What changed, and why it matters
This commit updates the Bitcoin Core build system to use a newer version of the GCC compiler (14.3.0 instead of 13.3.0) for its reproducible Guix builds. There is no security-relevant code change here; it is a routine toolchain version bump.
No security action needed. Treat as a normal build-system maintenance update.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change modifies contrib/guix/manifest.scm to define base-gcc from gcc-14 (with a custom 14.3.0 source tarball and verified SHA256 hash) and updates references from gcc-toolchain-13 to gcc-toolchain-14. This is a build dependency update in preparation for future work referenced by issue numbers #25573 and #30210.
Changed components
contrib/guix/manifest.scmInspect captured patch +13 / −3
diff --git a/contrib/guix/manifest.scm b/contrib/guix/manifest.scm
index 7fe9430c..0ad6bdb7 100644
--- a/contrib/guix/manifest.scm
+++ b/contrib/guix/manifest.scm
@@ -93,7 +93,17 @@ chain for " target " development."))
(home-page (package-home-page xgcc))
(license (package-license xgcc)))))
-(define base-gcc gcc-13) ;; 13.3.0
+(define base-gcc
+ (package
+ (inherit gcc-14) ;; 14.2.0
+ (version "14.3.0")
+ (source (origin
+ (method url-fetch)
+ (uri (string-append "mirror://gnu/gcc/gcc-"
+ version "/gcc-" version ".tar.xz"))
+ (sha256
+ (base32
+ "0fna78ly417g69fdm4i5f3ms96g8xzzjza8gwp41lqr5fqlpgp70"))))))
(define base-linux-kernel-headers linux-libre-headers-6.1)
@@ -550,7 +560,7 @@ inspecting signatures in Mach-O binaries.")
gzip
xz
;; Build tools
- gcc-toolchain-13
+ gcc-toolchain-14
cmake-minimal
gnu-make
ninja
@@ -570,7 +580,7 @@ inspecting signatures in Mach-O binaries.")
((string-contains target "-linux-")
(list bison
pkg-config
- (list gcc-toolchain-13 "static")
+ (list gcc-toolchain-14 "static")
(make-bitcoin-cross-toolchain target)))
((string-contains target "darwin")
(list clang-toolchain-19
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.