RB
← All projectsRust Bitcoin

rust-bitcoin

Rust library for Bitcoin data structures, serialization, consensus encoding, and scripts.

BitcoinCryptographic librariesNormal
Repository coverage

2313 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

532security candidates511second-pass queue2206AI analyses
133commits · 30 days
267commits · 60 days
1103commits · 180 days
2019commits · 365 days
Backfill bands
Aug 5 → Feb 6787 seen32 candidatesComplete
Feb 6 → Jun 6878 seen53 candidatesComplete
Jun 6 → Jul 6211 seen15 candidatesComplete
Jul 6 → Aug 5184 seen2 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

66/100 average clarity
510Strong · 80–100
1085Adequate · 60–79
567Thin · 40–59
151Opaque · 0–39
20security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Andrew Poelstra23179157290
Mitchell Bagot649193645068
Tobin C. Harding41566410063
jrakibi944994068
Nick Johnson19121190060
Jamil Lambert, PhD11919116061
satsfy (Renato Britto)381527066
Fmt Bot331431045
Trevor Arjeski111111069
Shing Him Ng31731056
Martin Habovstiak30628068
Ismail Daif22622050
Analysis record

Published AI watches

Last scanned 1 minute ago

Moderate 62 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6954: units: serialize unsigned amounts as u64

This commit fixes a mismatch in how unsigned Bitcoin amounts were serialized versus deserialized when using certain compact binary formats. Previously, an unsigned amount (like 100 satoshis) was written as a signed number, which caused for…

Data integrity bug: serialized values decode to different numeric values in varint binary formatsRange-check failure: Amount::MAX and large values near the cap fail deserialization after round-tripSerde serialize/deserialize hint mismatch for unsigned amount types
295c9d8aby Andrew Poelstra+66−112 files
No security note in commit
Low 25 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6955: key_expression: preserve master-key invariants in Xpub Arbitrary

This change fixes a bug in test-only code that generates random fake Bitcoin extended public keys (xpubs). Previously, when generating a master xpub (depth 0), the code could pick random values for the parent fingerprint and child number, …

BIP32 master-key invariant violation in generated test dataEncode/decode round-trip failure for generated master xpubsFix aligns Xpub::arbitrary with existing Xpriv::arbitrary behavior
4116ecc6by Andrew Poelstra+35−31 file
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6947: build(deps): bump cargo-bins/cargo-binstall from 1.21.0 to 1.21.1

This commit updates the version of a helper tool (cargo-binstall) used only inside GitHub Actions automation. It is a routine dependency bump by Dependabot and does not change any code that ships to users. There is no indication of a secur…

c1be49cbby Andrew Poelstra+2−22 files
No security note in commit
High 70 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6919: Sanitize serde size hints before allocating

This commit fixes a denial-of-service weakness in how the library deserializes lists of Bitcoin data (witnesses, amounts, fee rates) from untrusted input. Before the fix, a few bytes of attacker-controlled data could claim a list would con…

Untrusted serde size hint fed directly into Vec::with_capacityPotential memory exhaustion / OOM kill from small malicious inputDenial-of-service vector in deserialization paths
55ddbc0cby Andrew Poelstra+88−105 files
Vendor flagged security relevance
Moderate 60 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6945: bitcoin: handle OP_CODESEPARATOR in legacy

This commit fixes how the Rust Bitcoin library calculates old-style (legacy) transaction signatures when the spending script contains a special opcode called OP_CODESEPARATOR. Previously the library did not handle this opcode at all, which…

Protocol correctness fix for legacy sighash serializationOP_CODESEPARATOR handling added to match Bitcoin Core consensus behaviorPreviously omitted test vectors restored, indicating prior non-compliance
5b815281by Andrew Poelstra+600−3093 files
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6948: build(deps): bump taiki-e/install-action from 2.83.2 to 2.85.4

