RB
← All projectsRust Bitcoin

rust-bitcoin

Rust library for Bitcoin data structures, serialization, consensus encoding, and scripts.

BitcoinCryptographic librariesNormal
Repository coverage

2094 commits in the local evidence base

Every captured commit receives deterministic security triage and a separate communication-quality score. Security candidates and broader second-pass signals receive full-patch Ollama analysis.

462security candidates453second-pass queue2078AI analyses
183commits · 30 days
388commits · 60 days
1292commits · 180 days
2056commits · 365 days
Backfill bands
Aug 5 → Feb 6787 seen32 candidatesComplete
Feb 6 → Jun 6878 seen53 candidatesComplete
Jun 6 → Jul 6211 seen15 candidatesComplete
Jul 6 → Aug 5184 seen2 candidatesComplete
Commit communication

Does the history explain itself?

Message quality measures whether a commit identifies its scope, purpose, rationale, testing, and supporting references. It does not change the security-severity score.

64/100 average clarity
327Strong · 80–100
1058Adequate · 60–79
558Thin · 40–59
151Opaque · 0–39
20security candidates with opaque commit messaging
Read the scoring rubric →
Developer activity

Who is changing the project?

Public Git author strings; identities are not independently verified.

DeveloperCommitsCandidatesAnalyzedHigh riskMessage avg.
Mitchell Bagot643192641068
Tobin C. Harding41366410063
jrakibi944994068
Andrew Poelstra662257079
Nick Johnson19020189060
Jamil Lambert, PhD11418114061
Fmt Bot321431045
Trevor Arjeski111111069
Shing Him Ng31731056
Ismail Daif22622050
satsfy (Renato Britto)17617066
Martin Habovstiak27527069
Analysis record

Published AI watches

Last scanned 7 minutes ago

Informational 15 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6592: primitives: Update API test

This commit only updates an internal test file (primitives/tests/api.rs) that checks whether public types implement expected Rust traits and are exported correctly. It adds coverage for new types introduced in earlier development and reorg…

0969e567by Andrew Poelstra+322−461 file
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6694: units: Flatten Error Constructors

This commit is a code cleanup that rewrites how error values are constructed in the Rust Bitcoin library. It changes nested constructor calls like Err(OuterError(InnerError { ... })) into a flatter style using map_err. There is no function…

622ab209by Andrew Poelstra+58−546 files
No security note in commit
Informational 20 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6678: units: Add `Weight::to_vb_*` functions, deprecating `to_vbytes_*`

This is a routine API cleanup in a Rust Bitcoin library. It adds new method names (to_vb_floor, to_vb_ceil) for converting transaction 'weight' to 'virtual bytes' and marks the old names (to_vbytes_floor, to_vbytes_ceil) as deprecated. The…

7f614781by Andrew Poelstra+30−86 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6597: Release tracking PR: `crypto 0.3.0`

This commit is a routine release-tracking merge. It only bumps version numbers (bitcoin-crypto to 0.3.0 and bitcoin-primitives to 0.103.1), updates dependency version requirements, refreshes lock files, and adds changelog entries. There ar…

1fddd49eby Andrew Poelstra+34−1210 files
No security note in commit
Informational 15 AI analysisMessage 28 · Opaque
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Update API files

This commit only updates generated API listing files (text snapshots of public functions) to reflect a newly added public function, `to_consensus_u32`, on the `CompactTarget` type. It does not change any source code, logic, or behavior, an…

a75c53c8by Mitchell Bagot+6−03 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6675: units: Remove unnecessary track_caller

This commit removes two Rust compiler hints (`#[track_caller]`) from helper functions that simply return a value or call a user-provided fallback. These functions never panic, so the hints were unnecessary and had no security effect. The c…

ce894f36by Andrew Poelstra+0−21 file
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6644: primitives: Add serde impls for `WitnessVersion`

This commit adds standard serialization/deserialization support for the WitnessVersion type when the optional serde feature is enabled. It is a routine feature addition with no security relevance visible in the code or commit message.

