What changed, and why it matters
This commit fixes a Rust build configuration issue so that the project's automated tests can run on a normal computer. It moves a required feature flag for the 'hex_lit' library from individual sub-crates to the shared workspace configuration. There is no indication this is a security fix or that it changes any runtime behavior on the actual BitBox02 device.
No security action required. Treat as a normal build/test maintenance commit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit adjusts Cargo.toml dependency feature flags for the hex_lit crate. Previously, some crates explicitly enabled the ‘rust_v_1_46’ feature on their workspace hex_lit dependency, while the workspace root did not. This caused ‘cargo test –all-features’ in src/rust/bitbox02 to fail because the feature was missing at the workspace level. The fix enables ‘rust_v_1_46’ in the workspace root Cargo.toml and removes the redundant per-crate feature flags. This is a build/test tooling change only.
Changed components
src/rust/Cargo.tomlsrc/rust/bitbox-platform-host/Cargo.tomlsrc/rust/bitbox-secp256k1/Cargo.tomlsrc/rust/bitbox02-rust/Cargo.tomlInspect captured patch +4 / −4
diff --git a/src/rust/Cargo.toml b/src/rust/Cargo.toml
index eae5aeb..8d1f609 100644
--- a/src/rust/Cargo.toml
+++ b/src/rust/Cargo.toml
@@ -52,7 +52,7 @@ hmac = { version = "0.12.1", default-features = false, features = ["reset"] }
keccak = { version = "0.1.4", default-features = false, features = ["no_unroll"] }
zeroize = "1.7.0"
futures-lite = { version = "2.6.1", default-features = false }
-hex_lit = { version = "0.1.1", default-features = false }
+hex_lit = { version = "0.1.1", default-features = false, features = ["rust_v_1_46"] }
crc = "3.0.1"
serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"
diff --git a/src/rust/bitbox-platform-host/Cargo.toml b/src/rust/bitbox-platform-host/Cargo.toml
index 324de33..56b48ea 100644
--- a/src/rust/bitbox-platform-host/Cargo.toml
+++ b/src/rust/bitbox-platform-host/Cargo.toml
@@ -10,7 +10,7 @@ license = "Apache-2.0"
[dependencies]
bitbox-hal = { path = "../bitbox-hal" }
bitcoin = { workspace = true }
-hex_lit = { workspace = true, features = ["rust_v_1_46"] }
+hex_lit = { workspace = true }
zeroize = { workspace = true }
[features]
diff --git a/src/rust/bitbox-secp256k1/Cargo.toml b/src/rust/bitbox-secp256k1/Cargo.toml
index 9bbbc58..80cad90 100644
--- a/src/rust/bitbox-secp256k1/Cargo.toml
+++ b/src/rust/bitbox-secp256k1/Cargo.toml
@@ -15,7 +15,7 @@ doctest = false
bitcoin = { workspace = true }
[dev-dependencies]
-hex_lit = { workspace = true, features = ["rust_v_1_46"] }
+hex_lit = { workspace = true }
[build-dependencies]
cc = { version = "1.2", features = ["parallel"] }
diff --git a/src/rust/bitbox02-rust/Cargo.toml b/src/rust/bitbox02-rust/Cargo.toml
index 56c48c4..4b9f0d6 100644
--- a/src/rust/bitbox02-rust/Cargo.toml
+++ b/src/rust/bitbox02-rust/Cargo.toml
@@ -53,7 +53,7 @@ bip39 = { workspace = true }
# writing, this might fluctuate over time).
bitcoin_hashes = { version = "0.14.0", default-features = false, features = ["small-hash"] }
futures-lite = { workspace = true }
-hex_lit = { workspace = true, features = ["rust_v_1_46"] }
+hex_lit = { workspace = true }
[dependencies.prost]
# keep version in sync with tools/prost-build/Cargo.toml.
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.