This is a routine update by Dependabot to the version of a third-party GitHub Action used in the project's automated testing workflows. The change only affects internal continuous integration (CI) scripts, not the actual Bitcoin library co…

d1431904by Andrew Poelstra+2−22 files
No security note in commit
Low 33 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6946: Fix integer overflow in `get_array`

This commit fixes a small but real bug in a Rust helper that reads fixed-size chunks from a data slice. The helper was supposed to safely return 'nothing' when asked to read past the end of the data, but it accidentally added two numbers t…

Integer overflow in bounds-checking helperContract violation: method documented to return None on out-of-bounds access could panic insteadDebug-build panic (denial of service) possible
c6e80843by Andrew Poelstra+2−11 file
Vendor flagged security relevance
Moderate 62 AI analysisMessage 73 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Fix integer overflow in `get_array`

This commit fixes a bug in a Rust helper method called `get_array`, which is meant to safely read a fixed-size chunk from a slice and return nothing if the requested range is out of bounds. The bug was that the code added the caller's offs…

Integer overflow in bounds calculationPotential panic due to violated internal length expectationCaller-controlled arithmetic used for memory access bounds
56fb1287by Martin Habovstiak+2−11 file
Vendor flagged security relevance
High 71 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6915: primitives: Fix `Witness` handling of oversized items

This commit fixes a bug in how the Rust Bitcoin library counts and compares transaction witness data when a witness contains an oversized item. Previously, several functions relied on an iterator that silently skips oversized items, causin…

Inconsistent serialization/iterator behavior for oversized witness itemswtxid collision risk between transactions differing only in oversized witness bytesIncorrect witness equality for oversized single-item stacks
e1ed5884by Andrew Poelstra+106−273 files
Vendor flagged security relevance
Informational 19 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6922: Use `try_fold` instead of `fold` in `Sum` impl

This is a code-quality and performance improvement, not a security fix. It changes how the library adds up lists of Bitcoin amounts so that it stops early once an overflow is detected, rather than continuing to process the rest of the list…

No security-relevant signal in commit message or diffRefactor preserves overflow-checking behavior (short-circuits instead of continuing)New API method `NumOpResult::from_result` is a pure inverse of existing `into_result`
86e4d5daby Andrew Poelstra+60−562 files
No security note in commit
Moderate 52 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6893: units: Reject malformed amount strings

This update fixes a bug in how the library reads Bitcoin amount strings like '1.5 BTC'. Previously, certain malformed inputs such as '.', '._', '1_', '1_.0', and '1._0' were incorrectly accepted and treated as valid amounts (often zero), i…

Input validation bypass in amount parserMalformed strings silently parsed as zero or ordinary amountsUnderscore separator placement not enforced
fcb14622by Andrew Poelstra+88−343 files
Vendor flagged security relevance
Low 48 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6921: units: fix div_by_fee_rate_ceil precision

This commit fixes a rounding bug in how the rust-bitcoin library calculates the minimum transaction weight needed to pay a given fee at a given fee rate. The old code rounded the fee rate up too early, which could produce a weight slightly…

Incorrect fee-weight calculation due to premature integer roundingPotential transaction fee shortfall when using div_by_fee_rate_ceilOverflow protection added for Amount::MAX * 4_000_000 intermediate value
b31212e0by Andrew Poelstra+38−82 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6898: Release tracking PR: `consensus-encoding 1.3.0`

This is a routine release-management commit that bumps the version number of the `bitcoin-consensus-encoding` crate from 1.2.0 to 1.3.0 and updates lock files accordingly. It contains no code changes that fix or introduce a security issue.…

0cfc7908by Andrew Poelstra+37−349 files
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6909: build(deps): bump actions/labeler from 6.2.0 to 7.0.0

This commit updates a GitHub Actions automation tool (actions/labeler) used to automatically tag pull requests with labels. It is a routine dependency version bump from 6.2.0 to 7.0.0, with no indication of a security fix or vulnerability.…