4981faa7by Andrew Poelstra+50−02 files
No security note in commit
Informational 15 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6671: units: reword docs from height to count in relative locktime

This commit only changes documentation comments and variable names in the rust-bitcoin library. It rewords references to 'block height' as 'block count' for relative locktime, because a relative locktime measures elapsed blocks since a coi…

6ea4ff92by Andrew Poelstra+20−172 files
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6670: ci: fix labeller permissions

This is a routine GitHub Actions workflow fix. The change gives the automated PR labeler workflow permission to download artifacts and explicitly tells the GitHub CLI which repository to act on. It does not change the Bitcoin library code,…

CI workflow permission fixNo source code changesNo cryptographic or consensus changes
276e0a61by Andrew Poelstra+5−01 file
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6657: Release tracking PR: `base58ck 0.5.0`

This commit is a routine version bump for the base58ck crate from 0.4.0 to 0.5.0. It only updates version numbers in package manifests, lock files, and adds a changelog entry. There are no code changes and no security relevance.

9deb5de1by Andrew Poelstra+22−168 files
No security note in commit
Informational 21 AI analysisMessage 100 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6440: base58: Introduce `decode_check_to_array` for alloc-less decoding

This commit is a routine feature addition to the rust-bitcoin base58 crate. It adds a new no-allocator function to decode short base58-check strings into fixed-size byte arrays, and renames the existing error type while keeping a deprecate…

No security-relevant bug fix is described in the commit message or diff.New decoding path uses a fixed 128-byte scratch buffer (`ArrayVec`) and rejects oversized inputs.Checksum verification and invalid-character handling are preserved from the existing alloc implementation.
c5fd1832by Andrew Poelstra+330−775 files
No security note in commit
Informational 15 AI analysisMessage 93 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6646: hashes: add several methods to `Midstate` and release 1.2.0

This commit is a routine feature release for the bitcoin_hashes crate. It adds new public methods and a constant to the SHA-256 Midstate type so developers can compute SHA-256 midstates in const contexts. There is no indication of a securi…

0f68fcb3by Andrew Poelstra+157−4210 files
No security note in commit
Informational 15 AI analysisMessage 73 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

units: reword docs to block count in relative locktime

This commit only rewords documentation comments and variable names in the codebase. It changes references from 'block height' to 'block count' for relative lock times, which is a terminology correction with no functional code changes. Ther…

8867fe2eby satsfy (Renato Britto)+20−172 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6667: Make the `WitnessesEncoder` private

This commit makes a small internal helper type called WitnessesEncoder private. It was previously exported as public API but is only used inside the transaction encoder. The change removes it from the public API surface and moves the code …

07d91f7fby Andrew Poelstra+54−1324 files
No security note in commit
Informational 12 AI analysisMessage 75 · Adequate
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

ci: fix labeller permissions

This commit adjusts a GitHub Actions workflow that automatically labels pull requests based on CI results. It adds a built-in repository token, tells the artifact download step to merge single-file artifacts, and explicitly sets the reposi…

Workflow-only change with no library code modificationsUses the default GITHUB_TOKEN rather than a custom secretRuns in workflow_run context, which already has elevated repository access by design
715f2bd6by Nick Johnson+5−01 file
No security note in commit
Informational 19 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6661: units: Remove `From<u16>` from `NumberOfBlocks`

This is a routine API cleanup, not a security fix. The developers removed a shortcut that let programmers create a 'number of blocks' value directly from any u16 number, replacing it with an existing named constructor called from_height. T…

ed5f1b68by Andrew Poelstra+18−358 files
No security note in commit
Informational 15 AI analysisMessage 91 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6668: Scrub the transaction encoding logic

This commit is a pure code reorganization (refactor) in the rust-bitcoin library. It moves transaction encoding and decoding definitions around within a single file so the code follows the project's preferred layout. No logic, behavior, or…

c5588ba5by Andrew Poelstra+57−571 file
No security note in commit
Informational 18 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6662: build(deps): bump actions/checkout from 6.0.2 to 6.0.3

This commit is a routine update to the GitHub Actions checkout tool used by the project's automated workflows. It changes the pinned version from 6.0.2 to 6.0.3 across many workflow files. The newer version fixes minor bugs related to SHA-…

