standard Rust trait implementation that lets two internal error types be created from Rust's Infallible type. Infallible is a type that can never actually exist, so this is a purely mechanical, safe change that makes the library's error types consistent with the project's conventions. It does not fix a vulnerability or change any behavior an attacker could exploit.
Lower-prioritySplit PushBytes into an extension traitby Mitchell Bagot · d4364313 · May 20, 2026 · 5 filesMessage 68 · AdequateInformational 15Details
Commit message · Mitchell Bagot
Split PushBytes into an extension trait
As a precursor to moving PushBytes to primitives, some of the functions should be split to an extension trait in bitcoin to leave behind.
Split read_scriptint, read_cltv_scriptint to an extension trait and move read_scriptint_internal to a plain private function.
68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100
This commit is a routine internal code reorganization. It moves two existing helper methods (read_scriptint and read_cltv_scriptint) out of the PushBytes type into a Rust 'extension trait', and turns their shared internal helper into a plain private function. No behavior changes, bug fixes, or security-sensitive logic changes are visible in the diff.
AI review queuedconsensus_encoding: run formatterby Nick Johnson · 9ecae87d · May 19, 2026 · 10 filesMessage 35 · OpaqueInformational 15Details
Commit message · Nick Johnson
consensus_encoding: run formatter
35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
parser or protocol pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path
AI analysis · Informational 15/100
This commit is purely a code-formatting cleanup. It re-indents lines, breaks long statements across multiple lines, and reorders imports to satisfy Rust style rules. No program logic, behavior, or security properties were changed.
AI review queuedAdd DecoderStatus return value to the Decoder traitby Nick Johnson · 5bc839a5 · May 19, 2026 · 39 filesMessage 65 · AdequateInformational 18Details
Commit message · Nick Johnson
Add DecoderStatus return value to the Decoder trait
Same reasoning as the EncoderStatus, the type makes things a little easier to reason about than a naked bool.
65/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
signing or wallet pathparser or protocol pathsecond-pass: unusually broad changesecond-pass: security-sensitive path
AI analysis · Informational 18/100
This commit is a straightforward internal refactoring of the rust-bitcoin library's decoding machinery. It replaces a plain true/false return value from decoder methods with a new named DecoderStatus enum (NeedsMore / Ready). The change is purely about making the code easier to read and maintain; it does not alter what data is accepted, rejected, or how it is parsed. There is no indication this fixes a security bug or introduces a vulnerability.
AI review queuedconsensus_encoding: update docs for the new return emumsby Nick Johnson · dc592225 · May 19, 2026 · 3 filesMessage 50 · ThinInformational 15Details
Commit message · Nick Johnson
consensus_encoding: update docs for the new return emums
50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
parser or protocol pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100
This commit only updates documentation comments in a Rust Bitcoin encoding/decoding library. It rewrites explanations to match a recent API change where methods now return named enum values (like EncoderStatus::Finished) instead of plain true/false booleans. No actual code logic was changed, so there is no security impact.
AI review queuedUpdate APIby Nick Johnson · dba689c4 · May 19, 2026 · 7 filesMessage 0 · OpaqueInformational 15Details
Commit message · Nick Johnson
Update API
0/100 · OpaqueMessage clarity
! Very short subject! Too few words to establish purpose! No meaningful explanatory body
This commit only updates generated API snapshot files (text listings of public functions/types). It adds two new public enum types, DecoderStatus and EncoderStatus, and changes the return type of several Decoder/Encoder methods from bool to those new enums. There is no source code change shown, no bug fix, and no security-relevant behavior described.
AI review queuedconsensus_encoding: fix up lintsby Nick Johnson · bd5dc0a8 · May 19, 2026 · 3 filesMessage 35 · OpaqueInformational 15Details
Commit message · Nick Johnson
consensus_encoding: fix up lints
35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path
AI analysis · Informational 15/100
This commit is a routine code cleanup that fixes compiler lint warnings. It rewrites some pattern-matching to use shorter syntax, adds missing semicolons, converts a manual panic into an assertion, and reorganizes imports and test code behind feature flags. There is no functional change that affects security.
AI review queuedconsensus_encoding: squash mutantsby Nick Johnson · 460d31bc · May 19, 2026 · 3 filesMessage 35 · OpaqueInformational 15Details
Commit message · Nick Johnson
consensus_encoding: squash mutants
35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100
This commit only adds new unit tests and one test-tooling exclusion. It does not change any production code, so it cannot introduce or fix a security vulnerability on its own.