4ed7c068by Andrew Poelstra+1−11 file
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6910: build(deps): bump actions/checkout from 7.0.0 to 7.0.1

This commit is a routine update to the GitHub Actions checkout tool used by the project's automated workflows. It only changes version numbers in configuration files and does not alter the actual Bitcoin library code that users run. There …

328c4ae9by Andrew Poelstra+37−3717 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6911: build(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0

This commit updates a GitHub Actions helper used to install a Python tool called uv, which runs the zizmor security scanner. The change only bumps the pinned version of the helper from 8.3.2 to 9.0.0. The new version's release notes mentio…

No security-relevant signals in commit or upstream release notesDependency bump in CI only, not in library codeNo CVE or advisory referenced
67600795by Andrew Poelstra+2−22 files
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6912: build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.3

This is a routine Dependabot update that changes the pinned version of GitHub's official CodeQL upload-sarif action from 4.37.0 to 4.37.3 in a single CI workflow. The action only uploads static analysis results to GitHub; it does not touch…

b51cec63by Andrew Poelstra+1−11 file
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6913: build(deps): bump dtolnay/rust-toolchain from 6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 to 02cb101ec7c40f2c49e1d9714d64511d8e1b74de

This is a routine update to a GitHub Actions helper used to install Rust during automated testing. It only changes the pinned version of the dtolnay/rust-toolchain action in workflow files. There is no change to the actual rust-bitcoin lib…

90330d15by Andrew Poelstra+8−84 files
No security note in commit
Informational 20 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6906: consensus_encoding, primitives: expose exact encoding size for block and transaction

This commit adds a way to ask, in advance, exactly how many bytes a Bitcoin block or transaction will take when serialized. It is a feature addition for the library's encoding system, not a fix for a vulnerability. There is no indication i…

No security-relevant signals in commit message or diffFeature addition: expose exact encoded sizeNo mention of vulnerability, CVE, bug bounty, or security report
1a365d53by Andrew Poelstra+129−1068 files
No security note in commit
Informational 15 AI analysisMessage 88 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

build(deps): bump dtolnay/rust-toolchain

This is a routine update by Dependabot that changes which version of a popular GitHub Action (dtolnay/rust-toolchain) is used to install Rust in automated CI workflows. The commit only updates pinned commit hashes in workflow files; it doe…

a31e0b0eby dependabot[bot]+8−84 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

Lower-priorityAdd tag to Block decodableby Tobin C. Harding · 9efb7e9b · Mar 9, 2026 · 1 fileMessage 68 · AdequateInformational 15Details
Commit message · Tobin C. Harding

Add tag to Block decodable

Just to make it more obvious that we only implement `Decodable` for
unchecked blocks.

The `Unchecked` tag is the default. Syntax only, no logic change.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This is a purely cosmetic code change. A developer added the word 'Unchecked' to an existing implementation line to make it clearer that this code path does not validate block contents. No program behavior, security checks, or logic were changed.

Lower-priorityLoosen trait bounds on HexPrimitive trait implsby Tobin C. Harding · 86ff577a · Mar 9, 2026 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · Tobin C. Harding

Loosen trait bounds on HexPrimitive trait impls

Currently the `HexPrimitive` has trait bounds on the struct `Decodable
+ Encodable` and these bounds are also on the `fmt` trait impls. It is
not necessary to be able to decode an object in order to `fmt` it.

Loosen the trait bounds so that we only need `Encodable` for `fmt`'ing
and `Decodable` for parsing.

(This is needed so that the `Block<Checked>` type can be `fmt`'ed when
it intentionally does not implement decoding.)

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit is a routine code cleanup. It relaxes unnecessary requirements on an internal helper type so that formatting a value as hexadecimal no longer requires the value to also be decodable. There is no security issue here.