Dependency bump of actions/checkout to a patch releaseUpstream fixes for SHA-256 repository checkout and merge commit regexAll affected workflows already disable persisted credentials
f7d364cdby Andrew Poelstra+29−2915 files
No security note in commit
Informational 15 AI analysisMessage 96 · Strong
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Merge rust-bitcoin/rust-bitcoin#6663: build(deps): bump taiki-e/install-action from 2.79.12 to 2.81.4

This is a routine Dependabot update that bumps the version of a third-party GitHub Action used only in automated testing workflows. The change does not touch the project's actual Bitcoin library code, and there is no indication it fixes or…

5c92c0b0by Andrew Poelstra+2−22 files
No security note in commit
Informational 15 AI analysisMessage 45 · Thin
RB Rust Bitcoinrust-bitcoin BitcoinCryptographic libraries

Update the API text files

This commit only updates two generated API text files that list the public surface of the Rust crate. It removes entries for a `WitnessesEncoder` type, reflecting that the type is no longer part of the public API. There is no source code c…

9c391145by Tobin C. Harding+0−782 files
No security note in commit
Repository ledger

Explore captured commits

Expand any commit for its author, full message, clarity score, changed files, triage signals, analysis, and source link.

AI review queuedconsensus_encoding: rename UnexptectedEofby Nick Johnson · e36cc96b · Sep 22, 2025 · 4 filesMessage 58 · ThinInformational 15Details
Commit message · Nick Johnson

consensus_encoding: rename UnexptectedEof

It is policy that all error types are suffixed with `Error` and live at
the bottom of the file.

Co-authored-by: Tobin C. Harding <me@tobin.cc>

58/100 · ThinMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context
Why it was queued
parser or protocol pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a simple rename of an error type from 'UnexpectedEof' to 'UnexpectedEofError' to follow the project's naming policy. It only moves the type definition to the bottom of the file and updates all references. There is no functional change and no security impact.

AI review queuedopcodes: Fix incorrect docsby Tobin C. Harding · 89795ffc · Sep 21, 2025 · 2 filesMessage 35 · OpaqueInformational 15Details
Commit message · Tobin C. Harding

opcodes: Fix incorrect docs

35/100 · OpaqueMessage clarity
✓ Descriptive subject! No meaningful explanatory body
Why it was queued
second-pass: opaque commit message
AI analysis · Informational 15/100

This commit only fixes a typo in documentation comments. The word 'Encodes' was changed to 'Decodes' in two Rust source files to accurately describe what the function does. No code behavior was changed.

Lower-priority2025-09-21 automated rustfmt nightlyby Fmt Bot · 7354fb03 · Sep 21, 2025 · 11 filesMessage 45 · ThinInformational 15Details
Commit message · Fmt Bot

2025-09-21 automated rustfmt nightly

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is an automated code-formatting run by rustfmt. It only changes whitespace, line breaks, import ordering, and other stylistic details. No program logic, security checks, or behavior were altered.

Lower-priorityremove redundant variable in compact_size encodingby sent deed · 11e87e0b · Sep 20, 2025 · 1 fileMessage 50 · ThinInformational 15Details
Commit message · sent deed

remove redundant variable in compact_size encoding

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit is a minor code cleanup in a Rust Bitcoin library. It removes an unnecessary intermediate variable when encoding very large numbers in a compact size format. There is no functional change and no security impact.

Lower-priorityAutomated update to Github CI to rustc nightly-2025-09-19by Update Nightly Rustc Bot · 140e2707 · Sep 20, 2025 · 1 fileMessage 50 · ThinInformational 15Details
Commit message · Update Nightly Rustc Bot

Automated update to Github CI to rustc nightly-2025-09-19

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit simply updates the version of the Rust nightly compiler used by the project's automated GitHub CI testing from one weekly snapshot to the next. It changes one line in a configuration file and has no direct security relevance to the library code or its users.