AI review queuedReplace `bool` in `Encoder` with an enumby Martin Habovstiak · 9dce71c2 · May 19, 2026 · 13 filesMessage 68 · AdequateInformational 19Details
Commit message · Martin Habovstiak
Replace `bool` in `Encoder` with an enum
It was difficult to remember the meaning of `true` and `false` returned from `advance` making it harder to write and read the code. The idiomatic solution to such problem is to replace `bool` with an enum which this commit does.
To make it less annoying, the enum defines methods that can convert it to bool readably. Notably, they are not named `is_` but `has_finished` and `has_more` which reads better in the code that's dealing with them. E.g. `if encoder.advance().has_finished()` reads naturally.
68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 19/100
This commit is a straightforward code cleanup: it replaces a true/false return value from an encoder's 'advance' method with a clearly-named enum (HasMore/Finished). The behavior of the code is unchanged; it only becomes easier to read and maintain. There is no security fix or vulnerability here.
AI review queuedTest outcome of encoding, not chunkingby Martin Habovstiak · 3fabfb86 · May 19, 2026 · 7 filesMessage 90 · StrongInformational 15Details
Commit message · Martin Habovstiak
Test outcome of encoding, not chunking
The idea behind the `Encoder` trait is that it represents a stream of bytes that can be encoded, so it's logically equivalent to iterator of bytes. The only reason data is returned in chunks is to improve efficiency by potentially avoiding intermediate copies and some branches.
As such, encoding should be tested by outcome - are the bytes produced by the encoder what is expected? How the bytes are chunked is not only irrelevant but testing it causes churn when refactoring, changing the chunking strategy and makes the test code more complicated than required.
We had a bunch of tests that were testing the chunking, including internal details of encoders, "safety" of encoders which a) really aren't `unsafe` and b) are not required to be well-behaved when called after they yield all bytes. This commit changes the tests to check the outputs of encoding instead, deletes tests that touch internal details of encoders, deletes redundant tests of the `is_empty` method which is a provided method and thus shouldn't need to be tested more than once, and updates the documentation of the `Encoder` trait to clarify that chunking is not stable, so that consumers don't rely on it.
90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100
This commit is a test-only refactor. It changes how encoding is verified in unit tests: instead of checking the exact byte chunks an encoder produces one at a time, tests now only check the final concatenated byte output. It also deletes tests that poked at internal encoder details and updates documentation to say chunk sizes are not guaranteed. There is no change to production code behavior.
Lower-priorityDelete redundant testsby Martin Habovstiak · 47a3246c · May 19, 2026 · 1 fileMessage 61 · AdequateInformational 15Details
Commit message · Martin Habovstiak
Delete redundant tests
Compact size encoding is properly tested in its module and the tests in `tests/encode.rs` were testing the same things, so this commit deletes them.
61/100 · AdequateMessage clarity
✓ Subject identifies a change✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100
This commit simply removes duplicate unit tests from a Rust Bitcoin encoding library. The deleted tests covered the same compact-size encoding behavior that is already tested elsewhere, so no code logic changed and there is no security impact.
Lower-priorityAdd helpers for testing encodersby Martin Habovstiak · 09182b2d · May 19, 2026 · 3 filesMessage 78 · AdequateInformational 15Details
Commit message · Martin Habovstiak
Add helpers for testing encoders
When testing encoders, one usually wants to check that the data encoded equals what is expected. However, this may require encoding to a vec and then comparing. We can instead provide first-class functions that check the data as it's being encoded, without needing allocations. This vastly simplifies checking logic, including removing the need to cfg-out non-alloc tests.
Along with adding the helpers, this commit already uses them in compact size tests to make them no-alloc and a bit simpler.
78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100
This commit adds new test-only helper functions that let developers check whether an encoder produces the expected bytes without needing to allocate memory. It also updates existing compact-size tests to use these helpers, making the tests simpler and usable in no-allocation environments. There is no change to production behavior or security-sensitive logic.
Lower-priorityCall `*_to_vec` instead of manually loopingby Martin Habovstiak · c5b36fa2 · May 19, 2026 · 1 fileMessage 78 · AdequateInformational 15Details
Commit message · Martin Habovstiak
Call `*_to_vec` instead of manually looping
The consumer code should not re-implement what the existing bridge functions provide but the tests did so. This removes the loops in favor of function calls.