AI review queuedImprove From<Infallible> impls to the hex_codec errorsby Tobin C. Harding · 5508596d · Mar 9, 2026 · 3 filesMessage 73 · AdequateInformational 15Details
Commit message · Tobin C. Harding

Improve From<Infallible> impls to the hex_codec errors

Policy is to implement `From<Infallible>` for all error types.

Add missing impls, move the existing one to the 'right' place (right
by codebase convention), and import `Infallible`.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This is a routine code-quality change in a Rust Bitcoin library. It adds and reorganizes implementations of `From<Infallible>` for certain hex-decoding error types. `Infallible` is a Rust type that can never actually be produced, so these conversions are only useful for making the type system happy and have no security impact.

Lower-prioritybitcoin: Do not inline block errorsby Tobin C. Harding · 871ad5bb · Mar 9, 2026 · 1 fileMessage 60 · AdequateInformational 15Details
Commit message · Tobin C. Harding

bitcoin: Do not inline block errors

Convention is to use `no_inline` when re-exporting error types. Fix
the re-exports from the `bitcoin::block` module.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This is a cosmetic documentation-only change. It moves two error types from an inline re-export list to a separate non-inline re-export list, matching the project's existing style convention. There is no functional code change and no security impact.

Lower-prioritybitcoin: Put inline types above no_inline typesby Tobin C. Harding · 7e303c97 · Mar 9, 2026 · 1 fileMessage 68 · AdequateInformational 15Details
Commit message · Tobin C. Harding

bitcoin: Put inline types above no_inline types

The `no_inline` stuff is a bit haphazard across the repo; as part of
an effort to nail it down put the error stuff below the other types.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit simply reorders two lines of Rust documentation import attributes. It moves an error type re-export to appear after inline type re-exports, with no functional code change. There is no security relevance.

Lower-priorityUse write_err in Display for error typeby Tobin C. Harding · 12e6e161 · Mar 9, 2026 · 1 fileMessage 60 · AdequateInformational 15Details
Commit message · Tobin C. Harding

Use write_err in Display for error type

As is customary use the `write_err` macro instead of calling
`fmt::Display` on the inner error.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This is a tiny code-quality change in how an error message is formatted. It replaces a debug-style error display with a more conventional human-readable error message. There is no security issue visible in the commit.

Lower-priorityRefactor dummy_block function in unit testby Tobin C. Harding · 195eb526 · Mar 9, 2026 · 1 fileMessage 78 · AdequateInformational 15Details
Commit message · Tobin C. Harding

Refactor dummy_block function in unit test

In preparation for further testing pull the dummy block creation out
into a function.

Refactor slightly the names and also the assertion so its in got, want
order.

No test coverage change.

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit is a harmless code cleanup inside the project's test suite. It moves the creation of a fake Bitcoin block into a reusable helper function and renames a few variables. There is no change to the actual library code that users rely on, and no security implications.

Lower-priorityprimitives: Group and document option hex depsby Tobin C. Harding · 5b0dfd9e · Mar 9, 2026 · 1 fileMessage 72 · AdequateInformational 15Details
Commit message · Tobin C. Harding

primitives: Group and document option hex deps

Because I got confused just now group the optional hex deps and
comment that they are not typically used directly.

72/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit is purely a housekeeping change in a Rust package configuration file. It reorders three optional dependency lines and adds a comment explaining that two of them are not meant to be used directly. There is no code change, no behavior change, and no security relevance.

AI review queuedprimitives: Return reference to inner error in sourceby Tobin C. Harding · 73d30231 · Mar 9, 2026 · 2 filesMessage 73 · AdequateInformational 17Details
Commit message · Tobin C. Harding

primitives: Return reference to inner error in source

Each call to `source` for a stack of nested errors adds a layer. To
tie this all together `source` should return the layer below it i.e.,
the inner error not call through to `source` itself.