AI review queuedMove chacha20_poly1305 benches to Criterionby Jamil Lambert, PhD · aeb60276 · Sep 19, 2025 · 4 filesMessage 68 · AdequateInformational 15Details
Commit message · Jamil Lambert, PhD

Move chacha20_poly1305 benches to Criterion

Move all of the bench code to individual files in
chacha20_poly1305/benches/

Add Criterion as a dependency in Cargo.toml

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
second-pass: broader security terminology
AI analysis · Informational 15/100

This commit is a routine refactoring of benchmark code. It moves ChaCha20 performance tests out of the source crate and into a separate Criterion-based benchmark suite. There is no change to the actual ChaCha20/Poly1305 library code, no bug fix, and no security-related change.

Lower-priorityAdd benches README.mdby Jamil Lambert, PhD · 819471f9 · Sep 19, 2025 · 1 fileMessage 43 · ThinInformational 15Details
Commit message · Jamil Lambert, PhD

Add benches README.md

Add a readme file to describe how to use the new benches crate.

43/100 · ThinMessage clarity
✓ Subject identifies a change✓ Provides an explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit only adds a new README.md file inside the benches folder. It is pure documentation explaining how to run and add benchmarks. No program code was changed, so it cannot introduce a security vulnerability or fix one.

Security candidateMove hashes benches to Criterionby Jamil Lambert, PhD · aa021e95 · Sep 19, 2025 · 26 filesMessage 60 · AdequateInformational 15Details
Commit message · Jamil Lambert, PhD

Move hashes benches to Criterion

Move all of the bench code to individual files in hashes/benches/

Add Criterion as a dependency in Cargo.toml

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
Why it was queued
cryptography-sensitive path
AI analysis · Informational 15/100

This commit is a routine refactoring that moves hash benchmarking code from inside the main source files into a separate benchmark suite using the Criterion library. It does not change how the hashing functions work, what data they process, or how they are exposed to users. There is no security fix or vulnerability here.

AI review queuedUpdate transaction.rsby viktorking7 · d2ba147f · Sep 19, 2025 · 1 fileMessage 28 · OpaqueInformational 15Details
Commit message · viktorking7

Update transaction.rs

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit fixes a single typo in a code comment ('pre-pended' to 'prepended'). No executable code, logic, or data handling was changed. It has no security relevance.

AI review queuedUpdate primitives.mdby viktorking7 · 43da48b3 · Sep 19, 2025 · 1 fileMessage 28 · OpaqueInformational 15Details
Commit message · viktorking7

Update primitives.md

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
Why it was queued
documentation-only discountsecond-pass: opaque commit message
AI analysis · Informational 15/100

This commit fixes a single spelling mistake in a documentation comment ('consenus-encoding' to 'consensus-encoding'). It changes no code, no build files, and no executable logic. There is no security relevance.

AI review queuedIntroduce arbitrary_* `bitcoin` fuzz targetsby Shing Him Ng · b19f2d4f · Sep 19, 2025 · 9 filesMessage 55 · ThinInformational 15Details
Commit message · Shing Him Ng

Introduce arbitrary_* `bitcoin` fuzz targets

55/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Mentions testing or verification! No meaningful explanatory body
Why it was queued
fuzzing or regression evidencesigning or wallet pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit only adds and reorganizes fuzz testing code. Fuzz tests are automated quality-assurance tools that feed random or structured data to library functions to look for crashes or incorrect behavior. No changes are made to the actual Bitcoin library code that applications would use, so this commit cannot introduce a security vulnerability in shipped software on its own.

Lower-priorityAutomated update to Github CI to rustc stable-1.90.0by Update Stable Rustc Bot · 58f6a2ba · Sep 19, 2025 · 1 fileMessage 50 · ThinInformational 15Details
Commit message · Update Stable Rustc Bot

Automated update to Github CI to rustc stable-1.90.0

50/100 · ThinMessage clarity
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
Why it was queued
documentation-only discount
AI analysis · Informational 15/100

This commit simply updates a GitHub Actions workflow file to use a newer stable version of the Rust compiler (1.90.0 instead of 1.89.0). It is a routine CI maintenance change with no security relevance.

