What the developer wrote
Authored by fanquake
depends: capnp 1.3.0
What changed, and why it matters
This commit updates the version of the Cap'n Proto library used in Bitcoin Core's build system from 1.2.0 to 1.3.0, along with its corresponding checksum. It is a routine dependency bump with no direct code changes to Bitcoin Core itself. There is no explicit security claim in the commit, and no verified references were provided to indicate this fixes a known vulnerability.
Treat as a standard maintenance update. Review the upstream Cap'n Proto 1.3.0 release notes for any security advisories before merging, and verify the updated SHA-256 hash against the official capnproto.org distribution. No immediate security action is indicated by the commit itself.
Security signals we found
Dependency version bump of native build tool (Cap'n Proto)
No security-relevant description in commit message
No CVE or advisory reference present in commit or supplied materials
No code-level security fix visible in diff
Evidence from the diff
The change modifies depends/packages/native_capnp.mk to bump native_capnp from version 1.2.0 to 1.3.0 and updates the SHA-256 hash to match the new upstream tarball. Cap’n Proto is used as a build-time/native dependency for the IPC (inter-process communication) build option in Bitcoin Core. The diff does not include any patch files, vulnerability descriptions, or security-related notes.
Changed components
depends/packages/native_capnp.mknative_capnp build dependency (Cap'n Proto C++ library)Inspect captured patch +2 / −2
diff --git a/depends/packages/native_capnp.mk b/depends/packages/native_capnp.mk
index a3a089d4..0cd0dcdf 100644
--- a/depends/packages/native_capnp.mk
+++ b/depends/packages/native_capnp.mk
@@ -1,9 +1,9 @@
package=native_capnp
-$(package)_version=1.2.0
+$(package)_version=1.3.0
$(package)_download_path=https://capnproto.org/
$(package)_download_file=capnproto-c++-$($(package)_version).tar.gz
$(package)_file_name=capnproto-cxx-$($(package)_version).tar.gz
-$(package)_sha256_hash=ed00e44ecbbda5186bc78a41ba64a8dc4a861b5f8d4e822959b0144ae6fd42ef
+$(package)_sha256_hash=098f824a495a1a837d56ae17e07b3f721ac86f8dbaf58896a389923458522108
define $(package)_set_vars
$(package)_config_opts := -DBUILD_TESTING=OFF
Why this scored 11/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.