73/100 · AdequateMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
signing or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 17/100

This commit fixes a small bug in how Rust error chains are reported for two Bitcoin parsing error types. Previously, when asking 'what caused this error?', the code accidentally skipped past the immediate cause and returned the next level up. Now it correctly returns the immediate inner error. This is a correctness fix for error reporting and does not directly create a security vulnerability or allow attacks.

Lower-priorityunits: Allow too_many_lines in test functionby Tobin C. Harding · 88a22c07 · Mar 9, 2026 · 1 fileMessage 90 · StrongInformational 15Details
Commit message · Tobin C. Harding

units: Allow too_many_lines in test function

Although the lint is likely correct just shoosh it for now because it
is one line before the threshold until the formatter runs with this
weeks nightly toolchain update.

90/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit adds a single Rust lint-suppression attribute to a test function so that the Clippy 'too_many_lines' warning is silenced. It does not change any runtime code, behavior, or security properties. It is purely a developer-experience change to keep CI passing after a toolchain update.

Lower-priorityFix blockdata module re-export docsby Mitchell Bagot · ef1b580a · Mar 9, 2026 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · Mitchell Bagot

Fix blockdata module re-export docs

The module re-exports in bitcoin::blockdata currently have incorrect
docs due to missing #[doc(inline)] and incorrect use of /// comments.

Introduce #[doc(inline)] where appropriate.
Replace incorrect uses of doc comments with standard comments.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit only fixes how documentation appears for re-exported Rust modules. It changes some doc comments to regular comments and adds markers that control whether documentation is shown inline. There is no change to actual program logic, data handling, or security behavior.

AI review queuedconsensus_encoding: Add tests for CompactSizeDecoder limit handlingby Mitchell Bagot · c7592569 · Mar 7, 2026 · 1 fileMessage 83 · StrongInformational 14Details
Commit message · Mitchell Bagot

consensus_encoding: Add tests for CompactSizeDecoder limit handling

The CompactSizeDecoder can enforce a limit on the valid values to
decode through the new or new_with_limit constructors. At present,
there are no tests to validate this functionality at the boundary
values.

Introduce tests to check limit handling at the boundaries for both
the new and new_with_limit constructors.

83/100 · StrongMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
Why it was queued
defensive validationparser or protocol pathsecond-pass: security-sensitive path
AI analysis · Informational 14/100

This commit only adds new unit tests for an existing feature. It does not change any production code, fix a bug, or alter behavior. The tests verify that a decoder correctly accepts values at or below its configured limit and rejects values above it. There is no security issue here.

Lower-priorityp2p: Implement `encoding` traits for `AddrPayload`by rustaceanrob · e07314ee · Mar 7, 2026 · 1 fileMessage 50 · ThinInformational 16Details
Commit message · rustaceanrob

p2p: Implement `encoding` traits for `AddrPayload`

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 16/100

This commit adds standard encoding and decoding support for the Bitcoin P2P `addr` message payload (a list of network addresses). It is a routine feature addition that lets the library serialize and deserialize this message type. There is no indication in the commit that it fixes a security bug or introduces a vulnerability.

Lower-priorityp2p: Implement `encoding` traits for `AddrV1Message`by rustaceanrob · 3d3fd2ee · Mar 7, 2026 · 1 fileMessage 50 · ThinInformational 15Details
Commit message · rustaceanrob

p2p: Implement `encoding` traits for `AddrV1Message`

Pre-work for `AddrPayload`

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit adds new serialization/deserialization code for an existing Bitcoin peer-to-peer message type (AddrV1Message). It is a straightforward refactoring that implements the project's newer 'encoding' traits for a struct that already had older consensus encoding support. There is no indication of a security bug being fixed or introduced.

