depends: libxcb-util-renderutil 0.3.10
What the developer wrote
Authored by fanquake
depends: libxcb-util-renderutil 0.3.10
What changed, and why it matters
This commit simply bumps the version of a third-party graphics-related library (libxcb-util-renderutil) used when building Bitcoin Core's dependencies. The change updates the version number and its corresponding cryptographic hash so the build system downloads the newer release. There is no direct evidence in the commit that this fixes a security vulnerability, and the library is only used in build tooling for graphical wallet support, not in Bitcoin's core networking or consensus code.
No immediate action required. Treat as routine maintenance. If monitoring this dependency, review upstream libxcb-util-renderutil 0.3.10 release notes for any security fixes, but this commit itself does not assert security relevance.
Security signals we found
Dependency version bump with no stated security rationale
No CVE, advisory, or security-related wording in commit message
No code-level security fix visible in the diff
Evidence from the diff
The patch updates depends/packages/libxcb_util_render.mk from libxcb-util-renderutil 0.3.9 to 0.3.10, changing the $(package)_version and $(package)_sha256_hash fields. This is a routine dependency version bump in Bitcoin Core’s ‘depends’ build system. No code changes, vulnerability descriptions, or security advisories are present in the commit or supplied references.
Changed components
depends/packages/libxcb_util_render.mklibxcb-util-renderutil build dependencyInspect captured patch +2 / −2
diff --git a/depends/packages/libxcb_util_render.mk b/depends/packages/libxcb_util_render.mk
index 607288cd..01349570 100644
--- a/depends/packages/libxcb_util_render.mk
+++ b/depends/packages/libxcb_util_render.mk
@@ -1,8 +1,8 @@
package=libxcb_util_render
-$(package)_version=0.3.9
+$(package)_version=0.3.10
$(package)_download_path=https://xcb.freedesktop.org/dist
$(package)_file_name=xcb-util-renderutil-$($(package)_version).tar.gz
-$(package)_sha256_hash=55eee797e3214fe39d0f3f4d9448cc53cffe06706d108824ea37bb79fcedcad5
+$(package)_sha256_hash=e04143c48e1644c5e074243fa293d88f99005b3c50d1d54358954404e635128a
$(package)_dependencies=libxcb
define $(package)_set_vars
Why this scored 11/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.