Lower-priorityAdd encoder wrapper type integration testby Tobin C. Harding · 252eb0a0 · Sep 18, 2025 · 1 fileMessage 78 · AdequateInformational 15Details
Commit message · Tobin C. Harding

Add encoder wrapper type integration test

Add a file that creates a bunch of wrapper types as we expect the lib
to be used. And test:

- `ArrayEncoder`
- `BytesEncoder`
- `Encoder2`

78/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification
AI analysis · Informational 15/100

This commit only adds a new test file that exercises existing encoding wrapper types. It does not change any production code, fix bugs, or alter behavior. There is no security relevance.

AI review queuedconsensus_encoding: drop Either for phantom databy Nick Johnson · 0edcebe8 · Sep 18, 2025 · 3 filesMessage 68 · AdequateInformational 15Details
Commit message · Nick Johnson

consensus_encoding: drop Either for phantom data

Drop the Either sum type in favor of phantom data and some trait bounds.
Composite decoders, like Decoder2, now have trait bounds which enforce
that all the inner decoder error types map to a common error type which
is held as phantom data in the composite decoder.

68/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
parser or protocol pathsecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit is a routine internal refactoring of how composite data decoders combine error types. It removes a custom Either sum type and instead uses Rust's standard trait conversion (From) plus phantom data to enforce that all inner decoder errors can be converted into a single common error type. There is no indication this fixes a security bug; it is a design/API cleanup.

Lower-prioritychore: small typoby sashass1315 · 94bb3459 · Sep 18, 2025 · 1 fileMessage 40 · ThinInformational 15Details
Commit message · sashass1315

chore: small typo

40/100 · ThinMessage clarity
✓ Subject identifies a change✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit fixes a single-word typo in a documentation comment. It changes 'is case of overflow' to 'in case of overflow' in a code comment describing a checked addition function. There is no code behavior change and no security relevance.

AI review queuedUpdate unsigned.rsby sashass1315 · 78b52a14 · Sep 18, 2025 · 1 fileMessage 28 · OpaqueInformational 15Details
Commit message · sashass1315

Update unsigned.rs

28/100 · OpaqueMessage clarity
✓ Subject identifies a change! No meaningful explanatory body
Why it was queued
signing or wallet pathsecond-pass: opaque commit messagesecond-pass: security-sensitive path
AI analysis · Informational 15/100

This commit fixes a single typo in a comment ('used' to 'use'). No code behavior changes, and there is no security relevance.

Lower-prioritychore: fix small typoby sashass1315 · 9db84309 · Sep 18, 2025 · 1 fileMessage 40 · ThinInformational 15Details
Commit message · sashass1315

chore: fix small typo

40/100 · ThinMessage clarity
✓ Subject identifies a change✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit fixes a single-word typo in a comment inside a test file. It changes 'than' to 'that' in a comment describing a sanity check. There is no code, logic, or security change.

Lower-prioritychore: fix small typoby sashass1315 · 650b0cc2 · Sep 18, 2025 · 1 fileMessage 40 · ThinInformational 15Details
Commit message · sashass1315

chore: fix small typo

40/100 · ThinMessage clarity
✓ Subject identifies a change✓ Uses a recognizable type or scope! No meaningful explanatory body
AI analysis · Informational 15/100

This commit fixes a single spelling mistake in a code comment, changing 'These form are' to 'These forms are'. It does not change any executable code, data structures, or behavior of the library.

Lower-priorityMove opcode aliases to all moduleby Tobin C. Harding · 9b3ebb67 · Sep 18, 2025 · 4 filesMessage 60 · AdequateInformational 20Details
Commit message · Tobin C. Harding

Move opcode aliases to all module

Currently they are _outside_ of `all`, lets put them in `all` so the
`use opcodes::all::*` import picks them up too.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 20/100

This change is purely a code organization cleanup. It moves a handful of Bitcoin script opcode aliases (like OP_0, OP_TRUE, OP_NOP2) from outside a module into the 'all' submodule so that a wildcard import picks them up. No behavior of the library changes, and there is no security fix or vulnerability here.