Lower-priorityp2p: Introduce an `AddrV1Message`by rustaceanrob · 5376aa06 · Mar 7, 2026 · 2 filesMessage 66 · AdequateInformational 15Details
Commit message · rustaceanrob

p2p: Introduce an `AddrV1Message`

Current `AddrPayload` messages use a tuple to carry the time and network
address. Firstly, it's annoying to have an un-named `u32` in the tuple.
Secondly, a wrapper type makes it easier to implement `encoding` traits.
This introduces a newtype and uses it throughout the crate.

ref: https://en.bitcoin.it/wiki/Protocol_documentation#Network_address

66/100 · AdequateMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
AI analysis · Informational 15/100

This commit is a straightforward internal code cleanup in the peer-to-peer networking module. It replaces an unnamed pair of values (a timestamp number and a network address) with a clearly named wrapper type called AddrV1Message. There is no change to security behavior, no bug fix, and no externally visible protocol change.

Security candidateCreate an empty key-expression crateby Mitchell Bagot · a44409cb · Mar 7, 2026 · 8 filesMessage 60 · AdequateInformational 15Details
Commit message · Mitchell Bagot

Create an empty key-expression crate

In preparation for crate smashing the bip32 module and associated
functionality, create an empty crate.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
secret or key material
AI analysis · Informational 15/100

This commit creates a brand-new, empty placeholder crate named 'bitcoin-key-expression' inside the rust-bitcoin workspace. It contains no code, no logic, and no changes to existing behavior. It is purely a structural preparation step for future development.

Security candidateAdd parity argument to XOnlyPublicKey::from_secpby Mitchell Bagot · c74bf550 · Mar 7, 2026 · 1 fileMessage 68 · AdequateInformational 19Details
Commit message · Mitchell Bagot

Add parity argument to XOnlyPublicKey::from_secp

The XOnlyPublicKey from_secp constructor is the main method of creating
XOnlyPublicKey objects. At the moment, many places where it is used are
followed by a subsequent with_parity() call.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
AI analysis · Informational 19/100

This commit is a small API cleanup in a Rust Bitcoin library. It changes one constructor so callers must provide a 'parity' value directly instead of setting it afterward. Existing callers are updated to preserve the same behavior as before. There is no indication this fixes a security bug or changes any security-relevant behavior.

Security candidateChange XOnlyPublicKey::to_public_key to take selfby Mitchell Bagot · 2046efc9 · Mar 7, 2026 · 1 fileMessage 68 · AdequateInformational 20Details
Commit message · Mitchell Bagot

Change XOnlyPublicKey::to_public_key to take self

As a Copy type, conversions from XOnlyPublicKey to other types are
generally expected to take self by value, not by reference. In the case
of to_public_key, this also aligns with the clippy lint. Since the
performance cost is likely to be negligible after accounting for
compiler optimisation, the extra mess to take by reference can be
removed.

Change XOnlyPublicKey::to_public_key to take self by value instead of
by reference.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
cryptography-sensitive path
AI analysis · Informational 20/100

This commit is a routine API cleanup, not a security fix. It changes one function so it takes its input by value instead of by reference, matching normal Rust conventions for small copyable types. There is no bug being fixed and no security relevance stated.

Lower-priorityReplace Result<(), fmt::Error> with fmt::Resultby Mitchell Bagot · da970ec5 · Mar 7, 2026 · 9 filesMessage 68 · AdequateInformational 15Details
Commit message · Mitchell Bagot

Replace Result<(), fmt::Error> with fmt::Result

core::fmt::Result is a type alias for results with a unit return and
an fmt::Error return result. Overwhelmingly, the codebase primarily
uses fmt::Result for clarity, but there remain places where the
explicit type is used, without any particular reason for doing so.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 15/100

This commit is a purely cosmetic code cleanup. It replaces the longer way of writing Rust's formatting error return type, `Result<(), fmt::Error>`, with the standard shorter alias, `fmt::Result`. The actual behavior of the code does not change at all.

Lower-priorityUpdate API filesby Mitchell Bagot · 5cd0a9fd · Mar 7, 2026 · 3 filesMessage 51 · ThinInformational 15Details
Commit message · Mitchell Bagot

Update API files

Following the previous change, various fmt functions on types will now
have a "different" return type.

