What the developer wrote
Authored by fanquake
ci: use latest versions of lint deps
Use the latest available versions, except for LIEF, which is
changed with Guix.
What changed, and why it matters
This commit simply updates the versions of several linting tools used in Bitcoin Core's continuous integration (CI) pipeline. Linting tools check code style and catch common mistakes, but they are not part of the actual Bitcoin software that users run. There is no indication this change fixes or introduces a security vulnerability.
No security action required. Treat as a routine CI maintenance change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit bumps dependency versions in ci/lint/01_install.sh: mypy 1.18.2 → 1.19.1, ruff 0.13.2 → 0.15.5, vulture 2.14 → 2.15, and markdown-link-checker (mlc) v1 → v1.2.0. LIEF is intentionally pinned at 0.16.6 and shellcheck remains at v0.11.0. These are all static analysis/linting dependencies used in CI; the diff does not touch runtime, consensus, wallet, networking, or cryptographic code.
Changed components
ci/lint/01_install.shInspect captured patch +4 / −4
diff --git a/ci/lint/01_install.sh b/ci/lint/01_install.sh
index 44563d42..c4429060 100755
--- a/ci/lint/01_install.sh
+++ b/ci/lint/01_install.sh
@@ -42,17 +42,17 @@ python3 --version
${CI_RETRY_EXE} pip3 install \
lief==0.16.6 \
- mypy==1.18.2 \
+ mypy==1.19.1 \
pyzmq==27.1.0 \
- ruff==0.13.2 \
- vulture==2.14
+ ruff==0.15.5 \
+ vulture==2.15
SHELLCHECK_VERSION=v0.11.0
curl -sL "https://github.com/koalaman/shellcheck/releases/download/${SHELLCHECK_VERSION}/shellcheck-${SHELLCHECK_VERSION}.linux.x86_64.tar.xz" | \
tar --xz -xf - --directory /tmp/
mv "/tmp/shellcheck-${SHELLCHECK_VERSION}/shellcheck" /usr/bin/
-MLC_VERSION=v1
+MLC_VERSION=v1.2.0
MLC_BIN=mlc-x86_64-linux
curl -sL "https://github.com/becheran/mlc/releases/download/${MLC_VERSION}/${MLC_BIN}" -o "/usr/bin/mlc"
chmod +x /usr/bin/mlc
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.