Lower-priorityChange opcodes from static to constby Tobin C. Harding · 74ef48c5 · Sep 18, 2025 · 2 filesMessage 80 · StrongInformational 15Details
Commit message · Tobin C. Harding

Change opcodes from static to const

We don't need `static` here in the opcode declarations, we can use
`const` with no loss of generality because we don't need a fixed
memory address.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit is a routine code-quality change. It replaces the word `static` with `const` for a handful of Bitcoin script opcode aliases (like OP_TRUE and OP_FALSE). In Rust, `const` values are inlined at compile time and do not need a fixed memory address, which is perfectly safe here. There is no security-relevant change.

Lower-priorityconsensus_encoding: Use correct MSRVby Tobin C. Harding · 2293b27e · Sep 17, 2025 · 1 fileMessage 70 · AdequateInformational 15Details
Commit message · Tobin C. Harding

consensus_encoding: Use correct MSRV

We somehow missed updating the MSRV of this crate. Found by clippy,
not sure why this lint warning wasn't picked up by CI?

However clippy is still warning:

```bash
just lint

cargo +$(cat ./nightly-version) clippy --workspace --all-targets --all-features -- --deny warnings
warning: the MSRV in `clippy.toml` and `Cargo.toml` differ; using `1.74.0` from `clippy.toml`
...
```

But I don't see any usage of the old MSRV in any toml file?

70/100 · AdequateMessage clarity
✓ Descriptive subject✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit updates the declared minimum supported Rust version (MSRV) for one sub-crate from 1.63.0 to 1.74.0 so it matches the rest of the workspace. It is a build-metadata correction with no code changes and no security impact.

Lower-priorityconsensus_encoding: Fix clippy lifetime warningsby Tobin C. Harding · fab88248 · Sep 17, 2025 · 1 fileMessage 80 · StrongInformational 15Details
Commit message · Tobin C. Harding

consensus_encoding: Fix clippy lifetime warnings

I ran `cargo clippy --fix --lib -p consensus-encoding` and whala some
things got changed. I hop this stuff got past CI because of update to
nightly.

80/100 · StrongMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
AI analysis · Informational 15/100

This commit only cleans up Rust compiler/clippy warnings about lifetime syntax. It changes how lifetimes are written in two places but does not alter what the code actually does. There is no security issue here.

Lower-priorityBump honggfuzz to 0.5.57by Shing Him Ng · 1de0500f · Sep 17, 2025 · 4 filesMessage 61 · AdequateInformational 15Details
Commit message · Shing Him Ng

Bump honggfuzz to 0.5.57

This is the latest release, which was getting pulled in since the
version was previously set as "0.5.56", which gets interpreted as a
carat requirement ("^0.5.56")

61/100 · AdequateMessage clarity
✓ Subject identifies a change✓ Names a concrete action or component✓ Provides detailed explanatory context
Why it was queued
fuzzing or regression evidence
AI analysis · Informational 15/100

This commit simply updates a fuzz-testing helper library called honggfuzz from version 0.5.56 to 0.5.57 in the project's lock files and fuzz-testing configuration. It does not change any production Bitcoin code, wallet logic, or network handling. There is no indication this is a security fix.

Lower-priorityRename string-parsing targets to parse_*by Shing Him Ng · f0ec486c · Sep 17, 2025 · 2 filesMessage 45 · ThinInformational 15Details
Commit message · Shing Him Ng

Rename string-parsing targets to parse_*

45/100 · ThinMessage clarity
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
AI analysis · Informational 15/100

This commit simply renames two fuzz test files from 'deserialize_address.rs' to 'parse_address.rs' and 'outpoint_string.rs' to 'parse_outpoint.rs'. The actual code inside the files is unchanged. It is a routine cleanup with no security relevance.

Lower-priorityAdd mutant excludes for deprecated to_hex methodsby Jamil Lambert, PhD · 8d3d5042 · Sep 17, 2025 · 1 fileMessage 60 · AdequateInformational 15Details
Commit message · Jamil Lambert, PhD

Add mutant excludes for deprecated to_hex methods

Two mutants were generated for deprecated methods.

Added excludes for them.

60/100 · AdequateMessage clarity
✓ Descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body
AI analysis · Informational 15/100

This commit only updates the mutation-testing configuration file to skip testing two additional deprecated methods. It does not change any production code, cryptographic logic, network handling, or user-facing behavior. There is no security issue here.