What changed, and why it matters
This commit removes the libevent dependency from Bitcoin Core's vcpkg package manager configuration. It is a build-system cleanup change, not a security fix. The removed override was previously pinning an older libevent version to avoid a known build issue, but that issue is no longer relevant because libevent is no longer used via vcpkg at all.
No security action required. Review as ordinary build maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit edits vcpkg.json to drop ‘libevent’ from the dependencies array and remove the ‘overrides’ block that pinned libevent to version 2.1.12#7. The override comment referenced GitHub issue #30096, which was caused by newer unreleased libevent versions. Removing libevent from vcpkg dependencies eliminates the need for the pin. There is no code change, no vulnerability patch, and no functional change to Bitcoin Core’s runtime behavior in this diff.
Changed components
vcpkg.json build configurationInspect captured patch +2 / −10
diff --git a/vcpkg.json b/vcpkg.json
index 49906808..99ad6eb0 100644
--- a/vcpkg.json
+++ b/vcpkg.json
@@ -3,8 +3,7 @@
"$schema": "https://raw.githubusercontent.com/microsoft/vcpkg-tool/main/docs/vcpkg.schema.json",
"builtin-baseline": "120deac3062162151622ca4860575a33844ba10b",
"dependencies": [
- "boost-multi-index",
- "libevent"
+ "boost-multi-index"
],
"default-features": [
"qt",
@@ -49,12 +48,5 @@
"zeromq"
]
}
- },
- "overrides": [
- {
- "$comment": "Newer unreleased libevent versions cause https://github.com/bitcoin/bitcoin/issues/30096",
- "name": "libevent",
- "version": "2.1.12#7"
- }
- ]
+ }
}
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.