78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100
This is a small code cleanup in test files only. It replaces hand-written loops with existing helper functions that do the same thing. There is no security issue and no change to production code.
Lower-priorityRemove `Option` from `CompactSizeEncoder`by Martin Habovstiak · ba03de02 · May 19, 2026 · 1 fileMessage 58 · ThinInformational 15Details
Commit message · Martin Habovstiak
Remove `Option` from `CompactSizeEncoder`
`Option` was removed from encoders in 06623b81bc0ef6bdd3e4e2525aff78af174b7e77 however it was missed in case of `CompactSizeEncoder`, so this now removes it.
This is a small internal cleanup in the Rust Bitcoin library. It removes an unnecessary use of Option (a type that can hold either a value or nothing) from a compact-size integer encoder. The change simplifies the code but does not fix a security bug or change observable behavior.
Security candidaterefactor(bip32): make child number a newtype ChildNumber(u32)by Trevor Arjeski · a4e61e3a · May 19, 2026 · 2 filesMessage 85 · StrongLow 32Details
Commit message · Trevor Arjeski
refactor(bip32): make child number a newtype ChildNumber(u32)
Convert from an enum into a private newtype `ChildNumber(u32)` that stores the raw u32 value. This resolves the FIXME that describes an invariant where someone could create a child number that is out of range for the given variant. Now we have constructors that check the range.
85/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context
Why it was queued
secret or key materialcryptography-sensitive path
AI analysis · Low 32/100
This commit refactors how BIP-32 child key indexes are represented in the rust-bitcoin library. Previously, the index was a public enum with separate fields for normal and hardened variants, and the commit message notes a FIXME: because those fields were public, callers could directly create an out-of-range index (for example, a 'normal' index with the high bit set). The change turns the type into a private newtype around a raw u32 and forces construction through checked constructors that validate the range. It is a defensive hardening change that closes a potential invariant violation, but it does not by itself fix a demonstrated exploit.
Security candidateAdd weekly cron job to update cargo rbmt to latest releaseby Benalleng · 2eaaa2ec · May 18, 2026 · 1 fileMessage 73 · AdequateInformational 15Details
Commit message · Benalleng
Add weekly cron job to update cargo rbmt to latest release
This cron job runs every week but will only add a PR to update the `rbmt-version` file if there is a new published release tag.
73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
boot or update pathdocumentation-only discount
AI analysis · Informational 15/100
This commit adds a scheduled GitHub Actions workflow that runs once a week to check for new releases of an internal maintainer tool (cargo-rbmt). If a newer release exists, it automatically opens a pull request updating a version-tracking file. There is no user-facing code change, no bug fix, and no security-sensitive behavior introduced.
AI review queuedUpdate API filesby Abeeujah · 17204a8b · May 18, 2026 · 3 filesMessage 28 · OpaqueInformational 15Details
Commit message · Abeeujah
Update API files
28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
This commit only updates generated API listing files (text snapshots of what functions and types are publicly exposed). It adds documentation of a new error type and a new 'try_push' method for an internal array vector, but it does not change any actual source code or behavior. There is no security issue here.
AI review queuedUpdate `ArrayVec` deserializationby Abeeujah · a375642a · May 18, 2026 · 1 fileMessage 58 · ThinLow 44Details
Commit message · Abeeujah
Update `ArrayVec` deserialization
Deserialization of ArrayVec now uses `ArrayVec::try_push` method over the `ArrayVec::push` method, which would panic if the array is full, causing us to manually check for capacity before pushing.
The `try_push` method returns a `Result` which is mapped to Serde's `invalid_length` error.
This commit fixes a deserialization bug in an internal array-like data structure. Previously, if untrusted serialized data claimed to contain more items than the structure could hold, the code would panic (crash) instead of returning a proper error. The fix makes deserialization gracefully reject oversized input.
Inserting elements into `ArrayVec` with `push` panics if the array is full, `try_push` instead returns an `Result`, notifying the caller the array is full.
This commit adds a new, safer way to insert items into a fixed-size array-like container called ArrayVec. The existing method panics when full; the new method returns a normal error instead. It does not change any existing behavior and does not fix a known security bug.