Update the units api files to match new return fmt::Result return type
for various functions.

51/100 · ThinMessage clarity
✓ Subject identifies a change✓ Provides detailed explanatory context
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only updates generated API snapshot text files to remove duplicate lines showing an older, more verbose return type for formatting functions. It is a documentation/test-artifact cleanup with no code changes and no security relevance.

Lower-priorityunits: Update API filesby Mitchell Bagot · 78d57ada · Mar 7, 2026 · 3 filesMessage 51 · ThinInformational 15Details
Commit message · Mitchell Bagot

units: Update API files

The previous patches have introduced new functions on various types in
the public API.

Run just check-api to update units api files.

51/100 · ThinMessage clarity
✓ Subject identifies a change✓ Provides detailed explanatory context
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only updates automatically-generated API listing files (text snapshots of public functions). It does not change any actual Rust source code, behavior, or fix any bug. There is no security relevance.

Lower-prioritybitcoin: Remove FromHex usage in serde codeby Tobin C. Harding · 9a8c05bf · Mar 7, 2026 · 1 fileMessage 68 · AdequateInformational 19Details
Commit message · Tobin C. Harding

bitcoin: Remove FromHex usage in serde code

In the stable `hex` release we made the decision to totally hide error
internals. This breaks our usage of the lib, how ironic.

Note that since the `consensus` code is slowly on its way out lets
just clobber this error handling and pass the `Display` output to
`de::Error::custom()`.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 19/100

This is a small maintenance patch that changes how hex decoding errors are reported during serialization/deserialization. It removes usage of a now-inaccessible error-detail API from the `hex` crate and instead reports the error's display message. There is no indication this fixes an exploitable vulnerability; it is a compatibility and cleanup change.

Lower-priorityRemove alloc gate from Sequence FromStrby Mitchell Bagot · 3c98ea0d · Mar 7, 2026 · 1 fileMessage 68 · AdequateInformational 16Details
Commit message · Mitchell Bagot

Remove alloc gate from Sequence FromStr

The macro used to implement FromStr on Sequence already includes the
correct gating internally, meaning the gating on the macro invocation
needlessly restricts the features.

Remove alloc gate on Sequence FromStr impl.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 16/100

This commit removes an unnecessary feature gate so that parsing a Sequence value from a string works in more build configurations. It is a code-cleanup/feature-availability change, not a security fix.

Lower-priorityunits: Add FromStr to CompactTarget and BlockTimeby Mitchell Bagot · bed1543f · Mar 7, 2026 · 2 filesMessage 68 · AdequateInformational 16Details
Commit message · Mitchell Bagot

units: Add FromStr to CompactTarget and BlockTime

Of the integer wrapper types in units, only two are missing FromStr
implementations. All other integer wrapper types have FromStr
implemented by passing through to the appropriate integer types's
FromStr and parsing in decimal. For consistency and completeness, both
CompactTarget and BlockTime should follow this.

Add FromStr impl to CompactTarget and BlockTime using
impl_parse_str_from_int_infallible macro.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
AI analysis · Informational 16/100

This commit adds the ability to parse CompactTarget and BlockTime values from strings in the rust-bitcoin library. It is a routine consistency improvement that makes two numeric wrapper types behave like all other similar types in the library. There is no security relevance in the change itself.

Security candidateDowngrade the minimum version of cpufeaturesby Tobin C. Harding · 010c7c9f · Mar 7, 2026 · 1 fileMessage 60 · AdequateInformational 15Details
Commit message · Tobin C. Harding

Downgrade the minimum version of cpufeatures

The update script does this and it is slightly confusing when it
showings up in unrelated PRs.

Run `just ulf`.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
update trust
AI analysis · Informational 15/100

This commit only lowers the minimum required version of a small helper crate called `cpufeatures` in a lockfile used for testing the oldest supported dependency versions. It is a routine housekeeping change with no security relevance.